2022-10-26 19:33:19 +03:00

26380 lines
770 KiB
Plaintext
Executable File

{
"allowed_text_re": "^([\\w\\s+-]|%20|%09)*$",
"attack_types_map": {
"code_execution_fast_reg_0": [
"Remote Code Execution"
],
"code_execution_fast_reg_1": [
"Remote Code Execution"
],
"code_execution_fast_reg_2": [
"Remote Code Execution"
],
"code_execution_fast_reg_3": [
"Remote Code Execution"
],
"comment_ev_fast_reg_0": [
"Evasion Techniques"
],
"comment_newline_bypass_regex_0": [
"SQL Injection"
],
"detect_evasion_high_acuracy_0": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_1": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_10": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_11": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_12": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_13": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_14": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_15": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_16": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_17": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_18": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_19": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_2": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_20": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_21": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_22": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_23": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_3": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_4": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_5": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_6": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_7": [
"Evasion Techniques"
],
"detect_evasion_high_acuracy_9": [
"Evasion Techniques"
],
"encoding_chars108a": [
"Evasion Techniques"
],
"encoding_chars_2": [
"Evasion Techniques"
],
"encoding_chars_3": [
"Evasion Techniques"
],
"encoding_chars_4": [
"Evasion Techniques"
],
"encoding_charsfb50": [
"Evasion Techniques"
],
"evasion": [
"Evasion Techniques"
],
"evasion_high_acuracy557d": [
"Evasion Techniques"
],
"evasion_high_acuracy90a4": [
"Evasion Techniques"
],
"evasion_high_acuracyfb73": [
"Evasion Techniques"
],
"evasion_wildcard_regex_0": [
"Evasion Techniques"
],
"evasion_wildcard_regex_1": [
"Evasion Techniques"
],
"evasion_wildcard_regex_2": [
"Evasion Techniques"
],
"evasion_wildcard_regex_3": [
"Evasion Techniques"
],
"evasion_wildcard_regex_4": [
"Evasion Techniques"
],
"evasion_wildcard_regex_5": [
"Evasion Techniques"
],
"evasion_wildcard_regex_6": [
"Evasion Techniques"
],
"evasion_wildcard_regex_7": [
"Evasion Techniques"
],
"evasion_wildcard_regex_8": [
"Evasion Techniques"
],
"evasion_wildcard_regex_9": [
"Evasion Techniques"
],
"fn_name_pass_regex_0": [
"Remote Code Execution"
],
"general_injection_regex_0": [
"SQL Injection"
],
"generic_keywords": [
"General"
],
"generic_keywordsce36": [
"General"
],
"hi_acur_fast_reg_evasion48ff": [
"Evasion Techniques"
],
"hi_acur_fast_reg_evasion9228": [
"Evasion Techniques"
],
"hi_acur_fast_reg_evasion_0": [
"Evasion Techniques"
],
"hi_acur_fast_reg_evasion_1": [
"Evasion Techniques"
],
"hi_acur_fast_reg_evasion_2": [
"Evasion Techniques"
],
"hi_acur_fast_reg_evasion_3": [
"Evasion Techniques"
],
"high_acuracy1246": [
"General"
],
"high_acuracy2c17": [
"General"
],
"high_acuracy34a1": [
"General"
],
"high_acuracy3afe": [
"General"
],
"high_acuracy496d": [
"General"
],
"high_acuracy65ab": [
"General"
],
"high_acuracy6a8c": [
"General"
],
"high_acuracy_0": [
"General"
],
"high_acuracy_1": [
"General"
],
"high_acuracy_10": [
"General"
],
"high_acuracy_12": [
"General"
],
"high_acuracy_13": [
"General"
],
"high_acuracy_15": [
"General"
],
"high_acuracy_16": [
"General"
],
"high_acuracy_17": [
"General"
],
"high_acuracy_18": [
"General"
],
"high_acuracy_2": [
"General"
],
"high_acuracy_3": [
"General"
],
"high_acuracy_4": [
"General"
],
"high_acuracy_5": [
"General"
],
"high_acuracy_7": [
"General"
],
"high_acuracy_code_exec035f": [
"Remote Code Execution"
],
"high_acuracy_code_exec038e": [
"Remote Code Execution"
],
"high_acuracy_code_exec043f": [
"Remote Code Execution"
],
"high_acuracy_code_exec048d": [
"Remote Code Execution"
],
"high_acuracy_code_exec063e": [
"Remote Code Execution"
],
"high_acuracy_code_exec0668": [
"Remote Code Execution"
],
"high_acuracy_code_exec09c1": [
"Remote Code Execution"
],
"high_acuracy_code_exec0b2c": [
"Remote Code Execution"
],
"high_acuracy_code_exec0b93": [
"Remote Code Execution"
],
"high_acuracy_code_exec11b0": [
"Remote Code Execution"
],
"high_acuracy_code_exec12a1": [
"Remote Code Execution"
],
"high_acuracy_code_exec1457": [
"Remote Code Execution"
],
"high_acuracy_code_exec1f6f": [
"Remote Code Execution"
],
"high_acuracy_code_exec20f9": [
"Remote Code Execution"
],
"high_acuracy_code_exec2880": [
"Remote Code Execution"
],
"high_acuracy_code_exec2c66": [
"Remote Code Execution"
],
"high_acuracy_code_exec2e22": [
"Remote Code Execution"
],
"high_acuracy_code_exec2ed8": [
"Remote Code Execution"
],
"high_acuracy_code_exec2f16": [
"Remote Code Execution"
],
"high_acuracy_code_exec30f1": [
"Remote Code Execution"
],
"high_acuracy_code_exec315e": [
"Remote Code Execution"
],
"high_acuracy_code_exec323a": [
"Remote Code Execution"
],
"high_acuracy_code_exec32bf": [
"Remote Code Execution"
],
"high_acuracy_code_exec3afe": [
"Remote Code Execution"
],
"high_acuracy_code_exec3bfa": [
"Remote Code Execution"
],
"high_acuracy_code_exec3c96": [
"Remote Code Execution"
],
"high_acuracy_code_exec4543": [
"Remote Code Execution"
],
"high_acuracy_code_exec461a": [
"Remote Code Execution"
],
"high_acuracy_code_exec4753": [
"Remote Code Execution"
],
"high_acuracy_code_exec485a": [
"Remote Code Execution"
],
"high_acuracy_code_exec5015": [
"Remote Code Execution"
],
"high_acuracy_code_exec50a4": [
"Remote Code Execution"
],
"high_acuracy_code_exec50f8": [
"Remote Code Execution"
],
"high_acuracy_code_exec560f": [
"Remote Code Execution"
],
"high_acuracy_code_exec562c": [
"Remote Code Execution"
],
"high_acuracy_code_exec56df": [
"Remote Code Execution"
],
"high_acuracy_code_exec5729": [
"Remote Code Execution"
],
"high_acuracy_code_exec575a": [
"Remote Code Execution"
],
"high_acuracy_code_exec59c8": [
"Remote Code Execution"
],
"high_acuracy_code_exec5aa6": [
"Remote Code Execution"
],
"high_acuracy_code_exec5ff3": [
"Remote Code Execution"
],
"high_acuracy_code_exec6274": [
"Remote Code Execution"
],
"high_acuracy_code_exec6338": [
"Remote Code Execution"
],
"high_acuracy_code_exec6d5b": [
"Remote Code Execution"
],
"high_acuracy_code_exec6db9": [
"Remote Code Execution"
],
"high_acuracy_code_exec7065": [
"Remote Code Execution"
],
"high_acuracy_code_exec778e": [
"Remote Code Execution"
],
"high_acuracy_code_exec78ab": [
"Remote Code Execution"
],
"high_acuracy_code_exec78da": [
"Remote Code Execution"
],
"high_acuracy_code_exec79c4": [
"Remote Code Execution"
],
"high_acuracy_code_exec7b77": [
"Remote Code Execution"
],
"high_acuracy_code_exec7c99": [
"Remote Code Execution"
],
"high_acuracy_code_exec7e9f": [
"Remote Code Execution"
],
"high_acuracy_code_exec8386": [
"Remote Code Execution"
],
"high_acuracy_code_exec8ef9": [
"Remote Code Execution"
],
"high_acuracy_code_exec91f3": [
"Remote Code Execution"
],
"high_acuracy_code_exec99db": [
"Remote Code Execution"
],
"high_acuracy_code_exec9e8c": [
"Remote Code Execution"
],
"high_acuracy_code_execa46c": [
"Remote Code Execution"
],
"high_acuracy_code_execa58d": [
"Remote Code Execution"
],
"high_acuracy_code_execa7da": [
"Remote Code Execution"
],
"high_acuracy_code_execa88a": [
"Remote Code Execution"
],
"high_acuracy_code_execa9f6": [
"Remote Code Execution"
],
"high_acuracy_code_execaa33": [
"Remote Code Execution"
],
"high_acuracy_code_execaf62": [
"Remote Code Execution"
],
"high_acuracy_code_execb269": [
"Remote Code Execution"
],
"high_acuracy_code_execbb03": [
"Remote Code Execution"
],
"high_acuracy_code_execbb0c": [
"Remote Code Execution"
],
"high_acuracy_code_execbcbe": [
"Remote Code Execution"
],
"high_acuracy_code_execbcd6": [
"Remote Code Execution"
],
"high_acuracy_code_execc123": [
"Remote Code Execution"
],
"high_acuracy_code_execc50f": [
"Remote Code Execution"
],
"high_acuracy_code_execca3c": [
"Remote Code Execution"
],
"high_acuracy_code_execce3b": [
"Remote Code Execution"
],
"high_acuracy_code_execd061": [
"Remote Code Execution"
],
"high_acuracy_code_execd217": [
"Remote Code Execution"
],
"high_acuracy_code_execd415": [
"Remote Code Execution"
],
"high_acuracy_code_execdaf9": [
"Remote Code Execution"
],
"high_acuracy_code_exece0bc": [
"Remote Code Execution"
],
"high_acuracy_code_execea23": [
"Remote Code Execution"
],
"high_acuracy_code_execf01b": [
"Remote Code Execution"
],
"high_acuracy_code_execf08e": [
"Remote Code Execution"
],
"high_acuracy_code_execf565": [
"Remote Code Execution"
],
"high_acuracy_code_execf7a4": [
"Remote Code Execution"
],
"high_acuracy_code_execf877": [
"Remote Code Execution"
],
"high_acuracy_code_execfccf": [
"Remote Code Execution"
],
"high_acuracy_code_execution_1": [
"Remote Code Execution"
],
"high_acuracy_code_execution_12": [
"Remote Code Execution"
],
"high_acuracy_code_execution_16": [
"Remote Code Execution"
],
"high_acuracy_code_execution_18": [
"Remote Code Execution"
],
"high_acuracy_code_execution_20": [
"Remote Code Execution"
],
"high_acuracy_code_execution_25": [
"Remote Code Execution"
],
"high_acuracy_code_execution_26": [
"Remote Code Execution"
],
"high_acuracy_code_execution_4": [
"Remote Code Execution"
],
"high_acuracy_code_execution_46": [
"Remote Code Execution"
],
"high_acuracy_code_execution_49": [
"Remote Code Execution"
],
"high_acuracy_code_execution_51": [
"Remote Code Execution"
],
"high_acuracy_code_execution_53": [
"Remote Code Execution"
],
"high_acuracy_code_execution_54": [
"Remote Code Execution"
],
"high_acuracy_code_execution_59": [
"Remote Code Execution"
],
"high_acuracy_code_execution_6": [
"Remote Code Execution"
],
"high_acuracy_code_execution_66": [
"Remote Code Execution"
],
"high_acuracy_code_execution_9": [
"Remote Code Execution"
],
"high_acuracy_fast_reg_xss0315": [
"Cross Site Scripting"
],
"high_acuracy_fast_reg_xss2841": [
"Cross Site Scripting"
],
"high_acuracy_fast_reg_xss3420": [
"Cross Site Scripting"
],
"high_acuracy_fast_reg_xss52a6": [
"Cross Site Scripting"
],
"high_acuracy_fast_reg_xss5e81": [
"Cross Site Scripting"
],
"high_acuracy_fast_reg_xss_0": [
"Cross Site Scripting"
],
"high_acuracy_fast_reg_xssd0fb": [
"Cross Site Scripting"
],
"high_acuracy_fast_reg_xxe_0": [
"XML External Entity"
],
"high_acuracya652": [
"General"
],
"high_acuracyb269": [
"General"
],
"high_acuracyc37d": [
"General"
],
"ldap_injection": [
"LDAP Injection"
],
"ldap_injection_0": [
"LDAP Injection"
],
"ldap_injection_1": [
"LDAP Injection"
],
"ldap_injection_regex_0": [
"LDAP Injection"
],
"ldap_injection_regex_1": [
"LDAP Injection"
],
"ldap_injection_regex_2": [
"LDAP Injection"
],
"ldap_injection_regex_3": [
"LDAP Injection"
],
"ldap_injection_regex_4": [
"LDAP Injection"
],
"ldap_injection_regex_5": [
"LDAP Injection"
],
"ldap_injection_regex_6": [
"LDAP Injection"
],
"ldap_injectionf0b9": [
"LDAP Injection"
],
"longtext": [
"General"
],
"mail_attacks_0": [
"Remote Code Execution"
],
"mail_attacks_1": [
"Remote Code Execution"
],
"mail_attacks_2": [
"Remote Code Execution"
],
"mail_attacks_3": [
"Remote Code Execution"
],
"mail_attacks_4": [
"Remote Code Execution"
],
"medium_acuracy": [
"General"
],
"medium_acuracy_0": [
"General"
],
"medium_acuracy_1": [
"General"
],
"no_sql_fast_reg0397": [
"SQL Injection"
],
"no_sql_fast_reg7acf": [
"SQL Injection"
],
"no_sql_fast_rega323": [
"SQL Injection"
],
"no_sql_fast_regb128": [
"SQL Injection"
],
"os_cmd_ev_fast_reg642a": [
"Remote Code Execution",
"Evasion Techniques"
],
"os_cmd_exec_medium_acuracy": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy065c": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy0f71": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy30f1": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_0": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_1": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_10": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_11": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_12": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_13": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_14": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_15": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_16": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_17": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_18": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_19": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_2": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_20": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_21": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_22": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_4": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_6": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_8": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracy_9": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracyb605": [
