!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/lib/python2.4/site-packages/_xmlplus/sax/drivers/   drwxr-xr-x
Free 46.37 GB of 127.8 GB (36.28%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     drv_ltdriver.py (3.04 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
"""
A SAX driver for the LT XML Python interface.
"""

version="0.10"

from types import *
from xml.sax import saxlib,saxutils
from XMLinter import *

# --- The parser

class SAX_XMLinter(saxlib.Parser):

    def __init__(self):
        saxlib.Parser.__init__(self)

    def parse(self,sysID):
        self._parse(Open(sysID,NSL_read))

    def parseFile(self,file):
        self._parse(FOpen(file,NSL_read))

    def setLocale(self, locale):
        raise SAXException("Locales not supported")

    # --- EXPERIMENTAL PYTHON SAX EXTENSIONS:

    def get_parser_name(self):
        return "XMLinter"

    def get_parser_version(self):
        return "Unknown"

    def get_driver_version(self):
        return version

    def is_validating(self):
        return 0

    def is_dtd_reading(self):
        return 1

    def reset(self):
        raise SAXException("Incremental parsing not supported")

    def feed(self,data):
        raise SAXException("Incremental parsing not supported")

    def close(self):
        raise SAXException("Incremental parsing not supported")

    # --- INTERNAL METHODS

    def _parse(self,file):
        bit=GetNextBit(file)
        while bit:
            if bit.type=="start":
                self.doc_handler.startElement(bit.label,
                                              AttributeItem(bit.item))
            elif bit.type=="end":
                self.doc_handler.endElement(bit.label)
            elif bit.type=="text":
                self.doc_handler.characters(bit.body,0,len(bit.body))
            elif bit.type=="empty":
                self.doc_handler.startElement(bit.label,
                                              AttributeItem(bit.item))
                self.doc_handler.endElement(bit.label)
            elif bit.type=="bad":
                self.err_handler.fatalError(saxlib.SAXException("Syntax error",None))
            elif bit.type=="pi":
                print "?pi"
            else:
                print "###"+bit.type

            bit=GetNextBit(file)

# --- AttributeItem

def name(pair):
    return pair[0]

class AttributeItem:

    def __init__(self,item):
        self.item=item
        self.list=ItemActualAttributes(item)

    def getLength(self):
        return len(self.list)

    def getName(self, i):
        return self.list[i][0]

    def getType(self, i):
        return "CDATA"

    def getValue(self, i):
        if type(i)==StringType:
            return GetAttrVal(self.item,i)
        else:
            return self.list[i][1]

    def __len__(self):
        return len(self.list)

    def __getitem__(self, key):
        if type(key)==StringType:
            return GetAttrVal(self.item,key)
        else:
            return self.list[key][0]

    def keys(self):
        return map(name,self.list)

    def has_key(self, key):
        return GetAttrVal(self.item,key)

# --- Global functions

def create_parser():
    return SAX_XMLinter()

# --- Testing

if __name__=="__main__":
    p=create_parser()
    p.setDocumentHandler(saxutils.Canonizer())
    p.setErrorHandler(saxutils.ErrorPrinter())
    p.parse("tst.xml")

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0059 ]--