shell bypass 403

GrazzMean Shell

Uname: Linux peekpos.com 6.8.0-1060-aws #63~22.04.1-Ubuntu SMP Tue Jun 30 02:32:53 UTC 2026 x86_64
Software: Apache
PHP version: 8.3.25 [ PHP INFO ] PHP os: Linux
Server Ip: 47.130.192.226
Your Ip: 10.1.31.86
User: www (1001) | Group: www (1001)
Safe Mode: OFF
Disable Function:
passthru,putenv,chroot,chgrp,chown,shell_exec,popen,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv

name : usersidebar.blade.php
<div class="user-sidebar card">
    <div class="user-info border-bottom d-xl-flex pb-3 mb-3">
        <div class="col-xl-3 col-12 mb-xl-0 mb-3">
            <div class="avatar-upload mx-auto d-flex justify-content-center">
                <div class="avatar-preview-two ">
                    <div id="imagepreview-two">
                        <img src="{{ helper::image_path(Auth::user()->profile_image) }}" alt="">
                    </div>
                </div>
            </div>
        </div>
        <div class="px-xl-3 col-xl-10 col-12 d-flex align-items-center">
            <div class="col-12">
                <p class="mb-0 text-xl-start color-changer text-center fw-bold">{{ Auth::user()->name }}</p>
                <p class="mb-0 text-xl-start text-center color-changer">{{ Auth::user()->email }}</p>
            </div>
        </div>
    </div>
    <li>
        <a class="{{ request()->is('profile') ? 'active' : '' }}" href="{{ route('user-profile') }}">
            <i class="mx-2 far fa-user"></i>{{ trans('labels.my_profile') }} </a>
    </li>
    <li>
        <a class="{{ request()->is('orders*') ? 'active' : '' }}" href="{{ route('order-history') }}">
            <i class="mx-2 fa fa-list-check"></i>{{ trans('labels.my_orders') }} </a>
    </li>
    <li>
        <a class="{{ request()->is('favouritelist') ? 'active' : '' }}" href="{{ route('user-favouritelist') }}">
            <i class="mx-2 fa-regular fa-heart"></i>{{ trans('labels.favourite_list') }} </a>
    </li>
    @if (helper::appdata()->pickup_delivery != 3)
        <li>
            <a class="{{ request()->is('address*') ? 'active' : '' }}" href="{{ route('address') }}">
                <i class="mx-2 far fa-map"></i>{{ trans('labels.my_addresses') }} </a>
        </li>
    @endif

    @if (helper::allpaymentcheckaddons())
        <li>
            <a class="{{ request()->is('wallet*') ? 'active' : '' }}" href="{{ route('user-wallet') }}">
                <i class="mx-2 far fa-wallet"></i>{{ trans('labels.my_wallet') }} </a>
        </li>
    @endif
    <li>
        <a class="{{ request()->is('refer-earn') ? 'active' : '' }}" href="{{ route('refer-earn') }}">
            <i class="mx-2 far fa-share-nodes"></i>{{ trans('labels.refer_earn') }} </a>
    </li>
    <li>
        <a class="{{ request()->is('delete') ? 'active' : '' }}" href="{{ URL::to('/delete/') }}">
            <i class="mx-2 far fa-trash"></i>{{ trans('labels.delete_profile') }} </a>
    </li>

    <li>
        <a href="javascript:void(0)"
            onclick="logout('{{ route('logout') }}','{{ trans('messages.are_you_sure_logout') }}','{{ trans('labels.logout') }}')">
            <i class="mx-2 fa fa-arrow-right-from-bracket"></i>{{ trans('labels.logout') }} </a>
    </li>
</div>



<!--------- PROFILE CARD --------->

<div class="d-lg-none mb-3 w-100">
    <div class="accordion accordion-flush d-lg-none" id="mobileaccountmenu">
        <div class="accordion-item border rounded-2 overflow-hidden my-0">
            <h2 class="accordion-header">
                <button
                    class="accordion-button fw-500 bg-light accordion_button d-flex gap-2 align-items-center mb-0 collapsed"
                    type="button" data-bs-toggle="collapse" data-bs-target="#flush-collapseOne" aria-expanded="false"
                    aria-controls="flush-collapseOne">
                    <i class="fa-light fa-bars-staggered"></i>
                    <p class="fw-600 mb-0">Navigation</p>
                </button>
            </h2>
            <div id="flush-collapseOne" class="accordion-collapse collapse" data-bs-parent="#mobileaccountmenu"
                style="">
                <div class="p-0 px-3">  
                    <!--------- ACCOUNT MENU --------->
                    <div class="account_menu">
                        <ul>
                            <li>
                                <a class="{{ request()->is('profile') ? 'active' : '' }}"
                                    href="{{ route('user-profile') }}">
                                    <i class="far fa-user"></i>
                                    <span class="px-3">{{ trans('labels.my_profile') }}</span> </a>
                            </li>
                            <li>
                                <a class="{{ request()->is('orders*') ? 'active' : '' }}"
                                    href="{{ route('order-history') }}">
                                    <i class="fa fa-list-check"></i>
                                    <span class="px-3">{{ trans('labels.my_orders') }}</span> </a>
                            </li>
                            <li>
                                <a class="{{ request()->is('favouritelist') ? 'active' : '' }}"
                                    href="{{ route('user-favouritelist') }}">
                                    <i class="fa-regular fa-heart"></i>
                                    <span class="px-3">{{ trans('labels.favourite_list') }}</span> </a>
                            </li>
                            @if (helper::appdata()->pickup_delivery != 3)
                                <li>
                                    <a class="{{ request()->is('address*') ? 'active' : '' }}"
                                        href="{{ route('address') }}">
                                        <i class="fa-regular fa-map"></i>
                                        <span class="px-3">{{ trans('labels.my_addresses') }}</span>
                                    </a>
                                </li>
                            @endif

                            @if (helper::allpaymentcheckaddons())
                                <li>
                                    <a class="{{ request()->is('wallet*') ? 'active' : '' }}"
                                        href="{{ route('user-wallet') }}">
                                        <i class="far fa-wallet"></i>
                                        <span class="px-3">{{ trans('labels.my_wallet') }} </span>
                                    </a>
                                </li>
                            @endif
                            <li>
                                <a class="{{ request()->is('refer-earn') ? 'active' : '' }}"
                                    href="{{ route('refer-earn') }}">
                                    <i class="far fa-share-nodes"></i>
                                    <span class="px-3">{{ trans('labels.refer_earn') }}</span> </a>
                            </li>
                            <li>
                                <a class="{{ request()->is('delete') ? 'active' : '' }}"
                                    href="{{ URL::to('/delete/') }}">
                                    <i class="far fa-trash"></i><span
                                        class="px-3">{{ trans('labels.delete_profile') }}</span></a>
                            </li>
                            <li>
                                <a href="javascript:void(0)"
                                    onclick="logout('{{ route('logout') }}','{{ trans('messages.are_you_sure_logout') }}','{{ trans('labels.logout') }}')">
                                    <i class="fa fa-arrow-right-from-bracket"></i>
                                    <span class="px-3">{{ trans('labels.logout') }}</span>
                                </a>
                            </li>
                        </ul>
                    </div>
                </div>
            </div>
        </div>
    </div>
</div>
© 2026 GrazzMean