!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/qa2565/3.2-1/   drwxr-xr-x
Free 52.32 GB of 127.8 GB (40.94%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     3.2-1-14.pdf (2.57 MB)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
%PDF-1.7
%鲣
1 0 obj
<<
/Outlines 2 0 R
/Pages 3 0 R
/Metadata 4 0 R
/Type /Catalog
/OpenAction 5 0 R
>>
endobj
6 0 obj
<<
/CreationDate (D:20220709161012+07'00')
/ModDate (D:20220709180249+07'00')
/Title (ScanJob)
/Author (BCNU19)
/Producer (Microsoft: Print To PDF)
>>
endobj
2 0 obj
<<
/Count 0
/Type /Outlines
>>
endobj
3 0 obj
<<
/Count 11
/Kids [7 0 R 8 0 R 9 0 R 10 0 R 11 0 R 12 0 R 13 0 R 14 0 R 15 0 R 16 0 R
17 0 R]
/Type /Pages
>>
endobj
4 0 obj
<<
/Length 673
/Type /Metadata
/Subtype /XML
>>
stream
2022-07-09T18:02:49+07:00




endstream
endobj
5 0 obj
<<
/Type /Action
/S /JavaScript
/JS (this.print\({bUI:true,bSilent:false,bShrinkToFit:true}\);)
>>
endobj
7 0 obj
<<
/Contents [18 0 R]
/CropBox [0.0 0.0 595.32001 841.92004]
/MediaBox [0.0 0.0 595.32001 841.92004]
/Parent 3 0 R
/Resources 19 0 R
/Rotate 0
/Type /Page
>>
endobj
8 0 obj
<<
/Contents [20 0 R]
/CropBox [0.0 0.0 595.32001 841.92004]
/MediaBox [0.0 0.0 595.32001 841.92004]
/Parent 3 0 R
/Resources 21 0 R
/Rotate 0
/Type /Page
>>
endobj
9 0 obj
<<
/Contents [22 0 R]
/CropBox [0.0 0.0 595.32001 841.92004]
/MediaBox [0.0 0.0 595.32001 841.92004]
/Parent 3 0 R
/Resources 23 0 R
/Rotate 0
/Type /Page
>>
endobj
10 0 obj
<<
/Contents [24 0 R]
/CropBox [0.0 0.0 595.32001 841.92004]
/MediaBox [0.0 0.0 595.32001 841.92004]
/Parent 3 0 R
/Resources 25 0 R
/Rotate 0
/Type /Page
>>
endobj
11 0 obj
<<
/Contents [26 0 R]
/CropBox [0.0 0.0 595.32001 841.92004]
/MediaBox [0.0 0.0 595.32001 841.92004]
/Parent 3 0 R
/Resources 27 0 R
/Rotate 0
/Type /Page
>>
endobj
12 0 obj
<<
/Parent 3 0 R
/MediaBox [0 0 595.3200 842.0400]
/Contents 28 0 R
/StructParents 5
/Group <<
/Type /Group
/S /Transparency
/CS /DeviceRGB
>>
/Type /Page
/Resources <<
/ExtGState <<
/GS10 29 0 R
/GS11 30 0 R
>>
/Font <<
/F1 31 0 R
/F2 32 0 R
/F3 33 0 R
/F4 34 0 R
/F5 35 0 R
/F6 36 0 R
>>
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
>>
/Tabs /S
>>
endobj
13 0 obj
<<
/Parent 3 0 R
/MediaBox [0 0 595.3200 842.0400]
/Contents 37 0 R
/StructParents 6
/Group <<
/Type /Group
