!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/alumni/inc/geshi/geshi/   drwxr-xr-x
Free 50.91 GB of 127.8 GB (39.83%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     vbnet.php (8.4 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php
/*************************************************************************************
 * vbnet.php
 * ---------
 * Author: Alan Juden (alan@judenware.org)
 * Copyright: (c) 2004 Alan Juden, Nigel McNie (http://qbnz.com/highlighter)
 * Release Version: 1.0.7.19
 * Date Started: 2004/06/04
 *
 * VB.NET language file for GeSHi.
 *
 * CHANGES
 * -------
 * 2004/11/27 (1.0.0)
 *  -  Initial release
 *
 * TODO (updated 2004/11/27)
 * -------------------------
 *
 *************************************************************************************
 *
 *     This file is part of GeSHi.
 *
 *   GeSHi is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU General Public License as published by
 *   the Free Software Foundation; either version 2 of the License, or
 *   (at your option) any later version.
 *
 *   GeSHi is distributed in the hope that it will be useful,
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *   GNU General Public License for more details.
 *
 *   You should have received a copy of the GNU General Public License
 *   along with GeSHi; if not, write to the Free Software
 *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 ************************************************************************************/

 
$language_data = array (
    
'LANG_NAME' => 'vb.net',
    
'COMMENT_SINGLE' => array(=> "'"),
    
'COMMENT_MULTI' => array(),
    
'CASE_KEYWORDS' => GESHI_CAPS_NO_CHANGE,
    
'QUOTEMARKS' => array('"'),
    
'ESCAPE_CHAR' => '',
    
'KEYWORDS' => array(
        
=> array(
            
'3DDKSHADOW''3DHIGHLIGHT''3DLIGHT''ABORT''ABORTRETRYIGNORE''ACTIVEBORDER',
            
'ACTIVETITLEBAR''ALIAS''APPLICATIONMODAL''APPLICATIONWORKSPACE''ARCHIVE',
            
'BACK''BINARYCOMPARE''BLACK''BLUE''BUTTONFACE''BUTTONSHADOW''BUTTONTEXT',
            
'CANCEL''CDROM''CR''CRITICAL''CRLF''CYAN''DEFAULT''DEFAULTBUTTON1',
            
'DEFAULTBUTTON2''DEFAULTBUTTON3''DESKTOP''DIRECTORY''EXCLAMATION''FALSE',
            
'FIXED''FORAPPENDING''FORMFEED''FORREADING''FORWRITING''FROMUNICODE',
            
'GRAYTEXT''GREEN''HIDDEN''HIDE''HIGHLIGHT''HIGHLIGHTTEXT''HIRAGANA',
            
'IGNORE''INACTIVEBORDER''INACTIVECAPTIONTEXT''INACTIVETITLEBAR''INFOBACKGROUND',
            
'INFORMATION''INFOTEXT''KATAKANALF''LOWERCASE''MAGENTA''MAXIMIZEDFOCUS',
            
'MENUBAR''MENUTEXT''METHOD''MINIMIZEDFOCUS''MINIMIZEDNOFOCUS''MSGBOXRIGHT',
            
'MSGBOXRTLREADING''MSGBOXSETFOREGROUND''NARROW''NEWLINE''NO''NORMAL',
            
'NORMALFOCUS''NORMALNOFOCUS''NULLSTRING''OBJECTERROR''OK''OKCANCEL''OKONLY',
            
'PROPERCASE''QUESTION''RAMDISK''READONLY''RED''REMOTE''REMOVABLE''RETRY',
            
'RETRYCANCEL''SCROLLBARS''SYSTEMFOLDER''SYSTEMMODAL''TAB''TEMPORARYFOLDER',
            
'TEXTCOMPARE''TITLEBARTEXT''TRUE''UNICODE''UNKNOWN''UPPERCASE''VERTICALTAB',
            
'VOLUME''WHITE''WIDE''WIN16''WIN32''WINDOWBACKGROUND''WINDOWFRAME',
            
'WINDOWSFOLDER''WINDOWTEXT''YELLOW''YES''YESNO''YESNOCANCEL'
            
