!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/lib/   drwxr-xr-x
Free 52.29 GB of 127.8 GB (40.91%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     libnfsidmap.so.0 (35.7 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELFp44 (Ptd~~~Qtd%@@TH)c Pd@ 1     ":H@BCDEGHIJKLMPRTXZ]^`acdhjv'     6%
%Yi0;A'\x(ʀ[W)oj6{'8vAUc>?>Tƅ ~0WђĊ?qX2w|uW'#`4(E!hSI<ACE[VQaGw\>d.wŹgͷR!k
z[bD~+ % g<KpCEzW=Bu"<M 'O"ib;gJo2+gTCx<E    E*4,9b"%Z"WgD
29`*
h H`S
 [^
oR
1}A cQ
L
`+`L
 Wș
 ~ ]>
GL
n@>
_
@Qg
V
ui
0L
lh%
L
f
`U-
@W
[T
ePP
 K
gG
Z
OpQv
&NJ
__gmon_start___fini__cxa_finalize_Jv_RegisterClassesnfs4_set_debugidmap_log_funcidmap_verbosity__vsyslog_chkset_trans_methodstrcmpgethostnamegethostbynamestrchr__strdupnfs4_get_default_domainstrlenstrcpynfs4_init_name_mappingconf_pathconf_initconf_get_strconf_get_str_with_defnfs4_gss_princ_to_grouplistnfs4_gss_princ_to_idsnfs4_name_to_gidnfs4_name_to_uidnfs4_gid_to_namenfs4_uid_to_namenss_transumichldap_transstrcatsysconfmallocgetgrgid_rgetpwuid_rmemcpygetgrnam_rgetpwnam_rnss_gss_princ_to_grouplistgetgrouplist__snprintf_chkldap_initializeldap_set_optionldap_get_optionldap_simple_bind_sldap_memfreeldap_err2stringldap_search_stldap_unbindldap_count_entriesldap_first_entryldap_get_valuesldap_result2errorldap_count_values__strtoul_internal__errno_locationldap_value_freeldap_next_entryldap_first_attributeber_freeldap_next_attributestrcasecmpmemsetconf_get_numgetaddrinfogai_strerror__strcat_chkgetnameinfofreeaddrinfoconf_begincallocconf_trans_queuewarnxconf_decode_base64asc2binconf_reportconf_bindingsconf_free_listconf_remove_sectionconf_removeconf_set__ctype_tolower_locconf_get_tag_listconf_get_list__ctype_b_loc__strsep_gconf_match_numsscanf__strtol_internalconf_endconf_reinit__xstatopenreadclosestrlcpystrcspnstrspnbin2asclibldap-2.3.so.0libc.so.6__stack_chk_fail_edata__bss_startlibnfsidmap.so.0GLIBC_2.1.3GLIBC_2.1.1GLIBC_2.4GLIBC_2.1GLIBC_2.3GLIBC_2.3.4GLIBC_2.2.4GLIBC_2.1.2GLIBC_2.0    
    Jsi    
qi        ii ii ii ti    ti    ri    ii  `dMK  PZDN>A\ $(a,0^48<@@D    HTL
