LeakIX - Host shopware6.sw5-test.de

Domain shopware6.sw5-test.de

Germany

Mittwald CM Service GmbH & Co. KG

Software information

Apache Apache

tcp/443

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 156.67.239.253
Domain: shopware6.sw5-test.de
Port: 443
URL: https://shopware6.sw5-test.de/_profiler/empty/search/results

First seen 2022-08-20 22:54
Last seen 2024-09-26 13:31
Open for 767 days
- Fingerprint: 407cf4363b0e62fafca67e07e98cbed9e98cbed9e98cbed9e98cbed9e98cbed9
```
Symfony profiler enabled:
https://shopware6.sw5-test.de/_profiler/empty/search/results
```
  Found on 2024-09-26 13:31
Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-09-26 13:31

HTTP/1.1 200 OK
Date: Thu, 26 Sep 2024 13:31:23 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: 5ca49d
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/5ca49d
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=874frqf9fvb68g3i4n91kn265n; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=874frqf9fvb68g3i4n91kn265n; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=49f3bf0ec6f9bcfdee49d5b26ccd52.3dc07K9b8xuFUq9Fa7vyVxfBkuiUxeOP5IdJMz7i4N0.6ZgZppY4ol_NJt0_Oe2aPmepwqbnlafVocB5alCOlLWtmky73xKUccMB-g; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=d55e38f.Zp4oNewzXCEtBrEMRNe87RV0BK1OJY9OcTxLlTL1uOg.FflBXd1aCnZpZcVqN-b6iCU1ReJ8b-h8RXcq0GOw16JQ5GRth0oaY1xc0g; path=/; secure; httponly; samesite=lax
Vary: User-Agent,Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2 days ago by HttpPlugin

Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-09-24 11:29

HTTP/1.1 200 OK
Date: Tue, 24 Sep 2024 11:29:57 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: 2a978b
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/2a978b
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=5han6gf6k677q24945npmhj5rf; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=5han6gf6k677q24945npmhj5rf; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=02fa2e913.qH6izlFghgtpEQE0yb2Huc4B79o27qYtveFys2V0hmQ._BjGixwm42w2S1tYsMfTjvZWno9b2ZBG36xH_y8utBKRHdChFCzobV5hOQ; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=6a07de2140f05d.rd16wBsUpolHf4VMnF0stYU3sw2NyAVXnAiigEtDxeY.mLQwhm1s6v8uLtAW5Q5c3tcOyT2g8VwGpH_K4x4qhJXLrzDzbSPWuCAw4g; path=/; secure; httponly; samesite=lax
Vary: User-Agent,Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-24 by HttpPlugin

Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-09-16 05:20

HTTP/1.1 200 OK
Date: Mon, 16 Sep 2024 05:20:08 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: e79935
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/e79935
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=kdcjtgjjg1smbro01e1f0o3qcp; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=kdcjtgjjg1smbro01e1f0o3qcp; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=2cb58975fceb7460bb7c16470.OAohmzXdtPBskLP8XKIdOEpFK4veDbQ6J3avrsInc5E.dVt34UHv0N0c4uyLHfhHSg0JQO-MTNpiVUXA1JIQP9Z7aFbaAYrtlF34-g; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=132264154d3b4b88ad8bddc8.95jWV1w3d__qsNaKKElf9HASWJBTTm7RzOdLZatNqmw.lPmGem9QPquv0YS-cn0dhDl9EakXOjmGgoMBAMAY5w2k9ZUtJXVAsL_a4g; path=/; secure; httponly; samesite=lax
Vary: User-Agent,Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-16 by HttpPlugin

Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-09-14 19:32

HTTP/1.1 200 OK
Date: Sat, 14 Sep 2024 19:32:54 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: cdc9db
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/cdc9db
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=31a5kie0v3shms8pc84dd6pkju; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=31a5kie0v3shms8pc84dd6pkju; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=56f0ed8e52aca0fc884.0rT2oFiF_wew6WdIIWoydDQDPq8d6B71oogZbW01DfE.442O8x7xoFX_kSU6bRNoDkV0UMotp1yEw7FuHRx8VZKX16bDLNexZMaTKg; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=2c6c7.xEiKiA7UV4gkQsLXeNK6XrtB263yxeQz3bNKfgUHziI._CHS0Ea6PMQTb66kSKLIZ-F2gfqxso9a8IIIU0pkgFvwJMvBVosf5G4QsQ; path=/; secure; httponly; samesite=lax
Vary: User-Agent,Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-14 by HttpPlugin

Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-09-12 23:12

HTTP/1.1 200 OK
Date: Thu, 12 Sep 2024 23:12:07 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: 229edb
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/229edb
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=0s0n47fb5cdg5hcmqf1d22sun3; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=0s0n47fb5cdg5hcmqf1d22sun3; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=618ef0.xYEXkaUR0EhoN5_w-bmNpC6fnAszHbIar5VFUP9FZLo.scpQ3cNpsn85Bqu8u4z08kPe7HMEMNdx5tkqKclyAOuA0VXa50KUD11h7A; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=c6b43ee56.iA9-RmQrJuj2L3RaVC7yynSD0pCrpxFuMhC859Inzk8.6zYzBzJ-atC5QzgubBrEuCXlgPH5410paHHslf8XpnnsZxYeLmJs36VLRA; path=/; secure; httponly; samesite=lax
Vary: User-Agent,Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-12 by HttpPlugin

Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-09-10 23:20

HTTP/1.1 200 OK
Date: Tue, 10 Sep 2024 23:20:48 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: 2fbda3
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/2fbda3
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=eln8m0bp4h79trof5cs6lrdsi7; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=eln8m0bp4h79trof5cs6lrdsi7; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=4b2442ac233beec8553d2306a297.O0rzS4MtqjAHSedDONtVF_fxl6KiQ1sMdUOofm9k6A0.VSedBvFJ-3VNCKgSTYMkVaWQ7sHUMGl6NAn-IVwCm2RDDpI5zXv1QjAG3w; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=51393315d9e377ac85400a3.lkbcRKNuRJAo0qbVaL9EmJhlSZ_Vbmu9_up8XpD1f8M.7xSuBptWENoRhMO9IM9w_cgWZPKbBx-In5tJOfyFE7PHIOkwkRYq_ECa5w; path=/; secure; httponly; samesite=lax
Vary: User-Agent,Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-10 by HttpPlugin

Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-09-08 17:27

HTTP/1.1 200 OK
Date: Sun, 08 Sep 2024 17:27:55 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: 04f0fb
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/04f0fb
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=83apcvc8hqjm8v5i40kaj653q1; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=83apcvc8hqjm8v5i40kaj653q1; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=cc6e0bee81f3d.DOA1RtNPMNTdeP9Q7a2_K4Qqnv2QcaL_in1BxkrctAU.RtRUL4osAPmCNIUTjJiMTtVfy4X6MOSv508VjQuVh2pdmhgLgRxbp4gCug; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=b90f2c69180b68d4b5ca639e78.OcuCJRVQzov2Hyvf31uenhok1EqcIieivE9GvESG4hM.VaHuUHM2gO3BbmOtqhjQ93RclwelGkHy1RgXxjHkqX9wushcRGen-a9PXA; path=/; secure; httponly; samesite=lax
Vary: User-Agent,Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-08 by HttpPlugin

Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-09-06 15:55

HTTP/1.1 200 OK
Date: Fri, 06 Sep 2024 15:55:52 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: 012d4a
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/012d4a
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=r4dsu8kjq1nvrlp2aioo9gv8v8; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=r4dsu8kjq1nvrlp2aioo9gv8v8; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=0759a58aad088784a228a5cc3b9.WpBPoiX3OqpPyp8gRt6SXwSM2V4gN4J2txmB4CljZ1o.Fdh7yUSmDv9-mPZFfuvlZzXO4Qt3duc7w1Pr2VwVMAgcpwqaTI5l3SX-7A; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=e89.4hei9jldxhtLBljyMRySHf-1JLq_XZjGLYa4v2491CQ.hl_gkGoWrkwkay60SXLDW7XBfffNP-6EG7bo1DFH5VWPcu2PbhCWVzFuNw; path=/; secure; httponly; samesite=lax
Vary: User-Agent,Accept-Encoding
Upgrade: h2,h2c
Connection: Upgrade, close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-09-06 by HttpPlugin

Create report

Open service 156.67.239.253:443 · shopware6.sw5-test.de

2024-08-18 11:55

HTTP/1.1 200 OK
Date: Sun, 18 Aug 2024 11:55:58 GMT
Server: Apache
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin-when-cross-origin
X-Debug-Token: 659677
X-Debug-Token-Link: https://shopware6.sw5-test.de/_profiler/659677
X-Robots-Tag: noindex
sw-invalidation-states: 
Age: 0
X-Symfony-Cache: GET /: miss, store
Cache-Control: no-cache, private
Set-Cookie: session-=fah9m8mbh4p8bidf8n5ps97rqt; path=/; secure; HttpOnly; SameSite=lax
Set-Cookie: session-=fah9m8mbh4p8bidf8n5ps97rqt; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.checkout.line-item.add]=f7ff3244db5b9da511a863.lS9Y_-lKO-rNiIxX09nyZCh2zZY8DEsmmxzKDoLgPXg.9kwUu6IgC5KvxvsikbKBAl5Dmq5GaABHo0n4SdfQCyLRGDuU3SxCpLf6wQ; path=/; secure; httponly; samesite=lax
Set-Cookie: csrf[frontend.store-api.proxy]=754a68.5R1fEly4GPDtwdWchDL4l_ZBinwWCbD5rIVaFTpCPYA.0C8XJBaAVaC_r-CuxWGhxcAs_TYvcOLI3M8xJVsSD8SyaTtQA-BVlbiv5Q; path=/; secure; httponly; samesite=lax
Upgrade: h2,h2c
Connection: Upgrade, close
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

Found 2024-08-18 by HttpPlugin

Create report

shopware6.sw5-test.de

Fingerprint:

4f57580498834d463c75bd6cad9b2865dcbb098229ed4591ec6a396d41b8224e

CN:

shopware6.sw5-test.de

Key:

RSA-2048

Issuer:

R11

Not before:

2024-08-10 21:54

Not after:

2024-11-08 21:54

Domain summary

shopware6.sw5-test.de 9

1 recorded

IP summary

156.67.239.253 2

1 recorded

Domain shopware6.sw5-test.de

Germany

Software information

Symfony developement panel enabled

shopware6.sw5-test.de

Domain summary

IP summary