"Remote Code Execution"
],
"os_cmd_exec_medium_acuracyd71b": [
"Remote Code Execution"
],
"os_cmd_exec_susp_dir_patts": [
"Remote Code Execution"
],
"os_cmd_exec_susp_dir_patts_0": [
"Remote Code Execution"
],
"os_cmd_exec_susp_dir_patts_1": [
"Remote Code Execution"
],
"os_cmd_exec_susp_dir_patts_2": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg0e76": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg32ff": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg4c37": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg7f90": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg_0": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg_10": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg_2": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg_4": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg_8": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_reg_9": [
"Remote Code Execution"
],
"os_cmd_high_acuracy_fast_regd6e8": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy_0": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy_1": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy_2": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy_3": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy_4": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy_5": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy_6": [
"Remote Code Execution"
],
"os_cmd_sep_medium_acuracy_7": [
"Remote Code Execution"
],
"os_commands": [
"Remote Code Execution"
],
"os_commands272f": [
"Remote Code Execution"
],
"os_commands2cf4": [
"Remote Code Execution"
],
"os_commands2ea6": [
"Remote Code Execution"
],
"os_commands8744": [
"Remote Code Execution"
],
"os_commands_0": [
"Remote Code Execution"
],
"os_commands_1": [
"Remote Code Execution"
],
"os_commands_10": [
"Remote Code Execution"
],
"os_commands_11": [
"Remote Code Execution"
],
"os_commands_12": [
"Remote Code Execution"
],
"os_commands_13": [
"Remote Code Execution"
],
"os_commands_14": [
"Remote Code Execution"
],
"os_commands_15": [
"Remote Code Execution"
],
"os_commands_16": [
"Remote Code Execution"
],
"os_commands_17": [
"Remote Code Execution"
],
"os_commands_18": [
"Remote Code Execution"
],
"os_commands_19": [
"Remote Code Execution"
],
"os_commands_2": [
"Remote Code Execution"
],
"os_commands_20": [
"Remote Code Execution"
],
"os_commands_21": [
"Remote Code Execution"
],
"os_commands_22": [
"Remote Code Execution"
],
"os_commands_23": [
"Remote Code Execution"
],
"os_commands_24": [
"Remote Code Execution"
],
"os_commands_25": [
"Remote Code Execution"
],
"os_commands_26": [
"Remote Code Execution"
],
"os_commands_27": [
"Remote Code Execution"
],
"os_commands_3": [
"Remote Code Execution"
],
"os_commands_4": [
"Remote Code Execution"
],
"os_commands_5": [
"Remote Code Execution"
],
"os_commands_6": [
"Remote Code Execution"
],
"os_commands_7": [
"Remote Code Execution"
],
"os_commands_8": [
"Remote Code Execution"
],
"os_commands_9": [
"Remote Code Execution"
],
"os_commandsbdd9": [
"Remote Code Execution"
],
"os_commandsdd75": [
"Remote Code Execution"
],
"os_commandsefda": [
"Remote Code Execution"
],
"os_commandsff70": [
"Remote Code Execution"
],
"path_traversal": [
"Path Traversal"
],
"path_traversal65ba": [
"Path Traversal"
],
"path_traversal6625": [
"Path Traversal"
],
"path_traversal913d": [
"Path Traversal"
],
"path_traversal_0": [
"Path Traversal"
],
"path_traversal_1": [
"Path Traversal"
],
"path_traversal_2": [
"Path Traversal"
],
"path_traversal_3": [
"Path Traversal"
],
"php_info_parameters0669": [
"Remote Code Execution"
],
"php_info_parameters3f14": [
"Remote Code Execution"
],
"php_info_parameters3fdf": [
"Remote Code Execution"
],
"php_info_parameters41db": [
"Remote Code Execution"
],
"php_info_parameters8851": [
"Remote Code Execution"
],
"php_info_parametersc394": [
"Remote Code Execution"
],
"php_info_parametersda77": [
"Remote Code Execution"
],
"php_info_parameterse68c": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_reg022a": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_reg151a": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_reg1e0f": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_reg4f07": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_reg6c96": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_reg7c51": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_regba9d": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_regbc7e": [
"Remote Code Execution"
],
"php_proto_wrappers_fast_reged42": [
"Remote Code Execution"
],
"quotes_ev_fast_reg_0": [
"Evasion Techniques"
],
"quotes_ev_fast_reg_1": [
"Evasion Techniques"
],
"quotes_ev_fast_reg_2": [
"Evasion Techniques"
],
"quotes_ev_fast_reg_3": [
"Evasion Techniques"
],
"quotes_ev_fast_reg_4": [
"Evasion Techniques"
],
"quotes_ev_fast_regab4e": [
"Evasion Techniques"
],
"quotes_space_ev_fast_reg9d52": [
"Evasion Techniques"
],
"regex_code_execution_0": [
"Remote Code Execution"
],
"regex_code_execution_1": [
"Remote Code Execution"
],
"regex_code_execution_10": [
"Remote Code Execution"
],
"regex_code_execution_2": [
"Remote Code Execution"
],
"regex_code_execution_3": [
"Remote Code Execution"
],
"regex_code_execution_4": [
"Remote Code Execution"
],
"regex_code_execution_5": [
"Remote Code Execution"
],
"regex_code_execution_6": [
"Remote Code Execution"
],
"regex_code_execution_7": [
"Remote Code Execution"
],
"regex_code_execution_8": [
"Remote Code Execution"
],
"regex_code_execution_9": [
"Remote Code Execution"
],
"regex_high_acuracy_crlf_inj_0": [
"Evasion Techniques"
],
"regex_high_acuracy_crlf_inj_1": [
"Evasion Techniques"
],
"regex_high_acuracy_crlf_inj_2": [
"Evasion Techniques"
],
"regex_high_acuracy_crlf_inj_3": [
"Evasion Techniques"
],
"regex_postfix_0": [
"SQL Injection"
],
"regex_postfix_1": [
"SQL Injection"
],
"regex_prefix_0": [
"SQL Injection"
],
"regex_prefix_1": [
"SQL Injection"
],
"regex_sqli_0": [
"SQL Injection"
],
"regex_sqli_1": [
"SQL Injection"
],
"regex_sqli_10": [
"SQL Injection"
],
"regex_sqli_11": [
"SQL Injection"
],
"regex_sqli_12": [
"SQL Injection"
],
"regex_sqli_13": [
"SQL Injection"
],
"regex_sqli_14": [
"SQL Injection"
],
"regex_sqli_15": [
"SQL Injection"
],
"regex_sqli_16": [
"SQL Injection"
],
"regex_sqli_17": [
"SQL Injection"
],
"regex_sqli_18": [
"SQL Injection"
],
"regex_sqli_19": [
"SQL Injection"
],
"regex_sqli_2": [
"SQL Injection"
],
"regex_sqli_20": [
"SQL Injection"
],
"regex_sqli_21": [
"SQL Injection"
],
"regex_sqli_22": [
"SQL Injection"
],
"regex_sqli_23": [
"SQL Injection"
],
"regex_sqli_24": [
"SQL Injection"
],
"regex_sqli_25": [
"SQL Injection"
],
"regex_sqli_26": [
"SQL Injection"
],
"regex_sqli_27": [
"SQL Injection"
],
"regex_sqli_28": [
"SQL Injection"
],
"regex_sqli_29": [
"SQL Injection"
],
"regex_sqli_3": [
"SQL Injection"
],
"regex_sqli_30": [
"SQL Injection"
],
"regex_sqli_31": [
"SQL Injection"
],
"regex_sqli_32": [
"SQL Injection"
],
"regex_sqli_4": [
"SQL Injection"
],
"regex_sqli_5": [
"SQL Injection"
],
"regex_sqli_6": [
"SQL Injection"
],
"regex_sqli_7": [
"SQL Injection"
],
"regex_sqli_8": [
"SQL Injection"
],
"regex_sqli_9": [
"SQL Injection"
],
"regex_xss_0": [
"Cross Site Scripting"
],
"regex_xss_1": [
"Cross Site Scripting"
],
"regex_xss_2": [
"Cross Site Scripting"
],
"regex_xss_3": [
"Cross Site Scripting"
],
"regex_xss_4": [
"Cross Site Scripting"
],
"regex_xss_5": [
"Cross Site Scripting"
],
"regex_xss_6": [
"Cross Site Scripting"
],
"regex_xss_7": [
"Cross Site Scripting"
],
"regex_xss_8": [
"Cross Site Scripting"
],
"regex_xss_evasion_0": [
"Cross Site Scripting",
"Evasion Techniques"
],
"regex_xxe_0": [
"XML External Entity"
],
"sqli_blind": [
"SQL Injection"
],
"sqli_blind8a50": [
"SQL Injection"
],
"sqli_blind_0": [
"SQL Injection"
],
"sqli_blinda6e0": [
"SQL Injection"
],
"sqli_detection_evasion": [
"Evasion Techniques",
"SQL Injection"
],
"sqli_detection_evasion_0": [
"Evasion Techniques",
"SQL Injection"
],
"sqli_detection_evasion_1": [
"Evasion Techniques",
"SQL Injection"
],
"sqli_fast_reg6210": [
"SQL Injection"
],
"sqli_fast_reg7dbf": [
"SQL Injection"
],
"sqli_fast_reg_0": [
"SQL Injection"
],
"sqli_fast_reg_1": [
"SQL Injection"
],
"sqli_fast_reg_2": [
"SQL Injection"
],
"sqli_fast_reg_3": [
"SQL Injection"
],
"sqli_fast_reg_4": [
"SQL Injection"
],
"sqli_fast_reg_5": [
"SQL Injection"
],
"sqli_fast_rega9c5": [
"SQL Injection"
],
"sqli_generic": [
"SQL Injection"
],
"sqli_generic035a": [
"SQL Injection"
],
"sqli_generic062d": [
"SQL Injection"
],
"sqli_generic0cd1": [
"SQL Injection"
],
"sqli_generic0ceb": [
"SQL Injection"
],
"sqli_generic108f": [
"SQL Injection"
],
"sqli_generic155c": [
"SQL Injection"
],
"sqli_generic20ed": [
"SQL Injection"
],
"sqli_generic2717": [
"SQL Injection"
],
"sqli_generic2a58": [
"SQL Injection"
],
"sqli_generic2bdb": [
"SQL Injection"
],
"sqli_generic2c9a": [
"SQL Injection"
],
"sqli_generic332b": [
"SQL Injection"
],
"sqli_generic3928": [
"SQL Injection"
],
"sqli_generic39a4": [
"SQL Injection"
],
"sqli_generic3c80": [
"SQL Injection"
],
"sqli_generic3f67": [
"SQL Injection"
],
"sqli_generic4271": [
"SQL Injection"
],
"sqli_generic4c86": [
"SQL Injection"
],
"sqli_generic4d35": [
"SQL Injection"
],
"sqli_generic4fa4": [
"SQL Injection"
],
"sqli_generic4ffb": [
"SQL Injection"
],
"sqli_generic502b": [
"SQL Injection"
],
"sqli_generic506a": [
"SQL Injection"
],
"sqli_generic559b": [
"SQL Injection"
],
"sqli_generic587a": [
"SQL Injection"
],
"sqli_generic6a8c": [
"SQL Injection"
],
"sqli_generic7598": [
"SQL Injection"
],
"sqli_generic936a": [
"SQL Injection"
],
"sqli_generic95c8": [
"SQL Injection"
],
"sqli_generic9dce": [
"SQL Injection"
],
"sqli_generic9ef6": [
"SQL Injection"
],
"sqli_generic_10": [
"SQL Injection"
],
"sqli_generic_11": [
"SQL Injection"
],
"sqli_generic_13": [
"SQL Injection"
],
"sqli_generic_14": [
"SQL Injection"
],
"sqli_generic_16": [
"SQL Injection"
],
"sqli_generic_18": [
"SQL Injection"
],
"sqli_generic_21": [
"SQL Injection"
],
"sqli_generic_22": [
"SQL Injection"
],
"sqli_generic_25": [
"SQL Injection"
],
"sqli_generic_27": [
"SQL Injection"
],
"sqli_generic_28": [
"SQL Injection"
],
"sqli_generic_33": [
"SQL Injection"
],
"sqli_generic_37": [
"SQL Injection"
],
"sqli_generic_38": [
"SQL Injection"
],
"sqli_generic_4": [
"SQL Injection"
],
"sqli_generic_41": [
"SQL Injection"
],
"sqli_generic_42": [
"SQL Injection"
],
"sqli_generic_47": [
"SQL Injection"
],
"sqli_generic_5": [
"SQL Injection"
],
"sqli_generic_50": [
"SQL Injection"
],
"sqli_generic_58": [
"SQL Injection"
],
"sqli_generic_59": [
"SQL Injection"
],
"sqli_generic_60": [
"SQL Injection"
],
"sqli_generic_61": [
"SQL Injection"
],
"sqli_generic_63": [
"SQL Injection"
],
"sqli_generic_65": [
"SQL Injection"
],
"sqli_generic_8": [
"SQL Injection"
],
"sqli_genericadd9": [
"SQL Injection"
],
"sqli_genericb11c": [
"SQL Injection"
],
"sqli_genericb28b": [
"SQL Injection"
],
"sqli_genericb844": [
"SQL Injection"
],
"sqli_genericb981": [
"SQL Injection"
],
"sqli_genericba4a": [
"SQL Injection"
],
"sqli_genericba83": [
"SQL Injection"
],
"sqli_genericbb99": [
"SQL Injection"
],
"sqli_genericc23f": [
"SQL Injection"
],
"sqli_genericc98e": [
"SQL Injection"
],
"sqli_genericccae": [
"SQL Injection"
],
"sqli_genericce64": [
"SQL Injection"
],
"sqli_genericd47d": [
"SQL Injection"
],
"sqli_genericd497": [
"SQL Injection"
],
"sqli_genericdb7b": [
"SQL Injection"
],
"sqli_genericdd00": [
"SQL Injection"
],
"sqli_genericdd3b": [
"SQL Injection"
],
"sqli_generice043": [
"SQL Injection"
],
"sqli_generice54c": [
"SQL Injection"
],
"sqli_genericea23": [
"SQL Injection"
],
"sqli_genericec02": [
"SQL Injection"
],
"sqli_medium_acuracy": [
"SQL Injection"
],
"sqli_medium_acuracy_0": [
"SQL Injection"
],
"sqli_medium_acuracy_1": [
"SQL Injection"
],
"sqli_medium_acuracy_2": [
"SQL Injection"
],
"sqli_medium_acuracy_3": [
"SQL Injection"
],
"sqli_medium_acuracy_4": [
"SQL Injection"
],
"sqli_medium_acuracy_5": [
"SQL Injection"
],
"sqli_medium_acuracy_6": [
"SQL Injection"
],
"sqli_medium_acuracy_7": [
"SQL Injection"
],
"ssti": [
"Remote Code Execution"
],
"ssti2553": [
"Remote Code Execution"
],
"ssti2c4d": [
"Remote Code Execution"
],
"ssti32bf": [
"Remote Code Execution"
],
"ssti3c17": [
"Remote Code Execution"
],
"ssti43a8": [
"Remote Code Execution"
],
"ssti6c6e": [
"Remote Code Execution"
],
"ssti8e8b": [
"Remote Code Execution"
],
"ssti9606": [
"Remote Code Execution"
],
"ssti_0": [
"Remote Code Execution"
],
"ssti_12": [
"Remote Code Execution"
],
"ssti_15": [
"Remote Code Execution"
],
"ssti_16": [
"Remote Code Execution"
],
"ssti_18": [
"Remote Code Execution"
],
"ssti_2": [
"Remote Code Execution"
],
"ssti_20": [
"Remote Code Execution"
],
"ssti_22": [
"Remote Code Execution"
],
"ssti_24": [
"Remote Code Execution"
],
"ssti_5": [
"Remote Code Execution"
],
"ssti_6": [
"Remote Code Execution"
],
"ssti_fast_reg2d28": [
"Remote Code Execution"
],
"ssti_fast_reg_0": [
"Remote Code Execution"
],
"ssti_fast_reg_1": [
"Remote Code Execution"
],
"ssti_fast_reg_2": [
"Remote Code Execution"
],
"ssti_fast_reg_3": [
"Remote Code Execution"
],
"ssti_fast_reg_4": [
