shell bypass 403

UnknownSec Shell

: /home/espa7358/www/admin__OLD/ [ drwxr-xr-x ]
Uname: Linux dedi-15171674.espacofacial.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
Software: Apache
PHP version: 8.2.33 [ PHP INFO ] PHP os: Linux
Server Ip: 104.21.5.151
Your Ip: 216.73.216.229
User: espa7358 (1004) | Group: espa7358 (1003)
Safe Mode: OFF
Disable Function:
NONE

name : index.php
<?php
ob_start();
session_start();
require '../_app/Config.inc.php';

if (isset($_SESSION['userLogin']) && isset($_SESSION['userLogin']['user_level']) && $_SESSION['userLogin']['user_level'] >= 6) :
    header('Location: dashboard.php?wc=home');
    exit;
endif;

$Cookie = filter_input(INPUT_COOKIE, 'workcontrol', FILTER_VALIDATE_EMAIL);
?>
<!DOCTYPE html>
<html lang="pt-br">

<head>
    <meta charset="UTF-8">
    <meta name="mit" content="2019-09-17T00:12:51-03:00+17631">
    <title>Bem-vindo(a) ao <?= ADMIN_NAME; ?> - Entrar!</title>
    <meta name="description" content="<?= ADMIN_DESC; ?>" />
    <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=0" />
    <meta name="robots" content="noindex, nofollow" />

    <link rel="icon" href="<?= INCLUDE_PATH; ?>/images/favicon.ico">
    <link href='https://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800' rel='stylesheet' type='text/css'>
    <link href='https://fonts.googleapis.com/css?family=Source+Code+Pro:300,500' rel='stylesheet' type='text/css'>
    <link rel="base" href="<?= BASE; ?>/admin/">

    <link rel="stylesheet" href="_css/reset.css" />
    <link rel="stylesheet" href="_css/workcontrol.css" />
</head>

<body class="login">
    <div class="container login_container">
        <div class="login_box">
            <img class="login_logo" alt="<?= ADMIN_NAME; ?>" title="<?= ADMIN_NAME; ?>" src="_img/work_icon.png" />
            <form class="login_form" name="work_login" action="" method="post" enctype="multipart/form-data">
                <div class="callback_return m_botton">
                    <?php
                    if (!empty($_SESSION['trigger_login'])) :
                        echo $_SESSION['trigger_login'];
                        unset($_SESSION['trigger_login']);
                    endif;
                    ?>
                </div>
                <input type="hidden" name="callback" value="Login">
                <input type="hidden" name="callback_action" value="admin_login">

                <label class="label">
                    <span class="legend">Seu Login:</span>
                    <input type="text" name="user_email" value="<?= $Cookie ? $Cookie : ''; ?>" placeholder="Login:" required />
                </label>

                <label class="label">
                    <span class="legend">Sua Senha:</span>
                    <input type="password" name="user_password" placeholder="Senha:" required />
                </label>

                <label class="label_check">
                    <input type="checkbox" name="user_remember" value="1" <?= $Cookie ? 'checked' : '' ?>> Lembrar!
                </label>

                <img class="form_load none" style="float: right; margin-top: 3px; margin-left: 10px;" alt="Enviando Requisição!" title="Enviando Requisição!" src="_img/load.gif" />
                <button class="btn btn_green fl_right">Entrar!</button>
                <div class="clear"></div>
            </form>
            <p class="login_link"><a href="../"><?= SITE_NAME; ?>!</a> <?php /*&nbsp;&nbsp;&nbsp; <a href="recover.php">Perdeu sua senha?</a>*/ ?></p>
        </div>
    </div>

    <div class="login_bg" style="height: 100%"></div>
    <script src="../_cdn/jquery.js"></script>
    <script src="../_cdn/jquery.form.js"></script>
    <script src="_js/workcontrol.js"></script>
</body>

</html>
<?php
ob_end_flush();
© 2026 UnknownSec