!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/sbin/   drwxr-xr-x
Free 52.27 GB of 127.8 GB (40.9%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     wpa_cli (33.77 KB)      -rwxr-xr-x
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
ELFp4<4 (444444uuuuHHH  PtdjQtd/lib/ld-linux.so.2GNU	<(, <>KgUa2wr1vg/ &50g=r}yXPL_p>B>t[)=I<IBFJ2::=ipUJkbFr5P9;gW(z=T	XP	|X	M:5Mq5.^^^^^_8_<_h_P	__T	____X	̿п0Կؿܿٳii
ii
ti	ii
+P	>T	=X	?	

 $(,04 8!<"@#D$H%L&P'T(X)\*`+d,h-l.p/t0x1|23456789:;Ux75%%h%h%h%h%h %h(%h0%h8p%h@`%hHP%hP@%hX0%h` %hh%hp%hx%h%h%h%h%h%h%h%hp%h`%hP% h@%$h0%(h %,h%0h%4h%8h%<h%@h%Dh%Hh %Lh(%Ph0%Th8p%Xh@`%\hHP%`hP@%dhX0%hh` %lhh%php%thx%xh%|h%h%h%h%h%h%hp%h`%hP%h@1^PTRh@hPQVh0_US[xtzX[ÐUS=`	u?-X\	9v&\	\	9w`	[]Ít&'Utt	$ÐU1]t	
U$^ÍU]G&UD$P$D$D$1UD$$D$m1É'UD$$D$=Ít&'U(uƉ]}u1]u}]á$o4$e|<$	tȡt$D$XD$D$D$|$$b$:*$		zvU8$U]u}ωEƋE$<$T44$køtME|$D$D$D$ED$t$$D$D3$=$1]u}]ÍU$]Ӊu8\$4$D$X]u]ÍUWVSÃ8<^$t<+${0+$$+D$$T$|sD$D$
D$<$tED$|$$t*Ct<=qu<=_-]"t]ufD$t$${U*<$]]-|x	uk[^_]ÍvD$$D$)x	t;|	tx	|	h	d	[^_]Px	غp$/t	U< zn< ueD$>$xXt&t&'UE]t&U	t
p	u$o&	Ív$(&	p	Ѝ&Uh		t'$6	$%up	$
Ít&'UWVS,eE1	Dž4$`"~~DžD$\$4$"Ƅuatt$
,$TDž4$!4$!x;Ee3uB,[^_]ÉG$4$!y$<벍t&t&'U8ueE1	]Ӊ}υ$Dž~T$D$T$\$4$D$!tn1t.D$$ƄD$1Ue3u
]u}]$tω\$D$$W밉\$D$$8두U	t21ɺu2	t1ɺ|E
	u$<S뻍U]bfUVSueU1ҋE}uWtD$
D$D$D$D$$	ډEUe3uİ[^]$N&'UWVSLUEe
M1Ʌ҉EpXHPx\$$T$t$(L$ |$D$D$D$D$D$$1EUe3u_L[^_]u
xuiZtK<0$tzv'UE]
U(E]
UE~i^h	$qE$Th	:tih	D$U$D$I	$| u+p	1$4EJQ1$1áh	D$$D$1ÍUEU]]uEeE1B}taL$]D$zD$@D$D$D$@$EEUe3uW]u}]Ðt&ssr8t$$$rUE]
UE]
UE]
UE]
UE]
UVS0Ee
M1ɋuUtlupBD$D$D$D$D$D$$=wAډUe3u?0[^]Í1$p$UVS0Ee
M1ɋuUtmuqBD$BD$D$D$D$D$D$$=w;ډ5Ue3u90[^]1$J$7t&'UVSPueU1ҋUE~Q]D$$D$ D$D$D$ $ډEUe3uP[^]$FU6E]?
UVSPMeU1ҋuE~Q]D$BD$ D$D$D$ $NډEUe3uP[^]$\UVSP]eU1ҋuE~Q]D$UD$ D$D$D$ $ډEAUe3uP[^]$bUVSPueU1ҋUE~Q]D$gD$ D$D$D$ $.ډEUe3uP[^]$vUyE]o
UWVS<EUeE1}E)ӉD$D$D$\$$`x\9~X19~H;}thË)D$D$D$D$t$$y$Ue3u1<[^_]ËW$ -'UWVS<EUeE1}E)ӉBD$D$D$D$D$\$$xs9~o}9~L;}tlË)D$D$D$D$t$$yt&$dUe3u1<[^_]Ë$d)'UWVS<EUeE1}E)ӉBD$D$D$D$D$\$$xs9~o}9~L;}tlË)D$D$D$D$t$$Iyt&$Ue3u1<[^_]Ë$m'UWVS<EUeE1}E)ӉBD$D$D$D$D$\$$Wxs9~o}9~L;}tlË)D$D$D$D$t$$yt&$Ue3u1<[^_]Ë7$i