"Remote Code Execution"
],
"ssti_fast_regc807": [
"Remote Code Execution"
],
"ssti_fast_regdcd5": [
"Remote Code Execution"
],
"sstib08a": [
"Remote Code Execution"
],
"sstib9c5": [
"Remote Code Execution"
],
"ssticd8d": [
"Remote Code Execution"
],
"sstid1c2": [
"Remote Code Execution"
],
"sstid61d": [
"Remote Code Execution"
],
"sstie907": [
"Remote Code Execution"
],
"sstifdb4": [
"Remote Code Execution"
],
"url_scanning": [
"Path Traversal"
],
"url_scanning1f1b": [
"Path Traversal"
],
"url_scanning4716": [
"Path Traversal"
],
"url_scanning6bf5": [
"Path Traversal"
],
"url_scanning6f3d": [
"Path Traversal"
],
"url_scanning7ce2": [
"Path Traversal"
],
"url_scanning_1": [
"Path Traversal"
],
"url_scanning_11": [
"Path Traversal"
],
"url_scanning_12": [
"Path Traversal"
],
"url_scanning_13": [
"Path Traversal"
],
"url_scanning_14": [
"Path Traversal"
],
"url_scanning_15": [
"Path Traversal"
],
"url_scanning_2": [
"Path Traversal"
],
"url_scanning_5": [
"Path Traversal"
],
"url_scanning_6": [
"Path Traversal"
],
"url_scanning_7": [
"Path Traversal"
],
"url_scanning_8": [
"Path Traversal"
],
"url_scanning_9": [
"Path Traversal"
],
"url_scanning_regex_0": [
"Path Traversal"
],
"url_scanningd475": [
"Path Traversal"
],
"url_scanningf544": [
"Path Traversal"
],
"url_scanningf977": [
"Path Traversal"
],
"vuln_os_dirs": [
"Vulnerability Scanning"
],
"vuln_os_dirs2c17": [
"Vulnerability Scanning"
],
"vuln_os_dirs3b59": [
"Vulnerability Scanning"
],
"vuln_os_dirs_0": [
"Vulnerability Scanning"
],
"vuln_os_dirs_1": [
"Vulnerability Scanning"
],
"vuln_os_dirs_10": [
"Vulnerability Scanning"
],
"vuln_os_dirs_11": [
"Vulnerability Scanning"
],
"vuln_os_dirs_13": [
"Vulnerability Scanning"
],
"vuln_os_dirs_14": [
"Vulnerability Scanning"
],
"vuln_os_dirs_15": [
"Vulnerability Scanning"
],
"vuln_os_dirs_16": [
"Vulnerability Scanning"
],
"vuln_os_dirs_17": [
"Vulnerability Scanning"
],
"vuln_os_dirs_2": [
"Vulnerability Scanning"
],
"vuln_os_dirs_3": [
"Vulnerability Scanning"
],
"vuln_os_dirs_4": [
"Vulnerability Scanning"
],
"vuln_os_dirs_5": [
"Vulnerability Scanning"
],
"vuln_os_dirs_6": [
"Vulnerability Scanning"
],
"vuln_os_dirs_8": [
"Vulnerability Scanning"
],
"vuln_os_files_0": [
"Vulnerability Scanning"
],
"vuln_os_files_1": [
"Vulnerability Scanning"
],
"vuln_os_files_2": [
"Vulnerability Scanning"
],
"vuln_os_files_3": [
"Vulnerability Scanning"
],
"vuln_os_files_4": [
"Vulnerability Scanning"
],
"vuln_os_files_5": [
"Vulnerability Scanning"
],
"vuln_web_dirs": [
"Vulnerability Scanning"
],
"vuln_web_dirs_102": [
"Vulnerability Scanning"
],
"vuln_web_dirs_121": [
"Vulnerability Scanning"
],
"vuln_web_dirs_170": [
"Vulnerability Scanning"
],
"vuln_web_dirs_185": [
"Vulnerability Scanning"
],
"vuln_web_dirs_207": [
"Vulnerability Scanning"
],
"vuln_web_dirs_280": [
"Vulnerability Scanning"
],
"vuln_web_dirs_307": [
"Vulnerability Scanning"
],
"vuln_web_dirs_377": [
"Vulnerability Scanning"
],
"vuln_web_dirs_380": [
"Vulnerability Scanning"
],
"vuln_web_dirs_389": [
"Vulnerability Scanning"
],
"vuln_web_dirs_40": [
"Vulnerability Scanning"
],
"vuln_web_dirs_428": [
"Vulnerability Scanning"
],
"vuln_web_dirs_483": [
"Vulnerability Scanning"
],
"vuln_web_dirs_593": [
"Vulnerability Scanning"
],
"vuln_web_dirs_600": [
"Vulnerability Scanning"
],
"vuln_web_dirs_665": [
"Vulnerability Scanning"
],
"vuln_web_dirs_689": [
"Vulnerability Scanning"
],
"vuln_web_dirs_71": [
"Vulnerability Scanning"
],
"vuln_web_dirs_712": [
"Vulnerability Scanning"
],
"vuln_web_dirs_729": [
"Vulnerability Scanning"
],
"vuln_web_dirs_74": [
"Vulnerability Scanning"
],
"vuln_web_dirs_77": [
"Vulnerability Scanning"
],
"vuln_web_files": [
"Vulnerability Scanning"
],
"vuln_web_files00a6": [
"Vulnerability Scanning"
],
"vuln_web_files1a13": [
"Vulnerability Scanning"
],
"vuln_web_files1b74": [
"Vulnerability Scanning"
],
"vuln_web_files2919": [
"Vulnerability Scanning"
],
"vuln_web_files5e7d": [
"Vulnerability Scanning"
],
"vuln_web_files87e1": [
"Vulnerability Scanning"
],
"vuln_web_files_1": [
"Vulnerability Scanning"
],
"vuln_web_files_1003": [
"Vulnerability Scanning"
],
"vuln_web_files_1005": [
"Vulnerability Scanning"
],
"vuln_web_files_1007": [
"Vulnerability Scanning"
],
"vuln_web_files_101": [
"Vulnerability Scanning"
],
"vuln_web_files_1014": [
"Vulnerability Scanning"
],
"vuln_web_files_1016": [
"Vulnerability Scanning"
],
"vuln_web_files_1018": [
"Vulnerability Scanning"
],
"vuln_web_files_1019": [
"Vulnerability Scanning"
],
"vuln_web_files_102": [
"Vulnerability Scanning"
],
"vuln_web_files_1021": [
"Vulnerability Scanning"
],
"vuln_web_files_1023": [
"Vulnerability Scanning"
],
"vuln_web_files_1025": [
"Vulnerability Scanning"
],
"vuln_web_files_1027": [
"Vulnerability Scanning"
],
"vuln_web_files_1028": [
"Vulnerability Scanning"
],
"vuln_web_files_103": [
"Vulnerability Scanning"
],
"vuln_web_files_1031": [
"Vulnerability Scanning"
],
"vuln_web_files_1037": [
"Vulnerability Scanning"
],
"vuln_web_files_1038": [
"Vulnerability Scanning"
],
"vuln_web_files_1039": [
"Vulnerability Scanning"
],
"vuln_web_files_104": [
"Vulnerability Scanning"
],
"vuln_web_files_1043": [
"Vulnerability Scanning"
],
"vuln_web_files_1045": [
"Vulnerability Scanning"
],
"vuln_web_files_1049": [
"Vulnerability Scanning"
],
"vuln_web_files_1050": [
"Vulnerability Scanning"
],
"vuln_web_files_1052": [
"Vulnerability Scanning"
],
"vuln_web_files_1059": [
"Vulnerability Scanning"
],
"vuln_web_files_1060": [
"Vulnerability Scanning"
],
"vuln_web_files_1062": [
"Vulnerability Scanning"
],
"vuln_web_files_1063": [
"Vulnerability Scanning"
],
"vuln_web_files_1068": [
"Vulnerability Scanning"
],
"vuln_web_files_1070": [
"Vulnerability Scanning"
],
"vuln_web_files_1071": [
"Vulnerability Scanning"
],
"vuln_web_files_1075": [
"Vulnerability Scanning"
],
"vuln_web_files_1076": [
"Vulnerability Scanning"
],
"vuln_web_files_1077": [
"Vulnerability Scanning"
],
"vuln_web_files_1079": [
"Vulnerability Scanning"
],
"vuln_web_files_108": [
"Vulnerability Scanning"
],
"vuln_web_files_1080": [
"Vulnerability Scanning"
],
"vuln_web_files_1081": [
"Vulnerability Scanning"
],
"vuln_web_files_1082": [
"Vulnerability Scanning"
],
"vuln_web_files_1083": [
"Vulnerability Scanning"
],
"vuln_web_files_1085": [
"Vulnerability Scanning"
],
"vuln_web_files_1087": [
"Vulnerability Scanning"
],
"vuln_web_files_1089": [
"Vulnerability Scanning"
],
"vuln_web_files_1090": [
"Vulnerability Scanning"
],
"vuln_web_files_1092": [
"Vulnerability Scanning"
],
"vuln_web_files_1094": [
"Vulnerability Scanning"
],
"vuln_web_files_1095": [
"Vulnerability Scanning"
],
"vuln_web_files_1096": [
"Vulnerability Scanning"
],
"vuln_web_files_1097": [
"Vulnerability Scanning"
],
"vuln_web_files_1098": [
"Vulnerability Scanning"
],
"vuln_web_files_1099": [
"Vulnerability Scanning"
],
"vuln_web_files_11": [
"Vulnerability Scanning"
],
"vuln_web_files_1100": [
"Vulnerability Scanning"
],
"vuln_web_files_1101": [
"Vulnerability Scanning"
],
"vuln_web_files_1104": [
"Vulnerability Scanning"
],
"vuln_web_files_1108": [
"Vulnerability Scanning"
],
"vuln_web_files_1110": [
"Vulnerability Scanning"
],
"vuln_web_files_1111": [
"Vulnerability Scanning"
],
"vuln_web_files_1114": [
"Vulnerability Scanning"
],
"vuln_web_files_1118": [
"Vulnerability Scanning"
],
"vuln_web_files_1119": [
"Vulnerability Scanning"
],
"vuln_web_files_1120": [
"Vulnerability Scanning"
],
"vuln_web_files_1122": [
"Vulnerability Scanning"
],
"vuln_web_files_1123": [
"Vulnerability Scanning"
],
"vuln_web_files_1126": [
"Vulnerability Scanning"
],
"vuln_web_files_1127": [
"Vulnerability Scanning"
],
"vuln_web_files_1128": [
"Vulnerability Scanning"
],
"vuln_web_files_1129": [
"Vulnerability Scanning"
],
"vuln_web_files_113": [
"Vulnerability Scanning"
],
"vuln_web_files_1130": [
"Vulnerability Scanning"
],
"vuln_web_files_1132": [
"Vulnerability Scanning"
],
"vuln_web_files_1133": [
"Vulnerability Scanning"
],
"vuln_web_files_1135": [
"Vulnerability Scanning"
],
"vuln_web_files_1136": [
"Vulnerability Scanning"
],
"vuln_web_files_1137": [
"Vulnerability Scanning"
],
"vuln_web_files_1138": [
"Vulnerability Scanning"
],
"vuln_web_files_1143": [
"Vulnerability Scanning"
],
"vuln_web_files_1144": [
"Vulnerability Scanning"
],
"vuln_web_files_1146": [
"Vulnerability Scanning"
],
"vuln_web_files_1147": [
"Vulnerability Scanning"
],
"vuln_web_files_1148": [
"Vulnerability Scanning"
],
"vuln_web_files_115": [
"Vulnerability Scanning"
],
"vuln_web_files_1150": [
"Vulnerability Scanning"
],
"vuln_web_files_1151": [
"Vulnerability Scanning"
],
"vuln_web_files_1152": [
"Vulnerability Scanning"
],
"vuln_web_files_1155": [
"Vulnerability Scanning"
],
"vuln_web_files_1156": [
"Vulnerability Scanning"
],
"vuln_web_files_1157": [
"Vulnerability Scanning"
],
"vuln_web_files_1159": [
"Vulnerability Scanning"
],
"vuln_web_files_1160": [
"Vulnerability Scanning"
],
"vuln_web_files_1162": [
"Vulnerability Scanning"
],
"vuln_web_files_1163": [
"Vulnerability Scanning"
],
"vuln_web_files_1164": [
"Vulnerability Scanning"
],
"vuln_web_files_1166": [
"Vulnerability Scanning"
],
"vuln_web_files_117": [
"Vulnerability Scanning"
],
"vuln_web_files_1170": [
"Vulnerability Scanning"
],
"vuln_web_files_1171": [
"Vulnerability Scanning"
],
"vuln_web_files_1173": [
"Vulnerability Scanning"
],
"vuln_web_files_1175": [
"Vulnerability Scanning"
],
"vuln_web_files_1177": [
"Vulnerability Scanning"
],
"vuln_web_files_1178": [
"Vulnerability Scanning"
],
"vuln_web_files_1179": [
"Vulnerability Scanning"
],
"vuln_web_files_118": [
"Vulnerability Scanning"
],
"vuln_web_files_1180": [
"Vulnerability Scanning"
],
"vuln_web_files_1181": [
"Vulnerability Scanning"
],
"vuln_web_files_1182": [
"Vulnerability Scanning"
],
"vuln_web_files_1183": [
"Vulnerability Scanning"
],
"vuln_web_files_1184": [
"Vulnerability Scanning"
],
"vuln_web_files_1187": [
"Vulnerability Scanning"
],
"vuln_web_files_119": [
"Vulnerability Scanning"
],
"vuln_web_files_120": [
"Vulnerability Scanning"
],
"vuln_web_files_121": [
"Vulnerability Scanning"
],
"vuln_web_files_122": [
"Vulnerability Scanning"
],
"vuln_web_files_123": [
"Vulnerability Scanning"
],
"vuln_web_files_124": [
"Vulnerability Scanning"
],
"vuln_web_files_126": [
"Vulnerability Scanning"
],
"vuln_web_files_128": [
"Vulnerability Scanning"
],
"vuln_web_files_13": [
"Vulnerability Scanning"
],
"vuln_web_files_132": [
"Vulnerability Scanning"
],
"vuln_web_files_135": [
"Vulnerability Scanning"
],
"vuln_web_files_136": [
"Vulnerability Scanning"
],
"vuln_web_files_139": [
"Vulnerability Scanning"
],
"vuln_web_files_14": [
"Vulnerability Scanning"
],
"vuln_web_files_143": [
"Vulnerability Scanning"
],
"vuln_web_files_145": [
"Vulnerability Scanning"
],
"vuln_web_files_147": [
"Vulnerability Scanning"
],
"vuln_web_files_149": [
"Vulnerability Scanning"
],
"vuln_web_files_15": [
"Vulnerability Scanning"
],
"vuln_web_files_150": [
"Vulnerability Scanning"
],
"vuln_web_files_152": [
"Vulnerability Scanning"
],
"vuln_web_files_154": [
"Vulnerability Scanning"
],
"vuln_web_files_155": [
"Vulnerability Scanning"
],
"vuln_web_files_157": [
"Vulnerability Scanning"
],
"vuln_web_files_158": [
"Vulnerability Scanning"
],
"vuln_web_files_159": [
"Vulnerability Scanning"
],
"vuln_web_files_16": [
"Vulnerability Scanning"
],
"vuln_web_files_162": [
"Vulnerability Scanning"
],
"vuln_web_files_163": [
"Vulnerability Scanning"
],
"vuln_web_files_164": [
"Vulnerability Scanning"
],
"vuln_web_files_165": [
"Vulnerability Scanning"
],
"vuln_web_files_166": [
"Vulnerability Scanning"
],
"vuln_web_files_168": [
"Vulnerability Scanning"
],
"vuln_web_files_17": [
"Vulnerability Scanning"
],
"vuln_web_files_171": [
"Vulnerability Scanning"
],
"vuln_web_files_173": [
"Vulnerability Scanning"
],
"vuln_web_files_175": [
"Vulnerability Scanning"
],
"vuln_web_files_178": [
"Vulnerability Scanning"
],
"vuln_web_files_18": [
"Vulnerability Scanning"
],
"vuln_web_files_181": [
"Vulnerability Scanning"
],
"vuln_web_files_183": [
"Vulnerability Scanning"
],
"vuln_web_files_186": [
"Vulnerability Scanning"
],
"vuln_web_files_188": [
"Vulnerability Scanning"
],
"vuln_web_files_189": [
"Vulnerability Scanning"
],
"vuln_web_files_190": [
"Vulnerability Scanning"
],
"vuln_web_files_192": [
"Vulnerability Scanning"
],
"vuln_web_files_193": [
"Vulnerability Scanning"
],
"vuln_web_files_194": [
"Vulnerability Scanning"
],
"vuln_web_files_198": [
"Vulnerability Scanning"
],
"vuln_web_files_2": [
"Vulnerability Scanning"
],
"vuln_web_files_20": [
"Vulnerability Scanning"
],
"vuln_web_files_201": [
"Vulnerability Scanning"
],
"vuln_web_files_203": [
"Vulnerability Scanning"
],
"vuln_web_files_206": [
"Vulnerability Scanning"
],
"vuln_web_files_207": [
"Vulnerability Scanning"
],
"vuln_web_files_209": [
"Vulnerability Scanning"
],
"vuln_web_files_210": [
"Vulnerability Scanning"
],
"vuln_web_files_212": [
"Vulnerability Scanning"
],
"vuln_web_files_215": [
"Vulnerability Scanning"
],
"vuln_web_files_217": [
"Vulnerability Scanning"
],
"vuln_web_files_221": [
"Vulnerability Scanning"
],
"vuln_web_files_222": [
"Vulnerability Scanning"
],
"vuln_web_files_225": [
"Vulnerability Scanning"
],
"vuln_web_files_226": [
"Vulnerability Scanning"
],
