!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/lib/   drwxr-xr-x
Free 52.28 GB of 127.8 GB (40.9%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     libnfsidmap.so.0 (35.7 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELFp44 (Ptd~~~Qtd%@@TH)c Pd@1 	":H@BCDEGHIJKLMPRTXZ]^`acdhjv'	6%
%Yi0;A'\x(ʀ[W)oj6{'8vAUc>?>Tƅ~0WђĊ?qX2w|uW'#`4(E!hSI<ACE[VQaGw\>d.wŹgͷR!k
z[bD~+ % g<KpCEzW=Bu"<M'O"ib;gJo2+gTCx<E	E*4,9b"%Z"WgD
29`*
hH`S
 [^
oR
1}AcQ
L
`+`L
 Wș
 ~]>
GL
n@>
_
@Qg
V
ui
0L
lh%
L
f
`U-
@W
[T
ePP
 K
gG
Z
OpQv
&NJ
__gmon_start___fini__cxa_finalize_Jv_RegisterClassesnfs4_set_debugidmap_log_funcidmap_verbosity__vsyslog_chkset_trans_methodstrcmpgethostnamegethostbynamestrchr__strdupnfs4_get_default_domainstrlenstrcpynfs4_init_name_mappingconf_pathconf_initconf_get_strconf_get_str_with_defnfs4_gss_princ_to_grouplistnfs4_gss_princ_to_idsnfs4_name_to_gidnfs4_name_to_uidnfs4_gid_to_namenfs4_uid_to_namenss_transumichldap_transstrcatsysconfmallocgetgrgid_rgetpwuid_rmemcpygetgrnam_rgetpwnam_rnss_gss_princ_to_grouplistgetgrouplist__snprintf_chkldap_initializeldap_set_optionldap_get_optionldap_simple_bind_sldap_memfreeldap_err2stringldap_search_stldap_unbindldap_count_entriesldap_first_entryldap_get_valuesldap_result2errorldap_count_values__strtoul_internal__errno_locationldap_value_freeldap_next_entryldap_first_attributeber_freeldap_next_attributestrcasecmpmemsetconf_get_numgetaddrinfogai_strerror__strcat_chkgetnameinfofreeaddrinfoconf_begincallocconf_trans_queuewarnxconf_decode_base64asc2binconf_reportconf_bindingsconf_free_listconf_remove_sectionconf_removeconf_set__ctype_tolower_locconf_get_tag_listconf_get_list__ctype_b_loc__strsep_gconf_match_numsscanf__strtol_internalconf_endconf_reinit__xstatopenreadclosestrlcpystrcspnstrspnbin2asclibldap-2.3.so.0libc.so.6__stack_chk_fail_edata__bss_startlibnfsidmap.so.0GLIBC_2.1.3GLIBC_2.1.1GLIBC_2.4GLIBC_2.1GLIBC_2.3GLIBC_2.3.4GLIBC_2.2.4GLIBC_2.1.2GLIBC_2.0	
	Jsi	
qi		ii
ii
ii
ti	ti	ri	ii
`dMKPZDN>A\ $(a,0^48<@@D	HTL
PTUXE\
