LeakIX - Host staging.agoodemployee.com

Domain staging.agoodemployee.com

United States

AMAZON-AES

Symfony developement panel enabled
The application has Symfony profiling enabled.

It enables an attacker to access the following sensitive content :

System configuration

Request log, including POST request with credentials and/or api keys
IP: 52.204.216.236
Domain: staging.agoodemployee.com
Port: 443
URL: https://staging.agoodemployee.com/_profiler/empty/search/results

First seen 2024-06-07 19:45
Last seen 2024-09-20 22:19
Open for 105 days
- Fingerprint: 407cf4363b0e62fafca67e074701f12d4701f12d4701f12d4701f12d4701f12d
```
Symfony profiler enabled:
https://staging.agoodemployee.com/_profiler/empty/search/results
```
  Found on 2024-09-20 22:19
Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-09-14 18:32

HTTP/1.1 302 Found
Date: Sat, 14 Sep 2024 18:32:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=j30a6khc8m64fbmtloso2jr62a; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: 7629d1
X-Debug-Token-Link: https://member.ari.saritasa.rocks/_profiler/7629d1
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-09-14 by HttpPlugin

Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-09-12 12:33

HTTP/1.1 302 Found
Date: Thu, 12 Sep 2024 12:33:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=k2c5c6bggg7pdkqblqq20o7m28; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: d92329
X-Debug-Token-Link: https://member.ari.saritasa.rocks/_profiler/d92329
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-09-12 by HttpPlugin

Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-09-10 13:52

HTTP/1.1 302 Found
Date: Tue, 10 Sep 2024 13:52:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=ucd4iqd9ac4b7padqj6epm88p7; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: c63c62
X-Debug-Token-Link: https://member.staging.tenantalert.com/_profiler/c63c62
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-09-10 by HttpPlugin

Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-09-08 07:27

HTTP/1.1 302 Found
Date: Sun, 08 Sep 2024 07:27:20 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=e47vias190uhsu7s7ekr8cdtjh; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: 332395
X-Debug-Token-Link: https://member.ari.saritasa.rocks/_profiler/332395
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-09-08 by HttpPlugin

Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-08-16 18:43

HTTP/1.1 302 Found
Date: Fri, 16 Aug 2024 18:43:08 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=bog9d4sqri59piuh0coapv5g76; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: 9282d1
X-Debug-Token-Link: https://member.ari.saritasa.rocks/_profiler/9282d1
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-08-16 by HttpPlugin

Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-08-14 21:25

HTTP/1.1 302 Found
Date: Wed, 14 Aug 2024 21:25:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=7g0vrrihi866v0q2q3e5mlafvu; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: 910f0b
X-Debug-Token-Link: https://member.ari.saritasa.rocks/_profiler/910f0b
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-08-14 by HttpPlugin

Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-08-12 20:31

HTTP/1.1 302 Found
Date: Mon, 12 Aug 2024 20:31:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=95jgfirvm1jtitjffdugo0a60b; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: 4fd575
X-Debug-Token-Link: https://member.ari.saritasa.rocks/_profiler/4fd575
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-08-12 by HttpPlugin

Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-08-10 20:29

HTTP/1.1 302 Found
Date: Sat, 10 Aug 2024 20:29:27 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=n0vj58ot6ormsta9jr5tvr0ctc; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: 4152aa
X-Debug-Token-Link: https://member.ari.saritasa.rocks/_profiler/4152aa
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-08-10 by HttpPlugin

Create report

Open service 52.204.216.236:443 · staging.agoodemployee.com

2024-08-08 15:13

HTTP/1.1 302 Found
Date: Thu, 08 Aug 2024 15:13:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/7.3.29
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Set-Cookie: PHPSESSID=4v6aji6redt45sdrls7shvcgn0; path=/; HttpOnly
Cache-Control: no-cache
Location: /members/registration
X-Debug-Token: 15de3b
X-Debug-Token-Link: https://member.ari.saritasa.rocks/_profiler/15de3b
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Robots-Tag: noindex, nofollow, nosnippet, noarchive

Page title: Redirecting to /members/registration

<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8" />
        <meta http-equiv="refresh" content="0;url=/members/registration" />

        <title>Redirecting to /members/registration</title>
    </head>
    <body>
        Redirecting to <a href="/members/registration">/members/registration</a>.
    </body>
</html>

Found 2024-08-08 by HttpPlugin

Create report

staging.agoodemployee.com

Fingerprint:

10fa0fd70b714a4341954dcfd67fcf433a84533d55a903a34ea1849071780b27

CN:

staging.agoodemployee.com

Key:

RSA-2048

Issuer:

R10

Not before:

2024-08-06 17:48

Not after:

2024-11-04 17:48

Domain summary

staging.agoodemployee.com 9

1 recorded

IP summary

52.204.216.236 2

1 recorded

Domain staging.agoodemployee.com

United States

Symfony developement panel enabled

staging.agoodemployee.com

Domain summary

IP summary