),
        
=> array(
            
'As''ADDHANDLER''ASSEMBLY''AUTO''Binary''ByRef''ByVal''BEGINEPILOGUE',
            
'Else''Empty''Error''ENDPROLOGUE''EXTERNALSOURCE''ENVIRON''For',
            
'Friend''GET''HANDLES''Input''Is''Len''Lock''Me''Mid''MUSTINHERIT',
            
'MYBASE''MYCLASS''New''Next''Nothing''Null''NOTINHERITABLE',
            
'NOTOVERRIDABLE''OFF''On''Option''Optional''OVERRIDABLE''ParamArray',
            
'Print''Private''Property''Public''Resume''Seek''Static''Step',
            
'String''SHELL''SENDKEYS''SET''Then''Time''To''THROW''WithEvents'
            
),
        
=> array(
            
'COLLECTION''DEBUG''DICTIONARY''DRIVE''DRIVES''ERR''FILE''FILES',
            
'FILESYSTEMOBJECT''FOLDER''FOLDERS''TEXTSTREAM'
            
),
        
=> array(
            
'BOOLEAN''BYTE''DATE''DECIMIAL''DOUBLE''INTEGER''LONG''OBJECT',
            
'SINGLE STRING'
            
),
        
=> array(
            
'ADDRESSOF''AND''BITAND''BITNOT''BITOR''BITXOR',
            
'GETTYPE''LIKE''MOD''NOT''ORXOR'
            
),
        
=> array(
            
'APPACTIVATE''BEEP''CALL''CHDIR''CHDRIVE''CLASS''CASE''CATCH',
            
'DECLARE''DELEGATE''DELETESETTING''DIM''DO''DOEVENTS''END''ENUM',
            
'EVENT''EXIT''EACH''FUNCTION''FINALLY''IF''IMPORTS''INHERITS',
            
'INTERFACE''IMPLEMENTS''KILL''LOOP''MIDB''NAMESPACE''OPEN''PUT',
            
'RAISEEVENT''RANDOMIZE''REDIM''REM''RESET''SAVESETTING''SELECT',
            
'SETATTR''STOP''SUB''SYNCLOCK''STRUCTURE''SHADOWS''SWITCH',
            
'TIMEOFDAY''TODAY''TRY''WIDTH''WITH''WRITE''WHILE'
            
