!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/lib/python2.4/site-packages/_xmlplus/dom/ext/   drwxr-xr-x
Free 46.37 GB of 127.8 GB (36.28%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     XHtml2HtmlPrinter.py (1.55 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
import string
import Printer
from xml.dom import XHTML_NAMESPACE
from xml.dom.html import HTML_FORBIDDEN_END

class HtmlDocType:
    name = 'HTML'
    publicId = "-//W3C//DTD HTML 4.0//EN"
    systemId = "http://www.w3.org/TR/REC-html40/strict.dtd"
    entities = notations = []

class HtmlAttr:
    def __init__(self, node):
        self.namespaceURI = None
        self.name = string.upper(node.localName or node.nodeName)
        self.value = node.value
        return

class HtmlElement:
    def __init__(self, node):
        self.tagName = string.upper(node.localName or node.nodeName)
        self.childNodes = node.childNodes
        self.attributes = node.attributes
        return

class XHtml2HtmlPrintVisitor(Printer.PrintVisitor):
    def __init__(self, stream, encoding, indent='', plainElements=None):
        Printer.PrintVisitor.__init__(self,stream,encoding,indent,plainElements)
        self._html = 1
        return

    def visitDocument(self, doc):
        self.visitDocumentType(HtmlDocType)
        self.visitNodeList(doc.childNodes, exclude=doc.doctype)
        return

    def visitAttr(self, node):
        if node.namespaceURI and node.namespaceURI != XHTML_NAMESPACE:
            return
        Printer.PrintVisitor.visitAttr(self,HtmlAttr(node))

    def visitElement(self, node):
        if node.namespaceURI and node.namespaceURI != XHTML_NAMESPACE:
            return
        htmlElement = HtmlElement(node)
        if htmlElement.tagName == 'XHTML':
            htmlElement.tagName = 'HTML'
        Printer.PrintVisitor.visitElement(self,htmlElement)

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0086 ]--