'UWVS<EUeE1}E)ӉBD$D$.D$D$D$\$$xs9~o}9~L;}tlË)D$D$D$D$t$$yt&$DUe3u1<[^_]Ë$4	'UWVS<EUeE1}E)ӉBD$D$JD$D$D$\$$xs9~o}9~L;}tlË)D$D$D$D$t$$)yt&$bUe3u1<[^_]Ëw$M'UWVS<EUeE1}E)ӉBD$D$}D$D$D$\$$7xs9~o}9~L;}tlË)D$D$D$D$t$$yt&$Ue3u1<[^_]Ë$I'UVS0ueU1ҋE}uZD$D$D$D$D$$	=w2ډUe3u00[^]$0$8&UVS0ueU1ҋE}uZD$D$D$D$D$$Y=w2ډUe3u00[^]$h$&UVS0ueU1ҋE}uZD$D$D$D$D$$=w2ډ)Ue3u00[^]$G$4&UVS0ueU1ҋE}uZD$D$D$D$D$$=w2ډyUe3u00[^]$$((&UBE]
UNE]
UTE]
UVS0Ee
M1ɋuUtlBD$D$[D$D$D$D$$=wPډXUe3uN0[^]f$t$<h1$0X$eE'U{E]
UE]
UE]
U$t$|$M]E~90󦹍8ut&؋t$ʋ$|$]9fUWVS,EUM܅[9<$1EEE	t;E|$$D$u|$$RuEuŃ}|$D$t$H5tY14tGU܋$\$4$D$_uщt$D$$4u$
),[^_]Ë]u(|$D$$,[^_]ÉuE܃D$ED$U$UR,[^_]ËE܋8멍&'U%l	t$
.&'L$qUu1M]}eE1yDž uoD$|$$(B4v/cUe3LM]u}]a$l	$%
ADž {X	l	lX	d	]5X	R1th	$X	$h	"X	1$p-;P	Džr4$U		?D$P$dD$P$PD$0$<u	d	t	$p	 Bd		,$((8(&5t	1 󫋕8DžDžD$8D$D$D$($;8t>,1ҹ5t	\1h	$Gt&DžD$D$ D$D$D$,$x"v!$1g8"$1FfDžD$$h	tGh		u$vDž뜡1$$$$qP
tuPp9u:Ft9u:Fu:Ftt$D$$Q4$)Ƌ$$)5h	d	BD$$D$D$Dž$`	11F$JD$$T	D$D$$$	S	11t <
<
u1t&< tL
tA>"tu< u< tD$"4$tpȅt	9t$t	\$$P	)á	]*1$t&U$UE]ÍU1ul ]]}EEƒlED$D$D$t$$QЃl]u}]ÍUS]D$D$ED$E$4x1[]ÍUWVSuD$ED$ED$U$.$lt&E1 EUƒlED$D$D$\$U$6EȉʃlD$Ut$$D$7|=t4><u/Et&JE;)T$4$U*E1ҁĬ[^_]$Ĭ[^_]ÁĬ[^_]ÍUHeE1҉u]}uE]$E
D$D$\$D$t$5yUe3u]u}]Ít&}tԍv+18tԍ&'U1҉E]2fUE]
US]C$+$][]dt&UWV1S$yD$D$$D$D$$+	~fFC	u\$D$D$D$D$lD$<$uFD$nD$$lxmEfFrD$D$lD$Ft$PFrD$nD$$x
[^_]Ë$O<$4$1-؋$14$1U1]É'U]Ít&'UE$D$Ðt&U(E]u1}}D$$9tlD$D$$$CD$D$$$tƉ\$D$4$D$$w]u}]Ð&U]&U]&U]&U(D$u}}]$Zt<D$E|$D$$y4$19]u}]$t&UEt]]Í&'US]D$$uVtJ$D$t4D$D$$D$$+1[]Ív1[]$ܐt&UH}]Uu]}uMɍv};E}<EĹE}1}ĉ]Ѝ]űEM<$-lE؍BEԋEMĉEF$Et@$/$ut*$)U)‹E 1]u}]1܍vUS$]ED$$sUUS$[]fUSE]uu[]Ðt&][]v$׍U8E]u}E8/u]u}]t&Et&<$t2|$$Vu1;4$"uE}u1]u}]D>$UE$UTEU$t=E\$<$D$U/UT$U$T$ED4$$qU]Ít&'UWVS^QE/ E )E}Ut+1ƍED$ED$E$9}u߃[^_]Ë$ÐUStЋu[]US[øDY[set_network variables:
  ssid (network name, SSID)
  psk (WPA passphrase or pre-shared key)
  key_mgmt (key management protocol)
  identity (EAP identity)
  password (EAP password)
  ...