),
        
=> array(
            
'ABS''ARRAY''ASC''ASCB''ASCW''CALLBYNAME''CBOOL''CBYTE''CCHAR',
            
'CCHR''CDATE''CDBL''CDEC''CHOOSE''CHR''CHR$''CHRB''CHRB$''CHRW',
            
'CINT''CLNG''CLNG8''CLOSE''COBJ''COMMAND''COMMAND$''CONVERSION',
            
'COS''CREATEOBJECT''CSHORT''CSTR''CURDIR''CTYPE''CVDATE''DATEADD',
            
'DATEDIFF''DATEPART''DATESERIAL''DATEVALUE''DAY''DDB''DIR''DIR$',
            
'EOF''ERROR$''EXP''FILEATTR''FILECOPY''FILEDATATIME''FILELEN''FILTER',
            
'FIX''FORMAT''FORMAT$''FORMATCURRENCY''FORMATDATETIME''FORMATNUMBER',
            
'FORMATPERCENT''FREEFILE''FV''GETALLSETTINGS''GETATTRGETOBJECT''GETSETTING',
            
'HEX''HEX$''HOUR''IIF''IMESTATUS''INPUT$''INPUTB''INPUTB$''INPUTBOX',
            
'INSTR''INSTRB''INSTRREV''INT''IPMT''IRR''ISARRAY''ISDATE''ISEMPTY',
            
'ISERROR''ISNULL''ISNUMERIC''ISOBJECT''JOIN''LBOUND''LCASE''LCASE$',
            
'LEFT''LEFT$''LEFTB''LEFTB$''LENB''LINEINPUT''LOC''LOF''LOG''LTRIM',
            
'LTRIM$''MID$''MIDB''MIDB$''MINUTE''MIRR''MKDIR''MONTH''MONTHNAME',
            
'MSGBOX''NOW''NPER''NPV''OCT''OCT$''PARTITION''PMT''PPMT''PV',
            
'RATE''REPLACE''RIGHT''RIGHT$''RIGHTB''RIGHTB$''RMDIR''RND''RTRIM',
            
'RTRIM$''SECOND''SIN''SLN''SPACE''SPACE$''SPC''SPLIT''STR''STR$',
            
'STRCOMP''STRCONV''STRING$''STRREVERSE''SYD''TAB''TAN''TIMEOFDAY',
            
'TIMER''TIMESERIAL''TIMEVALUE''TODAY''TRIM''TRIM$''TYPENAME''UBOUND',
            
'UCASE''UCASE$''VAL''WEEKDAY''WEEKDAYNAME''YEAR'
            
),
        
=> array(
            
'ANY''ATN''CALENDAR''CIRCLE''CURRENCY''DEFBOOL''DEFBYTE''DEFCUR',
            
'DEFDATE''DEFDBL''DEFDEC''DEFINT''DEFLNG''DEFOBJ''DEFSNG''DEFSTR',
            
'DEFVAR''EQV''GOSUB''IMP''INITIALIZE''ISMISSING''LET''LINE''LSET',
            
'RSET''SGN''SQR''TERMINATE''VARIANT''VARTYPE''WEND'
            
),
        ),
    
'SYMBOLS' => array(
        
'&''&=''*''*=''+''+=''-''-=''//''/''/=''=''\\''\\=',
        
'^''^='
        
),
    
'CASE_SENSITIVE' => array(
        
GESHI_COMMENTS => true,
        
=> false,
        
=> false,
        
=> false,
        
=> false,
        
=> false,
        
=> false,
        
=> false,
        
=> false,
        ),
    
'STYLES' => array(
        
'KEYWORDS' => array(
            
=> 'color: #0600FF;',        //Constants
            
=> 'color: #FF8000;',        //Keywords
            
=> 'color: #008000;',        //Data Types
            
=> 'color: #FF0000;',        //Objects
            
=> 'color: #804040;',        //Operators
            
=> 'color: #0600FF;',        //Statements
            
=> 'color: #0600FF;',        //Functions
            
=> 'color: #0600FF;'        //Deprecated
            
),
        
'COMMENTS' => array(
            
=> 'color: #008080; font-style: italic;',
            
'MULTI' => 'color: #008080; font-style: italic;'
            
),
        
'ESCAPE_CHAR' => array(
            
=> 'color: #008080; font-weight: bold;'
            
),
        
'BRACKETS' => array(
            
=> 'color: #000000;'
            
),
        
'STRINGS' => array(
            
=> 'color: #808080;'
            
),
        
'NUMBERS' => array(
            
=> 'color: #FF0000;'
            
),
        
'METHODS' => array(
            
=> 'color: #0000FF;'
            
),
        
'SYMBOLS' => array(
            
=> 'color: #008000;'
            
),
        
'REGEXPS' => array(
            ),
        
'SCRIPT' => array(
            )
        ),
    
'URLS' => array(
        
=> '',
        
=> '',
        
=> 'http://www.google.com/search?q={FNAME}+msdn.microsoft.com',
        
=> ''
        
),
    
'OOLANG' => true,
    
'OBJECT_SPLITTERS' => array(
        
=>'.'
        
),
    
'REGEXPS' => array(
        ),
    
'STRICT_MODE_APPLIES' => GESHI_NEVER,
    
'SCRIPT_DELIMITERS' => array(
        ),
    
'HIGHLIGHT_STRICT_BLOCK' => array(
        )
);

?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0144 ]--