!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/phpMyAdmin/libraries/   drwxr-xr-x
Free 52.3 GB of 127.8 GB (40.92%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     tbl_properties_links.inc.php (4.05 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
$db, ) ); $err_url = $cfg['DefaultTabTable'] . PMA_generate_common_url( $url_params ); /** * Displays headers */ $js_to_run = 'functions.js'; require_once('./libraries/header.inc.php'); /** * Displays links */ $tabs = array(); $tabs['browse']['icon'] = 'b_browse.png'; $tabs['browse']['text'] = $strBrowse; $tabs['structure']['icon'] = 'b_props.png'; $tabs['structure']['link'] = 'tbl_properties_structure.php'; $tabs['structure']['text'] = $strStructure; $tabs['sql']['icon'] = 'b_sql.png'; $tabs['sql']['link'] = 'tbl_properties.php'; $tabs['sql']['text'] = $strSQL; $tabs['search']['icon'] = 'b_search.png'; $tabs['search']['text'] = $strSearch; if ( ! (isset($db_is_information_schema) && $db_is_information_schema) ) { $tabs['insert']['icon'] = 'b_insrow.png'; $tabs['insert']['link'] = 'tbl_change.php'; $tabs['insert']['text'] = $strInsert; } $tabs['export']['icon'] = 'b_tblexport.png'; $tabs['export']['link'] = 'tbl_properties_export.php'; $tabs['export']['args']['single_table'] = 'true'; $tabs['export']['text'] = $strExport; /** * Don't display "Import", "Operations" and "Empty" * for views and information_schema */ if ( ! $tbl_is_view && ! (isset($db_is_information_schema) && $db_is_information_schema )) { $tabs['import']['icon'] = 'b_tblimport.png'; $tabs['import']['link'] = 'tbl_import.php'; $tabs['import']['text'] = $strImport; $tabs['operation']['icon'] = 'b_tblops.png'; $tabs['operation']['link'] = 'tbl_properties_operations.php'; $tabs['operation']['text'] = $strOperations; if ($table_info_num_rows > 0) { $ln8_stt = (PMA_MYSQL_INT_VERSION >= 40000) ? 'TRUNCATE TABLE ' : 'DELETE FROM '; $tabs['empty']['link'] = 'sql.php'; $tabs['empty']['args']['sql_query'] = $ln8_stt . PMA_backquote($table); $tabs['empty']['args']['zero_rows'] = sprintf($strTableHasBeenEmptied, htmlspecialchars($table)); $tabs['empty']['attr'] = 'onclick="return confirmLink(this, \'' . $ln8_stt . PMA_jsFormat($table) . '\')"'; $tabs['empty']['args']['goto'] = 'tbl_properties_structure.php'; $tabs['empty']['class'] = 'caution'; } $tabs['empty']['icon'] = 'b_empty.png'; $tabs['empty']['text'] = $strEmpty; } /** * no drop in information_schema */ if ( ! (isset($db_is_information_schema) && $db_is_information_schema) ) { $tabs['drop']['icon'] = 'b_deltbl.png'; $tabs['drop']['link'] = 'sql.php'; $tabs['drop']['text'] = $strDrop; $tabs['drop']['args']['reload'] = 1; $tabs['drop']['args']['purge'] = 1; $drop_command = 'DROP ' . ($tbl_is_view ? 'VIEW' : 'TABLE'); $tabs['drop']['args']['sql_query'] = $drop_command . ' ' . PMA_backquote($table); $tabs['drop']['args']['goto'] = 'db_details_structure.php'; $tabs['drop']['args']['zero_rows'] = sprintf(($tbl_is_view ? $strViewHasBeenDropped : $strTableHasBeenDropped), htmlspecialchars($table)); $tabs['drop']['attr'] = 'onclick="return confirmLink(this, \'' . $drop_command . ' ' . PMA_jsFormat($table) . '\')"'; unset($drop_command); $tabs['drop']['class'] = 'caution'; } if ($table_info_num_rows > 0 || $tbl_is_view) { $tabs['browse']['link'] = 'sql.php'; $tabs['browse']['args']['pos'] = 0; $tabs['search']['link'] = 'tbl_select.php'; } echo PMA_getTabs( $tabs ); unset( $tabs ); /** * Displays a message */ if (!empty($message)) { PMA_showMessage($message); unset($message); } ?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0058 ]--