shell bypass 403
UnknownSec Shell
:
/
home
/
forge
/
lolasweb.brannanatkinson.com
/
vendor
/
statamic
/
cms
/
src
/
GraphQL
/
Queries
/ [
drwxrwxr-x
]
upload
mass deface
mass delete
console
info server
name :
NavQuery.php
<?php namespace Statamic\GraphQL\Queries; use Facades\Statamic\API\ResourceAuthorizer; use GraphQL\Type\Definition\Type; use Statamic\Facades\GraphQL; use Statamic\Facades\Nav; use Statamic\GraphQL\Middleware\AuthorizeSubResources; use Statamic\GraphQL\Types\NavType; class NavQuery extends Query { protected $attributes = [ 'name' => 'nav', ]; protected $middleware = [ AuthorizeSubResources::class, ]; public function type(): Type { return GraphQL::type(NavType::NAME); } public function args(): array { return [ 'handle' => GraphQL::string(), ]; } public function resolve($root, $args) { return Nav::findByHandle($args['handle']); } public function subResourceArg() { return 'handle'; } public function allowedSubResources() { return ResourceAuthorizer::allowedSubResources('graphql', 'navs'); } }
© 2026 UnknownSec