"vuln_web_files_227": [
"Vulnerability Scanning"
],
"vuln_web_files_229": [
"Vulnerability Scanning"
],
"vuln_web_files_23": [
"Vulnerability Scanning"
],
"vuln_web_files_230": [
"Vulnerability Scanning"
],
"vuln_web_files_231": [
"Vulnerability Scanning"
],
"vuln_web_files_233": [
"Vulnerability Scanning"
],
"vuln_web_files_234": [
"Vulnerability Scanning"
],
"vuln_web_files_235": [
"Vulnerability Scanning"
],
"vuln_web_files_237": [
"Vulnerability Scanning"
],
"vuln_web_files_238": [
"Vulnerability Scanning"
],
"vuln_web_files_240": [
"Vulnerability Scanning"
],
"vuln_web_files_243": [
"Vulnerability Scanning"
],
"vuln_web_files_246": [
"Vulnerability Scanning"
],
"vuln_web_files_247": [
"Vulnerability Scanning"
],
"vuln_web_files_250": [
"Vulnerability Scanning"
],
"vuln_web_files_251": [
"Vulnerability Scanning"
],
"vuln_web_files_252": [
"Vulnerability Scanning"
],
"vuln_web_files_254": [
"Vulnerability Scanning"
],
"vuln_web_files_255": [
"Vulnerability Scanning"
],
"vuln_web_files_258": [
"Vulnerability Scanning"
],
"vuln_web_files_259": [
"Vulnerability Scanning"
],
"vuln_web_files_26": [
"Vulnerability Scanning"
],
"vuln_web_files_260": [
"Vulnerability Scanning"
],
"vuln_web_files_261": [
"Vulnerability Scanning"
],
"vuln_web_files_262": [
"Vulnerability Scanning"
],
"vuln_web_files_267": [
"Vulnerability Scanning"
],
"vuln_web_files_269": [
"Vulnerability Scanning"
],
"vuln_web_files_27": [
"Vulnerability Scanning"
],
"vuln_web_files_270": [
"Vulnerability Scanning"
],
"vuln_web_files_271": [
"Vulnerability Scanning"
],
"vuln_web_files_276": [
"Vulnerability Scanning"
],
"vuln_web_files_277": [
"Vulnerability Scanning"
],
"vuln_web_files_278": [
"Vulnerability Scanning"
],
"vuln_web_files_279": [
"Vulnerability Scanning"
],
"vuln_web_files_28": [
"Vulnerability Scanning"
],
"vuln_web_files_281": [
"Vulnerability Scanning"
],
"vuln_web_files_282": [
"Vulnerability Scanning"
],
"vuln_web_files_283": [
"Vulnerability Scanning"
],
"vuln_web_files_284": [
"Vulnerability Scanning"
],
"vuln_web_files_285": [
"Vulnerability Scanning"
],
"vuln_web_files_286": [
"Vulnerability Scanning"
],
"vuln_web_files_287": [
"Vulnerability Scanning"
],
"vuln_web_files_288": [
"Vulnerability Scanning"
],
"vuln_web_files_289": [
"Vulnerability Scanning"
],
"vuln_web_files_29": [
"Vulnerability Scanning"
],
"vuln_web_files_291": [
"Vulnerability Scanning"
],
"vuln_web_files_292": [
"Vulnerability Scanning"
],
"vuln_web_files_294": [
"Vulnerability Scanning"
],
"vuln_web_files_295": [
"Vulnerability Scanning"
],
"vuln_web_files_297": [
"Vulnerability Scanning"
],
"vuln_web_files_30": [
"Vulnerability Scanning"
],
"vuln_web_files_300": [
"Vulnerability Scanning"
],
"vuln_web_files_301": [
"Vulnerability Scanning"
],
"vuln_web_files_302": [
"Vulnerability Scanning"
],
"vuln_web_files_303": [
"Vulnerability Scanning"
],
"vuln_web_files_304": [
"Vulnerability Scanning"
],
"vuln_web_files_306": [
"Vulnerability Scanning"
],
"vuln_web_files_307": [
"Vulnerability Scanning"
],
"vuln_web_files_308": [
"Vulnerability Scanning"
],
"vuln_web_files_310": [
"Vulnerability Scanning"
],
"vuln_web_files_311": [
"Vulnerability Scanning"
],
"vuln_web_files_312": [
"Vulnerability Scanning"
],
"vuln_web_files_313": [
"Vulnerability Scanning"
],
"vuln_web_files_316": [
"Vulnerability Scanning"
],
"vuln_web_files_320": [
"Vulnerability Scanning"
],
"vuln_web_files_321": [
"Vulnerability Scanning"
],
"vuln_web_files_322": [
"Vulnerability Scanning"
],
"vuln_web_files_323": [
"Vulnerability Scanning"
],
"vuln_web_files_324": [
"Vulnerability Scanning"
],
"vuln_web_files_331": [
"Vulnerability Scanning"
],
"vuln_web_files_333": [
"Vulnerability Scanning"
],
"vuln_web_files_336": [
"Vulnerability Scanning"
],
"vuln_web_files_337": [
"Vulnerability Scanning"
],
"vuln_web_files_338": [
"Vulnerability Scanning"
],
"vuln_web_files_34": [
"Vulnerability Scanning"
],
"vuln_web_files_341": [
"Vulnerability Scanning"
],
"vuln_web_files_344": [
"Vulnerability Scanning"
],
"vuln_web_files_345": [
"Vulnerability Scanning"
],
"vuln_web_files_348": [
"Vulnerability Scanning"
],
"vuln_web_files_349": [
"Vulnerability Scanning"
],
"vuln_web_files_350": [
"Vulnerability Scanning"
],
"vuln_web_files_351": [
"Vulnerability Scanning"
],
"vuln_web_files_352": [
"Vulnerability Scanning"
],
"vuln_web_files_356": [
"Vulnerability Scanning"
],
"vuln_web_files_36": [
"Vulnerability Scanning"
],
"vuln_web_files_360": [
"Vulnerability Scanning"
],
"vuln_web_files_362": [
"Vulnerability Scanning"
],
"vuln_web_files_363": [
"Vulnerability Scanning"
],
"vuln_web_files_369": [
"Vulnerability Scanning"
],
"vuln_web_files_37": [
"Vulnerability Scanning"
],
"vuln_web_files_372": [
"Vulnerability Scanning"
],
"vuln_web_files_373": [
"Vulnerability Scanning"
],
"vuln_web_files_374": [
"Vulnerability Scanning"
],
"vuln_web_files_377": [
"Vulnerability Scanning"
],
"vuln_web_files_378": [
"Vulnerability Scanning"
],
"vuln_web_files_379": [
"Vulnerability Scanning"
],
"vuln_web_files_38": [
"Vulnerability Scanning"
],
"vuln_web_files_380": [
"Vulnerability Scanning"
],
"vuln_web_files_387": [
"Vulnerability Scanning"
],
"vuln_web_files_389": [
"Vulnerability Scanning"
],
"vuln_web_files_39": [
"Vulnerability Scanning"
],
"vuln_web_files_390": [
"Vulnerability Scanning"
],
"vuln_web_files_392": [
"Vulnerability Scanning"
],
"vuln_web_files_393": [
"Vulnerability Scanning"
],
"vuln_web_files_395": [
"Vulnerability Scanning"
],
"vuln_web_files_396": [
"Vulnerability Scanning"
],
"vuln_web_files_397": [
"Vulnerability Scanning"
],
"vuln_web_files_399": [
"Vulnerability Scanning"
],
"vuln_web_files_40": [
"Vulnerability Scanning"
],
"vuln_web_files_401": [
"Vulnerability Scanning"
],
"vuln_web_files_402": [
"Vulnerability Scanning"
],
"vuln_web_files_403": [
"Vulnerability Scanning"
],
"vuln_web_files_404": [
"Vulnerability Scanning"
],
"vuln_web_files_407": [
"Vulnerability Scanning"
],
"vuln_web_files_409": [
"Vulnerability Scanning"
],
"vuln_web_files_41": [
"Vulnerability Scanning"
],
"vuln_web_files_412": [
"Vulnerability Scanning"
],
"vuln_web_files_414": [
"Vulnerability Scanning"
],
"vuln_web_files_415": [
"Vulnerability Scanning"
],
"vuln_web_files_417": [
"Vulnerability Scanning"
],
"vuln_web_files_419": [
"Vulnerability Scanning"
],
"vuln_web_files_421": [
"Vulnerability Scanning"
],
"vuln_web_files_422": [
"Vulnerability Scanning"
],
"vuln_web_files_425": [
"Vulnerability Scanning"
],
"vuln_web_files_427": [
"Vulnerability Scanning"
],
"vuln_web_files_428": [
"Vulnerability Scanning"
],
"vuln_web_files_429": [
"Vulnerability Scanning"
],
"vuln_web_files_431": [
"Vulnerability Scanning"
],
"vuln_web_files_432": [
"Vulnerability Scanning"
],
"vuln_web_files_433": [
"Vulnerability Scanning"
],
"vuln_web_files_434": [
"Vulnerability Scanning"
],
"vuln_web_files_436": [
"Vulnerability Scanning"
],
"vuln_web_files_437": [
"Vulnerability Scanning"
],
"vuln_web_files_438": [
"Vulnerability Scanning"
],
"vuln_web_files_440": [
"Vulnerability Scanning"
],
"vuln_web_files_441": [
"Vulnerability Scanning"
],
"vuln_web_files_443": [
"Vulnerability Scanning"
],
"vuln_web_files_444": [
"Vulnerability Scanning"
],
"vuln_web_files_445": [
"Vulnerability Scanning"
],
"vuln_web_files_446": [
"Vulnerability Scanning"
],
"vuln_web_files_447": [
"Vulnerability Scanning"
],
"vuln_web_files_448": [
"Vulnerability Scanning"
],
"vuln_web_files_451": [
"Vulnerability Scanning"
],
"vuln_web_files_453": [
"Vulnerability Scanning"
],
"vuln_web_files_454": [
"Vulnerability Scanning"
],
"vuln_web_files_457": [
"Vulnerability Scanning"
],
"vuln_web_files_458": [
"Vulnerability Scanning"
],
"vuln_web_files_459": [
"Vulnerability Scanning"
],
"vuln_web_files_462": [
"Vulnerability Scanning"
],
"vuln_web_files_463": [
"Vulnerability Scanning"
],
"vuln_web_files_466": [
"Vulnerability Scanning"
],
"vuln_web_files_467": [
"Vulnerability Scanning"
],
"vuln_web_files_472": [
"Vulnerability Scanning"
],
"vuln_web_files_473": [
"Vulnerability Scanning"
],
"vuln_web_files_474": [
"Vulnerability Scanning"
],
"vuln_web_files_479": [
"Vulnerability Scanning"
],
"vuln_web_files_480": [
"Vulnerability Scanning"
],
"vuln_web_files_481": [
"Vulnerability Scanning"
],
"vuln_web_files_482": [
"Vulnerability Scanning"
],
"vuln_web_files_483": [
"Vulnerability Scanning"
],
"vuln_web_files_484": [
"Vulnerability Scanning"
],
"vuln_web_files_485": [
"Vulnerability Scanning"
],
"vuln_web_files_486": [
"Vulnerability Scanning"
],
"vuln_web_files_487": [
"Vulnerability Scanning"
],
"vuln_web_files_488": [
"Vulnerability Scanning"
],
"vuln_web_files_489": [
"Vulnerability Scanning"
],
"vuln_web_files_492": [
"Vulnerability Scanning"
],
"vuln_web_files_493": [
"Vulnerability Scanning"
],
"vuln_web_files_494": [
"Vulnerability Scanning"
],
"vuln_web_files_495": [
"Vulnerability Scanning"
],
"vuln_web_files_496": [
"Vulnerability Scanning"
],
"vuln_web_files_497": [
"Vulnerability Scanning"
],
"vuln_web_files_50": [
"Vulnerability Scanning"
],
"vuln_web_files_502": [
"Vulnerability Scanning"
],
"vuln_web_files_503": [
"Vulnerability Scanning"
],
"vuln_web_files_505": [
"Vulnerability Scanning"
],
"vuln_web_files_508": [
"Vulnerability Scanning"
],
"vuln_web_files_51": [
"Vulnerability Scanning"
],
"vuln_web_files_510": [
"Vulnerability Scanning"
],
"vuln_web_files_511": [
"Vulnerability Scanning"
],
"vuln_web_files_514": [
"Vulnerability Scanning"
],
"vuln_web_files_515": [
"Vulnerability Scanning"
],
"vuln_web_files_518": [
"Vulnerability Scanning"
],
"vuln_web_files_519": [
"Vulnerability Scanning"
],
"vuln_web_files_52": [
"Vulnerability Scanning"
],
"vuln_web_files_520": [
"Vulnerability Scanning"
],
"vuln_web_files_521": [
"Vulnerability Scanning"
],
"vuln_web_files_522": [
"Vulnerability Scanning"
],
"vuln_web_files_524": [
"Vulnerability Scanning"
],
"vuln_web_files_53": [
"Vulnerability Scanning"
],
"vuln_web_files_530": [
"Vulnerability Scanning"
],
"vuln_web_files_533": [
"Vulnerability Scanning"
],
"vuln_web_files_535": [
"Vulnerability Scanning"
],
"vuln_web_files_536": [
"Vulnerability Scanning"
],
"vuln_web_files_538": [
"Vulnerability Scanning"
],
"vuln_web_files_54": [
"Vulnerability Scanning"
],
"vuln_web_files_540": [
"Vulnerability Scanning"
],
"vuln_web_files_541": [
"Vulnerability Scanning"
],
"vuln_web_files_542": [
"Vulnerability Scanning"
],
"vuln_web_files_543": [
"Vulnerability Scanning"
],
"vuln_web_files_546": [
"Vulnerability Scanning"
],
"vuln_web_files_547": [
"Vulnerability Scanning"
],
"vuln_web_files_548": [
"Vulnerability Scanning"
],
"vuln_web_files_549": [
"Vulnerability Scanning"
],
"vuln_web_files_55": [
"Vulnerability Scanning"
],
"vuln_web_files_550": [
"Vulnerability Scanning"
],
"vuln_web_files_551": [
"Vulnerability Scanning"
],
"vuln_web_files_557": [
"Vulnerability Scanning"
],
"vuln_web_files_559": [
"Vulnerability Scanning"
],
"vuln_web_files_56": [
"Vulnerability Scanning"
],
"vuln_web_files_560": [
"Vulnerability Scanning"
],
"vuln_web_files_563": [
"Vulnerability Scanning"
],
"vuln_web_files_564": [
"Vulnerability Scanning"
],
"vuln_web_files_566": [
"Vulnerability Scanning"
],
"vuln_web_files_57": [
"Vulnerability Scanning"
],
"vuln_web_files_570": [
"Vulnerability Scanning"
],
"vuln_web_files_572": [
"Vulnerability Scanning"
],
"vuln_web_files_573": [
"Vulnerability Scanning"
],
"vuln_web_files_574": [
"Vulnerability Scanning"
],
"vuln_web_files_576": [
"Vulnerability Scanning"
],
"vuln_web_files_58": [
"Vulnerability Scanning"
],
"vuln_web_files_581": [
"Vulnerability Scanning"
],
"vuln_web_files_582": [
"Vulnerability Scanning"
],
"vuln_web_files_586": [
"Vulnerability Scanning"
],
"vuln_web_files_587": [
"Vulnerability Scanning"
],
"vuln_web_files_588": [
"Vulnerability Scanning"
],
"vuln_web_files_589": [
"Vulnerability Scanning"
],
"vuln_web_files_59": [
"Vulnerability Scanning"
],
"vuln_web_files_590": [
"Vulnerability Scanning"
],
"vuln_web_files_593": [
"Vulnerability Scanning"
],
"vuln_web_files_595": [
"Vulnerability Scanning"
],
"vuln_web_files_596": [
"Vulnerability Scanning"
],
"vuln_web_files_598": [
"Vulnerability Scanning"
],
"vuln_web_files_601": [
"Vulnerability Scanning"
],
"vuln_web_files_602": [
"Vulnerability Scanning"
],
"vuln_web_files_603": [
"Vulnerability Scanning"
],
"vuln_web_files_605": [
"Vulnerability Scanning"
],
"vuln_web_files_607": [
"Vulnerability Scanning"
],
"vuln_web_files_61": [
"Vulnerability Scanning"
],
"vuln_web_files_615": [
"Vulnerability Scanning"
],
"vuln_web_files_616": [
"Vulnerability Scanning"
],
"vuln_web_files_618": [
"Vulnerability Scanning"
],
"vuln_web_files_619": [
"Vulnerability Scanning"
],
"vuln_web_files_620": [
"Vulnerability Scanning"
],
"vuln_web_files_623": [
"Vulnerability Scanning"
],
"vuln_web_files_624": [
"Vulnerability Scanning"
],
"vuln_web_files_625": [
"Vulnerability Scanning"
],
"vuln_web_files_626": [
"Vulnerability Scanning"
],
"vuln_web_files_627": [
"Vulnerability Scanning"
],
"vuln_web_files_628": [
"Vulnerability Scanning"
],
"vuln_web_files_629": [
"Vulnerability Scanning"
],
"vuln_web_files_63": [
"Vulnerability Scanning"
],
"vuln_web_files_630": [
"Vulnerability Scanning"
],
"vuln_web_files_631": [
"Vulnerability Scanning"
],
"vuln_web_files_637": [
