shell bypass 403

GrazzMean Shell

: /homepages/2/d455661007/htdocs/_ProviderRestore/altamira21_WEB_VIEJA/webadmin/ [ drwx---r-x ]
Uname: Linux info 3.0 #1337 SMP Tue Jan 01 00:00:00 CEST 2000 all GNU/Linux
Software: Apache
PHP version: 5.6.40 [ PHP INFO ] PHP os: Linux
Server Ip: 217.160.0.194
Your Ip: 216.73.216.203
User: u72294154 (9179942) | Group: ftpusers (600)
Safe Mode: OFF
Disable Function:
NONE
upload mass deface mass delete console

name : index.php 
<?
 /* SERVIDORES DONDE ESTÁ DISPONIBLE $_SERVER['DOCUMENT_ROOT'] */
 if(!isset($_SERVER["DOCUMENT_ROOT"])){
	$_SERVER["DOCUMENT_ROOT"]=substr($_SERVER['SCRIPT_FILENAME'] , 0 , -strlen($_SERVER['PHP_SELF'])+1 );
}
include $_SERVER['DOCUMENT_ROOT']."/webadmin/includes/global.lib.php";
if (isset($_GET["logout"])) {
	unset($_SESSION["zonaprivada"]["uuid_usuario"]);
	header("Location: /webadmin/");
	exit;
}
if (isset($_SESSION["zonaprivada"]["uuid_usuario"])) {
		cabecera_admin();
		include $_SERVER["DOCUMENT_ROOT"]."/webadmin/includes/inicio/inicio.inc.php";		
		pie_admin();
		exit;
}
if (isset($_POST["login"])) {
	mysql_con();
	if (login($_POST['user'], $_POST['pass'])) {
		cabecera_admin();
		include $_SERVER["DOCUMENT_ROOT"]."/webadmin/includes/inicio/inicio.inc.php";
		pie_admin();
		exit();
	} else {
		//error
		$error="Usuario o contrase&ntilde;a invalida.";
	}
}
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>WEBADMIN</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link href="/webadmin/css/main.css" rel="stylesheet" type="text/css" />
<link href="/webadmin/js/shadowbox/shadowbox.css" rel="stylesheet" type="text/css" />
<link href="http://fonts.googleapis.com/css?family=Cuprum" rel="stylesheet" type="text/css" />

<!--<script src="/webadmin/js/jquery-1.4.4.js" type="text/javascript"></script>-->
<script src="/webadmin/js/jquery-1.7.1.min.js" type="text/javascript"></script>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js"></script> 

<script type="text/javascript" src="/webadmin/js/spinner/jquery.mousewheel.js"></script>
<script type="text/javascript" src="/webadmin/js/spinner/ui.spinner.js"></script>

<script type="text/javascript" src="/webadmin/js/fileManager/elfinder.min.js"></script>

<script type="text/javascript" src="/webadmin/js/tiny_mce/tiny_mce.js"></script>
<!--<script type="text/javascript" src="/webadmin/js/wysiwyg/jquery.wysiwyg.js"></script>
<script type="text/javascript" src="/webadmin/js/wysiwyg/wysiwyg.image.js"></script>
<script type="text/javascript" src="/webadmin/js/wysiwyg/wysiwyg.link.js"></script>
<script type="text/javascript" src="/webadmin/js/wysiwyg/wysiwyg.table.js"></script>

<script type="text/javascript" src="/webadmin/js/flot/jquery.flot.js"></script>
<script type="text/javascript" src="/webadmin/js/flot/jquery.flot.pie.js"></script>
<script type="text/javascript" src="/webadmin/js/flot/excanvas.min.js"></script>-->

<script type="text/javascript" src="/webadmin/js/dataTables/jquery.dataTables.js"></script>
<script type="text/javascript" src="/webadmin/js/dataTables/colResizable.min.js"></script>

<script type="text/javascript" src="/webadmin/js/forms/forms.js"></script>
<script type="text/javascript" src="/webadmin/js/forms/autogrowtextarea.js"></script>
<script type="text/javascript" src="/webadmin/js/forms/autotab.js"></script>
<script type="text/javascript" src="/webadmin/js/forms/jquery.validationEngine-es.js"></script>
<script type="text/javascript" src="/webadmin/js/forms/jquery.validationEngine.js"></script>