Note: Values are entered in the same format as the configuration file is using,
i.e., strings values need to be inside double quotation marks.
For example: set_network 1 ssid "network name"

Please see wpa_supplicant.conf documentation for full list of
available variables.wpa_cli [-p<path to ctrl sockets>] [-i<ifname>] [-hvB] [-a<action file>] \
        [-P<pid file>] [-g<global ctrl>]  [command..]
  -h = help (show this usage text)
  -v = shown version information
  -a = run in daemon mode executing the action file based on events from
       wpa_supplicant
  -B = run a daemon in the background
  default path: /var/run/wpa_supplicant
  default interface: first interface found in socket path
%swpa_supplicant is terminating - stop monitoringConnection to wpa_supplicant re-establishedWarning: Failed to attach to wpa_supplicant.Could not read pending message.Connection to wpa_supplicant lost - trying to reconnectNot connected to wpa_supplicant - command dropped.Invalid INTERFACE_REMOVE command: needs one argument (interface name)Invalid INTERFACE_ADD command: needs at least one argument (interface name)
All arguments: ifname confname driver ctrl_interface driver_param bridge_nameINTERFACE_ADD %s	%s	%s	%s	%s	%sCould not connect to interface '%s' - re-trying
Invalid GET_CAPABILITY command: need either one or two argumentsInvalid GET_CAPABILITY command: second argument, if any, must be 'strict'Invalid GET_NETWORK command: needs two arguments
(network id and variable name)Invalid SET_NETWORK command: needs three arguments
(network id, variable name, and value)Invalid REMOVE_NETWORK command: needs one argument (network id)Invalid DISABLE_NETWORK command: needs one argument (network id)Invalid ENABLE_NETWORK command: needs one argument (network id)Invalid SELECT_NETWORK command: needs one argument (network id)Invalid BSSID command: needs two arguments (network id and BSSID)Invalid PASSPHRASE command: needs two arguments (network id and passphrase)Invalid OTP command: needs two arguments (network id and password)Invalid PIN command: needs two arguments (network id and pin)Invalid NEW_PASSWORD command: needs two arguments (network id and password)Too long NEW_PASSWORD command.Invalid PASSWORD command: needs two arguments (network id and password)Invalid IDENTITY command: needs two arguments (network id and identity)Invalid LEVEL command: needs one argument (debug level)Invalid STKSTART command: needs one argument (Peer STA MAC address)Invalid AP_SCAN command: needs one argument (ap_scan value)Invalid PREAUTH command: needs one argument (BSSID)set variables:
  EAPOL::heldPeriod (EAPOL state machine held period, in seconds)
  EAPOL::authPeriod (EAPOL state machine authentication period, in seconds)
  EAPOL::startPeriod (EAPOL state machine start period, in seconds)
  EAPOL::maxStart (EAPOL state machine maximum start attempts)  dot11RSNAConfigPMKLifetime (WPA/WPA2 PMK lifetime in seconds)
  dot11RSNAConfigPMKReauthThreshold (WPA/WPA2 reauthentication threshold
	percentage)
  dot11RSNAConfigSATimeout (WPA/WPA2 timeout for completing security
	association in seconds)Invalid SET command: needs two arguments (variable name and value)Ambiguous command '%s'; possible commands:Failed to connect to wpa_supplicant - wpa_ctrl_openCould not connect to wpa_supplicant - re-tryingwpa_supplicant did not reply to PING command - exitingwpa_cli v0.5.10
Copyright (c) 2004-2008, Jouni Malinen <j@w1.fi> and contributorsThis program is free software. You can distribute it and/or modify it
under the terms of the GNU General Public License version 2.

