| Server IP : 104.21.21.239 / Your IP : 216.73.216.191 Web Server : Apache/2.4.68 (Amazon Linux) OpenSSL/3.5.5 System : Linux ip-172-31-69-123.ec2.internal 6.1.176-223.369.amzn2023.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jul 24 13:34:27 UTC 2026 x86_64 User : ec2-user ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : ON Directory : /home/banners/.claude/ |
Upload File : |
{
"permissions": {
"allow": [
"Bash(sudo chown:*)",
"Bash(sudo chmod:*)",
"Bash(php:*)",
"Bash(for i in 1 2 3)",
"Bash(do echo \"Run $i:\")",
"Bash(/usr/bin/time:*)",
"Bash(done)",
"Bash(ls:*)",
"Bash(crontab:*)",
"Bash(mysql:*)",
"Bash(grep -B 5 -A 15 \"savethedate = ''#form.savethedate#''\" /home/banners/domains/stagemag/premium/includes/formactions.cfm)",
"Bash(find /home/banners -type f \\\\\\(-name *.conf -o -name *.config -o -name *.cfg -o -name *config* \\\\\\))",
"Bash(grep -r \"cfinclude\\\\|cfrequestpage\\\\|cfimport\" /home/banners/public_html/bway/*.cfm)",
"Bash(find /home/banners/public_html/bway -type f \\\\\\(-name *.cfm -o -name *.cfc \\\\\\))",
"Bash(grep -r \"cfinclude\\\\|datasource\\\\|database\" /home/banners/public_html/bway/*.cfm)",
"Bash(find /home/banners/public_html/bway -type f -name *.html)",
"Bash(grep -r \"define\\\\|DEFINE\" /home/banners/public_html/bway/*.php)",
"Bash(find /home/banners/public_html/bway/WEB-INF/lucee -name *.xml)",
"Bash(grep -i \"schedule\\\\|batch\\\\|scheduled\\\\|task\" /home/banners/public_html/bway/*.cfm)",
"Bash(grep -r \"bwwac\\\\|bwwacread\" /home/banners/public_html/bway/*.cfm)",
"Read(//home/**)",
"Bash(grep -r \"pixeltrack\\\\|columntrack\" /home/banners/public_html/bway/*.cfm /home/banners/public_html/bway/*.php)",
"Bash(find /home/banners/public_html/bway -name *.php -exec grep -l 'function ' {})",
"Bash(2)",
"Bash(redis-cli ping:*)",
"Read(//var/www/cache/**)",
"Read(//etc/httpd/conf/**)",
"Read(//etc/apache2/**)",
"Read(//tmp/**)",
"Bash(for f:*)",
"Bash(do echo:*)",
"Bash(httpd -M)",
"Bash(apache2ctl -M)",
"Bash(apachectl -M)",
"Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/pixel-article.php?id=99999&headline=1&hot=100\")",
"Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/sitepixel.php?regid=5\")",
"Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/pixel-people.php?id=12345\")",
"Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/pixel-board.php?threadid=67890\")",
"Bash(httpd -S)",
"Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: broadwayworld.com\" \"http://localhost/bway/pixel-article.php?id=99999&headline=1&hot=100\")",
"Read(//etc/httpd/conf.d/**)",
"Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" \"https://localhost/pixel-article.php?id=99999&headline=1&hot=100\")",
"Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" \"https://localhost/sitepixel.php\")",
"Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" \"https://localhost/pixel-people.php?id=12345\")",
"Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" \"https://localhost/pixel-board.php?threadid=67890\")",
"Bash(chmod 777 /home/banners/public_html/bway/pixel/queue/)",
"Bash(chmod 666 /home/banners/public_html/bway/pixel/queue/process.lock)",
"Bash(curl -sk -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" -H \"Host: cloud.broadwayworld.com\" --resolve \"cloud.broadwayworld.com:443:127.0.0.1\" \"https://cloud.broadwayworld.com/pixel-article.cfm?id=88888&headline=1\")",
"Read(//home/banners/public_html/bway/**)",
"Read(//etc/php-fpm.d/**)",
"Read(//etc/**)",
"Bash(sudo tail:*)",
"Bash(/home/banners/public_html/bway/pixel-debug-test.php:*)",
"Bash(curl -sk -H \"Host: cloud.broadwayworld.com\" --resolve \"cloud.broadwayworld.com:443:127.0.0.1\" \"https://cloud.broadwayworld.com/pixel-debug-test.php?id=66666&headline=3&sourcevar=test\")",
"Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/bway/regionalbug.php?advertiser=test&id1=1200000&id2=1300000&id3=999\")",
"Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost/regionalbug.php?advertiser=test&id1=1200000&id2=1300000&id3=999\")",
"Bash(curl -s -o /dev/null -w \"HTTP %{http_code}, Content-Type: %{content_type}, Size: %{size_download} bytes\\\\n\" \"http://localhost:80/bway/regionalbug.php?advertiser=test&id1=1200000&id2=1300000&id3=999\")",
"Bash(grep -r 'CREATE TABLE.*ticketmaster' /home/banners --include=*.sql --include=*.cfm)",
"Bash(grep -r 'ALTER TABLE.*ticketmaster' /home/banners --include=*.sql --include=*.cfm)",
"Bash(grep -r \"ticketmaster_combined_insert\\\\|ticketmaster_combined_insert.cfm\" /home/banners/public_html --include=*.cfm --include=*.php --include=*.js --include=*.html)",
"Bash(find /home/banners -name *.xml)",
"Bash(find /home/banners -type f \\\\\\(-name *.cfm -o -name *.php \\\\\\))",
"Bash(xargs cat:*)",
"Bash(find /home/banners -name *ticketmaster*.log -o -name *ticketmaster*.txt)",
"Bash(find /home/banners -type f -path *bway* -name admin* -o -path *bway* -name index.cfm)",
"Bash(curl -s -o /dev/null -w \"%{http_code} %{time_total}s\" --max-time 300 \"http://localhost/ticketmaster/ticketmaster_combined_insert.cfm\")",
"Bash(curl -s -L --max-time 600 \"http://localhost/ticketmaster/ticketmaster_combined_insert.cfm\")",
"Bash(curl -v -s --max-time 10 \"http://localhost/ticketmaster/ticketmaster_combined_insert.cfm\")",
"Bash(curl -s --max-time 600 \"https://cloud.broadwayworld.com/ticketmaster/ticketmaster_combined_insert.cfm\")",
"Bash(find /home/banners -type f -name *.*)",
"Bash(find /home/banners/domains -type f \\\\\\(-name *.py -o -name *.js -o -name *.ts \\\\\\))",
"Bash(find /home/banners -type f \\\\\\(-name *.py -o -name *.js -o -name *.ts \\\\\\) -not -path */.c9/* -not -path */node_modules/* -not -path */.claude/*)",
"Bash(find /home/banners -maxdepth 3 -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.js -o -name *.css -o -name *.html \\\\\\))",
"Bash(find /home/banners -name *.py -type f ! -path *node_modules* ! -path */.c9/* ! -path *vendor*)",
"Bash(find /home/banners -maxdepth 3 -type f -name *.cfm -o -name *.cfc)",
"Bash(find /home/banners -maxdepth 3 -type f \\\\\\(-name *.cfm -o -name *.cfc \\\\\\))",
"Bash(find /home/banners -type f \\\\\\(-name *.php -o -name *.js \\\\\\) ! -path *node_modules* ! -path */.c9/* ! -path *vendor* ! -path *ckeditor* ! -path *ckfinder*)",
"Bash(find /home/banners/domains/newkit -type f \\\\\\(-name *.py -o -name *.js -o -name *.jsx -o -name *.ts -o -name *.tsx \\\\\\))",
"Bash(find /home/banners -maxdepth 3 -type f -iname README* -o -iname *.md)",
"Bash(find /home/banners/domains -type f -name *.php -not -path */.c9/* -not -path */vendor/* -not -path */node_modules/*)",
"Bash(grep -r \"var.*= 1\\\\|num.*= 1\\\\|batch.*= 1\\\\|workers.*= 0\" /home/banners/public_html/labs --include=*.php --include=*.js)",
"Bash(find /home/banners/public_html/labs -type f -name *.php -o -name *.js)",
"Bash(grep -rn console.log /home/banners/public_html/labs --include=*.js)",
"Bash(grep -rn 'var.*= 0' /home/banners/public_html/labs --include=*.js)",
"Bash(grep -rn \"0\\\\|1\\\\|2\\\\|3\\\\|4\\\\|5\\\\\\)\" /home/banners/public_html/labs --include=*.php)",
"Bash(grep -rn \"die\\\\|exit\" /home/banners/public_html/labs --include=*.php)",
"Bash(grep -rn curl_setopt /home/banners/public_html/labs --include=*.php -A 15)",
"Bash(grep -rn @ /home/banners/public_html/labs --include=*.php)",
"Bash(grep -rn \"if\\\\s*\\(!.*explode\\\\|str_replace\\\\|str_split\\\\|file_\\\\|fopen\\\\|curl\\\\|json_decode\" /home/banners/public_html/labs --include=*.php)",
"Bash(grep -rn \"CURLOPT_TIMEOUT\\\\|CONNECTTIMEOUT\\\\|timeout\" /home/banners/public_html/labs --include=*.php)",