<script type="text/javascript" src="/webadmin/js/colorPicker/colorpicker.js"></script>

<script type="text/javascript" src="/webadmin/js/uploader/plupload.js"></script>
<script type="text/javascript" src="/webadmin/js/uploader/plupload.html5.js"></script>
<script type="text/javascript" src="/webadmin/js/uploader/plupload.html4.js"></script>
<script type="text/javascript" src="/webadmin/js/uploader/jquery.plupload.queue.js"></script>

<script type="text/javascript" src="/webadmin/js/ui/progress.js"></script>
<script type="text/javascript" src="/webadmin/js/ui/jquery.jgrowl.js"></script>
<script type="text/javascript" src="/webadmin/js/ui/jquery.tipsy.js"></script>
<script type="text/javascript" src="/webadmin/js/ui/jquery.alerts.js"></script>

<script type="text/javascript" src="/webadmin/js/jBreadCrumb.1.1.js"></script>
<script type="text/javascript" src="/webadmin/js/cal.min.js"></script>
<script type="text/javascript" src="/webadmin/js/jquery.collapsible.min.js"></script>
<script type="text/javascript" src="/webadmin/js/jquery.ToTop.js"></script>
<script type="text/javascript" src="/webadmin/js/jquery.listnav.js"></script>
<script type="text/javascript" src="/webadmin/js/jquery.sourcerer.js"></script>

<script type="text/javascript" src="/webadmin/js/shadowbox/shadowbox.js"></script>

<script type="text/javascript" src="/webadmin/js/custom.js"></script>
</head>
<body>

<!-- Top navigation bar -->
<div id="topNav">
    <div class="fixed">
        <div class="wrapper">
            <div class="backTo"><a href="/" title=""><img src="images/icons/topnav/mainWebsite.png" alt="" /><span><?=$_SERVER['SERVER_NAME']?></span></a></div>
            <div class="userNav">
               <?/* <ul>
                    <li><a href="#" title=""><img src="images/icons/topnav/register.png" alt="" /><span>Register</span></a></li>
                    <li><a href="#" title=""><img src="images/icons/topnav/contactAdmin.png" alt="" /><span>Contact admin</span></a></li>
                    <li><a href="#" title=""><img src="images/icons/topnav/help.png" alt="" /><span>Help</span></a></li>
                </ul>
				*/?>
            </div>
            <div class="fix"></div>
        </div>
    </div>
</div>

<!-- Login form area -->
<div class="loginWrapper">
	<div class="loginLogo"><img src="images/logo.png" alt="" /></div>
    <div class="loginPanel">
        <div class="head"><h5 class="iUser">Login</h5></div>
        <form action="<? echo $_SERVER['SCRIPT_NAME']; ?>" method="post" id="valid" class="mainForm">
            <fieldset>
                <div class="loginRow noborder">
                    <label for="req1">Usuario:</label>
                    <div class="loginInput"><input type="text" name="user" class="validate[required]" id="req1" /></div>
                    <div class="fix"></div>
                </div>
                
                <div class="loginRow">
                    <label for="req2">Clave:</label>
                    <div class="loginInput"><input type="password" name="pass" class="validate[required]" id="req2" /></div>
                    <div class="fix"></div>
                </div>
                
                <div class="loginRow">
                    <div class="rememberMe"><?/*<input type="checkbox" id="check2" name="chbox" /><label>Remember me</label>*/?></div>
                    <input type="submit" value="Entrar" class="greyishBtn submitForm" name="login" />
                    <div class="fix"></div>
                </div>
            </fieldset>
        </form>
    </div>
	 <? if ($error !="" ) {
		echo '
				<div class="nNote nFailure hideit" style="width: 320px;">
				<p><strong>ERROR: </strong>'.$error.'</p>
				</div>
			 ';
	}
	?>
</div>

<!-- Footer -->
<div id="footer">
	<div class="wrapper">
    	<span>&copy; Copyright 2012. Todos los derechos reservados.</span>
    </div>
</div>

</body>
</html>
© 2026 GrazzMean