Redirect 302 redirect from GET @app_index_home (d123a6)

GET http://novec.alternative-it.net/?filename=..%2F..%2F..%2F..%2Fetc%2Fpasswd

Response
302 Found
Browse referrer URL
IP
127.0.0.1
Profiled on
Token
cd7c5d

Request / Response

Request

GET Parameters

Key Value
filename 
"../../../../etc/passwd"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\HomeController::index"
_firewall_context 
"security.firewall.map.context.main"
_redirected 
true
_route 
"app_index_home"
_route_params 
[]
_security_firewall_run 
"_security_main"
_stopwatch_token 
"ab1df3"

Request Headers

Header Value
accept 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
accept-encoding 
"gzip, deflate, br"
accept-language 
"en-GB,en;q=0.5"
connection 
"Keep-Alive"
cookie 
"PHPSESSID=157b0rlrjtla0vk2vo3n9vfifn; sf_redirect=%7B%22token%22%3A%22d123a6%22%2C%22route%22%3A%22app_index_home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CHomeController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fnovec%5C%2Fsrc%5C%2FController%5C%2FHomeController.php%22%2C%22line%22%3A37%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D"
host 
"novec.alternative-it.net"
origin 
"https://novec.alternative-it.net"
referer 
"https://novec.alternative-it.net/"
sec-ch-ua 
""Chromium";v="124", "Not_A Brand";v="8""
sec-ch-ua-mobile 
"?0"
sec-ch-ua-platform 
""Linux""
sec-fetch-dest 
"document"
sec-fetch-mode 
"navigate"
sec-fetch-site 
"cross-site"
upgrade-insecure-requests 
"1"
user-agent 
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
x-forwarded-for 
"45.88.138.44"
x-forwarded-host 
"novec.alternative-it.net"
x-forwarded-server 
"novec.alternative-it.net"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Wed, 15 Apr 2026 20:09:06 GMT"
location 
"http://novec.alternative-it.net/login"
x-debug-token 
"cd7c5d"

Cookies

Request Cookies

Key Value
PHPSESSID 
"157b0rlrjtla0vk2vo3n9vfifn"
sf_redirect 
"{"token":"d123a6","route":"app_index_home","method":"GET","controller":{"class":"App\\Controller\\HomeController","method":"index","file":"\/var\/www\/novec\/src\/Controller\/HomeController.php","line":37},"status_code":302,"status_text":"Found"}"

Response Cookies

No response cookies

Session 3

Session Metadata

Key Value
Created 
"Wed, 15 Apr 26 20:02:49 +0000"
Last used 
"Wed, 15 Apr 26 20:09:05 +0000"
Lifetime 
0

Session Attributes

Attribute Value
_profiler_search_end 
null
_profiler_search_ip 
null
_profiler_search_limit 
"20"
_profiler_search_method 
null
_profiler_search_start 
null
_profiler_search_status_code 
null
_profiler_search_token 
null
_profiler_search_type 
"request"
_profiler_search_url 
null
_security.main.target_path 
"http://novec.alternative-it.net/?filename=..%2F..%2F..%2F..%2Fetc%2Fpasswd"

Session Usage

3 Usages
Stateless check enabled
Usage
Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage:41
Show trace 
[
  [
    "file" => "/var/www/novec/vendor/symfony/security-core/Authentication/Token/Storage/UsageTrackingTokenStorage.php"
    "line" => 41
    "function" => "getMetadataBag"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-http/Firewall/AccessListener.php"
    "line" => 78
    "function" => "getToken"
    "class" => "Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-bundle/Debug/WrappedLazyListener.php"
    "line" => 46
    "function" => "authenticate"
    "class" => "Symfony\Component\Security\Http\Firewall\AccessListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-bundle/Security/LazyFirewallContext.php"
    "line" => 60
    "function" => "authenticate"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php"
    "line" => 80
    "function" => "__invoke"
    "class" => "Symfony\Bundle\SecurityBundle\Security\LazyFirewallContext"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-http/Firewall.php"
    "line" => 95
    "function" => "callListeners"
    "class" => "Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 116
    "function" => "onKernelRequest"
    "class" => "Symfony\Component\Security\Http\Firewall"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 220
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 56
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 139
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 157
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 76
    "function" => "handleRaw"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/Kernel.php"
    "line" => 197
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
    "line" => 35
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/autoload_runtime.php"
    "line" => 29
    "function" => "run"
    "class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/public/index.php"
    "line" => 5
    "args" => [
      "/var/www/novec/vendor/autoload_runtime.php"
    ]
    "function" => "require_once"
  ]
]
Symfony\Component\Security\Http\Firewall\ExceptionListener:28
Show trace 
[
  [
    "file" => "/var/www/novec/vendor/symfony/security-http/Util/TargetPathTrait.php"
    "line" => 28
    "function" => "set"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-http/Firewall/ExceptionListener.php"
    "line" => 224
    "function" => "saveTargetPath"
    "class" => "Symfony\Component\Security\Http\Firewall\ExceptionListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-http/Firewall/ExceptionListener.php"
    "line" => 195
    "function" => "setTargetPath"
    "class" => "Symfony\Component\Security\Http\Firewall\ExceptionListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-http/Firewall/ExceptionListener.php"
    "line" => 148
    "function" => "startAuthentication"
    "class" => "Symfony\Component\Security\Http\Firewall\ExceptionListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/security-http/Firewall/ExceptionListener.php"
    "line" => 103
    "function" => "handleAccessDeniedException"
    "class" => "Symfony\Component\Security\Http\Firewall\ExceptionListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 116
    "function" => "onKernelException"
    "class" => "Symfony\Component\Security\Http\Firewall\ExceptionListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 220
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 56
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 139
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 239
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 91
    "function" => "handleThrowable"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/Kernel.php"
    "line" => 197
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
    "line" => 35
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/autoload_runtime.php"
    "line" => 29
    "function" => "run"
    "class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/public/index.php"
    "line" => 5
    "args" => [
      "/var/www/novec/vendor/autoload_runtime.php"
    ]
    "function" => "require_once"
  ]
]
Symfony\Component\Security\Http\Firewall\ContextListener:171
Show trace 
[
  [
    "file" => "/var/www/novec/vendor/symfony/security-http/Firewall/ContextListener.php"
    "line" => 171
    "function" => "remove"
    "class" => "Symfony\Component\HttpFoundation\Session\Session"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/Debug/WrappedListener.php"
    "line" => 116
    "function" => "onKernelResponse"
    "class" => "Symfony\Component\Security\Http\Firewall\ContextListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 220
    "function" => "__invoke"
    "class" => "Symfony\Component\EventDispatcher\Debug\WrappedListener"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/EventDispatcher.php"
    "line" => 56
    "function" => "callListeners"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php"
    "line" => 139
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\EventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 214
    "function" => "dispatch"
    "class" => "Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 265
    "function" => "filterResponse"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/HttpKernel.php"
    "line" => 91
    "function" => "handleThrowable"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/http-kernel/Kernel.php"
    "line" => 197
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\HttpKernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php"
    "line" => 35
    "function" => "handle"
    "class" => "Symfony\Component\HttpKernel\Kernel"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/vendor/autoload_runtime.php"
    "line" => 29
    "function" => "run"
    "class" => "Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner"
    "type" => "->"
  ]
  [
    "file" => "/var/www/novec/public/index.php"
    "line" => 5
    "args" => [
      "/var/www/novec/vendor/autoload_runtime.php"
    ]
    "function" => "require_once"
  ]
]