Alternatively, this software may be distributed under the terms of the
BSD license. See README and COPYING for more details.
commands:
  status [verbose] = get current WPA/EAPOL/EAP status
  mib = get MIB variables (dot1x, dot11)
  help = show this usage help
  interface [ifname] = show interfaces/select interface
  level <debug level> = change debug level
  license = show full wpa_cli license
  logoff = IEEE 802.1X EAPOL state machine logoff
  logon = IEEE 802.1X EAPOL state machine logon
  set = set variables (shows list of variables when run without arguments)
  pmksa = show PMKSA cache
  reassociate = force reassociation
  reconfigure = force wpa_supplicant to re-read its configuration file
  preauthenticate <BSSID> = force preauthentication
  identity <network id> <identity> = configure identity for an SSID
  password <network id> <password> = configure password for an SSID
  new_password <network id> <password> = change password for an SSID
  pin <network id> <pin> = configure pin for an SSID
  otp <network id> <password> = configure one-time-password for an SSID
  passphrase <network id> <passphrase> = configure private key passphrase
    for an SSID
  bssid <network id> <BSSID> = set preferred BSSID for an SSID
  list_networks = list configured networks
  select_network <network id> = select a network (disable others)
  enable_network <network id> = enable a network
  disable_network <network id> = disable a network
  add_network = add a network
  remove_network <network id> = remove a network
  set_network <network id> <variable> <value> = set network variables (shows
    list of variables when run without arguments)
  get_network <network id> <variable> = get network variables
  save_config = save the current configuration
  disconnect = disconnect and wait for reassociate/reconnect command before
     connecting
  reconnect = like reassociate, but only takes effect if already disconnected
  scan = request new BSS scan
  scan_results = get latest scan results
  get_capability <eap/pairwise/group/key_mgmt/proto/auth_alg> = get capabilies
  ap_scan <value> = set ap_scan parameter
  stkstart <addr> = request STK negotiation with <addr>
  terminate = terminate wpa_supplicant
  quit = exit wpa_cli
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License version 2 as
published by the Free Software Foundation.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA

Alternatively, this software may be distributed under the terms of the
BSD license.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:

1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.

3. Neither the name(s) of the above-listed copyright holder(s) nor the
   names of its contributors may be used to endorse or promote products
   derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

%s

%s
%s/%sCTRL-EVENT-CONNECTED WPA_IDWPA_ID_STRWPA_CTRL_DIR[id=CTRL-EVENT-DISCONNECTED DISCONNECTEDCTRL-EVENT-TERMINATING '%s' command timed out.
'%s' command failed.
PINGINTERFACE_REMOVE %sTERMINATERECONFIGUREAvailable interfaces:INTERFACESConnected to interface '%s.
 strictGET_CAPABILITY %s%sSCAN_RESULTSSCANSAVE_CONFIGRECONNECTDISCONNECTGET_NETWORK %s %sToo long GET_NETWORK command.SET_NETWORK %s %s %sToo long SET_NETWORK command.REMOVE_NETWORK %sADD_NETWORKDISABLE_NETWORK %sENABLE_NETWORK %sSELECT_NETWORK %sLIST_NETWORKSBSSIDToo long BSSID command.CTRL-RSP-PASSPHRASE-%s:%sToo long PASSPHRASE command.CTRL-RSP-OTP-%s:%sToo long OTP command.CTRL-RSP-PIN-%s:%sToo long PIN command.CTRL-RSP-NEW_PASSWORD-%s:%sCTRL-RSP-PASSWORD-%s:%sToo long PASSWORD command.CTRL-RSP-IDENTITY-%s:%sToo long IDENTITY command.LEVEL %sToo long LEVEL command.STKSTART %sToo long STKSTART command.AP_SCAN %sToo long AP_SCAN command.PREAUTH %sToo long PREAUTH command.REASSOCIATELOGONLOGOFFSET %s %sToo long SET command.PMKSAMIBverboseSTATUS-VERBOSESTATUSUnknown command '%s'
a:Bg:hi:p:P:v%s

