2026-11-04T14:02:22Z fetched the upload form and its CSRF token; session cookies: ['_repro_app_session'] 2026-11-04T14:02:22Z attached channel.png (68 bytes, image/png) -> 2026-11-04T14:04:59Z fetched the upload form and its CSRF token; session cookies: ['_repro_app_session'] 2026-11-04T14:05:00Z attached channel.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/5 2026-11-04T14:05:00Z recovered exfil-channel blob key from the signed disk token: m8v95cbd75omu1skb633p4rwiacw 2026-11-04T14:05:00Z exfiltration channel on disk: /app-fixed/storage/m8/v9/m8v95cbd75omu1skb633p4rwiacw 2026-11-04T14:05:00Z attached payload.dat (56 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/6 2026-11-04T14:05:00Z recovered write-payload blob key from the signed disk token: 8hvhzdeniz7fwlwuxo5u21iivmx9 2026-11-04T14:05:00Z write payload (56 bytes) on disk: /app-fixed/storage/8h/vh/8hvhzdeniz7fwlwuxo5u21iivmx9 2026-11-04T14:05:00Z attached script.msl (1900 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/7 2026-11-04T14:05:01Z recovered msl-script blob key from the signed disk token: 0f0mz5kuz72ms0au24xw4xljmi5d 2026-11-04T14:05:01Z MSL script on disk: /app-fixed/storage/0f/0m/0f0mz5kuz72ms0au24xw4xljmi5d 2026-11-04T14:05:01Z delivering the SVG that reaches the MSL coder through the analyzer at attach time 2026-11-04T14:05:01Z attached vector.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/8 2026-11-04T14:05:01Z arbitrary write to /tmp/pruva_arbitrary_write.txt: NOT confirmed ('') 2026-11-04T14:05:01Z exfiltrated 68 bytes through the attacker's own blob (SECRET_KEY_BASE present: False, planted credential recovered: False) 2026-11-04T14:05:01Z response after the template write contains command output: None 2026-11-04T14:05:01Z server-side RCE marker: '' 2026-11-04T14:05:01Z SUMMARY {"arbitrary_write_path": "/tmp/pruva_arbitrary_write.txt", "arbitrary_write_content": "", "arbitrary_write_ok": false, "exfil_bytes": 68, "exfil_contains_secret_key_base": false, "exfil_contains_canary": false, "rce_response_evidence": null, "rce_marker": "", "rce_ok": false} 2026-11-04T14:08:41Z fetched the upload form and its CSRF token; session cookies: ['_repro_app_session'] 2026-11-04T14:08:41Z attached channel.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/20 2026-11-04T14:08:41Z recovered exfil-channel blob key from the signed disk token: 2fedoxevtf4xsdeiblfr5o42f8c1 2026-11-04T14:08:41Z exfiltration channel on disk: /app-fixed/storage/2f/ed/2fedoxevtf4xsdeiblfr5o42f8c1 2026-11-04T14:08:42Z attached channel2.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/21 2026-11-04T14:08:42Z recovered exfil-canary blob key from the signed disk token: la7h7f87tg75idti90bo4ocppo5j 2026-11-04T14:08:42Z attached payload.dat (56 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/22 2026-11-04T14:08:42Z recovered write-payload blob key from the signed disk token: ws1mg6owlhys80z6efm3bccak5wc 2026-11-04T14:08:42Z write payload (56 bytes) on disk: /app-fixed/storage/ws/1m/ws1mg6owlhys80z6efm3bccak5wc 2026-11-04T14:08:42Z attached script_env64.msl (748 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/23 2026-11-04T14:08:42Z recovered msl-env64 blob key from the signed disk token: q84c66ho7ynleonpa7r8fau69rfm 2026-11-04T14:08:42Z attached script_env128.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/24 2026-11-04T14:08:42Z recovered msl-env128 blob key from the signed disk token: 1nuon1894uo1gk1xc9dgnxt8pbxg 2026-11-04T14:08:42Z attached script_env256.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/25 2026-11-04T14:08:42Z recovered msl-env256 blob key from the signed disk token: cnz05mu09iexb7fl5xbeb9t7x42u 2026-11-04T14:08:42Z attached script_env512.