`dhlptxF|eG !"#ĘVȘ$̘%И&Ԙ'ؘ(ܘ)*+,-.f/012W34567 8$9(:,;0<4=8><?@OUThhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhhhplh`phPth@xh0|h hhhhhhhh h(h0h8ph@`hHPhP@hX0h` hhhphxhhhhhhhhph`hPh@h0h hhhhhhhh  h($h0(h8p,h@`0hHP4hP@US[ÐtX[ÐUVSbuWt$d)p9v9wƃ[^]ÍUS.~tt$҃[]Ë$ÐUU~tU]ÍUSs~$EED$ED$$D$1$[]ÍvU]y.~u}FǃE>UT$$t;uu]u}]É덴&Uh]	þ}uu}D$@eE14$uUe3uF]u}]É4$StD$.$
txPt$x1UMt&USn#}t[]Í3t)x$[]Ív'U]î|u$;EwEt$$1ҋ]Ћu]U]U[|u}t1]u}]Å19D$$a0~/D$PT$$э
D$D$$Flj$~$|$@Ѕǃ`fI8$t$|$sv'USãz$u$ED$ED$ED$E$P[]Ít&USSz$u$ED$ED$ED$E$P[]Ít&USNz$:uED$E$P[]fUSy$uED$E$P[]fUSÃy$u$ED$ED$ED$E$P[]Ít&US~3y$ju$ED$ED$ED$E$P[]Ë$U(])xU$u}ljMƋE$D;Ew.E<$D$<$|<$f8@ED$1ҋ]Ћu}]Í&'UWVSQx<E$EaU҉<$EtnED$|$EЉD$ED$E$ƋEޅuuEЉ$0<[^_]Ãu8E$<$Eu<[^_]EeuE$EME됍vUH]^wu}E$FfEЉ$tEMtdED$EЉ|$D$EԉD$E$Utt<$@]u}]ËEM$EE뒐&U(]Þvu}׉ED$@$9tF	tHuT+}G$4tU|$$T$>]u}]Ät1E$x뱍F|$$t1UWVS7u<$EE‹EEt]<$EtqED$Ẻ|$D$ED$EЉ$QƋEޅu.u*Ẻ$EЉ$<[^_]Ðt&uE$뀾˅vuE1PE
UWVSJt<MЉE$FE܃ $E؋UظEԉ
Ƌ8ED$U܉T$E؃D$E؉4$D$uEEu)t%x$|$t$4$EtE؉$E؋UЉ<1[^_]ËEEtӋU<[^_]ËExtD|$EԉD$h$E넍(t$|$Uԉ$T$fU(]ysuu}EuFEM1?t*PEEQ$M]ȋu}]Eu8tǐt&US.rEM‹EtPE$EE[]
U8]yruu}Etuu>E1ҍM-t;ED$ED$FD$$x$4$dE]u}]EvEӐUWVSDžDžDžDžDžDžQeE1InqDžj~ YT$D$L$$D$D$D$D$D$$gD$D$P$D$D$$PD$D$$t D$T$$	NAFFD$FD$$D$D$$1D$D$$o:~%D$D$$D$D$2$_$8
:~D$$$Rt&V D$DžD$`$F D$`$D$c[8<$$|$D$`$1Ue3Č[^_]Ë:~><$|$D$FD$D$D$D$D$2$|j/Dž8(D$D$$)
xp$D$T$Y<$|$T$D$$0$a8<$2|$D$,$$D$F<v8m:~D$$$9&UUEuu]êkeU1҉E}t4u*ue35H]u}]Ít̋t1ҍDžDžDžuT$4t$D$D$D$D$D$$+=iT$D$D$T$D$DžD$D$$:~A<$|$t$D$D$$D$D$2$8:~D$X$$$t&D$$9릋D$$^uۋD$$7D$D$$7D$D$$Nj8`<$|$D$$0$D$0D$$t$D$D$D$D$4$H=H$2D$D$$Nj8S<$|$D$$,D$T$t$D$D$DžD$D$$4tU:<$9|$t$D$D$$D$$u;~0D$$,|$D$$gƉ$-D$D$
D$$'8"tA4$|$$te1u8xD$<$4$D$$U]}ÖdeU1҅ɉuuttDžu$Ue30]u}]ËNtՋVt΍MD$sDžDžDžD$D$D$D$$D$,D$$D$D$D$D$D$$=GNpDžD$D$D$D$D$T$D$$zf9~70<$|$T$D$D$$֍D$D$2$uZtP8tK9~D$`$$$82vދ$|$D$ D$D$D$D$$D$D$3=ND$$9D$$aD$D$$2D$D$$D$D$$8~/0$SL$D$$֋$D$$04$'t$D$$볋$$pD$D$$Nj80<$V|$D$$AD$D$$Nj8(0<$|$D$$vUSI^MD$E$E.[]Ð&US	þ^MD$E$E[]Ð&UU}ϋM]j^eU1҅uuttttu-DžUe3<]u}]ËDžtËVtVtDžDžDžDžD$L$$D$D$D$D$D$$=NH Dž,D$T$D$D$D$D$L$$F8?~C0$GT$L$D$D$t$֍D$D$2$JuYtO8tJ?~D$$$ODž$W+Dž܉D$L$D$D$D$D$D$$)=F-D$$rD$$WSD$D$$D$D$
D$$ u8"C4$$ND$D$$\{t$D$$ 4$D$6,4$D$|.D$D$
