shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : OtherPagesController.php
<?php

namespace App\Http\Controllers\front;

use App\Http\Controllers\Controller;
use App\Models\Gallery;
use App\Models\Team;
use App\Models\Faq;
use App\Models\PrivacyPolicy;
use App\Models\RefundPolicy;
use App\Models\TermsCondition;
use App\Models\About;
use App\Models\Contact;
use App\Models\Subscriber;
use App\Helpers\helper;
use App\Models\Time;
use App\Models\Ratting;
use Illuminate\Http\Request;
use Lunaweb\RecaptchaV3\Facades\RecaptchaV3;

class OtherPagesController extends Controller
{
    public function faq(Request $request)
    {
        $getfaqs = Faq::select("id", "title", "description")->orderBy('reorder_id')->get();
        return view('web.faq', compact('getfaqs'));
    }
    public function privacypolicy(Request $request)
    {
        $getprivacypolicy = PrivacyPolicy::first();
        return view('web.privacypolicy', compact('getprivacypolicy'));
    }
    public function termsconditions(Request $request)
    {
        $gettermscondition = TermsCondition::first();
        return view('web.termsconditions', compact('gettermscondition'));
    }
    public function gallery(Request $request)
    {
        $getgalleries = Gallery::select(\DB::raw("CONCAT('" . url(env('ASSETSPATHURL') . 'admin-assets/images/about') . "/', image) AS image_url"))->orderByDesc('id')->get();
        return view('web.gallery', compact('getgalleries'));
    }
    public function ourteam(Request $request)
    {
        $getteams = Team::select("id", "title", "subtitle", "fb", "youtube", "insta", "description", \DB::raw("CONCAT('" . url(env('ASSETSPATHURL') . 'admin-assets/images/about') . "/', image) AS image_url"))->orderBydesc('id')->get();
        return view('web.ourteam', compact('getteams'));
    }
    public function aboutus(Request $request)
    {
        $getaboutus = About::first();
        return view('web.aboutus', compact('getaboutus'));
    }

    // contact-us
    public function contactindex(Request $request)
    {
        $timedata = Time::where('day', date('l'))->first();
        $gettimings = Time::all();
        return view('web.contactus', compact('timedata', 'gettimings'));
    }
    public function contactstore(Request $request)
    {
        if (@helper::checkaddons('recaptcha')) {

            if (helper::appdata('')->recaptcha_version == 'v2') {
                $request->validate([
                    'g-recaptcha-response' => 'required'
                ], [
                    'g-recaptcha-response.required' => 'The g-recaptcha-response field is required.'
                ]);
            }

            if (helper::appdata('')->recaptcha_version == 'v3') {
                $score = RecaptchaV3::verify($request->get('g-recaptcha-response'), 'contact');
                if ($score <= helper::appdata()->score_threshold) {
                    return redirect()->back()->with('error', trans('messages.recaptcha_msg'));
                }
            }
        }
        $contact = new Contact();
        $contact->firstname = $request->fname;
        $contact->lastname = $request->lname;
        $contact->email = $request->email;
        $contact->message = $request->message;
        $contact->save();
        return redirect()->back()->with('success', trans('messages.success'));
    }
    // testimonials
    public function testimonials(Request $request)
    {
        $testimonials = Ratting::with('user_info')->orderByDesc('ratting.id')->paginate(9);
        return view('web.testimonials', compact('testimonials'));
    }
    // refund-policy
    public function refundpolicy(Request $request)
    {
        $getrefundpolicy = RefundPolicy::first();
        return view('web.refundpolicy', compact('getrefundpolicy'));
    }
    public function Subscribe(Request $request)
    {
        $newsubscribe = new Subscriber();
        $newsubscribe->email = $request->email;
        $newsubscribe->save();
        return redirect()->back()->with('success', trans('messages.success'));
    }
}
© 2026 GrazzMean