P TUXE\ `dhlptxF|eG !"#ĘVȘ$̘%И&Ԙ'ؘ(ܘ)*+,-.f/012W 34567 8$9(:,;0<4=8><?@OUT hhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhhhplh`phPth@xh0|h hhhhhhhh h(h0h8ph@`hHPhP@hX0h` hhhphxhhhhhhhhph`hPh@h0h hhh hhhhh  h($h0(h8p,h@`0hHP4hP@US[ÐtX[ÐUVSbuWt$d)p9v9wƃ[^]ÍUS.~tt $҃[]Ë$ÐUU ~tU]ÍUSs~$E ED$ ED$$D$1$[]ÍvU]y.~u}FǃE>UT$$t;uu]u}]É덴&Uh]    þ}uu}D$@eE14$uUe3uF]u}]É4$StD$.$ txPt$x1UMt&USn#}t[]Í3t)x$[]Ív'U]î|u$;EwE t$$1ҋ]Ћu]U]U[|u}t1]u}]Å19D$$a0~/D$PT$$э
D$D$$Flj$~$|$@Ѕǃ`fI8$t$|$sv'USãz$u$ED$ ED$E D$E$P[]Ít&USSz$u$ED$ ED$E D$E$P[]Ít&USNz$:uE D$E$P[]fUSy$uE D$E$P []fUSÃy$u$ED$ ED$E D$E$P[]Ít&US~3y$ju$ED$ ED$E D$E$P[]Ë $U(])xU$u}ljMƋE$D;Ew.E<$D$<$|<$f8@ED$1ҋ]Ћu}]Í&'UWVSQx<E$EaU ҉<$EtnED$|$ EЉD$ED$E$ƋEޅuuEЉ$0<[^_]Ãu8E$<$Eu<[^_]E euE$EM E됍vUH]^wu}E$FfEЉ$ tEM tdED$EЉ|$D$ EԉD$E$Utt<$@]u}]ËEM $EE 뒐&U(]Þvu}׉ED$@$9tF    tHuT+}G$4tU|$$T$>]u}]Ät1E$x뱍F|$$t1UWVS7u<$EE‹EEt]<$EtqED$Ẻ|$ D$ED$EЉ$QƋEޅu.u*Ẻ$EЉ$<[^_]Ðt&uE$뀾˅vuE1PE  UWVSJt<MЉE$FE܃ $E؋UظEԉ Ƌ8ED$U܉T$ E؃D$E؉4$D$uEEu)t%x$|$t$4$EtE؉$E؋UЉ<1[^_]ËEEtӋU<[^_]ËExtD|$EԉD$h$E넍(t$ |$Uԉ$T$fU(]ysuu}EuFE M1?t*PEEQ  $M]ȋu}]Eu8tǐt&US.rEM‹EtPE  $EE[] U8]yruu}Etuu>E 1ҍM-t;ED$ ED$F D$$x$4$dE]u}]EvEӐUWVSDžDžDžDžDžDžQeE1InqDžj~ YT$D$L$$D$D$ D$D$D$$gD$D$P$D$D$$PD$D$$t D$T$$    NAFFD$FD$$D$D$$1D$D$$o:~%D$D$$D$D$2$_$8 :~D$$$Rt&V D$DžD$`$F D$`$D$c[8<$$|$D$`$1Ue3Č[^_]Ë:~><$|$D$ FD$D$D$D$D$2$|j/Dž8(D$D$$) xp$D$T$Y<$|$ T$D$$0$a8<$2|$D$,$$D$F<v8m:~D$$$9&UU Euu]êkeU1҉E}t4u*ue35H]u}]Ít̋t1ҍDžDžDžuT$4t$D$ D$D$D$D$$+=iT$D$D$T$D$DžD$ D$$:~A<$|$t$D$ D$$D$D$2$8:~D$X$$$t&D$$9릋D$$^uۋD$$7D$D$$7D$D$$Nj8`<$|$D$$0$D$0D$$t$D$ D$D$D$4$H=H$2D$D$$Nj8S<$|$D$$,D$T$t$D$D$DžD$ D$$4tU:<$9|$t$D$ D$$D$$u;~ 0D$$,|$D$$gƉ$-D$ D$
D$$'8"tA4$ |$$t e1u8xD$<$4$D$$U]}ÖdeU1҅ɉuu ttDžu$Ue30]u}]ËN tՋVt΍MD$sDžDžDžD$D$ D$D$ $D$,D$$D$ D$D$D$D$$=GNpDžD$D$D$D$D$T$D$ $zf9~70<$|$T$D$ D$$֍D$D$2$uZtP8tK9~D$`$$$82vދ$|$D$ D$ D$D$D$$D$D$3=N D$$9D$$aD$D$$2D$D$$D$D$$8~/0$SL$D$$֋$D$$04$'t$D$$볋$$pD$D$$Nj80<$V|$D$$AD$D$$Nj8(0<$|$D$$vUSI^MD$E$E.[]Ð&US    þ^MD$E$E[]Ð&UU}ϋM ]j^eU1҅uutt ttu-DžUe3<]u}]ËDžtËV tVtDžDžDžDžD$L$$D$ D$D$D$D$$=NH Dž,D$T$ D$D$D$D$L$$F8?~C0$GT$L$D$ D$t$֍D$D$2$JuYtO8tJ?~D$$$ODž$W+Dž܉D$L$D$ D$D$D$D$ $)=F -D$$rD$$WSD$D$$D$ D$
D$$ u8"C4$$ND$D$$\{t$D$$ 4$D$6,4$D$|.D$ D$
D$$<8"