D$$<8"
wD$D$DžW=$Dž'D$D$${Dž:~-1$|$D$$DžD$$qD$D$$Nj80<$[|$D$$DžxD$D$4$$Dž'98x‹D$$룋xt$$4$
$_Dž&US~W$MD$(D$E$E$[]Í&'USy.W$MD$D$E$Et$[]Í&'U(]$Vuu}EEtuuOD$4MD$E$ExUEEU]ȋu}]Ë0xED$$t&UWVS\VeE1D$D$Wpq$$8$D$
8<$@1D$;<$D$L<$D$\<$D$i<$D$uD${<$D$|$$i)ǃD$8$/8$	|D$D$$@ɉ@8f8]p`@4D$D$8$|$<$PH1׹󫍅hD$DžP@DžHDžLT$D$$t9t
$‹~)D$T$@$T$x@D$$8D$D$F$D$.D$8$8$P$t$D$`D$jD$8$W8 yD$}$D$/D$8t$$
8(D$$D$,D$D$8$80D$D$$4t8ut8ut<D$H${@D$p$T$RD$$3D$$D$2$d8[D$_$ҋ"8}$T$ы4D$$ҋ\SD$$ҋ3D$$D$$D$$ D$8$$D$h$,D$$y(D$$Z0D$$?;4D$($1!D$pD$$6~D$pD$$Bt&<#D$<$4<$D$v2h5oD$D$D$D$t$BD$B$i@D$$T$1}e3=[^_]f#D$4$&D$4$ǃfPt&P4$Ƌh$tl@D$D$`$y%PhpD$,$7x$wLU]88ÐU]NLuƉ}D$$$t.pxBAJ]ȋu}]ÍD$$$1fUWVSUKE<EBrut&h<QNMF<=7EE߃E	NjE	ΉEE	ЋUJBUB<EMuAEF~<=
urH=uiI:Gu]J:GuQE1u16Eu2=u):AuEE1[^_]ËEM鍴&U]uƋ@ItFt*D$D$K$4$]u]ËtD$O$j8tω$ŐUWVSQI<D$$E$}EEEEԋU2u^Kt&FM$L$}uUFFGD$$UljBu6NuUuF}E뫋E$_E$A‰t}M䍃RD$D$D$L$E$D$D$$E؉Gt/U؍D$$M؅ljAWD$u~t$4$
u<[^_]ËMԃE9EEtQUB$fp4$K‰tMAD$D$t$D$RD$$E܃<[^_]LD$<[^_]ÍUWVS}FFwu+7FBFFt$.4$&wtuыFGω<$	[^_]É'U]EÆFu}}t<$1҅Ft]Ћu}]Íh$|$14$Ѝv'U]EQFu}}tG<$ FtVE$1҅Ft]Ћu}]ËED$$Ft$4$뾍$|$qFuU1҉]EYEu}}ƸtA<$nFt?E$\FtmE$JFtrEFEF 1]u}]Í|$$Ft$'Ft$4$봐ED$$뻋ED$$|fUWVSEkD0M1ҋ82qu鋃ҍ0u
=t&6t2FD$E$puFD$E$Zu΋vuE[^_]Ë먐t&UWVSEU0õCM1ҋ82qu鋃ҍ0uE>D$F$uދED$F$uȅtFGVFD$ED$ED$W$F$PF$EF$:4$21[^_]Ã[^_]Ë>&UWVSáB$hEEEU@BE0xM1ҋ82qu鋃ҍ8uh?tbGD$U$nuED$$谾t7G$Ft%U?BF0ruE[^_]ËE$8EE[^_]Ë]vUWVSEkA0M1ҋ82qu鋃ҍ0u
Bt&6t7FD$E$puFD$E$Zu΋F[^_]Ã1[^_]Ë뤐UWVS@,$舿EE(E؋U@BED$E$˾1$EEkluD$4$ռEt	E谽fDB uEt*H9v#@DB uDP t
9w>uR$觿kZkD$E$裿tU$μE؃,[^_]ËEԃD$$4$wGUBG8zm҈UuMutt+8Љt/MӉ8Uu#8t8UӍt&tu1EAnu't8ЈEt8щtEމ8ЈEu뻐t&8Ut8t8Uftu뎋Eԉ$U$褻EE؃,[^_]ËEԉ$ǺEE؃,[^_]Í'U8]EF=}}u$|$<t^ED$ED$ED$mD$4$?t6tmEt$|$D$$$舽1]u}]Ð1E|$D$ED$ED$v$ME;E빍&E|$D$ED$ED$ED$$
E;E|;EnUE]&<uuD$E$t"D$D$
D$$踹Ɖ]u]fUWVS̽Á<L0ukuą`M9NUĉuEFe>F VN~E̋FUЉMW;D$$迸EU$MȉA<$UȋMЉB$UȋM̉JBE8TɺU1ɋEԍ&E2zu拓MȅtOE8t5pU1ɋE؉E2zu拓MȉHE8t5!U1ɋE܉E2zu拓MȉE8t8չU1ɋEvE2zu拓Mȋ>AFEuFBVUtFGF8}tM$苷Ft$|Ft$m4$euąfL1[^_]ÃtcD$$׹F>E끋VFV>UiE|$$E̅N>M:NME3蝸U1ɉUEEUE2E@EEuEu}UM:L$B${uot	UBGMQAD$AD$ED$W$͸UB$MA$UB$M$kF>E7U䍃`|$$T$jN>MD$kUWVSl!8ED$$D$rt詳8uD$D$$轳tw4$莶HiHPt$L$<$Ĵ9tft$P|$D$$$`P$貴<$[^_]ËD$$%[^_]É<$µݴP9PTLP}9T?
