If you can run CGIs, chances are you can upload precompiled binarie or, compile your own binaries on their server from CGIs and then call them from other scripts. Unless they need to approve scripts and they then put hem live - in which case, obfuscate anything and see if they put it live when they don't understand it.

/msg me if you want some more specific hints on doing things on shared servers that the admin thought they could stop.

the hatter