GET https://pushup-alert.quantior.io/?src=..%5C..%5C..%5C..%5C..%5Cetc%2Fpasswd

Response
200 OK
Browse referrer URL
IP
45.88.138.44
Profiled on
Token
032bc4

mainController :: index

Request

GET Parameters

Key Value
src 
"..\..\..\..\..\etc/passwd"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_access_control_attributes 
null
_controller 
"App\Controller\mainController::index"
_firewall_context 
"security.firewall.map.context.main"
_links 
Symfony\Component\WebLink\GenericLinkProvider {#879
  -links: [
    880 => Symfony\Component\WebLink\Link {#880
      -rel: [
        "preload" => "preload"
      ]
      -attributes: [
        "as" => "style"
      ]
      -href: "/assets/styles/app-eFjvAR6.css"
    }
  ]
}
_route 
"main"
_route_params 
[]
_security_authenticators 
[]
_security_skipped_authenticators 
[]
_stopwatch_token 
"5d9bc1"

Request Headers

Header Value
accept 
"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
accept-encoding 
"gzip, deflate, br"
accept-language 
"en-US,en;q=0.9"
host 
"pushup-alert.quantior.io"
origin 
"https://pushup-alert.quantior.io"
referer 
"https://pushup-alert.quantior.io/"
user-agent 
"Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Tue, 09 Jun 2026 08:31:53 GMT"
link 
"</assets/styles/app-eFjvAR6.css>; rel="preload"; as="style""
x-debug-token 
"032bc4"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"a3650124867d604691b21c6249e2922f"
DATABASE_URL 
"postgresql://app:!ChangeMe!@127.0.0.1:5432/app?serverVersion=16&charset=utf8"
MAILER_DSN 
"null://null"
MESSENGER_TRANSPORT_DSN 
"doctrine://default?auto_setup=0"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
CONTEXT_DOCUMENT_ROOT 
"/var/www/pushup-alert/public/"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/pushup-alert/public/"
GATEWAY_INTERFACE 
"CGI/1.1"
HTTPS 
"on"
HTTP_ACCEPT 
"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
HTTP_ACCEPT_ENCODING 
"gzip, deflate, br"
HTTP_ACCEPT_LANGUAGE 
"en-US,en;q=0.9"
HTTP_HOST 
"pushup-alert.quantior.io"
HTTP_ORIGIN 
"https://pushup-alert.quantior.io"
HTTP_REFERER 
"https://pushup-alert.quantior.io/"
HTTP_USER_AGENT 
"Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
"src=..\..\..\..\..\etc/passwd"
REMOTE_ADDR 
"45.88.138.44"
REMOTE_PORT 
"27968"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1780993913
REQUEST_TIME_FLOAT 
1780993913.5368
REQUEST_URI 
"/?src=..\..\..\..\..\etc/passwd"
SCRIPT_FILENAME 
"/var/www/pushup-alert/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"37.59.108.192"
SERVER_ADMIN 
"[no address given]"
SERVER_NAME 
"pushup-alert.quantior.io"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.62 (Ubuntu) Server at pushup-alert.quantior.io Port 443</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.62 (Ubuntu)"
SSL_TLS_SNI 
"pushup-alert.quantior.io"
SYMFONY_DOTENV_PATH 
"/var/www/pushup-alert/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,DATABASE_URL,MESSENGER_TRANSPORT_DSN,MAILER_DSN"