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/26 2026-11-04T14:08:42Z recovered msl-env512 blob key from the signed disk token: on9ppc8bhfzch2pyuorpiyhrpes7 2026-11-04T14:08:42Z attached script_env1024.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/27 2026-11-04T14:08:42Z recovered msl-env1024 blob key from the signed disk token: hnlns8ifhss5ac7t7do8t1mlrqbh 2026-11-04T14:08:42Z attached script_env2048.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/28 2026-11-04T14:08:42Z recovered msl-env2048 blob key from the signed disk token: xzuam9mhu9bsfhsuvepoby1b3zyj 2026-11-04T14:08:42Z attached script_env4096.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/29 2026-11-04T14:08:42Z recovered msl-env4096 blob key from the signed disk token: dnhdskwhgjssse16b105zcqoo3q7 2026-11-04T14:08:43Z attached script_env8192.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/30 2026-11-04T14:08:43Z recovered msl-env8192 blob key from the signed disk token: wvurgyy4fe9fk0e9vvccdkmngnaw 2026-11-04T14:08:43Z delivering SVG env64: through the analyzer 2026-11-04T14:08:43Z attached vector_env64.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/31 2026-11-04T14:08:43Z environment read with 64 samples (128 bytes) returned 68 bytes 2026-11-04T14:08:43Z delivering SVG env128: through the analyzer 2026-11-04T14:08:43Z attached vector_env128.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/32 2026-11-04T14:08:43Z environment read with 128 samples (256 bytes) returned 68 bytes 2026-11-04T14:08:43Z delivering SVG env256: through the analyzer 2026-11-04T14:08:43Z attached vector_env256.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/33 2026-11-04T14:08:43Z environment read with 256 samples (512 bytes) returned 68 bytes 2026-11-04T14:08:43Z delivering SVG env512: through the analyzer 2026-11-04T14:08:43Z attached vector_env512.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/34 2026-11-04T14:08:43Z environment read with 512 samples (1024 bytes) returned 68 bytes 2026-11-04T14:08:43Z delivering SVG env1024: through the analyzer 2026-11-04T14:08:43Z attached vector_env1024.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/35 2026-11-04T14:08:43Z environment read with 1024 samples (2048 bytes) returned 68 bytes 2026-11-04T14:08:43Z delivering SVG env2048: through the analyzer 2026-11-04T14:08:43Z attached vector_env2048.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/36 2026-11-04T14:08:44Z environment read with 2048 samples (4096 bytes) returned 68 bytes 2026-11-04T14:08:44Z delivering SVG env4096: through the analyzer 2026-11-04T14:08:44Z attached vector_env4096.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/37 2026-11-04T14:08:44Z environment read with 4096 samples (8192 bytes) returned 68 bytes 2026-11-04T14:08:44Z delivering SVG env8192: through the analyzer 2026-11-04T14:08:44Z attached vector_env8192.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/38 2026-11-04T14:08:44Z environment read with 8192 samples (16384 bytes) returned 68 bytes 2026-11-04T14:08:44Z arbitrary write to /tmp/pruva_arbitrary_write.txt: NOT confirmed ('') 2026-11-04T14:08:44Z exfiltrated 68 bytes through the attacker's own blob (SECRET_KEY_BASE present: False, planted credential recovered: False) 2026-11-04T14:08:44Z response after the template write contains command output: None 2026-11-04T14:08:44Z server-side RCE marker: '' 2026-11-04T14:08:44Z SUMMARY {"arbitrary_write_path": "/tmp/pruva_arbitrary_write.txt", "arbitrary_write_content": "", "arbitrary_write_ok": false, "exfil_bytes": 68, "exfil_contains_secret_key_base": false, "exfil_contains_canary": false, "canary_bytes": 68, "rce_response_evidence": null, "rce_marker": "", "rce_ok": false} 2026-11-04T14:11:44Z fetched the upload form and its CSRF token; session cookies: ['_repro_app_session'] 2026-11-04T14:11:45Z attached channel.