!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/sbin/   drwxr-xr-x
Free 52.24 GB of 127.8 GB (40.88%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     rpc.gssd (46.13 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELF4$4 (444444,z,z$37HHH  PtdtttQtd/lib/ld-linux.so.2GNU	l	lCHlrzTqOAqp˳ՐӺ|CEDQK.*LqXF/BzZuj|<Ikgz"T\vD[P " D3ciFq$g}HtvDXvX(L?"P0&2f:&kv'A+WU^
e?I!F6O66):f=&&wAC+k:WJcFV@`!VcDQds s4(9za8TqoZ"8WQzSMY|t= t$ t^{$ L )h
OT^
librpcsecgss.so.2__gmon_start___Jv_RegisterClassesauthgss_get_private_data_finirpcsecgss_clntudp_bufcreateauthgss_set_debug_levelrpcsecgss_clnttcp_createauthgss_create_defaultrpcsecgss_clnt_spcreateerrorauthgss_free_private_datalibgssapi.so.2gss_release_namegss_release_credgss_acquire_credgss_free_lucid_sec_contextgss_release_buffergss_nt_service_namegss_export_lucid_sec_contextgss_indicate_mechsgss_display_namegss_release_oid_setgss_set_allowable_enctypesgss_display_statusgss_import_namelibdl.so.2libgssapi_krb5.so.2error_messagelibkrb5.so.3krb5_unparse_namekrb5_kt_resolvekrb5_kt_get_namekrb5_kt_start_seq_getkrb5_get_init_creds_opt_initkrb5_kt_next_entrykrb5_get_init_creds_opt_set_address_listkrb5_free_unparsed_namekrb5_free_cred_contentskrb5_cc_initializekrb5_cc_resolvekrb5_kt_closekrb5_init_contextkrb5_cc_destroykrb5_kt_end_seq_getkrb5_cc_store_credkrb5_copy_principalkrb5_get_init_creds_keytabkrb5_free_contextkrb5_cc_closelibk5crypto.so.3libcom_err.so.2libc.so.6_IO_stdin_usedexitgai_strerrorstrncmpstrrchr__strdupperrorstrncpysignaltimedaemonreallocabortalphasort64callocstrlensigemptysetopenloggetaddrinfomemsetstrstr__errno_locationchdiropen64read__syslog_chkgetoptpoll__fprintf_chkgethostbyaddrinet_addrfputsmemcpy__strtol_internal__vsnprintf_chkmalloc__strndup__strncpy_chk__xstat64sscanfoptargstderr__snprintf_chksetfsuidstrncatsigactiongeteuid__memcpy_chkstrchrscandir64__ctype_tolower_loc__cxa_finalize__libc_current_sigrtminfreeaddrinfofcntlerrx__strcat_chkstrcmp__libc_start_mainsetenvwritefree__stack_chk_fail_edata__bss_start_endkrb5oidkeytabfilespkm3oidpipefsdirpollarraypollsizeclnt_listgssd_credsccachedirlibgssapi_CITI_2krb5_3_MITGLIBC_2.1.3GLIBC_2.3GLIBC_2.4GLIBC_2.2GLIBC_2.1GLIBC_2.3.4GLIBC_2.0	
 R(
