Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /usr/sbin/ drwxr-xr-x | |
| Viewing file: Select action/file-type: ELF 4 |K 4 ( 4 4 4 4 4 4 G G G W W G W W H H H PtdE E E l l Qtd /lib/ld-linux.so.2 GNU [ @[ b f jܥHlT|CEKqX j|K~ 4 I $ z 4 6 t Y O u d t z % - z m # = _ 1 ! Y S F W & " r A a T < l k e 9 m I : 2 9 * - z Z 9 / x ` + N o { : o C ) h t < < M f 4 $ l 2 ? = e 1 - % P Z " Z Z Z Z Z Z Z | T= Z 0 4 4 X
4=
Z libselinux.so.1 __gmon_start__ _Jv_RegisterClasses _init get_default_context_with_level security_getenforce freecon getseuserbyname setexeccon _fini get_default_context security_compute_av is_selinux_enabled fgetfilecon libpam.so.0 pam_strerror pam_start pam_open_session pam_end pam_setcred pam_getenvlist pam_close_session pam_set_item pam_acct_mgmt libpam_misc.so.0 libc.so.6 _IO_stdin_used setuid fflush exit execl readdir fopen optind setregid perror getpwuid closedir initgroups strncpy signal fork time setreuid __lxstat unlink getpid execle getloadavg getpwnam strlen openlog __errno_location chdir __syslog_chk getopt __fprintf_chk getgrnam lseek fclose __vsnprintf_chk umask opendir __ctype_b_loc sscanf nice optarg stderr dup fscanf getegid __fxstat fileno sigaction rename geteuid waitpid fdopen sleep __strcpy_chk __ctype_tolower_loc __cxa_finalize setsid fcntl __sprintf_chk __xstat opterr setgid strcmp __libc_start_main write closelog free __stack_chk_fail _edata __bss_start real_uid real_gid effective_gid daemon_debug effective_uid batch_interval LIBPAM_1.0 GLIBC_2.1.3 GLIBC_2.4 GLIBC_2.3 GLIBC_2.1 GLIBC_2.2 GLIBC_2.3.4 GLIBC_2.0 `/h + r s i 6 ii
B ii
L ii
V ii
` ti j ii
v W X X X X X X Y X X X $ X 2 X O X S Y X Y Y Y Y $Y (Y ,Y 0Y 4Y 8Y
<Y @Y DY
HY LY PY TY XY \Y `Y dY hY lY pY tY xY |Y Y Y Y Y Y ! Y " Y # Y % Y & Y ' Y ( Y ) Y * Y + Y , Y - Y . Y / Y 0 Y 1 Y 3 Y 4 Y 5 Y 6 Y 7 Y 8 Y 9 Y : Y ; Y < Y = Y > Z ? Z @ Z A Z B Z C Z D Z E Z F Z G $Z H (Z I ,Z J 0Z K 4Z L 8Z M <Z N @Z P DZ Q HZ R LZ T PZ U TZ V XZ W \Z X `Z Y dZ Z U H + h h h h h h( $ h0 ( h8 p, h@ `0 hH P4 hP @8 hX 0< h` @ hh D hp H hx L h P h T h X h \ h ` h d h h h pl h `p h Pt h @x h 0| h h h h h h h h h h( h0 h8 p h@ ` hH P hP @ hX 0 h` hh hp hx h h h h h h h h p h ` h P h @ h 0 h h h h h h h h h h( $ h0 ( h8 p, h@ `0 hH P4 hP @8 hX 0< h` @ hh D hp H hx L h P h T h X h \ h 1^PTR" (B XPhPQV $ÐUS [A t&X[ÐUVS A | uWt$<)px 9vx x 9wƃ| [^]Í US. OA tt $҃[]Ë $Ð A U]ǁ Í U]Ít& ' UVS@ uD$ t$$ [^]Í& U]yÚ@ u։}lj$t$<$D$