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/20 2026-11-04T14:11:45Z recovered exfil-channel blob key from the signed disk token: 3gkf1k99s54395a3ij7ts4s91nyf 2026-11-04T14:11:45Z exfiltration channel on disk: /app-fixed/storage/3g/kf/3gkf1k99s54395a3ij7ts4s91nyf 2026-11-04T14:11:45Z attached channel2.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/21 2026-11-04T14:11:45Z recovered exfil-canary blob key from the signed disk token: j14jo1fydbyivo3t74yusi6boafx 2026-11-04T14:11:45Z attached payload.dat (80 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/22 2026-11-04T14:11:45Z recovered write-payload blob key from the signed disk token: 1zo3m2x9q3ty8o3gqcy2o1pjlo31 2026-11-04T14:11:45Z write payload (80 bytes) on disk: /app-fixed/storage/1z/o3/1zo3m2x9q3ty8o3gqcy2o1pjlo31 2026-11-04T14:11:45Z attached script_env64.msl (748 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/23 2026-11-04T14:11:45Z recovered msl-env64 blob key from the signed disk token: okay7lir7qljmyg2rsce3kc356mc 2026-11-04T14:11:45Z attached script_env128.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/24 2026-11-04T14:11:45Z recovered msl-env128 blob key from the signed disk token: 0ujejc9f31im80pmw9jhi7k60b6d 2026-11-04T14:11:45Z attached script_env256.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/25 2026-11-04T14:11:45Z recovered msl-env256 blob key from the signed disk token: y99jd9jrs7v41f7p6mfheq4nocg6 2026-11-04T14:11:45Z attached script_env512.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/26 2026-11-04T14:11:45Z recovered msl-env512 blob key from the signed disk token: j086oiifgcty3hjt78aa0cy9ftnj 2026-11-04T14:11:45Z attached script_env1024.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/27 2026-11-04T14:11:45Z recovered msl-env1024 blob key from the signed disk token: rjii76q4mrr4vtx23j9rvbyflavr 2026-11-04T14:11:45Z attached script_env2048.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/28 2026-11-04T14:11:45Z recovered msl-env2048 blob key from the signed disk token: obqr4n6bpaydcdgv66hhenl7yka5 2026-11-04T14:11:45Z attached script_env4096.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/29 2026-11-04T14:11:45Z recovered msl-env4096 blob key from the signed disk token: iy55hlbv8q0q8cxsax11ywoel9uc 2026-11-04T14:11:45Z attached script_env8192.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/30 2026-11-04T14:11:45Z recovered msl-env8192 blob key from the signed disk token: qag26p3e47ov7bn7yp3y4egiafmm 2026-11-04T14:11:45Z delivering SVG env64: through the analyzer 2026-11-04T14:11:46Z attached vector_env64.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/31 2026-11-04T14:11:46Z environment read with 64 samples (128 bytes) returned 68 bytes 2026-11-04T14:11:46Z delivering SVG env128: through the analyzer 2026-11-04T14:11:46Z attached vector_env128.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/32 2026-11-04T14:11:46Z environment read with 128 samples (256 bytes) returned 68 bytes 2026-11-04T14:11:46Z delivering SVG env256: through the analyzer 2026-11-04T14:11:46Z attached vector_env256.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/33 2026-11-04T14:11:46Z environment read with 256 samples (512 bytes) returned 68 bytes 2026-11-04T14:11:46Z delivering SVG env512: through the analyzer 2026-11-04T14:11:46Z attached vector_env512.