shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : verification.blade.php
<!doctype html>
<html lang="en" dir="{{ session()->get('direction') }}" class="light">

<head>
    <!-- Required meta tags -->
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width,initial-scale=1">

    <script>
        const theme = localStorage.getItem('theme');
        if (theme === 'dark') {
            document.documentElement.classList.add('dark');
        } else {
            document.documentElement.classList.add('light');
        }
    </script>

    <title> {{ @helper::appdata()->title }} | {{ trans('labels.otp_verification') }} </title>
    <link rel="icon" href="{{ helper::image_path(@helper::appdata()->favicon) }}"><!-- Favicon -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'web-assets/css/bootstrap.min.css') }}">
    <!-- Bootstrap CSS -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'web-assets/css/font_awesome/all.css') }}">
    <!-- Font Awesome CSS -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'web-assets/css/style.css') }}"><!-- Custom CSS -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'web-assets/css/responsive.css') }}">
    <!-- Media Query Resposive CSS -->
    <!-- COMMON-CSS -->
    <link rel="stylesheet" href="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/css/toastr/toastr.min.css') }}">
    <!-- Toastr CSS -->
    <style>
        :root {
            --bs-primary: {{ helper::appdata()->web_primary_color }};
            --bs-secondary: {{ helper::appdata()->web_secondary_color }};

        }
    </style>
</head>

<body>
    <main>
        <section class="authentication_sec loginform_color_bg">
            <div class="container">
                <div class="d-flex align-items-center justify-content-center vh-100">
                    <div class="row gx-0 justify-content-center">
                        <!----- authentication image ----->
                        <div class="col-xl-5 col-lg-6 col-12 d-none d-lg-block">
                            <img src="{{ helper::image_path(@helper::appdata()->auth_bg_image) }}"
                                alt="authentication image" class="h-100 object-fit-cover w-100">
                        </div>
                        <!----- authentication form ----->
                        <div class="col-xl-5 col-lg-6 col-12 form-content">
                            <div class="p-3 p-md-4 w-100">
                                <a href="{{ route('home') }}">
                                    <img src="{{ helper::image_path(@helper::appdata()->logo) }}" class="logo mb-4"
                                        alt="">
                                </a>
                                <div class="mn-3">
                                    <h2 class="mb-4 h3 fw-800 color-changer">
                                        {{ trans('labels.otp_verification') }}
                                    </h2>
                                    <p class="color-changer">
                                        {{ trans('labels.otp_note') }}
                                    </p>
                                    <p class="color-changer">
                                        <strong>{{ session()->get('verification_email') }}</strong>
                                    </p>
                                </div>
                                <form action="{{ URL::to('verify-otp') }}" method="POST">
                                    @csrf
                                    <div class="my-3">
                                        <input type="text" name="otp" class="form-control rounded"
                                            placeholder="{{ trans('labels.otp') }}" required
                                            @if (env('Environment') == 'sendbox') value="{{ session()->get('verification_otp') }}" readonly @else value="{{ old('otp') }}" @endif>
                                        @error('otp')
                                            <span class="text-danger">{{ $message }}</span>
                                        @enderror
                                        @if (session()->has('otp_error'))
                                            <span class="text-danger">{{ session()->get('otp_error') }}</span>
                                        @endif
                                    </div>
                                    <div class="my-3 d-grid">
                                        <button type="submit"
                                            class="btn btn-primary p-2">{{ trans('labels.verify_proceed') }}</button>
                                    </div>
                                </form>
                            </div>
                        </div>
                    </div>
                </div>
            </div>
        </section>
    </main>
    <script src="{{ url(env('ASSETSPATHURL') . 'web-assets/js/jquery/jquery-3.6.0.js') }}"></script><!-- jQuery JS -->
    <script src="{{ url(env('ASSETSPATHURL') . 'web-assets/js/bootstrap/bootstrap.bundle.min.js') }}"></script><!-- Bootstrap JS -->
    <!-- COMMON-JS -->
    <script src="{{ url(env('ASSETSPATHURL') . 'admin-assets/assets/js/toastr/toastr.min.js') }}"></script><!-- Toastr JS -->
    <script>
        toastr.options = {
            "closeButton": true,
        }
        @if (Session::has('success'))
            toastr.success("{{ session('success') }}");
        @endif
        @if (Session::has('error'))
            toastr.error("{{ session('error') }}");
        @endif
        // for-page-loader
        $(window).on('load', function() {
            "use strict";
            $("#preload").delay(600).fadeOut(500);
            $(".pre-loader").delay(600).fadeOut(500);
        })
    </script>
    <script>
        let timerOn = true;
        timer(120);

        function timer(remaining) {
            "use strict";
            var m = Math.floor(remaining / 60);
            var s = remaining % 60;
            m = m < 10 ? '0' + m : m;
            s = s < 10 ? '0' + s : s;
            document.getElementById('timer').innerHTML = m + ':' + s;
            remaining -= 1;
            if (remaining >= 0 && timerOn) {
                setTimeout(function() {
                    timer(remaining);
                }, 1000);
                return;
            }
            if (!timerOn) {
                return;
            }
            $('#timer').addClass('d-none');
            $('#resend').removeClass('d-none');
        }
    </script>
    <script>
        function setLightMode() {
            document.documentElement.classList.remove('dark');
            document.documentElement.classList.add('light');
            localStorage.setItem('theme', 'light');
        }

        function setDarkMode() {
            document.documentElement.classList.remove('light');
            document.documentElement.classList.add('dark');
            localStorage.setItem('theme', 'dark');
        }
    </script>
</body>

</html>
© 2026 GrazzMean