shell bypass 403

UnknownSec Shell

: /home3/espa7358/www/admin__OLD/ [ drwxr-xr-x ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.217.58
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : newpass.php
<?php
ob_start();
session_start();
require '../_app/Config.inc.php';

$CodePass = filter_input(INPUT_GET, 'key', FILTER_DEFAULT);
if (!$CodePass) :
    $_SESSION['trigger_login'] = Erro("<b>OPPSSS:</b> Você tentou recuperar sua senha sem um código de acesso!", E_USER_ERROR);
    header('Location: ./');
    exit;
else :
    $_SESSION['RecoverPass'] = $CodePass;
endif;

?>
<!DOCTYPE html>
<html lang="pt-br">

<head>
    <meta charset="UTF-8">
    <title>Bem-vindo(a) ao <?= ADMIN_NAME; ?> - Nova Senha!</title>
    <meta name="description" content="<?= ADMIN_DESC; ?>" />
    <meta name="viewport" content="width=device-width,initial-scale=1" />

    <link rel="icon" href="<?= INCLUDE_PATH; ?>/images/favicon.ico">
    <link href='https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800' rel='stylesheet' type='text/css'>
    <link href='https://fonts.googleapis.com/css?family=Source+Code+Pro:300,500' rel='stylesheet' type='text/css'>
    <link rel="base" href="<?= BASE; ?>/admin/">

    <link rel="stylesheet" href="_css/reset.css" />
    <link rel="stylesheet" href="_css/workcontrol.css" />
</head>

<body class="login">
    <div class="container login_container">
        <div class="login_box">
            <img class="login_logo" alt="<?= ADMIN_NAME; ?>" title="<?= ADMIN_NAME; ?>" src="_img/work_icon.png" />
            <form class="login_form" name="work_login" action="" method="post" enctype="multipart/form-data">
                <div class="callback_return m_botton">
                </div>
                <input type="hidden" name="callback" value="Login">
                <input type="hidden" name="callback_action" value="admin_newpass">

                <label class="label">
                    <span class="legend">Sua Nova Senha:</span>
                    <input type="password" name="user_password" placeholder="Senha:" required />
                </label>

                <label class="label">
                    <span class="legend">Repita sua Nova Senha:</span>
                    <input type="password" name="user_password_re" placeholder="Senha:" required />
                </label>

                <img class="form_load none" style="float: right; margin-top: 3px; margin-left: 10px;" alt="Enviando Requisição!" title="Enviando Requisição!" src="_img/load.gif" />
                <button class="btn btn_green fl_right">Criar Nova Senha!</button>
                <div class="clear"></div>
            </form>
            <p class="login_link"><a href="./">&larrhk; Logar-se!</a></p>
        </div>
    </div>

    <div class="login_bg" style="height: 100%"></div>
    <script src="../_cdn/jquery.js"></script>
    <script src="../_cdn/jquery.form.js"></script>
    <script src="_js/workcontrol.js"></script>
</body>

</html>
<?php
ob_end_flush();
© 2026 UnknownSec