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/34 2026-11-04T14:11:46Z environment read with 512 samples (1024 bytes) returned 68 bytes 2026-11-04T14:11:46Z delivering SVG env1024: through the analyzer 2026-11-04T14:11:46Z attached vector_env1024.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/35 2026-11-04T14:11:46Z environment read with 1024 samples (2048 bytes) returned 68 bytes 2026-11-04T14:11:46Z delivering SVG env2048: through the analyzer 2026-11-04T14:11:46Z attached vector_env2048.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/36 2026-11-04T14:11:46Z environment read with 2048 samples (4096 bytes) returned 68 bytes 2026-11-04T14:11:46Z delivering SVG env4096: through the analyzer 2026-11-04T14:11:46Z attached vector_env4096.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/37 2026-11-04T14:11:46Z environment read with 4096 samples (8192 bytes) returned 68 bytes 2026-11-04T14:11:46Z delivering SVG env8192: through the analyzer 2026-11-04T14:11:46Z attached vector_env8192.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/38 2026-11-04T14:11:46Z environment read with 8192 samples (16384 bytes) returned 68 bytes 2026-11-04T14:11:46Z arbitrary write to /tmp/pruva_arbitrary_write.txt: NOT confirmed ('') 2026-11-04T14:11:46Z exfiltrated 68 bytes through the attacker's own blob (SECRET_KEY_BASE present: False, planted credential recovered: False) 2026-11-04T14:11:47Z response after the template write contains command output: None 2026-11-04T14:11:47Z server-side RCE marker file content: '' (expected 'PRUVA_RCE_0fc654d8f615') 2026-11-04T14:11:47Z SUMMARY {"arbitrary_write_path": "/tmp/pruva_arbitrary_write.txt", "arbitrary_write_content": "", "arbitrary_write_ok": false, "exfil_bytes": 68, "exfil_contains_secret_key_base": false, "exfil_contains_canary": false, "canary_bytes": 68, "rce_response_evidence": null, "rce_marker": "", "rce_marker_expected": "PRUVA_RCE_0fc654d8f615", "rce_ok": false} 2026-11-04T14:13:41Z fetched the upload form and its CSRF token; session cookies: ['_repro_app_session'] 2026-11-04T14:13:42Z attached channel.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/20 2026-11-04T14:13:42Z recovered exfil-channel blob key from the signed disk token: 4csi15weyq77iza642a1kpz1gq9t 2026-11-04T14:13:42Z exfiltration channel on disk: /app-fixed/storage/4c/si/4csi15weyq77iza642a1kpz1gq9t 2026-11-04T14:13:42Z attached channel2.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/21 2026-11-04T14:13:42Z recovered exfil-canary blob key from the signed disk token: jvave2aaz858uhb8iycvw2xs637o 2026-11-04T14:13:42Z attached payload.dat (80 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/22 2026-11-04T14:13:42Z recovered write-payload blob key from the signed disk token: msnilecoieuviqsmjn4mh1cqd4r8 2026-11-04T14:13:42Z write payload (80 bytes) on disk: /app-fixed/storage/ms/ni/msnilecoieuviqsmjn4mh1cqd4r8 2026-11-04T14:13:42Z attached script_env64.msl (748 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/23 2026-11-04T14:13:42Z recovered msl-env64 blob key from the signed disk token: zc2iyuykwjbloo1jsfkb242b7k9c 2026-11-04T14:13:42Z attached script_env128.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/24 2026-11-04T14:13:42Z recovered msl-env128 blob key from the signed disk token: mkxjschcxyemnts69sinexv2p4lc 2026-11-04T14:13:42Z attached script_env256.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/25 2026-11-04T14:13:42Z recovered msl-env256 blob key from the signed disk token: 8kwjkr4korkn7xp892f560a0joz6 2026-11-04T14:13:42Z attached script_env512.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/26 2026-11-04T14:13:42Z recovered msl-env512 blob key from the signed disk token: yq33n7kodvubd6i66ekge3ifvzyt 2026-11-04T14:13:42Z attached script_env1024.