4 )0si	
ii
	ii
ii
 ii
*ti	4ii
@(,08<@DLX $46HQP\Tbhlptx|	

āȁ́Ёԁ؁܁ !"#$%&'()*+,-./0 1$2(3,4054788<9@:D;H<L=P>T?X@\A`BdChDlEpFtGxH|IJKLMNOPRSTUVWXYZ[Ă]Ȃ^̂_Ђ`Ԃa؂b܂cdefghijkUXGhhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhhhplh`phPth@xh0|h hhhhhhhh h(h0h8ph@`hHPhP@hX0h` hhhphxhhhhhhhhph`hPh@h0h hhhhhhhh  h($h0(h8p,h@`0hHP4hP@8hX0<h` @hhDhpHhxLhPhThXh\h`hdhhhplh`phPth@xh0|h hhhhhhhh h(1^PTR"\d$P4PQV_$ÐUS[(dt6X[ÐUVSd1uWt$)p19v119wƃ1[^]ÍUS.Ãctt$҃[]Ë$ÐU]M;cu};uy9҉ыpt(D$$2	]u}]ËED$E$ߐU8]uΉ}]òbE܍Q9w9sf]u}]ËE܉Fvuq9w9wщEAU܉2U9rET$4$D$U܋E1뢍'UWVS!bE}E$EeE1lD$E؍U܉D$EU$D$D$u؋tPD$D$$D$$Ue3Č[^_]ËFtiPD$$nE؋MD$E$D$1tt$D$$+`EEEEED$$9G,EԍQ9‰E9
FAEE9EU;U1AUAEUԋU99EEAUEPUPUPEQUEԋE99UF AUԍQ ;Uq9UhF$AA$EE9EUM;UDFA UA(;EUԋVU&9EQ$EԋUU̍Q,;U9EA(ЉU9EED$D$A$D${EEԋF,D$F($D$D$AF(EF,$ED$uEEtkMV0ɉUMt2EEMU
U
EEM9Mu܍UԉUUMEE$rfD$$Gt$KE$-T$D$E܉D$$D$$/T$D$E܉D$$<m:E$UN(E,E1+G_U(])~]uu}}E|$4$u
Etu,D$$f]u}]Ít&|$4$D1UWVSE\u}EEeE1EED$E|D$EEEEE|$D$t$E$EEEED$||$}D$<$D$ED$ZuzED$E$D$ED$pD$KMu4UtE<$D$>Ee3Ĝ[^_]ÍvED$E$븋EuD$D$D$D$D$4$(Nt$u҉D$D$D$D$4$u7fUX]E;[uu}E$EED$E̋4$D$ED$t71T$D$ED$$1]u}]Ðt&}4$D$D$D$ED$D$D$D$|uẺ<$D$1댋1t$D$ED$$+E؉EЉD$ED$<$D$uE$D$E؉D$D$"EЉ<$D$#hU8]EfûYu}92}
]u}]Í$2<$UUT$UD$D$)T$t$$x9~J<$|8
u2tU<$D$UD$D$<$]D$D$<$2u@|$D$D$$US^óXUE҉22uED$D$$}[]ÐUScX$D$x[]fL$qU8]$Xu1M}yEEqEEE|$4$D$3Fdw&D$D$D$$$D$D$!$
!gTD$$'&EAE8D$D$$	 D$$D$D$$g!:D$$t&E4$)T$|T$$[7D$/4$tpE4$D$ED$kE$EuD$$xwt$$t$$D$$C D$$D$$]D$$G&USSUyE$D$D$\$@gUU]ǁ1ÍUWVSThhl$9Et$D$$D$<$pu9$|$$D$\D$$p[D$
4$D$tD$D$4$\'
&1t5ǃ1gt㍃|D$$
$D$D$$}t0u`fF(fDmF0x8Dft&t
ǃ1ubF0fD.6$F(xDftt
ǃ1t4$_4$88D$$$U1SJßRtf|u1t[]ÍD$$[]Í&U]u)Rx$tx(tK~,t~0t1]u]fF0HuJF0V,fH]1u]Í@(u7F(V$fH돍D$$끍D$$a'UWVSQQEUDžPuDžTLHeE1DžDž|U$\[E\$D$8T$D$}DžDžDžDž}E$D$hD$tD$${t$\t:\$;Et'\U$D$T$D$Ue3[^_]ËDžFD$F $D$D$l@@1DžpV l
9u:B9u(:Bu:Bu:B	ED$FT$$D$D$~UDžT$$)UD$$T$):B;:B+DžtDžxVD$@X$@+X?v]XD$$T$9DžtDžx뗋E$D$D$jD$XUD$D$@D$e+~D$D=@DD$T$F$uN	A[~D$F $D$ D$\)$D$F$D$D$)X$D$D$mD$DžPPDžTTD$D$D$T$FD$FD$A$T:$FDž$D$dD$eD$F<$D$L1:HD$D$D$FD$FD$A$xTUT$FD$D$D$D$D$<$<$$D$vD$ED$F$D$8D$eUT$FD$mMFt'D$ET$$D$D$rG<$PdUVS@(UêJt@F0t@Ft$F$t$F,t${Ft$Ft$
Ft$F t$4$[^]USI@D$$/[]ÐUWVS((*IeE1z$	(x,X(x$(`BD$ D$D$ D$-D$4$(Gt1Ue3x[^_]Ð(P(( G GGLHD$4$n@@`D$<D$$@<$}E$40D$E4T$<D$48D$$5D$,|$D$$/<:D$$@$Lt$Pt$qH$YcBuD$ D$D$ D$D$4$D$4$(G$(x,f@uD$ D$D$ D$$D$4$\D$4$(G,Vx,\Etcp8}u׍ED$D$
