shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : ApiAuth.php
<?php

namespace App\Http\Middleware;

use Closure;
use App\Helpers\BaseFunction;
use App\ApiSession;

class ApiAuth
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        $token=$request->header('Authorization');
        $request['token']=$token;
        if(empty($token))
        {
            return response()->json(['status'=>'8','message'=>'Token is required'],400);
        }
        $check=ApiSession::where('session_id',$token)->first();
        if(empty($check))
        {
            return response()->json(['status'=>'9','message'=>'Invalid user'],400);
        }
        $user_data=BaseFunction::checkApiSession($token);
        if(empty($user_data))
        {
            return response()->json(['status'=>'9','message'=>'Invalid user'],400);
        }
        $request['user']=$user_data;

        return $next($request);
    }
}
© 2026 GrazzMean