"Bash(grep -rn json_decode.*true /home/banners/public_html/labs --include=*.php)",
"Bash(grep -rn \"error_log\\\\|trigger_error\\\\|exit\\\\|die\" /home/banners/public_html/labs/parmworld --include=*.php)",
"Bash(grep -rn function.*{.*} /home/banners/public_html/labs --include=*.php)",
"Bash(grep -rn '-> *$' /home/banners/public_html/labs --include=*.php)",
"Bash(grep -rn \"echo\\\\|print\\\\|var_dump\" /home/banners/public_html/labs/smarterhome/cron --include=*.php)",
"Bash(find /home/banners/domains -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\))",
"Bash(find /home/banners/public_html/bway -maxdepth 3 -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\) ! -path */WEB-INF/* ! -path */node_modules/* ! -path */vendor/* ! -path *ckeditor* ! -path *ckfinder* ! -path *phpMyAdmin*)",
"Bash(find /home/banners/domains -type d \\\\\\(-name node_modules -o -name vendor -o -name include -o -name Package-HTML \\\\\\) -prune -o -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\) -print)",
"Bash(find /home/banners/public_html/labs -maxdepth 4 -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\) ! -path */node_modules/* ! -path */vendor/* ! -path *ckeditor* ! -path *ckfinder* ! -path *phpMyAdmin*)",
"Bash(find /home/banners/public_html/leia -maxdepth 4 -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php -o -name *.py -o -name *.js \\\\\\) ! -path */WEB-INF/* ! -path */node_modules/* ! -path */vendor/* ! -path *ckeditor* ! -path *ckfinder* ! -path *phpMyAdmin*)",
"Bash(find /home/banners/domains -type f \\\\\\(-name *.cfm -o -name *.cfc -o -name *.php \\\\\\) ! -path */WEB-INF/* ! -path */vendor/* ! -path */Package-HTML/* ! -path */.git/*)",
"Bash(grep -r cfquery /home/banners/domains --include=*.cfm --include=*.cfc)",
"Bash(grep -r \"echo.*$_T\\\\|echo.*$_ST\\\\|echo.*$_OKIE\\\\|echo.*$_QUEST\" /home/banners/public_html/bway/recommendednew*.php)",
"Bash(xargs grep:*)",
"Bash(grep -rn cfquery /home/banners/domains/mcifa.com --include=*.cfm)",
"Bash(grep -rn \"WHERE\\\\|INSERT\\\\|UPDATE\\\\|DELETE\" /home/banners/domains/mcifa.com/public_html --include=*.cfm)",
"Bash(grep -rn \"XSS\\\\|script\\\\|innerHTML\\\\|outerHTML\" /home/banners/domains/stagemag --include=*.cfm)",
"Bash(find /home/banners/domains -type f -name *.php ! -path */vendor/* ! -path */Package-HTML/* ! -path */ckfinder*)",
"Bash(find /home/banners/public_html/labs -type f -name *.php ! -path */vendor/* ! -path */node_modules/* -newer /home/banners/public_html/labs/.credentials.php)",
"Bash(grep -r \"try\\\\s*{\" /home/banners/public_html/bway/recommendednew*.php)",
"Bash(grep -rn \"WHERE.*#\\\\|INSERT.*#\\\\|UPDATE.*#\\\\|DELETE.*#\" /home/banners/domains/wisdomdigital/public_html --include=*.cfm)",
"Bash(grep -rn \"except.*pass\\\\|except.*:\" /home/banners/domains --include=*.py)",
"Bash(grep -rn cfabort /home/banners/domains --include=*.cfm --include=*.cfc)",
"Bash(grep -n \"echo.*$_REQUEST\\\\|echo.*$_GET\\\\|echo.*$_POST\" /home/banners/public_html/bway/recommendednew.php)",
"Bash(grep -rn \"cfloop.*query\\\\|cfloop.*from.*to\" /home/banners/domains/stagemag --include=*.cfm)",
"Read(//cfloop\\\\|Cfoutput/,/\\\\/cfloop\\\\|\\\\/**)",
"Bash(grep -rn \"6Ld2rP4\\\\|6Ld2rP4SAAAAAKTeYlgEC2UrqWdeOFAsFM-R4N2v\\\\|AKIATN2MEJ2R75Y36XF3\\\\|BDkuiO2FP7tfueg58SHWkOi372EzeuUokqPjcuFd\" /home/banners/domains --include=*.cfm --include=*.cfc --include=*.php --include=*.py --include=*.js)",
"Bash(grep -n \"insert delayed\\\\|INSERT DELAYED\" /home/banners/public_html/bway/*.php)",
"Bash(grep -n \"$_EQUEST\\\\|$_ET\\\\|$_OST\\\\|$_OOKIE\" /home/banners/public_html/bway/videoembed.php)",
"Bash(grep -r '\\\\$getdupe\\\\[' /home/banners/domains/stagemag/modern_/index.php)",
"Bash(grep -n ''\\\\'' . $css2;' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
