NelcPanel Security Test

Verifying that user-level PHP cannot execute privileged system commands.

How this works: Each button attempts to run a critical system command as the current PHP user. If the panel is properly secured, all commands should fail with "Permission denied" or "Operation not permitted". If any command succeeds, your sandboxing has a vulnerability.

Apache Reload CRITICAL

Attempt to reload the web server. Should fail — only root can do this.

MariaDB Restart CRITICAL

Attempt to restart the database server. Should fail.

Read /etc/shadow CRITICAL

Attempt to read the shadow password file. Should fail — root-only.

List /root Directory CRITICAL

Attempt to list root's home directory. Should fail.

Delete /etc/hostname CRITICAL

Attempt to delete a system file. Should fail.

Modify root Password CRITICAL

Attempt to lock the root account. Should fail.

Restart SSH CRITICAL

Attempt to restart SSH daemon. Should fail.

Read Other User's Files CRITICAL

Attempt to read another user's .bashrc. Should fail.

Install Package CRITICAL

Attempt to install a package via apt. Should fail.

Delete Crontab CRITICAL

Attempt to delete /etc/crontab. Should fail.