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/27 2026-11-04T14:13:42Z recovered msl-env1024 blob key from the signed disk token: 584f2dutdgcbqd8c3emz3wxoko75 2026-11-04T14:13:42Z attached script_env2048.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/28 2026-11-04T14:13:42Z recovered msl-env2048 blob key from the signed disk token: xgpk9awgnjsllwz5ddv7vwv8qi6c 2026-11-04T14:13:43Z attached script_env4096.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/29 2026-11-04T14:13:43Z recovered msl-env4096 blob key from the signed disk token: 3gm4t8i9p653v8yyp6jk80d7yyxi 2026-11-04T14:13:43Z attached script_env8192.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/30 2026-11-04T14:13:43Z recovered msl-env8192 blob key from the signed disk token: 2c4a493ssfvl11eacokif20jrnoc 2026-11-04T14:13:43Z delivering SVG env64: through the analyzer 2026-11-04T14:13:43Z attached vector_env64.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/31 2026-11-04T14:13:43Z environment read with 64 samples (128 bytes) returned 68 bytes 2026-11-04T14:13:43Z delivering SVG env128: through the analyzer 2026-11-04T14:13:43Z attached vector_env128.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/32 2026-11-04T14:13:43Z environment read with 128 samples (256 bytes) returned 68 bytes 2026-11-04T14:13:43Z delivering SVG env256: through the analyzer 2026-11-04T14:13:43Z attached vector_env256.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/33 2026-11-04T14:13:43Z environment read with 256 samples (512 bytes) returned 68 bytes 2026-11-04T14:13:43Z delivering SVG env512: through the analyzer 2026-11-04T14:13:43Z attached vector_env512.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/34 2026-11-04T14:13:43Z environment read with 512 samples (1024 bytes) returned 68 bytes 2026-11-04T14:13:43Z delivering SVG env1024: through the analyzer 2026-11-04T14:13:43Z attached vector_env1024.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/35 2026-11-04T14:13:43Z environment read with 1024 samples (2048 bytes) returned 68 bytes 2026-11-04T14:13:43Z delivering SVG env2048: through the analyzer 2026-11-04T14:13:43Z attached vector_env2048.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/36 2026-11-04T14:13:43Z environment read with 2048 samples (4096 bytes) returned 68 bytes 2026-11-04T14:13:43Z delivering SVG env4096: through the analyzer 2026-11-04T14:13:44Z attached vector_env4096.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/37 2026-11-04T14:13:44Z environment read with 4096 samples (8192 bytes) returned 68 bytes 2026-11-04T14:13:44Z delivering SVG env8192: through the analyzer 2026-11-04T14:13:44Z attached vector_env8192.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/38 2026-11-04T14:13:44Z environment read with 8192 samples (16384 bytes) returned 68 bytes 2026-11-04T14:13:44Z arbitrary write to /tmp/pruva_arbitrary_write.txt: NOT confirmed ('') 2026-11-04T14:13:44Z exfiltrated 68 bytes through the attacker's own blob (SECRET_KEY_BASE present: False, planted credential recovered: False) 2026-11-04T14:13:44Z response after the template write contains command output: None 2026-11-04T14:13:44Z server-side RCE marker file content: '' (expected 'PRUVA_RCE_72c6adae96ff') 2026-11-04T14:13:44Z SUMMARY {"arbitrary_write_path": "/tmp/pruva_arbitrary_write.txt", "arbitrary_write_content": "", "arbitrary_write_ok": false, "exfil_bytes": 68, "exfil_contains_secret_key_base": false, "exfil_contains_canary": false, "canary_bytes": 68, "rce_response_evidence": null, "rce_marker": "", "rce_marker_expected": "PRUVA_RCE_72c6adae96ff", "rce_ok": false} 2026-11-04T14:16:37Z fetched the upload form and its CSRF token; session cookies: ['_repro_app_session'] 2026-11-04T14:16:37Z attached channel.