HEX
Server: Apache
System: Linux dinesh8189 5.15.98-grsec-sharedvalley-2.lc.el8.x86_64 #1 SMP Thu Mar 9 09:07:30 -03 2023 x86_64
User: cgmgerenciamento1 (814285)
PHP: 8.1.26
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: //proc/self/root/usr/local/modsecurity-crs/regex-assembly/942190.ra
##! Please refer to the documentation at
##! https://coreruleset.org/docs/development/regex_assembly/.

##!+ i

##!> define quotes [\"'`]

##!> assemble
  {{quotes}}
  ##!=>
  \s*!\s*[\"'`\w]
  ##!> assemble
    ;?\s*
    ##!=>
    having
    select
    ##!> assemble
      union\b\s*
      ##!=>
      all
      distinct
      select
    ##!<
    ##!=>
    \b\s*[^\s]
  ##!<
##!<

##!> assemble
  \b
  ##!=>
  ##!> assemble
    connection_id
    current_user
    database
    schema
    user
    ##!=>
    \s*?\(
  ##!<

  exec\s+master\.
  execute\s+master\.
  from\W+information_schema\W
  ##!> assemble
    into[\s+]+
    ##!=>
    dumpfile
    outfile
    ##!=>
    \s*?{{quotes}}
  ##!<

  select.*?\w?user\(
  union\sselect\s@
  union[\w(\s]*?select
##!<

\s*?exec.*?\Wxp_cmdshell
\s*?execute.*?\Wxp_cmdshell
\Wiif\s*?\(