[Nefarious]

Finding C99 shells that are already uploaded on servers is easy, although not a lot of people use C99.


Go to google and search for one of these.

Code:

safe-mode: off (not secure) drwxrwxrwx c99shell inurl:c99.php inurl:c99.php uid=0(root) root c99.php "Captain Crunch Security Team" inurl:c99 inurl:c99.php allinurl: c99.php inurl:c99.php inurl:"c99.php" c99shell inurl:c99.php uid=0(root) c99shell powered by admin c99shell powered by admin inurl:"/c99.php" inurl:c99.php c99 shell v.1.0 (roots) inurl:c99.php allintitle: "c99shell" inurl:"c99.php allinurl: "c99.php" inurl:c99.php intitle:C99Shell v. 1.0 pre-release +uname allinurl: "c99.php" inurl:c99.php inurl:"c99.php" c99shell inurl:"/c99.php inurl:/c99.php+uname allinurl:"c99.php" inurl:"c99.php" allinurl:c99.php "inurl:c99..php" c99shell [file on secure ok ]? powered by Captain Crunch Security Team allinurl:c99.php "c99.php" filetype:php allinurl:c99.php inurl:c99.php allinurl:.c99.php "inurl:c99.php" c99. PHP-code Feedback Self remove allinurl:c99.php download c99.php allinurl:c99.php inurl:c99.php allinurl: "c99.php" intitle:C99Shell v. 1.0 pre-release +uname allinurl:"c99.php" inurl:c99.php safe-mode: off (not secure) drwxrwxrwx c99shell c99.php download inurl:c99.php c99shell filetype:php -echo inurl:"c99.php" inurl:c99.php uid=0(root) allinurl:c99.php inurl:"/c99.php" intitle:"C99shell" C99Shell v. 1.0 pre-release build #5 --[ c99shell v. 1.0 pre-release build #16 c99shell linux infong C99Shell v. 1.0 pre-release build !C99Shell v. 1.0 beta! Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout !c99shell v. 1+Safe-mode: OFF (not secure) "C99Shell v. 1.0 pre-release build " intitle:c99shell +filetype:php inurl:c99.php intitle:C99Shell v. 1.0 pre-release +uname intitle:!C99Shell v. 1.0 pre-release build #16! root !C99Shell v. 1.0 pre-release build #5! inurl:"c99.php" C99Shell v. 1.0 pre-release build #16! intitle:c99shell intext:uname allintext:C99Shell v. 1.0 pre-release build #12 c99shell v. 1.0 pre-release build #16 --[ c99shell v. 1.0 pre-release build #15 | Powered by ]-- allinurl: "c99.php" Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout "c99shell v 1.0" ftp apache inurl:c99.php c99shell+v.+1.0 16 C99Shell v. 1.0 pre-release build #16 download intitle:c99shell "Software: Apache" allinurl: c99.php allintext: Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove intitle:c99shell uname -bbpress intitle:"index.of" c99.php inurl:admin/files/ intitle:"index of /" "c99.php" intitle:"index of" intext:c99.php intitle:index.of c99.php intitle:"index of" + c99.php intitle:index/of file c99.php intitle:index/of file c99.php index of /admin/files/ intitle:"Index of/"+c99.php c99.php "intitle:Index of " intitle:index.of c99.php img/c99.php intitle:index.of c99.php img.c99.php intitle:"Index of/"+c99.php "index of /" c99.php c99.php intitle:"Index of" c99.php "index of" c99.php "Index of/"+c99.php

The result.

[AnonGen]

Nice and small tutorial, although I already knew this method.
This could help others who weren't aware of this method.
Thanks for sharing!

[Nefarious]

Nice and small tutorial, although I already knew this method.
This could help others who weren't aware of this method.
Thanks for sharing!

That was my intention, as long as someone finds it useful I'll be happy.

[Loli]

Now please go ahead and try to use that shell you found. It'll come up with a page laughing at you for having used it right? Everyone knows of that bogus shell, and those that don't get fooled into going to it, and trying to use it. I've never come up with anything profitable using a google dork to find a shell, most you do find are bogus ones. Be careful.

[Nefarious]

Now please go ahead and try to use that shell you found. It'll come up with a page laughing at you for having used it right? Everyone knows of that bogus shell, and those that don't get fooled into going to it, and trying to use it. I've never come up with anything profitable using a google dork to find a shell, most you do find are bogus ones. Be careful.

Yeah, that shell is a troll, but the design is the same.
If you look at the domain you'll know beforehand.

Also, I found a gov this way, so it does work.
Ask Charon, he knows.

[Edward]

You can also look for other shell names. You can root plenty of boxes doing this.

[BreShiE]

Give credits to your outsource.

[Nefarious]

Give credits to your outsource.

I can not give credits seeing as I had the dorks saved in a text file, anyone that has ever used a haxoring forum before will know I did not find this method.

[dontdull]

so this shell cannot be used to upload or host files?