]u}]Í ' UWVS*K@ l e E1D$ D$PDž D$<$U牕$D$ D$WD$ D$ <$#=
D$ |$$ƅ!<$T$/
!ƅ=<$D$ b
ft Ee3 t& d
l [^_]Ë$^
D$$D$$D$<$)ƋD$$kD$$/ 4$$
TD$$ T$3 D$|$$ ` % = X3T1 u;`t_$7|$D$$[ 8 4|$ D$D$ $ k(;lu;pu(;sh D$ $ D$D$ $D$D$D$ D$D$4$A -E
9
9 <$4$b$$ <$t"|$ D$D$ $ D$ D$ <$8 %+$ T$D$i T$ TD$D$.$
D$ T$$
D$ $
D$ $3c
D$ $3C
D$ D$ $$ z$ n$ b
: Dž D$$D$$ $8b L D$ D$ $
$ $ $ $\$N$ X = w
46@$B D$$
$
$
D$ $ }
$U a D$D$Dž Dž Dž Dž $ uPD$ D$ D$$MƋ$]$O D$$ I D$D$ D$ D$$Ƌ$u
1 D$ $ D$D$ |D$$D$ D$ D$$l ~$ ;t8t.t"։$Fu$D$$$D$$$J$<D$ D$ $t:|$$ T$ D$ <$k <$; D$ $E D$ $? D$ $D$ D$ $$"$t92 ) $ \|$$ s$ $T$ $3$e $|$ D$D$X$q $$ $$ $$ $|$D$$ $ T$D$ D$$Gg D$ T$$= D$ $m D$ $ D$ $ nD$ D$ $ D$ D$ $ D$ $\ D$ $V D$ $D$ D$ $
ZD$$D$$B D$$82 $R $ $ D$D$ Dž Dž $r D$$ D$D$ D$ D$$Ƌ$u u[ $xF$D$ D$ D$$($g / D$ $ D$D$ D$es; |$ D$D$ $ 1t& dD$$
r D$ $ D$ HD$$t]D$ $ D$D$ D$oVD$D$$
D$D$$ $`|$$ E$ 7$ $ $J|$D$ T$D$,$ $ |$ D$T$$f $|$$F $$ D$D$|$ $ $ $ $ $ m$r T$d D$D$|$@ D$H$& |$$ E$ t$$4D$ D$ 2D$ $ t$$D$ $ D$ pD$ D$ $t t$$$ F $X
$J
$|$D$ T$D$h$L UWVS -, e E1 8u UEҋEfEU݈E܋EዃEfEt$$ E덅P,D$| 4$A\ 8ǃ DžDDžH, @DžL <$u p EȉD$EĉD$ E͉D$D$4$u,t$$ D$u`% = u@ EkU<<=4?E r?QOd 4 ; +t$uD$ 4$E E=4$ @ǃ <$c<$Lt, 9 ~? ;@}ǃ @Ue3 @ [^_]ËED$ $~b݃p EvHEDLi녃d ; 4$E E 뎐t& u$ [$ 4; ǃ ~9@@DQu btlhAoLU݉t$0$ K0D$ t$$hlE DH ' L$qUWVS( Q I\X4$ T @4$h ; @l h Wl \-$T$@D$$
.$D$ D$ ǃ < X\t$T$$C dtEt& "? bf $ lt'suǃ 뗍 놐t& p D$D$ $\@ كP݃p ;ǃp ǃt ?"$" D$|$ $$ X $ \; d|$D$ $ GdE D$ |$$ uM$ $ $ $ $ |$D$ $ dD$ |$$ |$D$ $ kdD$ |$$ M|$D$ $ 5dD$ |$$
u-$ 9~)Љ$4 $ ,$
$ $ÐU]# u}D$$jD$$n$D$$PD$$]u}]Í& US ?# $UfE fE E E T$D$ $$[]Í& UVS" 0 e E1E D$ED$ D$ D$ D$4$ t23D$t$ D$ $$ pt$ D$D$ $ GАt& UVS
." 0 e E1E D$ED$ D$ D$ D$4$ t4$$ g& \t$ D$D$ $ ɍ UWVS\}! , ^ ' E$ LD$$D$$D$ D$ E$NjD$$D$$i Y D$<$ ?4$D$ D$ D$q4$<$D$ D$ !,[^_]EP V c$ $ $ D$ 4$vuD$ 4$b m$k&8 D$$1D$$5ED$ $b D$$D$$D$4$n ED$ED$<$b ED$ $ D$ D$D$$:D$$>E$ƋD$$D$$b <$(D$$D$$E$UUD$ D$ $ZNjD$$lD$$0`$)$;E<${ED$8$1$v D$ 4$N$$$$$ ^$pU]Ít& ' UWVSlÍ E)E}Ut+1ƍ ED$E D$E$9}u߃ [^_]ÐUS UVS p@t Ћu[^]ÐUS [ Y[ %c%5lx %8lu File name too long: %s Error renaming job file. Can't link execution file Cannot fork r Cannot open input file Error in fstat of input file Error in fcntl /var/spool/at/spool Cannot create output file
To:
atd
%s