"Vulnerability Scanning"
],
"vuln_web_files_64": [
"Vulnerability Scanning"
],
"vuln_web_files_641": [
"Vulnerability Scanning"
],
"vuln_web_files_642": [
"Vulnerability Scanning"
],
"vuln_web_files_643": [
"Vulnerability Scanning"
],
"vuln_web_files_644": [
"Vulnerability Scanning"
],
"vuln_web_files_645": [
"Vulnerability Scanning"
],
"vuln_web_files_648": [
"Vulnerability Scanning"
],
"vuln_web_files_649": [
"Vulnerability Scanning"
],
"vuln_web_files_65": [
"Vulnerability Scanning"
],
"vuln_web_files_651": [
"Vulnerability Scanning"
],
"vuln_web_files_652": [
"Vulnerability Scanning"
],
"vuln_web_files_655": [
"Vulnerability Scanning"
],
"vuln_web_files_656": [
"Vulnerability Scanning"
],
"vuln_web_files_659": [
"Vulnerability Scanning"
],
"vuln_web_files_662": [
"Vulnerability Scanning"
],
"vuln_web_files_663": [
"Vulnerability Scanning"
],
"vuln_web_files_664": [
"Vulnerability Scanning"
],
"vuln_web_files_667": [
"Vulnerability Scanning"
],
"vuln_web_files_668": [
"Vulnerability Scanning"
],
"vuln_web_files_67": [
"Vulnerability Scanning"
],
"vuln_web_files_671": [
"Vulnerability Scanning"
],
"vuln_web_files_675": [
"Vulnerability Scanning"
],
"vuln_web_files_676": [
"Vulnerability Scanning"
],
"vuln_web_files_677": [
"Vulnerability Scanning"
],
"vuln_web_files_678": [
"Vulnerability Scanning"
],
"vuln_web_files_679": [
"Vulnerability Scanning"
],
"vuln_web_files_68": [
"Vulnerability Scanning"
],
"vuln_web_files_682": [
"Vulnerability Scanning"
],
"vuln_web_files_685": [
"Vulnerability Scanning"
],
"vuln_web_files_686": [
"Vulnerability Scanning"
],
"vuln_web_files_688": [
"Vulnerability Scanning"
],
"vuln_web_files_689": [
"Vulnerability Scanning"
],
"vuln_web_files_690": [
"Vulnerability Scanning"
],
"vuln_web_files_691": [
"Vulnerability Scanning"
],
"vuln_web_files_692": [
"Vulnerability Scanning"
],
"vuln_web_files_693": [
"Vulnerability Scanning"
],
"vuln_web_files_698": [
"Vulnerability Scanning"
],
"vuln_web_files_7": [
"Vulnerability Scanning"
],
"vuln_web_files_700": [
"Vulnerability Scanning"
],
"vuln_web_files_701": [
"Vulnerability Scanning"
],
"vuln_web_files_703": [
"Vulnerability Scanning"
],
"vuln_web_files_708": [
"Vulnerability Scanning"
],
"vuln_web_files_71": [
"Vulnerability Scanning"
],
"vuln_web_files_711": [
"Vulnerability Scanning"
],
"vuln_web_files_716": [
"Vulnerability Scanning"
],
"vuln_web_files_717": [
"Vulnerability Scanning"
],
"vuln_web_files_718": [
"Vulnerability Scanning"
],
"vuln_web_files_719": [
"Vulnerability Scanning"
],
"vuln_web_files_72": [
"Vulnerability Scanning"
],
"vuln_web_files_721": [
"Vulnerability Scanning"
],
"vuln_web_files_722": [
"Vulnerability Scanning"
],
"vuln_web_files_725": [
"Vulnerability Scanning"
],
"vuln_web_files_726": [
"Vulnerability Scanning"
],
"vuln_web_files_727": [
"Vulnerability Scanning"
],
"vuln_web_files_728": [
"Vulnerability Scanning"
],
"vuln_web_files_729": [
"Vulnerability Scanning"
],
"vuln_web_files_73": [
"Vulnerability Scanning"
],
"vuln_web_files_730": [
"Vulnerability Scanning"
],
"vuln_web_files_735": [
"Vulnerability Scanning"
],
"vuln_web_files_736": [
"Vulnerability Scanning"
],
"vuln_web_files_737": [
"Vulnerability Scanning"
],
"vuln_web_files_739": [
"Vulnerability Scanning"
],
"vuln_web_files_74": [
"Vulnerability Scanning"
],
"vuln_web_files_742": [
"Vulnerability Scanning"
],
"vuln_web_files_744": [
"Vulnerability Scanning"
],
"vuln_web_files_745": [
"Vulnerability Scanning"
],
"vuln_web_files_746": [
"Vulnerability Scanning"
],
"vuln_web_files_749": [
"Vulnerability Scanning"
],
"vuln_web_files_75": [
"Vulnerability Scanning"
],
"vuln_web_files_750": [
"Vulnerability Scanning"
],
"vuln_web_files_756": [
"Vulnerability Scanning"
],
"vuln_web_files_757": [
"Vulnerability Scanning"
],
"vuln_web_files_759": [
"Vulnerability Scanning"
],
"vuln_web_files_760": [
"Vulnerability Scanning"
],
"vuln_web_files_761": [
"Vulnerability Scanning"
],
"vuln_web_files_765": [
"Vulnerability Scanning"
],
"vuln_web_files_766": [
"Vulnerability Scanning"
],
"vuln_web_files_767": [
"Vulnerability Scanning"
],
"vuln_web_files_769": [
"Vulnerability Scanning"
],
"vuln_web_files_77": [
"Vulnerability Scanning"
],
"vuln_web_files_772": [
"Vulnerability Scanning"
],
"vuln_web_files_775": [
"Vulnerability Scanning"
],
"vuln_web_files_776": [
"Vulnerability Scanning"
],
"vuln_web_files_779": [
"Vulnerability Scanning"
],
"vuln_web_files_780": [
"Vulnerability Scanning"
],
"vuln_web_files_782": [
"Vulnerability Scanning"
],
"vuln_web_files_784": [
"Vulnerability Scanning"
],
"vuln_web_files_786": [
"Vulnerability Scanning"
],
"vuln_web_files_787": [
"Vulnerability Scanning"
],
"vuln_web_files_789": [
"Vulnerability Scanning"
],
"vuln_web_files_790": [
"Vulnerability Scanning"
],
"vuln_web_files_792": [
"Vulnerability Scanning"
],
"vuln_web_files_793": [
"Vulnerability Scanning"
],
"vuln_web_files_795": [
"Vulnerability Scanning"
],
"vuln_web_files_799": [
"Vulnerability Scanning"
],
"vuln_web_files_800": [
"Vulnerability Scanning"
],
"vuln_web_files_803": [
"Vulnerability Scanning"
],
"vuln_web_files_804": [
"Vulnerability Scanning"
],
"vuln_web_files_805": [
"Vulnerability Scanning"
],
"vuln_web_files_806": [
"Vulnerability Scanning"
],
"vuln_web_files_807": [
"Vulnerability Scanning"
],
"vuln_web_files_809": [
"Vulnerability Scanning"
],
"vuln_web_files_810": [
"Vulnerability Scanning"
],
"vuln_web_files_811": [
"Vulnerability Scanning"
],
"vuln_web_files_813": [
"Vulnerability Scanning"
],
"vuln_web_files_814": [
"Vulnerability Scanning"
],
"vuln_web_files_815": [
"Vulnerability Scanning"
],
"vuln_web_files_817": [
"Vulnerability Scanning"
],
"vuln_web_files_818": [
"Vulnerability Scanning"
],
"vuln_web_files_819": [
"Vulnerability Scanning"
],
"vuln_web_files_821": [
"Vulnerability Scanning"
],
"vuln_web_files_822": [
"Vulnerability Scanning"
],
"vuln_web_files_824": [
"Vulnerability Scanning"
],
"vuln_web_files_825": [
"Vulnerability Scanning"
],
"vuln_web_files_826": [
"Vulnerability Scanning"
],
"vuln_web_files_827": [
"Vulnerability Scanning"
],
"vuln_web_files_829": [
"Vulnerability Scanning"
],
"vuln_web_files_831": [
"Vulnerability Scanning"
],
"vuln_web_files_832": [
"Vulnerability Scanning"
],
"vuln_web_files_833": [
"Vulnerability Scanning"
],
"vuln_web_files_834": [
"Vulnerability Scanning"
],
"vuln_web_files_836": [
"Vulnerability Scanning"
],
"vuln_web_files_838": [
"Vulnerability Scanning"
],
"vuln_web_files_839": [
"Vulnerability Scanning"
],
"vuln_web_files_84": [
"Vulnerability Scanning"
],
"vuln_web_files_840": [
"Vulnerability Scanning"
],
"vuln_web_files_842": [
"Vulnerability Scanning"
],
"vuln_web_files_843": [
"Vulnerability Scanning"
],
"vuln_web_files_844": [
"Vulnerability Scanning"
],
"vuln_web_files_846": [
"Vulnerability Scanning"
],
"vuln_web_files_847": [
"Vulnerability Scanning"
],
"vuln_web_files_848": [
"Vulnerability Scanning"
],
"vuln_web_files_850": [
"Vulnerability Scanning"
],
"vuln_web_files_851": [
"Vulnerability Scanning"
],
"vuln_web_files_852": [
"Vulnerability Scanning"
],
"vuln_web_files_853": [
"Vulnerability Scanning"
],
"vuln_web_files_854": [
"Vulnerability Scanning"
],
"vuln_web_files_855": [
"Vulnerability Scanning"
],
"vuln_web_files_856": [
"Vulnerability Scanning"
],
"vuln_web_files_857": [
"Vulnerability Scanning"
],
"vuln_web_files_858": [
"Vulnerability Scanning"
],
"vuln_web_files_859": [
"Vulnerability Scanning"
],
"vuln_web_files_862": [
"Vulnerability Scanning"
],
"vuln_web_files_863": [
"Vulnerability Scanning"
],
"vuln_web_files_864": [
"Vulnerability Scanning"
],
"vuln_web_files_866": [
"Vulnerability Scanning"
],
"vuln_web_files_868": [
"Vulnerability Scanning"
],
"vuln_web_files_869": [
"Vulnerability Scanning"
],
"vuln_web_files_87": [
"Vulnerability Scanning"
],
"vuln_web_files_871": [
"Vulnerability Scanning"
],
"vuln_web_files_873": [
"Vulnerability Scanning"
],
"vuln_web_files_878": [
"Vulnerability Scanning"
],
"vuln_web_files_879": [
"Vulnerability Scanning"
],
"vuln_web_files_881": [
"Vulnerability Scanning"
],
"vuln_web_files_882": [
"Vulnerability Scanning"
],
"vuln_web_files_885": [
"Vulnerability Scanning"
],
"vuln_web_files_886": [
"Vulnerability Scanning"
],
"vuln_web_files_887": [
"Vulnerability Scanning"
],
"vuln_web_files_89": [
"Vulnerability Scanning"
],
"vuln_web_files_892": [
"Vulnerability Scanning"
],
"vuln_web_files_893": [
"Vulnerability Scanning"
],
"vuln_web_files_895": [
"Vulnerability Scanning"
],
"vuln_web_files_896": [
"Vulnerability Scanning"
],
"vuln_web_files_897": [
"Vulnerability Scanning"
],
"vuln_web_files_898": [
"Vulnerability Scanning"
],
"vuln_web_files_9": [
"Vulnerability Scanning"
],
"vuln_web_files_90": [
"Vulnerability Scanning"
],
"vuln_web_files_900": [
"Vulnerability Scanning"
],
"vuln_web_files_901": [
"Vulnerability Scanning"
],
"vuln_web_files_902": [
"Vulnerability Scanning"
],
"vuln_web_files_903": [
"Vulnerability Scanning"
],
"vuln_web_files_904": [
"Vulnerability Scanning"
],
"vuln_web_files_905": [
"Vulnerability Scanning"
],
"vuln_web_files_907": [
"Vulnerability Scanning"
],
"vuln_web_files_91": [
"Vulnerability Scanning"
],
"vuln_web_files_910": [
"Vulnerability Scanning"
],
"vuln_web_files_911": [
"Vulnerability Scanning"
],
"vuln_web_files_912": [
"Vulnerability Scanning"
],
"vuln_web_files_913": [
"Vulnerability Scanning"
],
"vuln_web_files_915": [
"Vulnerability Scanning"
],
"vuln_web_files_916": [
"Vulnerability Scanning"
],
"vuln_web_files_917": [
"Vulnerability Scanning"
],
"vuln_web_files_918": [
"Vulnerability Scanning"
],
"vuln_web_files_92": [
"Vulnerability Scanning"
],
"vuln_web_files_920": [
"Vulnerability Scanning"
],
"vuln_web_files_922": [
"Vulnerability Scanning"
],
"vuln_web_files_923": [
"Vulnerability Scanning"
],
"vuln_web_files_924": [
"Vulnerability Scanning"
],
"vuln_web_files_925": [
"Vulnerability Scanning"
],
"vuln_web_files_926": [
"Vulnerability Scanning"
],
"vuln_web_files_927": [
"Vulnerability Scanning"
],
"vuln_web_files_929": [
"Vulnerability Scanning"
],
"vuln_web_files_932": [
"Vulnerability Scanning"
],
"vuln_web_files_934": [
"Vulnerability Scanning"
],
"vuln_web_files_935": [
"Vulnerability Scanning"
],
"vuln_web_files_936": [
"Vulnerability Scanning"
],
"vuln_web_files_937": [
"Vulnerability Scanning"
],
"vuln_web_files_939": [
"Vulnerability Scanning"
],
"vuln_web_files_94": [
"Vulnerability Scanning"
],
"vuln_web_files_941": [
"Vulnerability Scanning"
],
"vuln_web_files_943": [
"Vulnerability Scanning"
],
"vuln_web_files_945": [
"Vulnerability Scanning"
],
"vuln_web_files_947": [
"Vulnerability Scanning"
],
"vuln_web_files_948": [
"Vulnerability Scanning"
],
"vuln_web_files_949": [
"Vulnerability Scanning"
],
"vuln_web_files_95": [
"Vulnerability Scanning"
],
"vuln_web_files_950": [
"Vulnerability Scanning"
],
"vuln_web_files_951": [
"Vulnerability Scanning"
],
"vuln_web_files_954": [
"Vulnerability Scanning"
],
"vuln_web_files_955": [
"Vulnerability Scanning"
],
"vuln_web_files_957": [
"Vulnerability Scanning"
],
"vuln_web_files_958": [
"Vulnerability Scanning"
],
"vuln_web_files_959": [
"Vulnerability Scanning"
],
"vuln_web_files_96": [
"Vulnerability Scanning"
],
"vuln_web_files_960": [
"Vulnerability Scanning"
],
"vuln_web_files_962": [
"Vulnerability Scanning"
],
"vuln_web_files_964": [
"Vulnerability Scanning"
],
"vuln_web_files_966": [
"Vulnerability Scanning"
],
"vuln_web_files_967": [
"Vulnerability Scanning"
],
"vuln_web_files_968": [
"Vulnerability Scanning"
],
"vuln_web_files_969": [
"Vulnerability Scanning"
],
"vuln_web_files_97": [
"Vulnerability Scanning"
],
"vuln_web_files_973": [
"Vulnerability Scanning"
],
"vuln_web_files_978": [
"Vulnerability Scanning"
],
"vuln_web_files_979": [
"Vulnerability Scanning"
],
"vuln_web_files_980": [
"Vulnerability Scanning"
],
"vuln_web_files_981": [
"Vulnerability Scanning"
],
"vuln_web_files_982": [
"Vulnerability Scanning"
],
"vuln_web_files_984": [
"Vulnerability Scanning"
],
"vuln_web_files_985": [
"Vulnerability Scanning"
],
"vuln_web_files_986": [
"Vulnerability Scanning"
],
"vuln_web_files_988": [
"Vulnerability Scanning"
],
"vuln_web_files_989": [
"Vulnerability Scanning"
],
"vuln_web_files_99": [
"Vulnerability Scanning"
],
"vuln_web_files_990": [
"Vulnerability Scanning"
],
"vuln_web_files_993": [
"Vulnerability Scanning"
],
"vuln_web_files_995": [
"Vulnerability Scanning"
],
"vuln_web_files_996": [
"Vulnerability Scanning"
],
"vuln_web_files_997": [
"Vulnerability Scanning"
],
"vuln_web_files_998": [
"Vulnerability Scanning"
],
"vuln_web_filesacb6": [
"Vulnerability Scanning"
],
"vuln_web_filex_fast_reg_0": [
"Vulnerability Scanning"
],
"vuln_web_filex_fast_reg_1": [
"Vulnerability Scanning"
],
"xpath_injeciton_regex_0": [
"Path Traversal"
],
"xpath_injeciton_regex_1": [
"Path Traversal"
],
"xpath_injeciton_regex_2": [
"Path Traversal"
],
"xpath_injeciton_regex_3": [
"Path Traversal"
],
"xpath_injeciton_regex_4": [
"Path Traversal"
],
"xpath_injection671f": [
"Path Traversal"
],
"xpath_injection_regex_0": [
"Path Traversal"
],
"xpath_injection_regex_1": [
"Path Traversal"
],
"xpath_injection_regex_2": [
"Path Traversal"
],
"xpath_injection_regex_3": [
"Path Traversal"
],
"xss_html_cmds_high_acuracy2d26": [
"Cross Site Scripting"