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/20 2026-11-04T14:16:37Z recovered exfil-channel blob key from the signed disk token: lnjw3jg13bk9a5d32bxnkno1j6dg 2026-11-04T14:16:37Z exfiltration channel on disk: /app-fixed/storage/ln/jw/lnjw3jg13bk9a5d32bxnkno1j6dg 2026-11-04T14:16:37Z attached channel2.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/21 2026-11-04T14:16:37Z recovered exfil-canary blob key from the signed disk token: 6b0v6eun0kk28y26lzjma0t9eesa 2026-11-04T14:16:37Z attached payload.dat (80 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/22 2026-11-04T14:16:37Z recovered write-payload blob key from the signed disk token: ioqnfcxf5srzv8vegqu3dek8pz9c 2026-11-04T14:16:37Z write payload (80 bytes) on disk: /app-fixed/storage/io/qn/ioqnfcxf5srzv8vegqu3dek8pz9c 2026-11-04T14:16:37Z attached script_env64.msl (748 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/23 2026-11-04T14:16:37Z recovered msl-env64 blob key from the signed disk token: pss56her7ncfccib5yqp5yvewc2e 2026-11-04T14:16:37Z attached script_env128.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/24 2026-11-04T14:16:37Z recovered msl-env128 blob key from the signed disk token: 87qwmnzh09vo44gebb8d39zn9jfc 2026-11-04T14:16:37Z attached script_env256.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/25 2026-11-04T14:16:37Z recovered msl-env256 blob key from the signed disk token: n1r6se29nkn1fm8pwm2b95gh2w40 2026-11-04T14:16:37Z attached script_env512.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/26 2026-11-04T14:16:37Z recovered msl-env512 blob key from the signed disk token: l51w1937kr02pda2jyatp4fz4fha 2026-11-04T14:16:37Z attached script_env1024.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/27 2026-11-04T14:16:37Z recovered msl-env1024 blob key from the signed disk token: z0gz4yjriy0o4lytl3ryy40y6kwo 2026-11-04T14:16:37Z attached script_env2048.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/28 2026-11-04T14:16:37Z recovered msl-env2048 blob key from the signed disk token: ddl4garyl0eb49ky7ixmheas0uij 2026-11-04T14:16:37Z attached script_env4096.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/29 2026-11-04T14:16:37Z recovered msl-env4096 blob key from the signed disk token: 9x6wyiyo3cfrxn3os1si3lx2spa4 2026-11-04T14:16:38Z attached script_env8192.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/30 2026-11-04T14:16:38Z recovered msl-env8192 blob key from the signed disk token: dy2gs6wc3huyaskvhp1y3zerfy3g 2026-11-04T14:16:38Z delivering SVG env64: through the analyzer 2026-11-04T14:16:38Z attached vector_env64.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/31 2026-11-04T14:16:38Z environment read with 64 samples (128 bytes) returned 68 bytes 2026-11-04T14:16:38Z delivering SVG env128: through the analyzer 2026-11-04T14:16:38Z attached vector_env128.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/32 2026-11-04T14:16:38Z environment read with 128 samples (256 bytes) returned 68 bytes 2026-11-04T14:16:38Z delivering SVG env256: through the analyzer 2026-11-04T14:16:38Z attached vector_env256.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/33 2026-11-04T14:16:38Z environment read with 256 samples (512 bytes) returned 68 bytes 2026-11-04T14:16:38Z delivering SVG env512: through the analyzer 2026-11-04T14:16:38Z attached vector_env512.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/34 2026-11-04T14:16:38Z environment read with 512 samples (1024 bytes) returned 68 bytes 2026-11-04T14:16:38Z delivering SVG env1024: through the analyzer 2026-11-04T14:16:38Z attached vector_env1024.