SOLDIERX.COM Nobody Can Stop Information Insemination

Hi all,

Let's say that I have gained access to a ftp-server (admin account).
The info I've so for gotten is that the server is running FreeBSD with the following software installed:
nginx 1.2.7
OpenSSH 5.4p1
Apache httpd 2.2.21
Pure-FTPd

I haven't touched anything yet, as I don't want to make my presents to noticeable.

I don't know what the next step should be, and what can I do to work undetected?
Should I add a shell in the http-directory and try and gain more access that way maybe?

I've only done stuff like DDoS and SQL-injections before...