u9Hs
\<EM<#5;,)[XXt*=uT1M4>=A9Xu81ҋM
9tճDžPLDt9t&P@u9uD$D$L$茱PD[^_]1M<tED$$e9T}~;}U$<Bt$$% G 0@EgɈGG48‰@#19@tM
uЋUNMo8VT1҃D29tE|+E)XX~4|E
~EDP 8uD$D$|T$ML$ED$L$m x]uE<]t9Xu싃@t$;XtG4$b‰@t$E$D$謯U$<t&<D$L$+ǃ@11@M9@t9tXd1ht&T09ht9t?&Ɉ{uct9tG919t9U҈?u}tpl9lt\G9ptK{9t@1U҈?"9l9p9uf1U$T$臱D$M$Mu<҉d1`T09`t9dt9tfD$E$莰u=ɉ\1@M9@t9\t9t@D$E$.&<t$D$$胰US辱s0f9u@觬[]ÐUEW}Vt utuu
u)^_]BÐUS/ĮUVSò/p@tЋu[^]ÐUS[|/Y[Unable to determine a default nfsv4 domain;  consider specifying one in idmapd.conf
libnfsidmap: Unable to determine a default nfsv4 domain; consider specifying one in idmapd.conf
libnfsidmap: using%s domain: %s
libnfsidmap: Error in translation table setup for method %s
libnfsidmap: using translation method: %s
/etc/idmapd.confDomainGeneral (default)nsswitchMethodTranslationnss_getpwnam: name '%s' domain '%s': resulting localname '%s'
nss_getpwnam: name '%s' does not map into domain '%s'
nss_getpwnam: name '%s' not found in domain '%s'
<not-provided>krb5spkm3ldaps%s://%s:%d(&(objectClass=%s)(%s=%s))LDAP_serverUMICH_SCHEMALDAP_baseLDAP_people_baseLDAP_group_baseLDAP_user_dnLDAP_passwdfalseLDAP_use_ssltrueyesLDAP_CA_CERTLDAP_portLDAP_server LDAP_base LDAP_canonicalize_namehost unknown%s: '%s': %s
NFSv4RemotePersonNFSv4_person_objectclassNFSv4RemoteGroupNFSv4_group_objectclassNFSv4NameNFSv4_name_attruidNumberNFSv4_uid_attruidNFSv4_acctname_attrNFSv4_group_attrgidNumberNFSv4_gid_attrmemberUidNFSv4_member_attrGSSAuthNameGSS_principal_attrumichldap_init: port    : %d
umichldap_init: people  : %s
umichldap_init: groups  : %s
<not-supplied>umichldap_init: user_dn : %s
<supplied>umichldap_init: passwd  : %s
noumichldap_init: use_ssl : %s
umichldap_init: ca_cert : %s
umich_ldapldap_init_and_bind: ldap_initialize() failed to [%s]: %s (%d)
ldap_init_and_bind: error setting ldap library debugging level
ldap_init_and_bind:  APIInfo version mismatch: library %d, header %d
ldap_init_and_bind: version mismatch between API information and protocol version. Setting protocol version to %d
ldap_init_and_bind: setting SSL failed : %s (%d)
ldap_init_and_bind: setting CA certificate file failed : %s (%d)
ldap_init_and_bind: got protocol error while attempting bind with protocol version %d, trying protocol version %d
ldap_init_and_bind: Additional info: %s
ldap_init_and_bind: ldap_simple_bind_s to [%s] as user '%s': %s (%d)
ERROR: umichldap_gss_princ_to_grouplist: invalid secname '%s'
ERROR: umich_gss_princ_to_grouplist: filter too long!
umich_gss_princ_to_grouplist: ldap_search_st for tree '%s, filter '%s': %s (%d)
umich_gss_princ_to_grouplist: Additional info: %s
umich_gss_princ_to_grouplist: ldap_first_entry: %s (%d)
umich_gss_princ_to_grouplist: ldap_get_values: %s (%d)
DB problem getting gidNumber of posixGroup! (count was %d)
ERROR: umich_gss_princ_to_grouplist: gidNumber too long converting '%s'
ERROR: umich_id_to_name: uid filter too long!
