shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : QuickCallController.php
<?php

namespace App\Http\Controllers\addons;

use App\Http\Controllers\Controller;
use Illuminate\Http\Request;
use App\Models\About;

class QuickCallController extends Controller
{
    public function quick_call(Request $request)
    {
        try {
            $request->validate([
                'quick_call_name' => 'required',
                'quick_call_mobile' => 'required',
            ]);

            $data = About::first();
            // Upload Image
            if ($request->hasFile('quick_call_image')) {
                $file = $request->file("quick_call_image");
                $filename = 'quick-call-' . uniqid() . "." . $file->getClientOriginalExtension();
                $file->move(env('ASSETSPATHURL') . 'admin-assets/images/about', $filename);
                $data->quick_call_image = @$filename;
            }

            $data->quick_call = isset($request->quick_call) ? 1 : 2;
            $data->quick_call_mobile_view_on_off = isset($request->quick_call_mobile_view_on_off) ? 1 : 2;
            $data->quick_call_name = $request->quick_call_name;
            $data->quick_call_description = $request->quick_call_description;
            $data->quick_call_mobile = $request->quick_call_mobile;
            $data->quick_call_position = $request->quick_call_position;
            $data->save();
            return redirect()->back()->with('success', trans('messages.success'));
        } catch (\Throwable $th) {
            dd($th);
        }
    }
}
© 2026 GrazzMean