HEX
Server: Apache
System: Linux dinesh8189 5.15.98-grsec-sharedvalley-2.lc.el8.x86_64 #1 SMP Thu Mar 9 09:07:30 -03 2023 x86_64
User: cgmgerenciamento1 (814285)
PHP: 8.1.26
Disabled: apache_child_terminate,dl,escapeshellarg,escapeshellcmd,exec,link,mail,openlog,passthru,pcntl_alarm,pcntl_exec,pcntl_fork,pcntl_get_last_error,pcntl_getpriority,pcntl_setpriority,pcntl_signal,pcntl_signal_dispatch,pcntl_sigprocmask,pcntl_sigtimedwait,pcntl_sigwaitinfo,pcntl_strerror,pcntl_wait,pcntl_waitpid,pcntl_wexitstatus,pcntl_wifexited,pcntl_wifsignaled,pcntl_wifstopped,pcntl_wstopsig,pcntl_wtermsig,php_check_syntax,php_strip_whitespace,popen,proc_close,proc_open,shell_exec,symlink,system
Upload Files
File: //usr/local/modsecurity-crs/regex-assembly/933210.ra
##! Please refer to the documentation at
##! https://coreruleset.org/docs/development/regex_assembly/.

##! Helpers
##!> define single_or_double_quotes ['"]
##!> define string_in_round_brackets \(.+\)

##!$ ;

##!> assemble
  ##! example payload: (system)(ls);
  {{string_in_round_brackets}}{{string_in_round_brackets}}

  ##! example payload: (sys)"tem"(ls);
  {{string_in_round_brackets}}{{single_or_double_quotes}}[a-zA-Z-_0-9]+{{single_or_double_quotes}}{{string_in_round_brackets}}

  ##! example payload: a=system&b=$_GET[0](ls);
  \[\d+\]{{string_in_round_brackets}}

  ##! example payload: {0}("ls")
  \{\d+\}{{string_in_round_brackets}}

  ##! example payload: $a("ls")
  \$[^(\),.;\x5c/]+{{string_in_round_brackets}}

  ##! example payload: "system"("ls")
  {{single_or_double_quotes}}[a-zA-Z0-9-_\x5c]+{{single_or_double_quotes}}{{string_in_round_brackets}}

  ##! example payload: (string)system("ls")
  \([^\)]*string[^\)]*\)[a-zA-Z-_0-9\"'.{}\[\]\s]+\([^\)]*\)
##!<