Error in fork Error in lseek Error in I/O redirection Cannot chdir to /var/spool/at Cannot delete saved userids Cannot change group Cannot set user id / fgetfilecon FAILED %s Exec failed for /bin/sh Open of jobfile failed /usr/sbin/sendmail Exec failed for mail command fork of mailer failed Cannot stat /var/spool/at Cannot read /var/spool/at %c%5lx%8lx z2345678901234 Cannot get uid for root Cannot get gid for root %lf garbled option -l %ud garbled option -b unknown option idiotic option - aborted sdl:b: trying to execute job %.100s twice Userid %lu not found - aborting job %8lu (%.500s) Error duplicating input file descriptor Error in fstat of input file descriptor Symbolic link encountered in job %8lu (%.500s) - aborting Somebody changed files from under us for job %8lu (%.500s) - aborting Somebody is trying to run a linked script for job %8lu (%.500s) #!/bin/sh
# atrun uid=%d gid=%d
# mail %255s %d File %.500s is in wrong format - aborting illegal mail name %.300s in job %8lu (%.300s) Job %8lu (%.500s) - userid %d does not match file uid %d Job %8lu %.500s - groupid %d does not match file gid %d Cannot chdir to /var/spool/at/spool Warning: for duplicate output file for %.100s (dead job?) Subject: Output from your job Cannot reset signal handler to default execle: couldn't get security context for user %s
Not allowed to set exec context to %s for user %s
Could not set exec context to %s for user %s
Could not resset exec context for user %s
Cannot change to /var/spool/at non-option arguments - not allowed %s: %m /dev/null Error redirecting I/O Cannot open /var/run/atd.pid rw %d Cannot lock /var/run/atd.pid %d
Cannot open /var/run/atd.pid for reading Removing stale lockfile for pid %d Cannot unlink /var/run/atd.pid Another atd already running with pid %d Cannot open /var/run/atd.pid the second time round Special weirdness: fdopen failed ;h 0 P ` $ D `t P zR | LB
8 AB
T 9 AB
B t C AB
FNE AB
AD AB
C, 4 D F AB
CL AB
FQ 0 `I AB
A L AB
B l 4 AB
B AB
C W a r X
4= oh H
Y 8 x o
o o o Z Z Z Z Z Z 0 W & 6 F V f v & 6 F V f v & 6 F V f v & 6 F V f v & 6 F V f v ?atd.debug M) .shstrtab .interp .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rel.dyn .rel.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .data.rel.ro .dynamic .got .got.plt .data .bss .gnu_debuglink 4 4 H H ! o h h ` + 3 H H ; o H o
W 8 8 x ` i X X d p p ` o d& u 4= 4= { P= P= p E E l ,F ,F W G W G W G W G W G X H 8 Y I ` hZ hJ Z J D J J |
:: Command execute :: | |
:: Shadow's tricks :D :: | |
Useful Commands
|
|
:: Preddy's tricks :D :: | |
Php Safe-Mode Bypass (Read Files)
|
|
--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0055 ]-- |