],
"xss_html_cmds_high_acuracy3bfa": [
"Cross Site Scripting"
],
"xss_html_special": [
"Cross Site Scripting"
],
"xss_html_special0c79": [
"Cross Site Scripting"
],
"xss_html_special0e69": [
"Cross Site Scripting"
],
"xss_html_special171d": [
"Cross Site Scripting"
],
"xss_html_special1720": [
"Cross Site Scripting"
],
"xss_html_special27db": [
"Cross Site Scripting"
],
"xss_html_special31d4": [
"Cross Site Scripting"
],
"xss_html_special3ba9": [
"Cross Site Scripting"
],
"xss_html_special47b3": [
"Cross Site Scripting"
],
"xss_html_special4a8e": [
"Cross Site Scripting"
],
"xss_html_special4f36": [
"Cross Site Scripting"
],
"xss_html_special64b9": [
"Cross Site Scripting"
],
"xss_html_special6675": [
"Cross Site Scripting"
],
"xss_html_special6763": [
"Cross Site Scripting"
],
"xss_html_special6dda": [
"Cross Site Scripting"
],
"xss_html_special7168": [
"Cross Site Scripting"
],
"xss_html_special7b2e": [
"Cross Site Scripting"
],
"xss_html_special8338": [
"Cross Site Scripting"
],
"xss_html_special8524": [
"Cross Site Scripting"
],
"xss_html_special883e": [
"Cross Site Scripting"
],
"xss_html_special8893": [
"Cross Site Scripting"
],
"xss_html_special8a9f": [
"Cross Site Scripting"
],
"xss_html_special91ee": [
"Cross Site Scripting"
],
"xss_html_special94dc": [
"Cross Site Scripting"
],
"xss_html_special99fb": [
"Cross Site Scripting"
],
"xss_html_special_0": [
"Cross Site Scripting"
],
"xss_html_special_1": [
"Cross Site Scripting"
],
"xss_html_special_12": [
"Cross Site Scripting"
],
"xss_html_special_13": [
"Cross Site Scripting"
],
"xss_html_special_15": [
"Cross Site Scripting"
],
"xss_html_special_16": [
"Cross Site Scripting"
],
"xss_html_special_17": [
"Cross Site Scripting"
],
"xss_html_special_18": [
"Cross Site Scripting"
],
"xss_html_special_19": [
"Cross Site Scripting"
],
"xss_html_special_2": [
"Cross Site Scripting"
],
"xss_html_special_20": [
"Cross Site Scripting"
],
"xss_html_special_21": [
"Cross Site Scripting"
],
"xss_html_special_22": [
"Cross Site Scripting"
],
"xss_html_special_23": [
"Cross Site Scripting"
],
"xss_html_special_26": [
"Cross Site Scripting"
],
"xss_html_special_28": [
"Cross Site Scripting"
],
"xss_html_special_3": [
"Cross Site Scripting"
],
"xss_html_special_31": [
"Cross Site Scripting"
],
"xss_html_special_33": [
"Cross Site Scripting"
],
"xss_html_special_34": [
"Cross Site Scripting"
],
"xss_html_special_35": [
"Cross Site Scripting"
],
"xss_html_special_37": [
"Cross Site Scripting"
],
"xss_html_special_38": [
"Cross Site Scripting"
],
"xss_html_special_4": [
"Cross Site Scripting"
],
"xss_html_special_40": [
"Cross Site Scripting"
],
"xss_html_special_41": [
"Cross Site Scripting"
],
"xss_html_special_44": [
"Cross Site Scripting"
],
"xss_html_special_45": [
"Cross Site Scripting"
],
"xss_html_special_46": [
"Cross Site Scripting"
],
"xss_html_special_50": [
"Cross Site Scripting"
],
"xss_html_special_51": [
"Cross Site Scripting"
],
"xss_html_special_55": [
"Cross Site Scripting"
],
"xss_html_special_56": [
"Cross Site Scripting"
],
"xss_html_special_59": [
"Cross Site Scripting"
],
"xss_html_special_6": [
"Cross Site Scripting"
],
"xss_html_special_60": [
"Cross Site Scripting"
],
"xss_html_special_61": [
"Cross Site Scripting"
],
"xss_html_special_63": [
"Cross Site Scripting"
],
"xss_html_special_64": [
"Cross Site Scripting"
],
"xss_html_special_9": [
"Cross Site Scripting"
],
"xss_html_speciala329": [
"Cross Site Scripting"
],
"xss_html_speciala3af": [
"Cross Site Scripting"
],
"xss_html_speciala652": [
"Cross Site Scripting"
],
"xss_html_speciala9ba": [
"Cross Site Scripting"
],
"xss_html_specialb0c1": [
"Cross Site Scripting"
],
"xss_html_specialb902": [
"Cross Site Scripting"
],
"xss_html_specialba96": [
"Cross Site Scripting"
],
"xss_html_specialbe34": [
"Cross Site Scripting"
],
"xss_html_specialc12a": [
"Cross Site Scripting"
],
"xss_html_specialc3dd": [
"Cross Site Scripting"
],
"xss_html_specialc80e": [
"Cross Site Scripting"
],
"xss_html_specialcb24": [
"Cross Site Scripting"
],
"xss_html_speciald37a": [
"Cross Site Scripting"
],
"xss_html_speciald85b": [
"Cross Site Scripting"
],
"xss_html_specialdd4a": [
"Cross Site Scripting"
],
"xss_html_specialdec0": [
"Cross Site Scripting"
],
"xss_html_specialf1c4": [
"Cross Site Scripting"
],
"xss_html_specialfca1": [
"Cross Site Scripting"
],
"xss_html_specialfcc5": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy0ec1": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy11aa": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy2968": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy2c91": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy2d32": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy32c9": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy356c": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy3c13": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy5422": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy5d04": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy5e70": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy7058": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy7463": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy7f39": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_0": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_1": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_10": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_100": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_101": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_102": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_103": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_104": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_105": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_11": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_12": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_13": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_14": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_15": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_16": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_17": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_18": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_19": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_2": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_20": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_21": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_22": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_23": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_24": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_25": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_26": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_27": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_28": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_29": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_3": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_30": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_31": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_32": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_33": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_34": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_35": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_36": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_37": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_38": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_39": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_4": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_40": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_41": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_42": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_43": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_44": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_45": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_46": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_47": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_48": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_49": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_5": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_50": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_51": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_52": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_53": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_54": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_55": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_56": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_57": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_58": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_59": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_6": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_60": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_61": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_62": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_63": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_64": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_65": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_66": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_67": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_68": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_69": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_7": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_70": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_71": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_72": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_73": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_74": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_75": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_76": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_77": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_78": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_79": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_8": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_80": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_81": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_82": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_83": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_84": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_85": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_86": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_87": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_88": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_89": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_9": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_90": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_91": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_92": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_93": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_94": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_95": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_96": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_97": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_98": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracy_99": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracya34b": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracyaadf": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracybe83": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracyd0d4": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracydd7f": [
"Cross Site Scripting"
],
"xss_html_tags_high_acuracye36b": [
"Cross Site Scripting"
],
"xxe": [
"XML External Entity"
],
"xxe_0": [
"XML External Entity"
],
"xxe_1": [
"XML External Entity"
],
"xxe_2": [
"XML External Entity"
],
"xxe_3": [
"XML External Entity"
]
},
"binary_data_kw_filter": "encoded.*|.*ev_fast_reg.*|.*fast_reg_evasion.*|ldap_injection_regex.*|code_execution_fast_reg.*|xpath_injeciton_regex.*|xpath_injection_regex.*|regex_code_execution.*|os_cmd_sep_medium_acuracy.*|high_acuracy_fast_reg_xss.*|regex_high_acuracy_crlf_inj.*|regex_postfix.*|url_scanning.*|ssti_fast_reg.*|os_cmd_high_acuracy_fast_reg.*|regex_xss.*|general_injection_regex.*|regex_sqli.*|vuln_os_dirs.*|sqli_medium_acuracy.*|sqli_fast_reg_0",
"comment_ev_pattern": "\\/\\/.*[\\r\\n]+",
"false_keywords": [
"=",
"&",
"/www",
"http"
],
"false_patterns_re_list": [
"(?P<mvp>\\w+=\\w+\\&)",
"(?P<http>(^(http://[\\w\\.\\d\\\\/\\=\\-\\?\\&\\%]*)))"
],
"filter_parameters": {
"cql": [
"=",
"and",
"probing",
"quotes_ev_fast_reg_2",
"regex_postfix_1",
"regex_sqli_17",
"regex_sqli_22",
">",
"regex_postfix_0",
"config.",
"function_name_bypass_regex_0",
"\""
],
"currentJql": [
"\"",
"=",
"and",
"regex_postfix_0",
"regex_sqli_17",
"regex_sqli_22",
"regex_postfix_1",
"or",
"os_cmd_high_acuracy_fast_reg_0",
"quotes_ev_fast_reg_2",
"regex_sqli_26"
],
"description": [
"#",
"*",
"/card",
"and",
"comment_ev_fast_reg_0",
"create",
"encoded_\\r\\n",
"os_cmd_high_acuracy_fast_reg_3",
"quotes_ev_fast_reg_4",
"repetition",
"ssti_fast_reg_4",
"|",
"&",
"document."
