shell bypass 403

UnknownSec Shell

: /var/softaculous/moodle30/ [ drwxr-xr-x ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.216.131
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : get_plugin_list.php
<?php

@unlink(__FILE__);

// Validate if the request is from Softaculous
if(php_sapi_name() == 'cli'){
	if($argv[1] != '--pass=[[autopass]]'){
		die("Unauthorized Access");
	}
	if(isset($_SERVER['REMOTE_ADDR'])){
		unset($_SERVER['REMOTE_ADDR']);
	}
	// Define CLI_SCRIPT before including config.php
	define('CLI_SCRIPT', true);
}else{
	if($_REQUEST['pass'] != '[[autopass]]'){
		die("Unauthorized Access");
	}
}

require('config.php');

$pluginman = core_plugin_manager::instance();
$plugins_list = array();
foreach ($pluginman->get_plugins() as $type => $plugins) {
    foreach ($plugins as $shortname => $plugin) {;
        if ($plugin->source == core_plugin_manager::PLUGIN_SOURCE_EXTENSION) {
            $plugins_list[] = $plugin->rootdir;
        }
    }
}

echo '<moodle_plugins>'.json_encode($plugins_list).'</moodle_plugins>';
?>
© 2026 UnknownSec