!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/libexec/webmin/init/   drwxr-xr-x
Free 50.94 GB of 127.8 GB (39.86%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     atboot.pl (4.78 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/perl
# atboot.pl
# Called by setup.sh to have webmin started at boot time

$no_acl_check++;
require './init-lib.pl';
$product = $ARGV[0] || "webmin";
$ucproduct = ucfirst($product);

if ($init_mode eq "osx") {
    # Darwin System
    &enable_at_boot("webmin", "Webmin administration server",
            "$config_directory/start >/dev/null 2>&1 </dev/null",
            "$config_directory/stop");
    }
elsif ($init_mode eq "local") {
    # Add to the boot time rc script
    $lref = &read_file_lines($config{'local_script'});
    for($i=0; $i<@$lref && $lref->[$i] !~ /^exit\s/; $i++) { }
    splice(@$lref, $i, 0, "$config_directory/start >/dev/null 2>&1 </dev/null # Start $ucproduct");
    &flush_file_lines();
    }
elsif ($init_mode eq "init") {
    # Create a bootup action, if missing
    @start = &get_start_runlevels();
    $fn = &action_filename($product);
    if (!-r $fn) {
        &open_tempfile(ACTION,">$fn");
        $desc = "Start/stop $ucproduct";
        &print_tempfile(ACTION, "#!/bin/sh\n");
        $start_order = "9" x $config{'order_digits'};
        $stop_order = "9" x $config{'order_digits'};
        if ($config{'chkconfig'}) {
            # Redhat-style description: and chkconfig: lines
            &print_tempfile(ACTION, "# description: $desc\n");
            &print_tempfile(ACTION,
                     "# chkconfig: $config{'chkconfig'} ",
                     "$start_order $stop_order\n");
            }
        elsif ($config{'init_info'}) {
            # Suse-style init info section
            &print_tempfile(ACTION, "### BEGIN INIT INFO\n",
                     "# Provides: $product\n",
                     "# Required-Start: \$network \$syslog\n",
                     "# Required-Stop: \$network\n",
                     "# Default-Start: ",join(" ", @start),"\n",
                     "# Default-Stop:\n",
                     "# Description: $desc\n",
                     "### END INIT INFO\n");
            }
        else {
            # Just description in a comment
            &print_tempfile(ACTION, "# $desc\n");
            }
        &print_tempfile(ACTION, "\n");
        &print_tempfile(ACTION, "case \"\$1\" in\n");

        &print_tempfile(ACTION, "'start')\n");
        &print_tempfile(ACTION, "\t$config_directory/start >/dev/null 2>&1 </dev/null\n");
        &print_tempfile(ACTION, "\tRETVAL=\$?\n");
        if ($config{'subsys'}) {
            &print_tempfile(ACTION, "\tif [ \"\$RETVAL\" = \"0\" ]; then\n");
            &print_tempfile(ACTION, "\t\ttouch $config{'subsys'}/$product\n");
            &print_tempfile(ACTION, "\tfi\n");
            }
        &print_tempfile(ACTION, "\t;;\n");

        &print_tempfile(ACTION, "'stop')\n");
        &print_tempfile(ACTION, "\t$config_directory/stop\n");
        &print_tempfile(ACTION, "\tRETVAL=\$?\n");
        if ($config{'subsys'}) {
            &print_tempfile(ACTION, "\tif [ \"\$RETVAL\" = \"0\" ]; then\n");
            &print_tempfile(ACTION, "\t\trm -f $config{'subsys'}/$product\n");
            &print_tempfile(ACTION, "\tfi\n");
            }
        &print_tempfile(ACTION, "\t;;\n");

        &print_tempfile(ACTION, "'status')\n");
        &print_tempfile(ACTION, "\tpidfile=`grep \"^pidfile=\" $config_directory/miniserv.conf | sed -e 's/pidfile=//g'`\n");
        &print_tempfile(ACTION, "\tif [ -s \$pidfile ]; then\n");
        &print_tempfile(ACTION, "\t\tpid=`cat \$pidfile`\n");
        &print_tempfile(ACTION, "\t\tkill -0 \$pid >/dev/null 2>&1\n");
        &print_tempfile(ACTION, "\t\tif [ \"\$?\" = \"0\" ]; then\n");
        &print_tempfile(ACTION, "\t\t\techo \"$product (pid \$pid) is running\"\n");
        &print_tempfile(ACTION, "\t\t\tRETVAL=0\n");
        &print_tempfile(ACTION, "\t\telse\n");
        &print_tempfile(ACTION, "\t\t\techo \"$product is stopped\"\n");
        &print_tempfile(ACTION, "\t\t\tRETVAL=1\n");
        &print_tempfile(ACTION, "\t\tfi\n");
        &print_tempfile(ACTION, "\telse\n");
        &print_tempfile(ACTION, "\t\techo \"$product is stopped\"\n");
        &print_tempfile(ACTION, "\t\tRETVAL=1\n");
        &print_tempfile(ACTION, "\tfi\n");
        &print_tempfile(ACTION, "\t;;\n");

        &print_tempfile(ACTION, "'restart')\n");
        &print_tempfile(ACTION, "\t$config_directory/stop ; $config_directory/start\n");
        &print_tempfile(ACTION, "\tRETVAL=\$?\n");
        &print_tempfile(ACTION, "\t;;\n");

        &print_tempfile(ACTION, "*)\n");
        &print_tempfile(ACTION, "\techo \"Usage: \$0 { start | stop }\"\n");
        &print_tempfile(ACTION, "\tRETVAL=1\n");
        &print_tempfile(ACTION, "\t;;\n");
        &print_tempfile(ACTION, "esac\n");
        &print_tempfile(ACTION, "exit \$RETVAL\n");
        &close_tempfile(ACTION);
        chmod(0755, $fn);
        }

    # Add whatever links are needed to start at boot
    &enable_at_boot($product);
    print STDERR "Created init script $fn\n";
    }
elsif ($init_mode eq "win32") {
    # Create win32 service
    $perl_path = &get_perl_path();
    &enable_at_boot($product, $ucproduct, $perl_path." ".&quote_path("$root_directory/miniserv.pl")." ".&quote_path("$config_directory/miniserv.conf"));
    }
elsif ($init_mode eq "rc" || $init_mode eq "upstart" ||
       $init_mode eq "systemd") {
    # Create RC or upstart script
    &enable_at_boot($product, $ucproduct, "$config_directory/start",
            "$config_directory/stop",
            undef,
            { 'fork' => 1,
              'pidfile' => $var_directory."/miniserv.pid" });
    }

$config{'atboot_product'} = $product;
&save_module_config();


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0116 ]--