D$$X(,BD$D$
D$<$)(zBF:4<$D$D$\\$DDtxG=wk4"$t$$D$5D$rD$$\~D$D$$Llj%D04$R<$t$D$2D8|$D$D$D$OD$<D$$<! t€u҃+<D$A$PƉd<! t€uҋ<+<4$|$L$E0$HD\|$D$$UWVS,ÁC<4$.D$4$D$ED$EEEȅ҉U}E؅U1z;uMȋ<$D$uۋEEu1u6tup6uEEȋE؍EM̅UԋMԋEȋ}UЋU܉u21u6FU܉$T$uuЋMȋ1$EE9E~u}~^UUҋUB$D$D$MqtPrMAuEEEEUUȋMȉ$}1<[^_]ËpD$4$F(F0F$F,F҉rM܉2V$|D$$yljFE܉$QU܉<$T$D$.D$F$FtPD$
D$F$D$D$F$toEE3v$D$F$D$5D$`tAFBFXEEpuċMMFA6$L$D$D$MMw$t$$D$sD$$t$$D$UD$sUU&'U8]?eE1uuD$}DžDž$99щ„u	tEt&D$$ЋUe3]u}]Í99„uu99„xp99„LD+$t$D$19
 t&+t&'UH]n=EЉu}UM̍D$E$pEŰ0r4$40ǍP9w9v:t<$vD$$%]u}]ÍvEO9w9wEW9Gw9wM̋AMԉGE̋HG9E؉Mw9{9ƉOnUԋBL$M؉D$$MEEH9M܉U9919#MAT$D$E܉$uuUЉ|$)t$$91<$1&UWVS|;LuEE$D$EED$D$F,E$w`$$D$D$Et$0Ut	B $PUt	B$PL[^_]ËED$4$D$ED$ED$t2E$D$(D$UF,nEЉED$E$(tF}|$D$EЉ$8tOF$D$ED$D$댋F$D$ED$hD$jcF,UM<$
UWVS:\}EEE$D$EEEEEED$D$G$E$*gUE$
PU҉UUUU=GD$$D$ED$D$D$EUD$<$D$ET$D$tuE$?vG$D$ED$<$D$ED$ED$,KẺED$E$u܉t$D$Ẻ$RG$D$ED$@D$Ou$$D$D$!Et$EЅu*Ut	B $PUt	B$P\[^_]fẺ$ɋG$D$ED$hD$UG$OzU$G$D$ED$D$k뺋G$D$ED$D$E딋G$D$@D$&rG$UM4$`UWVSl6,E$5u4w$$t$D$@D$?tkWtED$ET$$uED$E$tËw$$t$D$D$;?ut&E$,[^_]É$E$D$D$ɉ'UWVS}Vë5tvt
$u<$u[^_]Í'UWVSa5AeE1DžDž$ti$~$D$D$4tD$$$Ue3A[^_]Ë|D$$T$D$L$$5M5<Dže&D$$ZtD$0$0T$$?Dž$,0$D$TD$$WtG97,0D$ L$D$$b4$4$D$,t$0D$D$L$G$D$D$ܿ0D$G$D$Džܿ(4$($T$L$D$8D$ܿ8D$0$!D$1T$D$$[G$D$ D$ D$D$D$D$D$D$ U`G$Gk0D$$D$$$L$D$D${12D$$Kܿ҉(V(EGD$D$0$u]D$0L$$$$T$D$$D$?$$T$D$D$mD$$M5tjTD$$L$$2$T$D$D$Dǃ5L$T$$T$L$D$$VܿD$$D$t$$P$D$`D$낋ܿ$D$D$@xt=ܿ$D$D$ܿD$$p}u5 tLP$6t;~<$9$u狍$ |$L$B$QuIܿ$D$D$$LyFFBD$B$FFD$$D$N5t5L$D$$t,$o$L$D$D$5x$D$D$}D$ D$$T$xD$$5\$$T$D$(D$nND$$SܿD$$$^$D$PD$뿍D$D$$ܿD$$Zt&UWVS<Ñ+EE$(5t~E
Et&FtFUE9‰U~
ED$<$dtDNjF$Ut-EE6uE~UE8E[^_]EE[^_]Ív'U]IÞ*uƉD$$D$t$D$$s]u]É'U]>*uu$t$D$L]u]\UWVS	E)eU1$D$ED$D$$D$D$D$`D$$[D$D$D$$ 1=,DžDžKD$U$D$D$T$0$; 40$D$D$0T$D$D$D$$D$D$$D$T$\D9E<%=D$$T$0$苿; $qtgD$D$D$8D$T$D$$$[X$ҾfED$D$D$D$CD$T$D$$UE$T$D$8D$T$Ee3F	[^_]Ë$D$D$tD$0$D$D$Nu>0D$`$D$EDž4t;~o$誽0D$`T$$$D$D$D$0$8뻋$(#&'US%D$E$V[]Ð&UX]Ev$}uuD$EEED$D$D$}D$D$D$4$nu@ED$ED$|$4$D$u<EUP1]u}]ËE|$T$D$$ϋE|$T$D$P$U]Ít&'UWVSl#迸E)E}Ut+1ƍED$ED$E$9}u߃[^_]ÐUSS#UVSݿ2#p@tЋu[^]ÐUS["Y[ERROR: attempting to serialize context with unknown/unsupported mechanism oid
DEBUG: serialize_krb5_ctx: lucid version!