wD$D$DžW=$Dž'D$D$${Dž:~-1$|$D$$DžD$$qD$D$$Nj80<$[|$D$$DžxD$D$4$$Dž'98x‹D$$룋xt$$4$ $_Dž&US~W$MD$(D$E $E$[]Í&'USy.W$M D$D$E$Et$[]Í&'U(]$Vuu}EEtuuOD$4MD$E$E xUEEU]ȋu}]Ë0xED$$t&UWVS\VeE1D$D$Wpq$$8$D$ 8<$@1D$;<$D$L<$D$\<$D$i<$D$uD${<$D$|$$i)ǃD$8$/8$    |D$D$$@ɉ@8f8]p`@4D$D$8$|$<$PH1׹󫍅hD$ DžP@DžHDžLT$D$$t9t
$‹~)D$T$ @$T$x@D$$8D$D$F$D$.D$8$8$P$t$D$`D$jD$8$W8 yD$}$D$/D$8t$$ 8(D$$D$,D$D$8$80D$D$$4t8u t8u t<D$H${@D$p$T$RD$$3D$$D$2$d8[D$_$ҋ"8}$T$ы4D$$ҋ\SD$$ҋ3D$$D$$D$$ D$8$$D$h$,D$$y(D$$Z0D$$?;4D$($1!D$pD$$6~D$pD$$Bt&<#D$<$4<$D$v2h5oD$D$D$D$ t$BD$B$i@D$$T$1}e3= [^_]f#D$4$&D$4$ ǃfPt&P4$Ƌh$tl@D$D$`$y%PhpD$,$7x$wLU]88ÐU]NLuƉ}D$$$t.px BAJ]ȋu}]ÍD$$$1fUWVSUKE<EBrut&h<QNMF<=7EE߃E    NjE    ΉEE    ЋUJBUB<EMuAEF~<=
urH=uiI:Gu]J:GuQE1u16Eu2=u):AuEE1[^_]ËE M鍴&U]uƋ@ItFt*D$D$K$4$]u]ËtD$O$j8tω$ŐUWVSQI<D$ $E$}EEEEԋU2u^Kt&FM$L$}uUF FGD$ $UljBu6NuUuF}E뫋E$_E$A‰t}M䍃RD$D$ D$L$E$D$D$ $E؉Gt/U؍D$ $M؅ljAWD$u~t$4$ u<[^_]ËMԃE9EEtQUB$fp4$K‰tMAD$ D$t$D$RD$$E܃<[^_]LD$<[^_]ÍUWVS }FFwu+7FBFFt$.4$&wtuыFGω<$     [^_]É'U]EÆFu}} t<$1҅Ft]Ћu}]Íh$|$14$Ѝv'U]EQFu}} tG<$ FtVE$1҅Ft]Ћu}]ËED$$Ft$4$뾍$|$qFuU1҉]EYEu}} ƸtA<$nFt?E$\FtmE$JFtrEFEF 1]u}]Í|$$Ft$'Ft$4$봐ED$$뻋ED$$|fUWVS EkD0M1ҋ82qu鋃ҍ0u =t&6t2FD$E$puF D$E $Zu΋vuE [^_]Ë먐t&UWVSEU0õCM1ҋ82qu鋃ҍ0uE>D$F$uދED$F $uȅtFGVFD$ ED$ED$W$F$PF $EF$:4$21[^_]Ã[^_]Ë>&UWVSáB$ hEEEU@BE0xM1ҋ82qu鋃ҍ8uh?tbGD$U$nuED$ $谾t7G $Ft%U?BF0ruE[^_]ËE$8EE[^_]Ë]vUWVS EkA0M1ҋ82qu鋃ҍ0u Bt&6t7FD$E$puF D$E $Zu΋F [^_]à 1[^_]Ë뤐UWVS @,$ 舿EE(E؋U@BE D$E$˾1$EEkluD$4$ռEt    E谽fDB uEt*H9v#@DB uDP t
9w>uR$觿kZkD$E$裿tU$μE؃,[^_]ËEԃD$ $4$wGUBG8zm҈UuMutt+8Љt/MӉ8Uu#8t8UӍt&tu1EAnu't8ЈEt8щtEމ8ЈEu뻐t&8Ut8t8Uftu뎋Eԉ$U$褻EE؃,[^_]ËEԉ$ǺEE؃,[^_]Í'U8]EF=}} u$|$<t^ED$ED$ ED$mD$4$?t6tmEt$ |$D$$$舽1]u}]Ð1E|$D$ED$ ED$v$ME;E빍&E|$D$ED$ED$ ED$$
E;E|;EnUE ]&<uuD$E$t"D$ D$
D$$踹Ɖ]u]fUWVS̽Á<L0ukuą`M9NUĉuE F e>F VN~E̋FUЉMW;D$$迸EU$MȉA<$ UȋMЉB $UȋM̉JBE8TɺU1ɋEԍ&E2 zu拓MȅtOE8t5pU1ɋE؉E2 zu拓MȉHE8t5!U1ɋE܉E2 zu拓MȉE8t8չU1ɋEvE2 zu拓Mȋ>AFEuFBVUtFGF8}t M $苷Ft$|Ft$m4$euąfL1[^_]ÃtcD$$׹F>E끋VFV>UiE|$$E̅N>M:NME3蝸U1ɉUEEUE2 E@EEuEu}UM:L$B${uot    UBGMQAD$ A D$ED$W$͸UB$MA $UB$M $kF>E7U䍃`|$$T$jN>MD$kUWVSl!8ED$$D$rt詳8uD$D$$轳tw4$莶HiHPt$L$<$Ĵ9tft$ P|$D$$$`P$貴<$[^_]ËD$$%[^_]É<$µݴP9PTLP}9T?