/S /Transparency
/CS /DeviceRGB
>>
/Type /Page
/Resources <<
/ExtGState <<
/GS10 38 0 R
/GS11 39 0 R
>>
/Font <<
/F1 40 0 R
/F2 41 0 R
/F3 42 0 R
/F4 43 0 R
/F5 44 0 R
/F6 45 0 R
/F8 46 0 R
/F9 47 0 R
>>
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
>>
/Tabs /S
>>
endobj
14 0 obj
<<
/Contents [48 0 R]
/CropBox [0.0 0.0 595.32001 841.92004]
/MediaBox [0.0 0.0 595.32001 841.92004]
/Parent 3 0 R
/Resources 49 0 R
/Rotate 0
/Type /Page
>>
endobj
15 0 obj
<<
/Parent 3 0 R
/MediaBox [0 0 595.3200 842.0400]
/Contents 50 0 R
/StructParents 8
/Group <<
/Type /Group
/S /Transparency
/CS /DeviceRGB
>>
/Type /Page
/Resources <<
/ExtGState <<
/GS10 51 0 R
/GS11 52 0 R
>>
/Font <<
/F1 53 0 R
/F2 54 0 R
/F3 55 0 R
/F4 56 0 R
/F5 57 0 R
/F6 58 0 R
/F8 59 0 R
>>
/ProcSet [/PDF /Text /ImageB /ImageC /ImageI]
>>
/Tabs /S
>>
endobj
16 0 obj
<<
/Contents [60 0 R]
/CropBox [0.0 0.0 595.32001 841.92004]
/MediaBox [0.0 0.0 595.32001 841.92004]
/Parent 3 0 R
/Resources 61 0 R
/Rotate 0
/Type /Page
>>
endobj
17 0 obj
<<
/Contents [62 0 R]
/CropBox [0.0 0.0 595.32001 841.92004]
/MediaBox [0.0 0.0 595.32001 841.92004]
/Parent 3 0 R
/Resources 63 0 R
/Rotate 0
/Type /Page
>>
endobj
18 0 obj
<<
/Length 110
/Filter /FlateDecode
>>
stream
x𶁽75=T.厜亖墘Br.W!Ζ\.sKc=s3C$dQCC##=sKKS3\
猵W笘B
l!湀	獻@g陒&Η*镐srr /
endstream
endobj
19 0 obj
<<
/XObject <<
/Image1 64 0 R
>>
>>
endobj
20 0 obj
<<
/Length 110
/Filter /FlateDecode
>>
stream
x𶁽75=T.厜亖墘Br.W!Ζ\.sKc=s3C$dQCC##=sKKS3\
猵W笘B
l!湀	獻@g陒&Η*镐srr /
endstream
endobj
21 0 obj
<<
/XObject <<
/Image1 65 0 R
>>
>>
endobj
22 0 obj
<<
/Length 110
/Filter /FlateDecode
>>
stream
x𶁽75=T.厜亖墘Br.W!Ζ\.sKc=s3C$dQCC##=sKKS3\
猵W笘B
l!湀	獻@g陒&Η*镐srr /
endstream
endobj
23 0 obj
<<
/XObject <<
/Image1 66 0 R
>>
>>
endobj
24 0 obj
<<
/Length 110
/Filter /FlateDecode
>>
stream
x𶁽75=T.厜亖墘Br.W!Ζ\.sKc=s3C$dQCC##=sKKS3\
猵W笘B
l!湀	獻@g陒&Η*镐srr /
endstream
endobj
25 0 obj
<<
/XObject <<
/Image1 67 0 R
>>
>>
endobj
26 0 obj
<<
/Length 110
/Filter /FlateDecode
>>
stream
x𶁽75=T.厜亖墘Br.W!Ζ\.sKc=s3C$dQCC##=sKKS3\
猵W笘B
l!湀	獻@g陒&Η*镐srr /
endstream
endobj
27 0 obj
<<
/XObject <<
/Image1 68 0 R
>>
>>
endobj
28 0 obj
<<
/Length 6831
/Filter /FlateDecode
>>
stream
x溳]輳$)ri䥽z9﹕鳫H怹%鮰U漧$痸,?荠a岛]+
bool(false)

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0456 ]--