ERROR: unsupported lucid sec context version %d
prepare_krb5_rfc1964_buffer: serializing keys with enctype %d and length %d
ERROR: failed serializing krb5 context for kernel
ERROR: prepare_krb5_rfc_cfx_buffer: not implemented
WARN: failed to free lucid sec context
serialize_krb5_ctx: prepare_krb5_*_buffer failed (retcode = %d)
gss_export_lucid_sec_contextUnable to obtain list of supported mechanisms. Check that gss library is properly configured.
ERROR: GSS-API: error in %s(): %s - %s
Unable to obtain credentials for '%.*s'
(0x%08x)gss_import_namegss_acquire_cred*H+...
Received SIGHUP... Ignoring.
pipefs path name too longkeytab path name too longccachedir path name too longfvrmp:k:d:/nfsProblem with gssapi libraryforkgssd_run returned!
exiting on signal %d
usage: %s [-f] [-v] [-r] [-p pipefsdir] [-k keytab] [-d ccachedir]
xDdDDDDDDD֨DͨDDDĨERROR: failed to open %s: %s
ERROR: couldn't update client list
WARNING: error return from poll
ERROR: No pollarray slots open
ERROR: Too many spkm3 clients
WARNING: Failed to setfsuid for user with uid %d
creating context using fsuid %d (save_uid %d)
ERROR: Invalid authentication type (%d) in create_auth_rpc_client
WARNING: Failed while limiting krb5 encryption types for user with uid %d
creating %s client for server %s
WARNING: unrecognized protocol, '%s', requested for connection to server %s for user with uid %dWARNING: servicename (%s) not formatted as expected with service@hostWARNING: service portion of servicename (%s) is too long!WARNING: Error from getaddrinfo for server '%s': %sWARNING: No address information found for connection to server %s for user with uid %dWARNING: can't create tcp rpc_clnt for server %s for user with uid %dWARNING: can't create udp rpc_clnt for server %s for user with uid %dERROR: requested protocol '%s', but got addrinfo with protocol %dcreating context with server %s
WARNING: Failed to create %s context for user with uid %d for server %s
WARNING: Failed to restore fsuid to uid %d from %d
RPC server: %127s
service: %127s %15s version %15s
address: %127s
protocol: %15s
ERROR: can't resolve server %s name
ERROR: failed to read service info
ERROR: can't malloc clnt_info: %s
Failed to write error downcall!