],
"jql": [
"=",
"and",
"or",
"regex_postfix_0",
"\"",
"code_execution_fast_reg_0",
"os_cmd_high_acuracy_fast_reg_0",
"regex_postfix_0",
"regex_sqli_17",
"regex_sqli_22",
"regex_sqli_26",
"quotes_ev_fast_reg_2",
"regex_postfix_1"
],
"nfeedJql": [
"\"",
"=",
"and",
"regex_postfix_0",
"regex_sqli_17",
"regex_sqli_22",
"regex_postfix_1",
"or",
"os_cmd_high_acuracy_fast_reg_0",
"quotes_ev_fast_reg_2",
"regex_sqli_26"
],
"rows.dimensions.include": [
"*",
"].",
"code_execution_fast_reg_0",
"quotes_ev_fast_reg_4",
"ssti_fast_reg_4"
],
"unrenderedMarkup": [
"#",
"*",
"/card",
"and",
"comment_ev_fast_reg_0",
"create",
"encoded_\\n",
"os_cmd_high_acuracy_fast_reg_3",
"quotes_ev_fast_reg_4",
"repetition",
"ssti_fast_reg_4",
"|",
"\"",
"&",
"/file",
"/site",
"all",
"quotes_ev_fast_reg_2",
"null",
".exe",
"null,"
]
},
"format_magic_binary_re": "^%PDF|^PK\\x03\\x04|^FORM\\x00|^PACK|^RIFF|^GIF8[79]a|^\\xFF\\xD8\\xFF|^\\x89PNG\\x0D\\x0A\\x1A\\x0A",
"format_types_regex_list": {
"administration_config": "((?<!\\w)(error|server|boot|local|code|conf|admin|enable|disable|log|echo|py|ls|dir|cat|\\.(exe|sh|bin)|\\$\\w+| >> |(\\d{1,3}\\.){3}\\d{1,3})(?!\\w).{0,100}?){6}",
"ampersand_delimiter": "^(?>.{1,100}?&){2,}",
"asterisk_delimiter": "^(?>.{1,100}?\\*){2,}",
"comma_delimiter": "^(?>.{1,100}?,){2,}",
"free_text": "((?<=^|\\s)(?>the|be|to|of|an|your|that|have|had|i(?>'m)?|it(?>'s)?|on|he(?>'s)?|you(?>'re)?|we(>?'re)|at|but|his|they|we|she(?>'s)|says?|will|my|one|would|there|was|were|are|what|how|when)(?>\\s|$)[\\w\\s\\.,:'!\\?]*?){2,}",
"html_input": "(<\\/?(?>div|li|ul|tr|th|p|table|body|html|title|h[1-6]|input|img|head|label|button|br|hr|a)\\b.*?>(?>.|[\\r\\n]){0,400}?){2}",
"local_file_path": "^((/?([\\w_\\-\\.]+/)+([\\w_\\-\\.]+\\.[a-zA-Z]{1,5}\\d*))|((([A-Za-z]:\\\\)|\\\\?)([\\w_\\-\\.]+\\\\)+([\\w_\\-\\.]+\\.[a-zA-Z]{1,5}\\d*)))$",
"long_random_text": "[^\\s]{40,}+",
"pipes": "^(?>.{1,100}?\\|){2,}",
"semicolon_delimiter": "^(?>.{1,100}?;){2,}",
"urls": "https?://([\\w\\.\\\\\\-_~\\%=?,]*/){3,}"
},
"global_ignored": {
"keys": [
"all",
"and",
"or",
"from",
"null"
],
"patterns": []
},
"good_header_name_re": "^\\s?[\\[\\]\\w\\-]*$",
"good_header_value_re": "(^[\\w\\-\\s\\.s]*$|^(([wW]\\/)?(\\,?\\s?\"[^\"]+\")+|\\*)$|^(,?\\s?[\\w\\-]+\\s*=\\s*[\\w\\-\\.]+)+$|^[\\w\\/\\.\\-\\:]+$)",
"headers_re": {
"accept": "^(?>((?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*)\\/?){1,3}(?>=(?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*))?|(?>[,;]((?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*)\\/?){1,3}(?>=(?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*))?))+$",
"accept-charset": "^(?>((?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*)\\/?){1,3}(?>=(?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*))?|(?>[,;]((?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*)\\/?){1,3}(?>=(?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*))?))+$",
"accept-encoding": "^(?>((?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*)\\/?){1,3}(?>=(?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*))?|(?>[,;]((?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*)\\/?){1,3}(?>=(?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*))?))+$",
"accept-language": "^(?>((?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*)\\/?){1,3}(?>=(?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*))?|(?>[,;]((?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*)\\/?){1,3}(?>=(?>\\s*(?>\\*|[A-Za-z\\-_+][\\w\\-_+.]*|\\d+(?>\\.\\d+)?|\\.\\d+)\\s*))?))+$",
"cache-control": "^([\\w\\-\\=]|, ?)+$",
"content-type": "^[\\w\\-]+(/[\\w\\-]+)?(; ?[\\w\\-]+=[\\w\\-_\\.]+)*$",
"forwarded": ".*",
"from": "^[\\w\\(\\)\\.]+$",
"host": "^([\\d\\.:]+|[\\w/\\.\\-]+)*$",
"if-match": "^(([wW]\\/)?(\\,?\\s?\"[^\"]+\")+|\\*)$",
"if-modified-since": "^[\\w\\s,\\-\\:]+$",
"if-none-match": "^(([wW]\\/)?(\\,?\\s?\"[^\"]+\")+|\\*)$",
"if-range": "(^[\\w\\s,\\-\\:]+$|^(([wW]\\/)?(\\,?\\s?\"[^\"]+\")+|\\*)$)",
"if-unmodified-since": "^[\\w\\s,\\-\\:]+$",
"intervention": "^<(https?|[\\w\\-]+app):\\/\\/[\\w\\.\\/\\-]+(:\\d+\\/)?[\\w\\.\\?=&%\\-]*>;\\s*\\w+=[\\\\\\\"\\w]+$",
"last-modified": "^[\\w\\s,\\-\\:]+$",
"origin": "^https?://[\\w\\./]+$",
"range": "^[\\w\\-\\=]+$",
"referer": "^https?://.*",
"sec-ch-ua": "^(\\s*\".+?\"\\s*;\\s*v=\"\\d+(\\.\\d+)?\",?)+\\s*$",
"sec-ch-ua-full-version": "^\\d(\\.\\d)*$",
"singularityheader": "^(?:(?:[\\w\\-_]+=[\\w\\-_\\|\\?/:]+)\\*)+(?:[\\w\\-_]+=[\\w\\-_\\|\\?/:]+)$",
"surrogate-capability": ".*",
"te": "^\\s*(compress|deflate|gzip|trailers)|(\\s*;\\s*q=[0,1](\\.\\d{1,3})*)$",
"unless-modified-since": "^[\\w\\s,\\-\\:]+$",
"user-agent": "^(([\\w\\/\\@\\-\\,\\s\\/;\\+]|(\\.[^\\.])|(\\.$)|(:[\\/\\\\]{2})|(:[^\\/\\\\]));?|\\s|\\((\\*\\s*\\d+|[\\w@;:~\"\\{\\}#\\=\\+\\s\\(\\)\\/\\.\\,\\-?])+\\)|\\[[\\(\\)\\w\\/;\\.,\\&\\-\\.\\#\\s{=}:]+\\])*$",
"via": "^(([\\w\\/\\@\\-\\,\\s\\/;\\+]|(\\.[^\\.])|(\\.$)|(:[\\/\\\\]{2})|(:[^\\/\\\\]));?|\\s|\\((\\*\\s*\\d+|[\\w@;:~\"\\{\\}#\\=\\+\\s\\(\\)\\/\\.\\,\\-?])+\\)|\\[[\\(\\)\\w\\/;\\.,\\&\\-\\.\\#\\s{=}:]+\\])*$",
"x-fb-flow-capture": "^[\\w\\=<>]+$",
"x-forwarded-for": "^(,?\\s?([\\d\\.]+|[\\w:]+))+$",
"x-logsourceip": "^(,?\\s?([\\d\\.]+|[\\w:]+))+$",
"x-operamini-features": "^(\\s*\\w+\\s*,)+(\\s*\\w+\\s*)+$",
"x-operamini-phone": ".*",
"x-operamini-phone-ua": "^(([\\w\\/\\@\\-\\,\\s\\/;\\+]|(\\.[^\\.])|(\\.$)|(:[\\/\\\\]{2})|(:[^\\/\\\\]));?|\\s|\\((\\*\\s*\\d+|[\\w@;:~\"\\{\\}#\\=\\+\\s\\(\\)\\/\\.\\,\\-?])+\\)|\\[[\\(\\)\\w\\/;\\.,\\&\\-\\.\\#\\s{=}:]+\\])*$",
"x-ucbrowser-ua": "^(\\w+\\(([\\s\\w\\*\\+\\-\\/\\.\\,\\'\\\"\\(\\)\\[\\]]*?)\\);)+$"
},
"ignored_for_headers": {
"keys": [
";",
"code_execution_fast_reg_0",
"|",
"all",
"and",
"or",
"from",
"null"
],
"patterns": [
"--",
"=",
";",
"&",
"/",
"|",
"os_cmd_sep_medium_acuracy",
"code_execution_fast_reg_0"
],
"regex": "^$"
},
"ignored_for_nospace_long_value": [
"--",
"=",
";",
"&",
"/"
],
"ignored_for_url": {
"keys": [
"--",
"&",
"/wp",
"/admin",
"/upload",
"/includes/",
"character_encoding",
"/uploads",
"/cgibin",
"/home",
"all",
"and",
"or",
"from",
"null"
],
"patterns": [
"regex_sqli_14"
],
"regex": "^[\\w/_\\-\\&]+((\\.(js|css|woff|woff2|json|html|jpeg|png))|/)$"
},
"longtext_re": "\\w{16,}|(\\.(jpg|jpeg|png|gif)$)",
"pattern_regex_list": [
"(?P<regex_postfix_1>=\\s*('|\")\\w+)",
"(?P<regex_xss_7>\\w+\\[\\s*['\"\\w]+\\s*\\]\\s*\\()",
"(?P<regex_xss_evasion_0><\\w+\\/)",
"(?P<ldap_injection_regex_4>\\(\\s*\\w+\\s*=\\s*\\w+\\s*\\w+\\*?\\s*\\))",
"(?P<regex_sqli_11>[,\\)]\\s*null)",
"(?P<ldap_injection_regex_6>\\(\\s*(userpassword|surname|name|cn|sn|objectclass|mail|givenname|commonname)(?!\\w))",
"(?P<regex_xss_8>src=\\s*\\w)",
"(?P<url_scanning_regex_0>(backup|db|dump|htdocs|home|html|data|backup|database|setup|install|localhost|backup|wordpress|blog|admin|eshop|admin|store|m|mariadb|mage|1)[\\w\\-~\\.]*\\.(rar|zip|tar|sql|7z|zip|gz|bak|config|connect|old|cfg))",
"(?P<xpath_injeciton_regex_2>/\\w+\\s*(:|\\())",
"(?P<regex_sqli_18>sys\\.[\\w]+\\s*\\()",
"(?P<xpath_injeciton_regex_3>:\\s*\\w+\\s*\\()",
"(?P<regex_xss_2>\\w+\\s*:\\s*(expression|url)\\s*\\()",
"(?P<regex_xss_4>^[^[\\[]+\\]\\s*,.*\\[[^\\]]+$)",
"(?P<regex_sqli_10>like\\s['\"][^'\"]*$)",
"(?P<regex_sqli_14>(limit|offset)\\s+\\d+)",
"(?P<regex_sqli_0>^[\\d\\s+\\'\\)\";]+or\\s)",
"(?P<ldap_injection_regex_5>(?<!\\w)(userpassword|surname|name|cn|sn|objectclass|mail|givenname|commonname)\\s*(=|:))",
"(?P<xpath_injection_regex_0>/\\w+\\s*\\[)",
"(?P<regex_prefix_1>^[\\w\\s]*('|\"|;|\\|\\&)+\\s+(and|or|having))",
"(?P<regex_sqli_27>case\\s*when\\s+\\w+)",
"(?P<ldap_injection_regex_0>admin\\s*\\*)",
"(?P<regex_sqli_6>union[\\w\\s]+select[\\w\\s]+from[\\w\\s]+)",
"(?P<regex_prefix_0>^[\\w\\s]*('|\"|;|\\|\\&)+\\s)",
"(?P<regex_sqli_4>select.*(,\\w+).*from.*where)",
"(?P<xpath_injection_regex_1>\\[\\s*\\w+[\\(<>=!])",
"(?P<regex_xss_0><(script|img|iframe)[^>]*[a-z]*(src|on\\w+)\\s*=)",
"(?P<ldap_injection_regex_3>@\\s*\\*)",
"(?P<ldap_injection_regex_1>\\w*\\s*=\\s*\\w*\\*)",
"(?P<xpath_injeciton_regex_0>\\(\\s*/)",
"(?P<ldap_injection_regex_2>(\\)|\\(|\\*)\\s*(\\(|\\||\\%))",
"(?P<regex_high_acuracy_crlf_inj_0>\\r\\n\\w+\\s*:\\s)",
"(?P<xpath_injection_regex_3>/book\\[[\\d\"'])",
"(?P<regex_postfix_0>\\s(and|or|union)\\s.*([\\);'\"\\|]{2,}|--|/\\*|#))",
"(?P<regex_sqli_25>insert\\s+into\\s+\\w)",
"(?P<regex_sqli_1>('|\"|\\);)\\s*--')",
"(?P<regex_code_execution_3>function\\s+[^\\s]+\\s*\\()",
"(?P<regex_high_acuracy_crlf_inj_3>content-length.*\\r\\n\\r\\n.*<)",
"(?P<regex_sqli_3>\\s(waitfor|delay)\\s.*\\d+:\\d+:\\d+)",
"(?P<regex_high_acuracy_crlf_inj_1>\\\\r\\\\n\\w+\\s*:\\s)",
"(?P<regex_xss_6>\\[\\s*'eval'\\s*\\])",
"(?P<regex_code_execution_0>exec\\s*cmd=\\s*('.*'|\".*\"))",
"(?P<regex_sqli_24>union\\s*(all\\s*)?select)",
"(?P<comment_newline_bypass_regex_0>(=|or|and|select|union|rlike|like|waitfor|having|null|is|limit|offset|order|by|all|case|when)\\s*//)",
"(?P<regex_code_execution_2>[)&|;`]+\\s*\\w+\\s*(\\-\\w|http|ftp|file|\\.*\\/))",
"(?P<xpath_injection_regex_2>\\[\\s*@)",
