shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : login.blade.php
<!doctype html>
<html lang="en" dir="{{ session()->get('direction') }}" class="light">

<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width,initial-scale=1">

    <script>
        const theme = localStorage.getItem('theme');
        if (theme === 'dark') {
            document.documentElement.classList.add('dark');
        } else {
            document.documentElement.classList.add('light');
        }
    </script>

    <title> {{ @helper::appdata()->title }} | {{ trans('labels.signin') }} </title>
    <link rel="icon" href="{{ helper::image_path(@helper::appdata()->favicon) }}"><!-- Favicon -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'web-assets/css/bootstrap.min.css') }}">
    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'web-assets/css/font_awesome/all.css') }}">
    <!-- Font Awesome CSS -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'web-assets/css/style.css') }}"><!-- Custom CSS -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'web-assets/css/responsive.css') }}">
    <!-- Media Query Resposive CSS -->
    <!-- COMMON-CSS -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/css/toastr/toastr.min.css') }}">
    <!-- Toastr CSS -->
    <style>
        :root {
            --bs-primary: {{ helper::appdata()->web_primary_color }};
            --bs-secondary: {{ helper::appdata()->web_secondary_color }};
        }
    </style>
</head>

<body>

    <main>
        <section class="authentication_sec loginform_color_bg">
            <div class="container">
                <div class="d-flex align-items-center justify-content-center vh-100">
                    <div class="row gx-0 justify-content-center">
                        <!----- authentication image ----->
                        <div class="col-xl-5 col-lg-6 col-12 d-none d-lg-block">
                            <img src="{{ helper::image_path(@helper::appdata()->auth_bg_image) }}"
                                alt="authentication image" class="h-100 object-fit-cover w-100 object-fit-cover">
                        </div>
                        <!----- authentication form ----->
                        <div class="col-xl-5 col-lg-6 col-12 form-content">
                            <div class="p-3 p-md-4 w-100">
                                <a href="{{ route('home') }}">
                                    <img src="{{ helper::image_path(@helper::appdata()->logo) }}" class="logo mb-4"
                                        alt="">
                                </a>
                                <h2 class="mb-4 h3 fw-800 color-changer">Hey there! <br>Welcome back <span
                                        class="text-secondary">Grocery</span>
                                </h2>
                                <form action="{{ URL::to('/checklogin') }}" method="POST" class="row g-2">
                                    @csrf
                                    <div class="form-body mt-4">
                                        @if (@helper::checkaddons('otp'))
                                            <div class="col-md">
                                                <label class="text-black form-label"
                                                    for="mobile">{{ trans('labels.mobile') }}
                                                    <span class="text-danger">*</span>
                                                </label>
                                                <div class="input-group">
                                                    <input type="hidden" name="country" id="country" value="91">
                                                    <input type="tel" id="mobile" name="mobile"
                                                        class="form-control custom-input rounded mb-3"
                                                        placeholder="{{ trans('labels.mobile') }}"
                                                        value="{{ old('mobile') }}" required>
                                                </div>
                                            </div>
                                        @else
                                            <div class="form-group mb-3">
                                                <label
                                                    class="text-black form-label fs-7 mb-1">{{ trans('labels.email') }}
                                                    <span class="text-danger">*</span>
                                                </label>
                                                <input type="email" name="email"
                                                    class="form-control custom-input mb-1"
                                                    placeholder="{{ trans('labels.email') }}" required
                                                    @if (env('Environment') == 'sendbox') value="user@gmail.com" @endif>
                                            </div>
                                            <div class="form-group mb-3 check-password">
                                                <label
                                                    class="text-black form-label fs-7 mb-1">{{ trans('labels.password') }}
                                                    <span class="text-danger">*</span>
                                                </label>
                                                <input type="password" name="password"
                                                    class="form-control custom-input mb-1" id="password"
                                                    placeholder="{{ trans('labels.password') }}" required
                                                    @if (env('Environment') == 'sendbox') value="123456" @endif>
                                                <span class="eye">
                                                    <i class="fa-regular fa-eye-slash color-changer" id="eye"></i>
                                                </span>
                                            </div>
                                            <div class="form-group d-flex justify-content-end">
                                                <a href="{{ URL::to('forgot-password') }}"
                                                    class="text-primary fw-bold fs-7 float-end color-changer">{{ trans('labels.forgot_password_q') }}</a>
                                            </div>
                                        @endif
                                        <div class="row g-3 mt-3 align-items-center">

