!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/libexec/webmin/software/   drwxr-xr-x
Free 49.58 GB of 127.8 GB (38.8%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     do_install.cgi (2.56 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
#!/usr/bin/perl
# do_install.cgi
# Do the actual installation of a package from a file

require './software-lib.pl';
&ReadParse();
&error_setup(&text('do_err', $in{'package'}));

if ($show_install_progress) {
    &ui_print_unbuffered_header(undef, $text{'do_title'}, "");
    }
else {
    &ui_print_header(undef, $text{'do_title'}, "");
    }

@packages = &file_packages($in{'file'});
if (defined(&install_packages) && @packages > 1) {
    # Can install everything in one hit
    &clean_environment();
    $error = &install_packages($in{'file'}, \%in);
    &reset_environment();
    if ($error) { &install_error($error); }
    if ($in{'need_unlink'}) { &unlink_file($in{'file'}); }

    foreach $p (@packages) {
        # Display package details
        ($package, $desc) = split(/\s+/, $p, 2);
        @pinfo = &show_package_info($package);

        # Display new files
        @grid = ( );
        $n = &check_files($package);
        for($i=0; $i<$n; $i++) {
            push(@grid, &html_escape($files{$i,'path'}));
            }
        print &ui_grid_table(\@grid, 2, 100, undef, undef,
                     $text{'do_files'});
        &list_packages($package);
        &webmin_log('install', 'package', $package,
                { 'desc' => $packages{0,'desc'},
                  'class' => $packages{0,'class'} });
        }
    }
else {
    # Must install and show one by one
    foreach $p (@packages) {
        # attempt to install
        print &ui_hr() if ($p ne $packages[0]);
        ($package, $desc) = split(/\s+/, $p, 2);
        &clean_environment();
        if ($show_install_progress) {
            print "<pre>\n";
            $error = &install_package(
                $in{'file'}, &html_escape($package), \%in, 1);
            print "</pre>\n";
            }
        else {
            $error = &install_package(
                $in{'file'}, &html_escape($package), \%in);
            }
        &reset_environment();
        if ($error) { &install_error($error); }
        if ($in{'need_unlink'}) { &unlink_file($in{'file'}); }

        # display information
        @pinfo = &show_package_info($package);

        # Show files in package, if possible
        $n = &check_files($package);
        if ($n) {
            @grid = ( );
            for($i=0; $i<$n; $i++) {
                push(@grid, &html_escape($files{$i,'path'}));
                }
            print &ui_grid_table(\@grid, 2, 100, undef, undef,
                         $text{'do_files'});
            }
        &list_packages($package);
        &webmin_log('install', 'package', $package,
                { 'desc' => $packages{0,'desc'},
                  'class' => $packages{0,'class'} });
        }
    }

&ui_print_footer("", $text{'index_return'});

sub install_error
{
print "<b>",&text('do_efailed', $error),"</b><p>\n";
print $text{'do_efailedmsg1'},"<p>\n";
if ($in{'need_unlink'}) {
    print &text('do_efailedmsg2',
        "delete_file.cgi?file=".
        &urlize($in{'file'})),"<p>\n";
    }
print &ui_hr();
&ui_print_footer("", $text{'index_return'});
exit;
}


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0094 ]--