!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/counter_2/   drwxr-xr-x
Free 52.63 GB of 127.8 GB (41.18%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     config.inc.php (1.08 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /var/www/html/manage/counter_2/config.inc.php
Size 1.08 KB
MD5 f241b9650fae0b8bea501e8f64460eeb
Owner/Group apache/apache
Perms-rw-r--r--
Create time 03/07/2013 18:31:17
Access time 11/07/2024 13:07:30
MODIFY time 07/06/2006 14:29:44

FULL HEXDUMP
00000000
00000018
00000030
00000048
00000060
00000078
00000090
000000A8
000000C0
000000D8
000000F0
00000108
00000120
00000138
00000150
00000168
00000180
00000198
000001B0
000001C8
000001E0
000001F8
00000210
00000228
00000240
00000258
00000270
00000288
000002A0
000002B8
000002D0
000002E8
00000300
00000318
00000330
00000348
00000360
00000378
00000390
000003A8
000003C0
000003D8
000003F0
00000408
00000420
00000438
00000450
3C 3F 70 68 70 0D 0A 2F 2A 20 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D
2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D
2D 2D 2D 2D 2D 2D 2D 2D 2A 2F 0D 0A 2F 2A 20 20 50 4E 47 20 43 6F 75 6E
74 65 72 20 31 2E 30 20 28 50 48 50 29 20 20 20 20 20 20 20 20 20 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 2A 2F 0D 0A 2F 2A 20 20 43 6F 70
79 72 69 67 68 74 20 28 63 29 32 30 30 31 20 43 68 69 20 4B 69 65 6E 20
55 6F 6E 67 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2A 2F 0D 0A 2F 2A
20 20 55 52 4C 3A 20 68 74 74 70 3A 2F 2F 77 77 77 2E 70 72 6F 78 79 32
2E 64 65 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2A
2F 0D 0A 2F 2A 20 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D
2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D 2D
2D 2D 2D 2D 2A 2F 0D 0A 0D 0A 2F 2A 20 55 73 65 20 44 61 74 61 62 61 73
65 28 6D 79 73 71 6C 29 20 6F 72 20 66 69 6C 65 73 20 74 6F 20 73 74 6F
72 65 20 63 6F 75 6E 74 69 6E 67 20 2A 2F 0D 0A 2F 2A 20 65 78 65 63 75
74 65 20 74 68 69 73 20 69 6E 20 79 6F 75 72 20 64 61 74 61 62 61 73 65
20 73 70 61 63 65 20 62 65 66 6F 72 65 20 75 73 69 6E 67 20 70 6E 67 63
6F 75 6E 74 65 72 0D 0A 20 20 20 43 52 45 41 54 45 20 54 41 42 4C 45 20
63 6F 75 6E 74 65 72 20 28 0D 0A 20 20 20 70 61 67 65 20 76 61 72 63 68
61 72 28 33 30 29 20 4E 4F 54 20 4E 55 4C 4C 20 64 65 66 61 75 6C 74 20
27 27 2C 0D 0A 20 20 20 63 6F 75 6E 74 20 62 69 67 69 6E 74 28 32 30 29
20 4E 4F 54 20 4E 55 4C 4C 20 64 65 66 61 75 6C 74 20 27 30 27 2C 0D 0A
20 20 20 50 52 49 4D 41 52 59 20 4B 45 59 20 20 28 70 61 67 65 29 2C 0D
0A 20 20 20 4B 45 59 20 66 69 63 68 65 72 6F 20 28 70 61 67 65 29 0D 0A
20 20 20 29 20 54 59 50 45 3D 4D 79 49 53 41 4D 3B 0D 0A 2A 2F 0D 0A 24
43 46 47 5B 27 64 62 27 5D 20 20 20 20 20 20 20 3D 20 66 61 6C 73 65 3B
20 20 20 20 2F 2A 20 69 66 20 66 61 6C 73 65 20 69 67 6E 6F 72 65 20 34