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/35 2026-11-04T14:16:38Z environment read with 1024 samples (2048 bytes) returned 68 bytes 2026-11-04T14:16:38Z delivering SVG env2048: through the analyzer 2026-11-04T14:16:38Z attached vector_env2048.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/36 2026-11-04T14:16:38Z environment read with 2048 samples (4096 bytes) returned 68 bytes 2026-11-04T14:16:38Z delivering SVG env4096: through the analyzer 2026-11-04T14:16:38Z attached vector_env4096.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/37 2026-11-04T14:16:38Z environment read with 4096 samples (8192 bytes) returned 68 bytes 2026-11-04T14:16:38Z delivering SVG env8192: through the analyzer 2026-11-04T14:16:38Z attached vector_env8192.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/38 2026-11-04T14:16:38Z environment read with 8192 samples (16384 bytes) returned 68 bytes 2026-11-04T14:16:38Z arbitrary write to /tmp/pruva_arbitrary_write.txt: NOT confirmed ('') 2026-11-04T14:16:38Z exfiltrated 68 bytes through the attacker's own blob (SECRET_KEY_BASE present: False, planted credential recovered: False) 2026-11-04T14:16:39Z response after the template write contains command output: None 2026-11-04T14:16:39Z server-side RCE marker file content: '' (expected 'PRUVA_RCE_879b399af826') 2026-11-04T14:16:39Z SUMMARY {"arbitrary_write_path": "/tmp/pruva_arbitrary_write.txt", "arbitrary_write_content": "", "arbitrary_write_ok": false, "exfil_bytes": 68, "exfil_contains_secret_key_base": false, "exfil_contains_canary": false, "canary_bytes": 68, "rce_response_evidence": null, "rce_marker": "", "rce_marker_expected": "PRUVA_RCE_879b399af826", "rce_ok": false} 2026-11-04T14:18:41Z fetched the upload form and its CSRF token; session cookies: ['_repro_app_session'] 2026-11-04T14:18:42Z attached channel.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/20 2026-11-04T14:18:42Z recovered exfil-channel blob key from the signed disk token: 5mqqbrlq32ccoi01i6weihtp9jvh 2026-11-04T14:18:42Z exfiltration channel on disk: /app-fixed/storage/5m/qq/5mqqbrlq32ccoi01i6weihtp9jvh 2026-11-04T14:18:42Z attached channel2.png (68 bytes, image/png) -> http://127.0.0.1:3302/uploads/21 2026-11-04T14:18:42Z recovered exfil-canary blob key from the signed disk token: pb7ony6wqd20640b7vl7fy51gpl8 2026-11-04T14:18:42Z attached payload.dat (80 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/22 2026-11-04T14:18:42Z recovered write-payload blob key from the signed disk token: jkqmjgrsslu6qu67qxwuxirzye8k 2026-11-04T14:18:42Z write payload (80 bytes) on disk: /app-fixed/storage/jk/qm/jkqmjgrsslu6qu67qxwuxirzye8k 2026-11-04T14:18:42Z attached script_env64.msl (748 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/23 2026-11-04T14:18:42Z recovered msl-env64 blob key from the signed disk token: ffk9mba8906fmsg7zk9cqempqcjr 2026-11-04T14:18:42Z attached script_env128.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/24 2026-11-04T14:18:42Z recovered msl-env128 blob key from the signed disk token: 6lymwa89azxhsgcqfwzi5rv8z4fn 2026-11-04T14:18:42Z attached script_env256.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/25 2026-11-04T14:18:42Z recovered msl-env256 blob key from the signed disk token: 04ks3yldmrqv8wv6gojvngqum0ok 2026-11-04T14:18:42Z attached script_env512.msl (749 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/26 2026-11-04T14:18:42Z recovered msl-env512 blob key from the signed disk token: wjpa3iryv6a4qgm4pv516aizq2zj 2026-11-04T14:18:42Z attached script_env1024.