190.27.245.106 - c99shell

!C99Shell v. 1.0 pre-release build #13!
Software: Apache. PHP/5.5.15 uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 SYSTEM Safe-mode: OFF (not secure) C:\cumbreclima\wp-includes\ drwxrwxrwx Free 4.15 GB of 39.52 GB (10.5%) Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ] Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!C99Shell v. 1.0 pre-release build #13!

uname -a: Windows NT SVR-DMZ 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586

SYSTEM

Safe-mode: OFF (not secure)

C:\cumbreclima\wp-includes\ drwxrwxrwx
Free 4.15 GB of 39.52 GB (10.5%)
Detected drives: [ a ] [ c ] [ d ] [ e ] [ f ]
Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

Viewing file: wlwmanifest.xml (1.02 KB) -rw-rw-rw-
Select action/file-type:
(+) | (+) | (+) | Code (+) | Session (+) | (+) | SDB (+) | (+) | (+) | (+) | (+) | (+) |

Information:

Path	C:\cumbreclima\wp-includes\wlwmanifest.xml
Size	1.02 KB
MD5	dfd490b6f383ea02a269031ff05e8896
Perms	-rw-rw-rw-
Create time	07/09/2015 10:37:38
Access time	07/09/2015 10:37:38
MODIFY time	01/06/2015 08:42:42

HEXDUMP PREVIEW

00000000
00000018
00000030
00000048
00000060
00000078
00000090
000000A8

3C 3F 78 6D 6C 20 76 65 72 73 69 6F 6E 3D 22 31 2E 30 22 20 65 6E 63 6F
64 69 6E 67 3D 22 75 74 66 2D 38 22 20 3F 3E 0A 0A 3C 6D 61 6E 69 66 65
73 74 20 78 6D 6C 6E 73 3D 22 68 74 74 70 3A 2F 2F 73 63 68 65 6D 61 73
2E 6D 69 63 72 6F 73 6F 66 74 2E 63 6F 6D 2F 77 6C 77 2F 6D 61 6E 69 66
65 73 74 2F 77 65 62 6C 6F 67 22 3E 0A 0A 20 20 3C 6F 70 74 69 6F 6E 73
3E 0A 20 20 20 20 3C 63 6C 69 65 6E 74 54 79 70 65 3E 57 6F 72 64 50 72
65 73 73 3C 2F 63 6C 69 65 6E 74 54 79 70 65 3E 0A 09 3C 73 75 70 70 6F
72 74 73 4B 65 79 77 6F 72 64 73 3E 59 65 73 3C 2F 73 75 70 70 6F 72 74

<?xml version="1.0" enco
ding="utf-8" ?>  <manife
st xmlns="http://schemas
.microsoft.com/wlw/manif
est/weblog">    <options
>     <clientType>WordPr
ess</clientType> <suppo
rtsKeywords>Yes</support

Base64 Encode + Chunk + Quotes

'PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiID8+Cgo8bWFuaWZlc3QgeG1sbnM9'.
'Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vd2x3L21hbmlmZXN0L3dlYmxvZyI+CgogIDxv'.
'cHRpb25zPgogICAgPGNsaWVudFR5cGU+V29yZFByZXNzPC9jbGllbnRUeXBlPgoJPHN1cHBvcnRz'.
'S2V5d29yZHM+WWVzPC9zdXBwb3J0c0tleXdvcmRzPgoJPHN1cHBvcnRzR2V0VGFncz5ZZXM8L3N1'.
'cHBvcnRzR2V0VGFncz4KICA8L29wdGlvbnM+CgogIDx3ZWJsb2c+CiAgICA8c2VydmljZU5hbWU+'.
'V29yZFByZXNzPC9zZXJ2aWNlTmFtZT4KICAgIDxpbWFnZVVybD5pbWFnZXMvd2x3L3dwLWljb24u'.
'cG5nPC9pbWFnZVVybD4KICAgIDx3YXRlcm1hcmtJbWFnZVVybD5pbWFnZXMvd2x3L3dwLXdhdGVy'.
'bWFyay5wbmc8L3dhdGVybWFya0ltYWdlVXJsPgogICAgPGhvbWVwYWdlTGlua1RleHQ+VmlldyBz'.
'aXRlPC9ob21lcGFnZUxpbmtUZXh0PgogICAgPGFkbWluTGlua1RleHQ+RGFzaGJvYXJkPC9hZG1p'.
'bkxpbmtUZXh0PgogICAgPGFkbWluVXJsPgogICAgICA8IVtDREFUQVsKCQkJe2Jsb2ctcG9zdGFw'.
'aS11cmx9Ly4uL3dwLWFkbWluLwoJCV1dPgogICAgPC9hZG1pblVybD4KICAgIDxwb3N0RWRpdGlu'.
'Z1VybD4KICAgICAgPCFbQ0RBVEFbCgkJCXtibG9nLXBvc3RhcGktdXJsfS8uLi93cC1hZG1pbi9w'.
'b3N0LnBocD9hY3Rpb249ZWRpdCZwb3N0PXtwb3N0LWlkfQoJCV1dPgogICAgPC9wb3N0RWRpdGlu'.
'Z1VybD4KICA8L3dlYmxvZz4KCiAgPGJ1dHRvbnM+CiAgICA8YnV0dG9uPgogICAgICA8aWQ+MDwv'.
'aWQ+CiAgICAgIDx0ZXh0Pk1hbmFnZSBDb21tZW50czwvdGV4dD4KICAgICAgPGltYWdlVXJsPmlt'.
'YWdlcy93bHcvd3AtY29tbWVudHMucG5nPC9pbWFnZVVybD4KICAgICAgPGNsaWNrVXJsPgogICAg'.
'ICAgIDwhW0NEQVRBWwoJCQkJe2Jsb2ctcG9zdGFwaS11cmx9Ly4uL3dwLWFkbWluL2VkaXQtY29t'.
'bWVudHMucGhwCgkJCV1dPgogICAgICA8L2NsaWNrVXJsPgogICAgPC9idXR0b24+CgogIDwvYnV0'.
'dG9ucz4KCjwvbWFuaWZlc3Q+Cg=='

HEXDUMP: [Full] [Preview]
Base64: [Encode] [+chunk] [+chunk+quotes] [Decode]

:: Command execute ::
Enter:	Select:

:: Search ::

:: Upload ::

:: Make Dir ::

:: Make File ::

:: Go Dir ::

:: Go File ::

--[ c99shell v. 1.0 pre-release build #13 powered by Captain Crunch Security Team | http://ccteam.ru | Generation time: 0.0156 ]--