"Bash(curl -sS 'https://stagemag.broadwayworld.com/printpdf/__TRACKED_VAR__?cachebust=__TRACKED_VAR__')",
"Bash(curl -sSI \"https://stagemag.broadwayworld.com/printpdf/How-to-Train-Your-Dragon-JR-Stages--the-J-105692?test=$\\(date +%s\\)\")",
"Bash(curl -sS -o /tmp/standard-postreload.pdf -w 'Bytes: %{size_download} time: %{time_total}s\\\\n' 'https://stagemag.broadwayworld.com/printpdf/How-to-Train-Your-Dragon-JR-Stages--the-J-105692?afterreload=__CMDSUB_OUTPUT__')",
"Bash(curl -sS \"https://stagemag.broadwayworld.com/modern_/css/style.css\")",
"Bash(curl -sS \"https://stagemag.broadwayworld.com/modern_/css/fullpage.min.css\")",
"Bash(curl -sS -o /tmp/post-save.pdf -w 'HTTP %{http_code} bytes %{size_download}\\\\n' 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/How-to-Train-Your-Dragon-JR-Stages--the-J-105692?bust=__TRACKED_VAR__')",
"Bash(python3 -c 'import urllib.parse,sys;print\\(urllib.parse.quote\\(sys.argv[1]\\)\\)' '{\"page_size\":\"A4\",\"orientation\":\"L\",\"margin_preset\":\"tight\",\"font_scale\":\"small\",\"sections\":{}}')",
"Bash(curl -sS -o /tmp/preview-override.pdf -w '%{http_code} %{size_download}b\\\\n' 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/How-to-Train-Your-Dragon-JR-Stages--the-J-105692?pdf=__TRACKED_VAR__&bust=__TRACKED_VAR__')",
"Bash(curl -sS https://stagemag.broadwayworld.com/modern/The-Sound-Inside-Capital-Stage-91588)",
"Bash(grep -n ''\\\\'' \\\\. $css2' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
"Bash(python3 -c 'import urllib.parse,sys;print\\(urllib.parse.quote\\(sys.argv[1]\\)\\)' '{\"hide_selectors\":[\"#donors-id\"],\"break_before\":[\"a[name=\\\\\"Production Staff\\\\\"]\"],\"watermark\":\"DRAFT\",\"header\":\"{title}\",\"footer\":\"Page {pageno} of {pages}\",\"custom_css\":\"#cast-id h2 { color: #b20223; }\"}')",
"Bash(curl -sS -o /tmp/adv.pdf -w 'HTTP %{http_code} bytes %{size_download}\\\\n' 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?pdf=__TRACKED_VAR__&bust=__TRACKED_VAR__')",
"Bash(curl -sS -o /tmp/base.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/__TRACKED_VAR__?bust=__TRACKED_VAR__')",
"Bash(curl -sS -o /tmp/full-adv.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/__TRACKED_VAR__?bust=__TRACKED_VAR__')",
"Bash(curl -sS -o /tmp/hide-extra.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?bust=__TRACKED_VAR__')",
"Bash(pdftotext /tmp/hide-extra.pdf -)",
"Bash(curl -sS -o /tmp/hide-ep.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/__TRACKED_VAR__?bust=__TRACKED_VAR__')",
"Bash(pdftotext /tmp/hide-ep.pdf -)",
"Bash(curl -sS -o /tmp/baseline.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/__TRACKED_VAR__?bust=__TRACKED_VAR__')",
"Bash(pdftotext /tmp/baseline.pdf -)",
"Bash(curl -sS -o /tmp/combo.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?bust=__TRACKED_VAR__')",
"Bash(pdftotext -layout /tmp/combo.pdf -)",
"Bash(curl -sS -o /tmp/raw.pdf 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?bust=__TRACKED_VAR__')",
"Bash(pdftotext -layout /tmp/raw.pdf -)",
"Bash(awk 'NR==65,NR==707' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
"Bash(awk 'NR>=65 && NR<=707' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
"Bash(grep -n '^$css = $css1\\\\|_unused_inline_css\\\\|//multimedia-id ending css' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
"Bash(sed -i '66,711d' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
"Bash(sed -n '60,72p' /home/banners/domains/stagemag/printpdf/printable-v2.php)",
"Bash(curl -sS -o /tmp/post-helper.pdf -w 'HTTP %{http_code} bytes %{size_download}\\\\n' 'https://stagemag.broadwayworld.com/printpdf/printable-v2.php/The-Sound-Inside-Capital-Stage-91588?bust=__TRACKED_VAR__')",
"Bash(awk '{print $5}')"
],
"additionalDirectories": [
"/home/banners/public_html/bway/pixel/queue"
]
}
}