WARNING: failed reading uid from spkm3 upcall pipe: %s
WARNING: Failed to create spkm3 context for user with uid %d
WARNING: Failed to obtain authentication data for user with uid %d for server %s
WARNING: Failed to serialize spkm3 context for user with uid %d for server
WARNING: failed reading uid from krb5 upcall pipe: %s
WARNING: Failed to obtain machine credentials for connection to server %s
WARNING: Failed to create krb5 context for user with uid %d with credentials cache %s for server %s
WARNING: Failed to create krb5 context for user with uid %d for server %s
WARNING: Failed to serialize krb5 context for user with uid %d for server %s
WARNING: Failed to create krb5 context for user with uid %d with any credentials cache for server %s
ERROR: Too many krb5 clients
tcpudp%s/krb5%s/spkm3%s/infoERROR: can't open %s: %s
%s@%sERROR: can't chdir to %s: %s
ERROR: can't scandir %s: %s
clntdestroying client %s
doing error downcall
doing downcall
Failed to write downcall!
handling spkm3 upcall
handling krb5 upcall
ERROR: %s while initializing krb5
WARNING: %s while resolving credential cache '%s' for destruction
WARNING: %s while destroying credential cache '%s'
ERROR: %s while initializing krb5 in gssd_refresh_krb5_machine_creds
ERROR: %s while resolving keytab '%s'
ERROR: %s while beginning keytab scan for keytab '%s'
WARNING: Skipping keytab entry because we failed to unparse principal name: %s
Processing keytab entry for principal '%s'
ERROR: could not allocate storage for principal list entry
ERROR: %s while copying realm to principal list entry
ERROR: %s while copying principal to principal list entry
We will NOT use this entry (%s)
WARNING: %s while ending keytab scan for keytab '%s'
ERROR: No usable keytab entries found in keytab '%s'
Do you have a valid keytab entry for %s/<your.host>@<YOUR.REALM> in keytab file %s ?
Continuing without (machine) credentials - nfs4 mounts with Kerberos will fail
INFO: Credentials in CC '%s' are good until %d
ERROR: Unable to get keytab name in gssd_get_single_krb5_cred
WARNING: %s while getting initial ticket for principal '%s' from keytab '%s'
ERROR: no storage to duplicate credentials cache name
ERROR: %s while opening credential cache '%s'
ERROR: %s while initializing credential cache '%s'
ERROR: %s while storing credentials in '%s'
Using (machine) credentials cache: '%s'
ERROR: No usable machine credentials obtained
using environment variable to select krb5 ccache %s
using %s as credentials cache for machine creds
getting credentials for client with uid %u for server %s
scandir looking for krb5 credentials cachesCC file '%s' being considered
Error doing stat on file '%s'
CC file '%s' matches owner check and has mtime of %u
CC file '%s' is our current best match with mtime of %u
using %s as credentials cache for client with uid %u for server %s
Using keytab file '%s'
not enough memory<unparsable>machinekrb5cc_/tmpMEMORY:%s/%s%s_%sWe will use this entry (%s)
KRB5CCNAME'%s' owned by %u, not %u
'%s' is not a regular file
FILE:%s/%sFILE:%s/%s%ugss_set_allowable_enctypes;!H,ȩPhtHȲس (<XX8xX8<\xx @`(Hx <zR| tAB
FT @pAB
IEdAB
C lAB
FNFȭAB
I hrAB
FQF İAB
FTIAB
A,.AB
A,HD	FAB
FNHx@AB
A̴LB
дLAB
CiAD
CTAB
IAB
C,AB
AFLDOAB
Ahx
AB
IhbAB
C AB
I_\ 4AB
FTAB
C`5AB
C0AB
CPpCAB
Fp	AB
CPAB
C WAB
FN`DAB
FNAB
IP8AB
A ,tAB
FT4h
T^oh	
J\08oooo
    )&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv&6FVfv	GaQa/var/lib/nfs/rpc_pipefs/etc/krb5.keytab/tmprpc.gssd.debuglr.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.got.plt.data.bss.gnu_debuglink44HH !ohhl+3		J;oHoW	`	880ihhdpodAuT^T^{p^p^WttuuPD\\$0 @$ $8

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.007 ]--