!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/lib/nspluginwrapper/   drwxr-xr-x
Free 52.3 GB of 127.8 GB (40.92%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     nspluginplayer (85 B)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /usr/lib/nspluginwrapper/nspluginplayer
Size 85 B
MD5 3ec43845c55887c84a71e0cdcfbc0507
Owner/Group root/root
Perms-rwxr-xr-x
Create time 25/04/2011 18:11:18
Access time 31/03/2010 09:44:18
MODIFY time 31/03/2010 09:44:18

HEXDUMP PREVIEW
00000000
00000018
00000030
00000048
65 78 70 6F 72 74 20 4D 4F 5A 5F 50 4C 55 47 49 4E 5F 50 41 54 48 3D 2F
75 73 72 2F 6C 69 62 2F 6D 6F 7A 69 6C 6C 61 2F 70 6C 75 67 69 6E 73 0A
2F 75 73 72 2F 6C 69 62 2F 6E 73 70 6C 75 67 69 6E 77 72 61 70 70 65 72
2F 6E 70 70 6C 61 79 65 72 20 22 22 0A
export MOZ_PLUGIN_PATH=/
usr/lib/mozilla/plugins 
/usr/lib/nspluginwrapper
/npplayer "" 

HEXDUMP: [Full] [Preview]
Base64:
[Encode [+chunk [+chunk+quotes [Decode


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0132 ]--