u9Hs
\<EM<#5;,)[XXt*=uT1M4>=A9Xu81ҋM
9tճDžPLDt9t&P @u9uD$D$L$茱PD[^_]1M<tED$$e9T}~;}U$<Bt$$% G 0@EgɈGG48‰@#1 9@tM
uЋUNMo8VT1҃D29tE|+E)XX~4|E ~EDP 8uD$D$|T$ ML$ED$L$m x]uE<]t 9Xu싃@t$;XtG4$b‰@t$E$D$謯U$<t&<D$L$+ǃ@11@M9@t9tXd1ht&T09ht9t?&Ɉ{uct9tG919t9U҈?u}tpl9lt\G9ptK{9t@1U҈?"9l9p9uf1U$T$臱D$M $Mu<҉d1`T09`t9dt9tfD$E$莰u=ɉ\1@M9@t9\t9t@D$E$.&<t$D$$胰US辱s0f9u@觬[]ÐUEW} Vt utuu u)^_]BÐUS/ĮUVSò/p@t Ћu[^]ÐUS[|/Y[Unable to determine a default nfsv4 domain;  consider specifying one in idmapd.conf
libnfsidmap: Unable to determine a default nfsv4 domain; consider specifying one in idmapd.conf
libnfsidmap: using%s domain: %s
libnfsidmap: Error in translation table setup for method %s
libnfsidmap: using translation method: %s
/etc/idmapd.confDomainGeneral (default)nsswitchMethodTranslationnss_getpwnam: name '%s' domain '%s': resulting localname '%s'
nss_getpwnam: name '%s' does not map into domain '%s'
nss_getpwnam: name '%s' not found in domain '%s'
<not-provided>krb5spkm3ldaps%s://%s:%d(&(objectClass=%s)(%s=%s))LDAP_serverUMICH_SCHEMALDAP_baseLDAP_people_baseLDAP_group_baseLDAP_user_dnLDAP_passwdfalseLDAP_use_ssltrueyesLDAP_CA_CERTLDAP_portLDAP_server LDAP_base LDAP_canonicalize_namehost unknown%s: '%s': %s
NFSv4RemotePersonNFSv4_person_objectclassNFSv4RemoteGroupNFSv4_group_objectclassNFSv4NameNFSv4_name_attruidNumberNFSv4_uid_attruidNFSv4_acctname_attrNFSv4_group_attrgidNumberNFSv4_gid_attrmemberUidNFSv4_member_attrGSSAuthNameGSS_principal_attrumichldap_init: port    : %d
umichldap_init: people  : %s
umichldap_init: groups  : %s
<not-supplied>umichldap_init: user_dn : %s
<supplied>umichldap_init: passwd  : %s
noumichldap_init: use_ssl : %s
umichldap_init: ca_cert : %s
umich_ldapldap_init_and_bind: ldap_initialize() failed to [%s]: %s (%d)
ldap_init_and_bind: error setting ldap library debugging level
ldap_init_and_bind:  APIInfo version mismatch: library %d, header %d
ldap_init_and_bind: version mismatch between API information and protocol version. Setting protocol version to %d
ldap_init_and_bind: setting SSL failed : %s (%d)
ldap_init_and_bind: setting CA certificate file failed : %s (%d)
ldap_init_and_bind: got protocol error while attempting bind with protocol version %d, trying protocol version %d
ldap_init_and_bind: Additional info: %s
ldap_init_and_bind: ldap_simple_bind_s to [%s] as user '%s': %s (%d)
ERROR: umichldap_gss_princ_to_grouplist: invalid secname '%s'
ERROR: umich_gss_princ_to_grouplist: filter too long!
umich_gss_princ_to_grouplist: ldap_search_st for tree '%s, filter '%s': %s (%d)
umich_gss_princ_to_grouplist: Additional info: %s
umich_gss_princ_to_grouplist: ldap_first_entry: %s (%d)
umich_gss_princ_to_grouplist: ldap_get_values: %s (%d)
DB problem getting gidNumber of posixGroup! (count was %d)
ERROR: umich_gss_princ_to_grouplist: gidNumber too long converting '%s'
ERROR: umich_id_to_name: uid filter too long!