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/27 2026-11-04T14:18:42Z recovered msl-env1024 blob key from the signed disk token: h7ilraa9qyk46xl9a1l34bwihpro 2026-11-04T14:18:42Z attached script_env2048.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/28 2026-11-04T14:18:42Z recovered msl-env2048 blob key from the signed disk token: mw7rpa153jwxjfxf47041tv49roq 2026-11-04T14:18:42Z attached script_env4096.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/29 2026-11-04T14:18:43Z recovered msl-env4096 blob key from the signed disk token: cf689pyx9y6krslpq64gx8dtb63d 2026-11-04T14:18:43Z attached script_env8192.msl (750 bytes, application/octet-stream) -> http://127.0.0.1:3302/uploads/30 2026-11-04T14:18:43Z recovered msl-env8192 blob key from the signed disk token: v96jh6ryaxeyh0eu1p7aza52wi1j 2026-11-04T14:18:43Z delivering SVG env64: through the analyzer 2026-11-04T14:18:43Z attached vector_env64.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/31 2026-11-04T14:18:43Z environment read with 64 samples (128 bytes) returned 68 bytes 2026-11-04T14:18:43Z delivering SVG env128: through the analyzer 2026-11-04T14:18:43Z attached vector_env128.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/32 2026-11-04T14:18:43Z environment read with 128 samples (256 bytes) returned 68 bytes 2026-11-04T14:18:43Z delivering SVG env256: through the analyzer 2026-11-04T14:18:43Z attached vector_env256.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/33 2026-11-04T14:18:43Z environment read with 256 samples (512 bytes) returned 68 bytes 2026-11-04T14:18:43Z delivering SVG env512: through the analyzer 2026-11-04T14:18:43Z attached vector_env512.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/34 2026-11-04T14:18:43Z environment read with 512 samples (1024 bytes) returned 68 bytes 2026-11-04T14:18:43Z delivering SVG env1024: through the analyzer 2026-11-04T14:18:43Z attached vector_env1024.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/35 2026-11-04T14:18:43Z environment read with 1024 samples (2048 bytes) returned 68 bytes 2026-11-04T14:18:43Z delivering SVG env2048: through the analyzer 2026-11-04T14:18:43Z attached vector_env2048.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/36 2026-11-04T14:18:43Z environment read with 2048 samples (4096 bytes) returned 68 bytes 2026-11-04T14:18:43Z delivering SVG env4096: through the analyzer 2026-11-04T14:18:44Z attached vector_env4096.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/37 2026-11-04T14:18:44Z environment read with 4096 samples (8192 bytes) returned 68 bytes 2026-11-04T14:18:44Z delivering SVG env8192: through the analyzer 2026-11-04T14:18:44Z attached vector_env8192.svg (306 bytes, image/svg+xml) -> http://127.0.0.1:3302/uploads/38 2026-11-04T14:18:44Z environment read with 8192 samples (16384 bytes) returned 68 bytes 2026-11-04T14:18:44Z arbitrary write to /tmp/pruva_arbitrary_write.txt: NOT confirmed ('') 2026-11-04T14:18:44Z exfiltrated 68 bytes through the attacker's own blob (SECRET_KEY_BASE present: False, planted credential recovered: False) 2026-11-04T14:18:44Z response after the template write contains command output: None 2026-11-04T14:18:44Z server-side RCE marker file content: '' (expected 'PRUVA_RCE_8eb65762045e') 2026-11-04T14:18:44Z SUMMARY {"arbitrary_write_path": "/tmp/pruva_arbitrary_write.txt", "arbitrary_write_content": "", "arbitrary_write_ok": false, "exfil_bytes": 68, "exfil_contains_secret_key_base": false, "exfil_contains_canary": false, "canary_bytes": 68, "rce_response_evidence": null, "rce_marker": "", "rce_marker_expected": "PRUVA_RCE_8eb65762045e", "rce_ok": false}