shell bypass 403

UnknownSec Shell

: /var/softaculous/moodle39/ [ drwxr-xr-x ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 172.67.154.186
Your Ip: 216.73.217.141
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : add_admin.php
<?php

@unlink(__FILE__);

//Validate if the request is from Softaculous
if($_REQUEST['pass'] != '[[autopass]]'){
    die("Unauthorized Access");
}

require_once('config.php');
require_once('lib/adminlib.php');

$user_id = (int) '[[user_id]]';

$admins = array();
foreach (explode(',', $CFG->siteadmins) as $admin) {
    $admin = (int)$admin;
    if ($admin) {
        $admins[$admin] = $admin;
    }
}

$logstringold = implode(', ', $admins);

$admins[$user_id] = $user_id;

$logstringnew = implode(', ', $admins);

set_config('siteadmins', implode(',', $admins));
add_to_config_log('siteadmins', $logstringold, $logstringnew, 'core');

$ret = array();
$ret['done'] = 1;

echo '<add_admin>'.serialize($ret).'</add_admin>';

exit(0);
© 2026 UnknownSec