City Mutual — Internal Tools
Operations console
Staff access only
Network diagnostics, session import, and internal API shortcuts. Sign in as a customer for auth-gated tools.
Network tools
Log viewer
Session & preferences (/api/deserialize/session/import)
Market plugin & cache
Login required for cache flush, preferences, and authenticated GET tools.
Files
Internal APIs
/dev/phpinfo
Server info dump
/dev/env
Environment variables
/internal/env
Internal env dump
/dev/internal/users-export
All users export
/internal/config
Full app configuration
/internal/users/list
Internal user list
/internal/backup/list
Internal backup list
/metrics
Metrics with secrets
/actuator
Actuator index
/actuator/env
Spring-style env dump
/actuator/configprops
Actuator config properties
/debug/debug
Debug dump
/debug/health
Debug health
/health/health
Health endpoint
/healthcheck/healthcheck
Healthcheck endpoint
/swagger.json
API documentation
/robots.txt
Reveals hidden paths
/server-status
Server status page
/api/documents/download?file=backup/users_export.csv
Sample document download (LFI)
/api/support/diagnostic?host=127.0.0.1&tool=ping
Support diagnostic (GET)
/api/documents/export/report?type=summary&period=monthly
Export report (auth required)
/api/v1/accounts/1
Deprecated v1 account
/api/v1/transactions/1
Deprecated v1 transaction