%s

..Selected interface '%s'
Connection established.
Interactive mode
> selectPONG/var/run/wpa_supplicantstatuspingmibhelpinterfacelevellicensequitsetlogonlogoffpmksareassociatepreauthenticateidentitynew_passwordpinotppassphrasebssidlist_networksselect_networkenable_networkdisable_networkadd_networkremove_networkset_networkget_networksave_configdisconnectreconnectscan_resultsget_capabilityreconfigureterminateinterface_addinterface_removeap_scanstkstart".Ra<ATTACHDETACHOK
/tmp/wpa_ctrl_%d-%drb/dev/urandomCould not open /dev/urandom.daemonw%u
;RHhȥ((@Ȧ`x(xت,(PhHxx(@XرpHh8Xx8hȸ(0HPpXh 8Xph(H(	h@	xX	|	X				
$
8D
H\
Xt
x
(
8
H
X
,Hh|PAD
0pAB
H	AB
`0AB
xЏ'AB
%AB
0AB
HHАAB
R:AB
IEUAB
C( AB
@0IAB
XUAB
 p%AB
ACI AB
IUE0dAB
AG
AB
HP&AB
I(AG
@AG
XAB
pAB
O]AG
AG
AG
AG
AG
 AB
H(AB
HHAB
EhPAG
pAB
EAB
EAB
E AG
@#AB
IpSAB
I8ТSAB
IX0SAB
IxSAB
ISAB
IPSAB
IAB
H`AB
HAB
H8AB
HXpAG
pAG
AG
ЬAB
HAG
ЭAG
AG
^AB
N(pAB
FH"AB
,`0D	FAB
IKPAB
p
AB
 AD
INF :AB
D`jAB
I йAD
SK@AD
XAG
p,AB
DKAB
BF@AD
PAB
`AB
AB
LE0	AB
,@	AB
DP	AB
\`{AB
QF|AB
AB
DAB
SF.AB
D:AB
D	 AB
O
oh	
5 oPoo·oo(ooƊp kg&P̯e :lòS0@E0pٳ` p 8`ppPXApƲPW ͲjVp0iK0W0W nt޲ eCК˲>p&>EJЭNЏS]ckPpЬtzpP0Тp@ pP)5 AMXbo~P` d__gmon_start__libc.so.6_IO_stdin_usedsocket__printf_chkexitreaddirfopenstrncmpoptindstrrchr__strdupperrorconnectclosedirftellsignalputs__stack_chk_faildaemonunlinkputcharselectstdingetpidgmtimefgetscallocstrlensendmemsetstrstr__errno_locationbindfseekgetoptunsetenv__fprintf_chkrecvmemcpyfclose__strtol_internalmallocstrcasecmpopendiroptargalarmsystem__snprintf_chkstrncasecmpusleepgetcwdfreadgettimeofdaylocaltimestrchrmktime__libc_start_mainrandomsnprintffreeGLIBC_2.4GLIBC_2.1GLIBC_2.3.4GLIBC_2.0/lib/ld-linux.so.2wpa_cli.debug?ELFp4Dz4 (444444uuuuHHH  PtdjQtd44HH !ohh0+35;o·HoPPPW	 `	i
d
oppx3uA{B(jl(	uuuuvvw P	Py8Pydy.shstrtab.interp.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rel.dyn.rel.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.dynamic.got.got.plt.data.bss.gnu_debuglink.dynbss.gnu.liblist.gnu.conflict.gnu.prelink_undo44HH !ohh0+o(;o·HoPPPW	 `	i
d
oppx3uA{B(jl(	uuuuvvw P	Py\	\y,3	yH{{D(

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0055 ]--