ERROR: umich_id_to_name: gid filter too long!
ERROR: umich_id_to_name: invalid idtype (%d)
umich_id_to_name: ldap_search_st for base '%s, filter '%s': %s (%d)
umich_id_to_name: Additional info: %s
umich_id_to_name: ldap_first_entry: %s (%d)
umich_id_to_name: ldap_first_attribute: %s (%d)
umich_id_to_name: ldap_get_values: %s (%d)
ERROR: umich_name_to_ids: filter too long!
ERROR: umich_name_to_ids: invalid idtype (%d)
umich_name_to_ids: ldap_search_st for base '%s', filter '%s': %s (%d)
umich_name_to_ids: Additional info: %s
umich_name_to_ids: ldap_first_entry: %s (%d)
umich_name_to_ids: ldap_get_values: %s (%d)
ERROR: umich_name_to_ids: uidNumber too long converting '%s'
ERROR: umich_name_to_ids: gidNumber too long converting '%s'
umich_name_to_ids: received attr '%s' ???
ERROR: umichldap_gss_princ_to_ids: invalid secname '%s'
umichldap_init: Missing required information: %s
%s: no addresses for host '%s'?
%s: getnameinfo for host '%s' failed (%d)
umichldap_init: Warning! Unable to canonicalize server name '%s' as requested.
umichldap_init: You must specify LDAP_ca_cert with LDAP_use_ssl=yes
umichldap_init: canonicalize_name: %s
umichldap_init: server  : %s (from config value '%s')
umichldap_init: NFSv4_person_objectclass : %s
umichldap_init: NFSv4_nfsname_attr       : %s
umichldap_init: NFSv4_acctname_attr      : %s
umichldap_init: NFSv4_uid_attr           : %s
umichldap_init: NFSv4_group_objectclass  : %s
umichldap_init: NFSv4_gid_attr           : %s
umichldap_init: NFSv4_group_nfsname_attr : %s
umichldap_init: NFSv4_member_attr        : %s
umichldap_init: GSS_principal_attr       : %s
get_canonical_hostnameconf_trans_node: calloc (1, %lu) failedconf_report: dumping running configurationconf_report: malloc/calloc failedconf_remove_section: strdup ("%s") failedconf_remove: strdup ("%s") failedconf_set: strdup ("%s") failedconf_get_list: empty field, ignoring...conf_match_num: %s:%s %d<=%d<=%d?conf_match_num: section %s tag %s: invalid number spec %sconf_set: duplicate tag [%s]:%s, ignoring...
conf_set: calloc (1, %lu) failedconf_end: unknown operation: %dconf_reinit: open ("%s", O_RDONLY) failedconf_reinit: malloc (%lu) failedconf_reinit: read (%d, %p, %lu) failedconf_parse_line: %d:non-matched ']', ignoring until next sectionconf_parse_line: %d: malloc (%lu) failedconf_parse_line: %d: ignoring line due to no sectionconf_parse_line: %d: syntax errorconf_parse: last line non-terminated, ignored.==%s=	%s[%s][%s]:%s->%s removed,%d,%d:%dconf_match_num: %s:%s %d==%d? 	= 	ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/>?456789:;<=	

 !"#$%&'()*+,-./0123;40 @D``00Lpp` D``(L0hP(H`hP4Tt`@@4zR|*AB
8=AB
A T,iAB
FQ xxAB
FNFfAB
AHPAB
FN xAB
FTLAB
AHLAB
A4|>AB
AP>AB
AlĜLAB
ALAB
A ,AB
FWAB
C hAB
FNH AB
FQ 0AB
BF T\~AB
AD xAG
FNG4QAB
A xAG
FNG 	AB
BI AG
OFv $AB
L^Hh8AG
Ad8AG
A AB
RHbBAG
ABAG
A AG
FNG	AB
C  LB
 <$~AB
FNE`AB
F`AB
IJAB
CgAB
F @vAG
FT AG
FT ((AD
FTLAB
FlAB
F-AB
CAB
F$AB
C AB
FQF^AB
IN0TAB
CP@AB
CpGAB
ADAB
DD9Jx
hoD
X8Xoooo.>N^n~.>N^n~.>N^n~.>N^n~.>N^j$ %" mA A@@@99@,libnfsidmap.so.0.2.0.debugU.shstrtab.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.got.plt.data.bss.gnu_debuglinkopDD%o2oA	XXJ	88X	SNYppP_hhehh m~~{LL$8```   

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0057 ]--