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"29b38c89a77c26fde83d0602d8596b61"
DATABASE_URL 
"postgresql://postgres:root-1445-root@127.0.0.1:5432/make_dam_db?serverVersion=15&charset=utf8"
MAILER_DSN 
"gmail://USERNAME:PASSWORD@default"
MESSENGER_TRANSPORT_DSN 
"doctrine://default?auto_setup=0"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
CONTEXT_DOCUMENT_ROOT 
"/var/www/novec/public"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/novec/public"
GATEWAY_INTERFACE 
"CGI/1.1"
HTTP_ACCEPT 
"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
HTTP_ACCEPT_ENCODING 
"gzip, deflate, br"
HTTP_ACCEPT_LANGUAGE 
"en-GB,en;q=0.5"
HTTP_CONNECTION 
"Keep-Alive"
HTTP_COOKIE 
"PHPSESSID=157b0rlrjtla0vk2vo3n9vfifn; sf_redirect=%7B%22token%22%3A%22d123a6%22%2C%22route%22%3A%22app_index_home%22%2C%22method%22%3A%22GET%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CHomeController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fnovec%5C%2Fsrc%5C%2FController%5C%2FHomeController.php%22%2C%22line%22%3A37%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D"
HTTP_HOST 
"novec.alternative-it.net"
HTTP_ORIGIN 
"https://novec.alternative-it.net"
HTTP_REFERER 
"https://novec.alternative-it.net/"
HTTP_SEC_CH_UA 
""Chromium";v="124", "Not_A Brand";v="8""
HTTP_SEC_CH_UA_MOBILE 
"?0"
HTTP_SEC_CH_UA_PLATFORM 
""Linux""
HTTP_SEC_FETCH_DEST 
"document"
HTTP_SEC_FETCH_MODE 
"navigate"
HTTP_SEC_FETCH_SITE 
"cross-site"
HTTP_UPGRADE_INSECURE_REQUESTS 
"1"
HTTP_USER_AGENT 
"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
HTTP_X_FORWARDED_FOR 
"45.88.138.44"
HTTP_X_FORWARDED_HOST 
"novec.alternative-it.net"
HTTP_X_FORWARDED_SERVER 
"novec.alternative-it.net"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"filename=../../../../etc/passwd"
REDIRECT_QUERY_STRING 
"filename=../../../../etc/passwd"
REDIRECT_STATUS 
"200"
REDIRECT_URL 
"/"
REMOTE_ADDR 
"127.0.0.1"
REMOTE_PORT 
"55430"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"http"
REQUEST_TIME 
1776283746
REQUEST_TIME_FLOAT 
1776283746.1703
REQUEST_URI 
"/?filename=../../../../etc/passwd"
SCRIPT_FILENAME 
"/var/www/novec/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"127.0.0.1"
SERVER_ADMIN 
"novec@alternative-it.net"
SERVER_NAME 
"novec.alternative-it.net"
SERVER_PORT 
"80"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.55 (Ubuntu) Server at novec.alternative-it.net Port 80</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.55 (Ubuntu)"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,DATABASE_URL,MESSENGER_TRANSPORT_DSN,MAILER_DSN"