20 66 6F 6C 6C 6F 77 69 6E 67 20 66 69 65 6C 64 73 20 2A 2F 0D 0A 24 43
46 47 5B 27 64 62 68 6F 73 74 27 5D 20 20 20 3D 20 22 6C 6F 63 61 6C 68
6F 73 74 22 3B 20 20 20 2F 2A 20 68 6F 73 74 3A 70 6F 72 74 20 2A 2F 0D
0A 24 43 46 47 5B 27 64 62 75 73 65 72 27 5D 20 20 20 3D 20 22 72 6F 6F
74 22 3B 0D 0A 24 43 46 47 5B 27 64 62 70 61 73 73 77 64 27 5D 20 3D 20
22 22 3B 0D 0A 24 43 46 47 5B 27 64 62 6E 61 6D 65 27 5D 20 20 20 3D 20
22 63 6F 75 6E 74 65 72 22 3B 0D 0A 0D 0A 2F 2A 20 48 6F 77 20 6D 61 6E
79 20 64 69 67 69 74 73 20 74 6F 20 73 68 6F 77 3F 20 2A 2F 0D 0A 24 43
46 47 5B 27 70 61 64 27 5D 20 3D 20 36 3B 0D 0A 0D 0A 2F 2A 20 43 68 65
63 6B 20 48 54 54 50 5F 52 45 46 45 52 45 52 3F 20 2A 2F 0D 0A 24 43 46
47 5B 27 72 65 66 65 72 65 72 5F 63 68 65 63 6B 27 5D 20 3D 20 66 61 6C
73 65 3B 0D 0A 24 56 41 4C 49 44 20 3D 20 61 72 72 61 79 28 0D 0A 20 20
20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3A 2F 2F 6C 6F 63
61 6C 68 6F 73 74 22 2C 0D 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20
20 22 68 74 74 70 3A 2F 2F 77 77 77 2E 73 63 70 68 63 2E 61 63 2E 74 68
22 0D 0A 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3B 0D 0A 0D 0A 2F
2A 20 42 6C 6F 63 6B 20 72 65 6C 6F 61 64 69 6E 67 3F 20 2A 2F 0D 0A 24
43 46 47 5B 27 62 6C 6F 63 6B 5F 69 70 27 5D 20 20 20 20 20 3D 20 66 61
6C 73 65 3B 0D 0A 24 43 46 47 5B 27 6C 6F 63 6B 5F 74 69 6D 65 6F 75 74
27 5D 20 3D 20 33 30 3B 20 2F 2F 20 6D 69 6E 75 74 65 73 0D 0A 0D 0A 3F
3E
<?php  /* --------------
------------------------
--------*/  /*  PNG Coun
ter 1.0 (PHP)           
             */  /*  Cop
yright (c)2001 Chi Kien 
Uong              */  /*
  URL: http://www.proxy2
.de                    *
/  /* ------------------
------------------------
----*/    /* Use Databas
e(mysql) or files to sto
re counting */  /* execu
te this in your database
 space before using pngc
ounter     CREATE TABLE 
counter (     page varch
ar(30) NOT NULL default 
'',     count bigint(20)
 NOT NULL default '0',  
   PRIMARY KEY  (page), 
    KEY fichero (page)  
   ) TYPE=MyISAM;  */  $
CFG['db']       = false;
    /* if false ignore 4
 following fields */  $C
FG['dbhost']   = "localh
ost";   /* host:port */ 
 $CFG['dbuser']   = "roo
t";  $CFG['dbpasswd'] = 
"";  $CFG['dbname']   = 
"counter";    /* How man
y digits to show? */  $C
FG['pad'] = 6;    /* Che
ck HTTP_REFERER? */  $CF
G['referer_check'] = fal
se;  $VALID = array(    
             "http://loc
alhost",                
 "http://www.scphc.ac.th
"                );    /
* Block reloading? */  $
CFG['block_ip']     = fa
lse;  $CFG['lock_timeout
'] = 30; // minutes    ?
>

HEXDUMP: [Full] [Preview]
Base64:
[Encode [+chunk [+chunk+quotes [Decode


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0121 ]--