                                            <div class="col-sm-6">
                                                <button type="submit"
                                                    class="btn btn-primary w-100 p-2">{{ trans('labels.signin') }}</button>
                                            </div>
                                            <div class="col-sm-6">
                                                <div class="row g-3">
                                                    @if (@helper::checkaddons('google_login'))
                                                        @if (helper::appdata()->google_login == 1)
                                                            <div class="col-6">
                                                                <a href="{{ URL::to('/login/google') }}"
                                                                    class="btn btn-outline-primary w-100 d-flex align-items-center justify-content-center p-2">
                                                                    <img src="{{ url(env('ASSETSPATHURL') . 'admin-assets/images/about/google.svg') }}"
                                                                        alt="google" class="social-login">
                                                                </a>
                                                            </div>
                                                        @endif
                                                    @endif
                                                    @if (@helper::checkaddons('facebook_login'))
                                                        @if (helper::appdata()->facebook_login == 1)
                                                            <div class="col-6">
                                                                <a href="{{ URL::to('/login/facebook') }}"
                                                                    class="btn btn-outline-primary w-100 d-flex align-items-center justify-content-center p-2">
                                                                    <img src="{{ url(env('ASSETSPATHURL') . 'admin-assets/images/about/facebook.svg') }}"
                                                                        alt="google" class="social-login"></a>
                                                            </div>
                                                        @endif
                                                    @endif
                                                </div>
                                            </div>
                                        </div>
                                    </div>
                                    <div class="my-3">
                                        <p class="text-black color-changer mb-0 fs-7">
                                            {{ trans('labels.dont_account') }}
                                            <a href="{{ 'register' }}"
                                                class="text-secondary fw-bold">{{ trans('labels.signup') }}</a>
                                        </p>
                                    </div>
                                </form>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </section>
    </main>
    <script src="{{ url(env('ASSETSPATHURL') . 'web-assets/js/jquery/jquery-3.6.0.js') }}"></script><!-- jQuery JS -->
    <script src="{{ url(env('ASSETSPATHURL') . 'web-assets/js/bootstrap/bootstrap.bundle.min.js') }}"></script>
    <!-- Bootstrap JS -->
    <!-- COMMON-JS -->
    <script src="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/js/toastr/toastr.min.js') }}"></script>
    <!-- Toastr JS -->
    <script>
        toastr.options = {
            "closeButton": true,
            "progressBar": true,
        }
        @if (Session::has('success'))
            toastr.success("{{ session('success') }}");
        @endif
        @if (Session::has('error'))
            toastr.error("{{ session('error') }}");
        @endif
        // for-page-loader
        $(window).on('load', function() {
            "use strict";
            $("#preload").delay(600).fadeOut(500);
            $(".pre-loader").delay(600).fadeOut(500);
        })
    </script>
    <script src="{{ url(env('ASSETSPATHURL') . 'web-assets/js/intl-tel-input/17.0.8.intlTelInput.min.js') }}"></script>
    <link rel="stylesheet"
        href="{{ url(env('ASSETSPATHURL') . 'web-assets/js/intl-tel-input/17.0.8.intlTelInput.min.css') }}">
    <script src="{{ url(env('ASSETSPATHURL') . 'web-assets/js/intl-tel-input/17.0.8.utils.js') }}"></script>

    <script>
        function setLightMode() {
            document.documentElement.classList.remove('dark');
            document.documentElement.classList.add('light');
            localStorage.setItem('theme', 'light');
        }

        function setDarkMode() {
            document.documentElement.classList.remove('light');
            document.documentElement.classList.add('dark');
            localStorage.setItem('theme', 'dark');
        }
    </script>

    <script>
        //============ password show and hide js ============//
        $(function() {
            $('#eye').click(function() {
                if ($(this).hasClass('fa-eye-slash')) {
                    $(this).removeClass('fa-eye-slash');
                    $(this).addClass('fa-eye');
                    $('#password').attr('type', 'text');
                } else {
                    $(this).removeClass('fa-eye');
                    $(this).addClass('fa-eye-slash');
                    $('#password').attr('type', 'password');
                }
            });
        });
    </script>
</body>

</html>
© 2026 GrazzMean