ERROR: umich_id_to_name: gid filter too long!
ERROR: umich_id_to_name: invalid idtype (%d)
umich_id_to_name: ldap_search_st for base '%s, filter '%s': %s (%d)
umich_id_to_name: Additional info: %s
umich_id_to_name: ldap_first_entry: %s (%d)
umich_id_to_name: ldap_first_attribute: %s (%d)
umich_id_to_name: ldap_get_values: %s (%d)
ERROR: umich_name_to_ids: filter too long!
ERROR: umich_name_to_ids: invalid idtype (%d)
umich_name_to_ids: ldap_search_st for base '%s', filter '%s': %s (%d)
umich_name_to_ids: Additional info: %s
umich_name_to_ids: ldap_first_entry: %s (%d)
umich_name_to_ids: ldap_get_values: %s (%d)
ERROR: umich_name_to_ids: uidNumber too long converting '%s'
ERROR: umich_name_to_ids: gidNumber too long converting '%s'
umich_name_to_ids: received attr '%s' ???
ERROR: umichldap_gss_princ_to_ids: invalid secname '%s'
umichldap_init: Missing required information: %s
%s: no addresses for host '%s'?
%s: getnameinfo for host '%s' failed (%d)
umichldap_init: Warning! Unable to canonicalize server name '%s' as requested.
umichldap_init: You must specify LDAP_ca_cert with LDAP_use_ssl=yes
umichldap_init: canonicalize_name: %s
umichldap_init: server  : %s (from config value '%s')
umichldap_init: NFSv4_person_objectclass : %s
umichldap_init: NFSv4_nfsname_attr       : %s
umichldap_init: NFSv4_acctname_attr      : %s
umichldap_init: NFSv4_uid_attr           : %s
umichldap_init: NFSv4_group_objectclass  : %s
umichldap_init: NFSv4_gid_attr           : %s
umichldap_init: NFSv4_group_nfsname_attr : %s
umichldap_init: NFSv4_member_attr        : %s
umichldap_init: GSS_principal_attr       : %s
get_canonical_hostnameconf_trans_node: calloc (1, %lu) failedconf_report: dumping running configurationconf_report: malloc/calloc failedconf_remove_section: strdup ("%s") failedconf_remove: strdup ("%s") failedconf_set: strdup ("%s") failedconf_get_list: empty field, ignoring...conf_match_num: %s:%s %d<=%d<=%d?conf_match_num: section %s tag %s: invalid number spec %sconf_set: duplicate tag [%s]:%s, ignoring...
conf_set: calloc (1, %lu) failedconf_end: unknown operation: %dconf_reinit: open ("%s", O_RDONLY) failedconf_reinit: malloc (%lu) failedconf_reinit: read (%d, %p, %lu) failedconf_parse_line: %d:non-matched ']', ignoring until next sectionconf_parse_line: %d: malloc (%lu) failedconf_parse_line: %d: ignoring line due to no sectionconf_parse_line: %d: syntax errorconf_parse: last line non-terminated, ignored.==%s=    %s[%s][%s]:%s->%s removed,%d,%d:%dconf_match_num: %s:%s %d==%d?     =     ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/>?456789:;<=    
 !"#$%&'()*+,-./0123;40 @D``00Lpp` D`` (L0hP(H`hP4Tt`@@4zR| *AB 8=AB A T,iAB FQ xxAB FNFfAB AHPAB FN xAB FTLAB AHLAB A4|>AB AP>AB AlĜLAB ALAB A ,AB FWAB C hAB FNH  AB FQ 0AB BF T\~AB AD xAG FNG4QAB A xAG FNG     AB BI AG OFv $AB L^Hh8AG Ad8AG A AB RHbBAG ABAG A AG FNG    AB C  LB  <$~AB FNE`AB F`AB IJAB CgAB F @vAG FT AG FT ((AD FTLAB FlAB F-AB CAB F$AB C AB FQF^AB IN0TAB CP@AB CpGAB ADAB DD 9Jx  hoD
  X8Xoooo.>N^n~.>N^n~.>N^n~.>N^n~.>N^j$ %" mA A@@@99@,libnfsidmap.so.0.2.0.debugU.shstrtab.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.got.plt.data.bss.gnu_debuglink op DD%o2oA    XXJ    88X    SNYppP_hhehh m~~{LL $ 8```   

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0291 ]--