"(?P<regex_sqli_5>waitfor[\\s+]delay[\\s+][\"']\\d+:\\d:\\d+[\"'])",
"(?P<regex_xss_5>^\\w+\\s*,\\s*\"[^\\\\\"]*\"\\s*:[\\w_\"]+$)",
"(?P<regex_sqli_7>(and|\\||\\&|\\|\\||\\&\\&)\\s*\\d+\\s*=)",
"(?P<regex_xss_3>\\{[^\"']*\\()",
"(?P<regex_xxe_0><!doctype[^\\[]+\\[[^\\]]+<!entity[^\\]]+system[^\\]]+\\w+:[^\\]]+\\])",
"(?P<regex_sqli_23>^[\\.\\-\\w\\^\\']+\\s*union\\s*select)",
"(?P<regex_high_acuracy_crlf_inj_2>content-length.*\\\\r\\\\n\\\\r\\\\n.*<)",
"(?P<regex_sqli_9>null\\s*[,\\)])",
"(?P<regex_code_execution_1>(\\d{1,3}\\.){3}\\d{1,3})",
"(?P<regex_sqli_22>('|\"|\\)|;|\\||\\&)+\\s*(and|\\||\\&|\\|\\||\\&\\&|or|having|order\\s+by)\\s)",
"(?P<general_injection_regex_0>\\)\\s*=\\s*[\\w'\"])",
"(?P<xpath_injeciton_regex_1>\\/\\s*\\@)",
"(?P<regex_code_execution_4>\\([^\\)]+\\$[^\\)]+\\)\\s*\\()",
"(?P<evasion_wildcard_regex_0>[\\/\\\\](?:[?p][?s]|[?i][?d]|[?l][?s]|[?l][?l]|[?l][?a]|[?t][?r]|[?s][?h]|[?w][?c])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_1>[\\/\\\\](?:[?w][?m][?l]|[?w][?e][?b]|[?o][?p][?t]|[?b][?i][?n]|[?l][?o][?g]|[?c][?a][?t]|[?p][?w][?d]|[?a][?w][?k]|[?c][?g][?i]|[?e][?t][?c]|[?s][?e][?d]|[?v][?a][?r]|[?t][?m][?p]|[?l][?i][?b]|[?u][?s][?r]|[?d][?i][?r])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_2>[\\/\\\\](?:[?s][?o][?r][?t]|[?h][?t][?t][?p]|[?l][?e][?s][?s]|[?s][?e][?l][?f]|[?c][?u][?r][?l]|[?c][?o][?n][?f]|[?l][?o][?g][?s]|[?d][?a][?s][?h]|[?p][?r][?o][?c]|[?.][?e][?x][?e]|[?p][?a][?t][?h]|[?b][?a][?s][?h]|[?.][?d][?l][?l]|[?p][?i][?n][?g]|[?m][?a][?i][?l]|[?e][?c][?h][?o]|[?w][?g][?e][?t])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_3>[\\/\\\\](?:[?p][?i][?n][?g][?6]|[?l][?o][?c][?a][?l]|[?s][?h][?a][?r][?e]|[?u][?n][?a][?m][?e]|[?w][?i][?n][?n][?t]|[?h][?o][?s][?t][?s]|[?n][?e][?t][?s][?h])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_4>[\\/\\\\](?:[?s][?h][?a][?d][?o][?w]|[?b][?a][?c][?k][?u][?p]|[?w][?e][?b][?a][?c][?c]|[?w][?h][?o][?a][?m][?i]|[?m][?a][?s][?t][?e][?r]|[?e][?x][?p][?o][?r][?t]|[?$][?s][?h][?e][?l][?l]|[?p][?a][?s][?s][?w][?d]|[?s][?y][?s][?t][?e][?m])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_5>[\\/\\\\](?:[?w][?i][?n][?.][?i][?n][?i]|[?t][?r][?a][?c][?e][?r][?t]|[?w][?w][?w][?r][?o][?o][?t]|[?n][?e][?t][?s][?t][?a][?t]|[?w][?i][?n][?d][?o][?w][?s]|[?i][?n][?e][?t][?p][?u][?b]|[?e][?n][?v][?i][?r][?o][?n]|[?o][?p][?e][?n][?s][?s][?l])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_6>[\\/\\\\](?:[?n][?e][?t][? ][?v][?i][?e][?w]|[?n][?s][?l][?o][?o][?k][?u][?p]|[?i][?p][?c][?o][?n][?f][?i][?g]|[?i][?f][?c][?o][?n][?f][?i][?g]|[?p][?a][?s][?s][?w][?o][?r][?d]|[?h][?o][?s][?t][?n][?a][?m][?e]|[?b][?o][?o][?t][?.][?i][?n][?i]|[?n][?e][?t][? ][?u][?s][?e][?r])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_7>[\\/\\\\](?:[?a][?l][?l][?c][?f][?g][?c][?o][?n][?v]|[?t][?r][?a][?c][?e][?r][?o][?u][?t][?e]|[?l][?o][?c][?a][?l][?g][?r][?o][?u][?p])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_8>[\\/\\\\](?:[?d][?e][?s][?k][?t][?o][?p][?.][?i][?n][?i]|[?t][?r][?a][?c][?e][?r][?o][?u][?t][?e][?6])(?=[^\\w?<>:]|$))",
"(?P<evasion_wildcard_regex_9>[\\/\\\\](?:[?n][?e][?t][?s][?h][? ][?f][?i][?r][?e][?w][?a][?l][?l])(?=[^\\w?<>:]|$))",
"(?P<fn_name_pass_regex_0>\\\\?['\"](system|echo|exit|bck|eval|benchmark|pgsleep|attr|class|request|subclasses|class|writefile|getpath|getruntime|exec|clearconfig|setcache|loadtemplate|getfilter|ex|config|sum|convert|concat|ascii|randomblob|elt|like|sha|rand|lower|substring|upper|count|gethostaddress|username|isnull|varchar|nvarchar|nchar|sleep|nameconst|unhex|hex|version|basedecode|loadfile|systemuser|hash|extractvalue|cast|avg|case|user|reverse|min|gtidsubset|updatexml|updatexml|hashbytes|database|informationschema|sys|database|user|groupconcat|dbo|md|extractvalue|master|sysmessages|this|conf|exe|ini|function|alert|char|pregreplace|sleep|body|appendchild|createelement|self|document|components|lookupmethod|window|location|catch|hash|constructor|constructor|parent|ownerdocument|alert|execscript|slice|expression|setinterval|top|find|history|forward|url|settimeout|back|prompt|msgbox|javascriptval|phpinfo|eval|popen|execute|vardump|func|mid|len|isnumeric|passthru|system|include|basename|realpath|moveuploadedfile|printr|sprintf|fopen|require|copy|readfile|tempnam|touch|assert|fileputcontents|exec|filegetcontents|fileputcontents|unserialize|requireonce|popen|createfunction|strrev|function|die|basedecode|arraymap|chr|pregreplace|isset|fread|strreplace|calluserfunc|ord|decode|request|getparameter|fileoutputstream|application|getrealpath|response|write|getbytes|setcookie|res|end|readdirsync|tostring|serialize|phpuname|phpversion|array|thread|join|valueof|length|writeln|decodeuri|navigate|reflect|open|set)\\\\?['\"])",
"(?P<regex_code_execution_10>printf\\s+['\"\"])",
"(?P<regex_code_execution_5>\\w+\\s*\\[\\s*\\$)",
"(?P<regex_code_execution_6>\\(\\s*exec\\s*\\))",
"(?P<regex_code_execution_7>\\w+\\s*=\\s*<%)",
"(?P<regex_code_execution_8>\\)\\s*\\(\\s*\"\\w+\"\\s*\\))",
"(?P<regex_code_execution_9>^\\s*\\.\\s*return)",
"(?P<regex_sqli_12>-?\\d+(\\.\\d+)?\\s+(or|and|\\||\\&|\\|\\||\\&\\&|having)(\\s*not\\s*)?\\s+-?\\d+(\\.\\d+)?\\s*(!|=|<|>|is))",
"(?P<regex_sqli_13>(['\"]|\\d)\\s+(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?\\s+[\"']\\w+[\"']\\s*(=|is))",
"(?P<regex_sqli_15>^\\s*(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?\\s*\\d+\\s*([^\\w\\s]+|$))",
"(?P<regex_sqli_16>^\\s*(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?.*is\\s*?(not\\s*)null)",
"(?P<regex_sqli_17>(\\s(and|\\||\\&|\\|\\||\\&\\&|or|having)|\\^)(\\s*not\\s*)?\\s+([\"'\\.\\-_\\(\\),\\w]+)\\s*([=%>&<+\\-\\!\\|]+|(like|rlike))[\\w\\s])",
"(?P<regex_sqli_19>(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?\\s+\\w+\\s*\\()",
"(?P<regex_sqli_20>('|and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?.*select\\s+(.*,){3,}.*(from|[\\);'\"\\|]{2,}|--|/\\*|#))",
"(?P<regex_sqli_21>\\s(and|\\||\\&|\\|\\||\\&\\&|or|having|order\\s+by)(\\s*not\\s*)?\\s[\\s\\w\\(\\)]*([\\);'\"\\|]{2,}|--|\\/\\*|#))",
"(?P<regex_sqli_26>(and|or)(\\s*not\\s*)?\\s+('|\"))",
"(?P<regex_sqli_28>select[\\w\\s\\-\\.\\^\\@~]+from)",
"(?P<regex_sqli_29>^\\s*\\w+\\s*[<>]+\\s*\\w+\\s*$)",
"(?P<regex_sqli_2>'\\s+(and|\\||\\&|\\|\\||\\&\\&)(\\s*not\\s*)?\\s+'[^']+'\\s*([=\\!]+|like|rlike)\\s*')",
"(?P<regex_sqli_30>or\\s+(\\s*not\\s*)?\\d+(\\.\\d+)?\\s*[=<>]+\\s*\\d+(\\.\\d+)?)",
"(?P<regex_sqli_31>select\\s*@)",
"(?P<regex_sqli_32>declare\\s*@)",
"(?P<regex_sqli_8>^\\d(\\^\\w+)*\\s*(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?\\s*\\w$)",
"(?P<regex_xss_1>[^\\w]on(canplaythrough|help|show|layoutcomplete|beforeeditfocus|move|focus|medialoadfailed|ended|toggle|pointerout|afterprint|selectstart|beforepaste|mediaslip|loadend|cut|transitionstart|durationchange|volumechange|rowsinserted|aftercopy|stalled|mouseout|input|focusin|cuechange|seeking|datasetcomplete|stop|keydown|mousemove|resizestart|webkitanimationstart|movestart|offline|beforeupdate|pointerrawupdate|dragenter|seek|drop|hashchange|transitionrun|beforedeactivate|loadedmetadata|pointerenter|beforescriptexecute|loadeddata|activate|animationstart|rowdelete|rowexit|begin|bounce|selectionchange|repeat|resizeend|webkittransitionend|dragover|close|pointermove|losecapture|animationiteration|pagehide|webkitanimationiteration|deactivate|keypress|fullscreenchange|waiting|blur|progress|dragleave|touchend|animationend|resume|undo|pointerdown|pause|trackchange|beforeactivate|change|search|seeksegmenttime|mediacomplete|reverse|canplay|mediaerror|textinput|load|suspend|datasetchanged|emptied|auxclick|beforeprint|dragstart|rowsdelete|message|redo|transitionend|select|timeupdate|seeked|paste|propertychange|submit|seeksegmenttime|start|dragdrop|syncrestored|errorupdate|mouseenter|pageshow|pointerup|outofsync|copy|resize|reset|ratechange|unload|dataavailable|rowsexit|popstate|rowsenter|error|rowenter|animationcancel|moveend|transitioncancel|focusout|mouseup|controlselect|abort|resync|unhandledrejection|urlflip|beforeunload|webkitanimationend|cellchange|end|touchstart|loadstart|keyup|beforecopy|invalid|click|readystatechange|touchmove|afteractivate|online|urlflip|wheel|play|finish|mousewheel|scriptcommand|filterchange|storage|drag|mousedown|timeerror|beforecut|pointerover|mouseleave|rowinserted|contextmenu|afterscriptexecute|scroll|pointerleave|dragend|dblclick|afterupdate|mouseover|playing|mozfullscreenchange)\\s*=)",
"(?P<xpath_injeciton_regex_4>admin\" #)"
],
"precondition_keys": [
"",
"\n",
"\r",
" ",
"!",
"!!",
"!![]",
"\"",
"\"=\"",
"\"username\"",
"#",
"$",
"$*",
"$@",
"$_cookie[",
"$_files",
"$_get",
"$_get[",
"$_post[",
"$_request[",
"$_server[",
"$comment",
"$env{",
"$http_get_vars[",
"$php_md5",
"$query",
"$shell",
"$where",
"${",
"%",
"%25c0%25ae%25c0%25ae/",
"%>",
"%env",
"%u22",
"%uefc8",
"%uf025",
"%uff0e",
"&",
"&#x00000072;",
"&#x000003c;",
"&#x00003c;",
"&#x0003c;",
"&#x00074;",
"&#x003c;",
"&#x006",
"&#x0065;",
"&#x03c;",
"&#x06c;",
"&#x09;",
"&#x0a;",
"&#x3c;",
"&#x6",
"&#x65;",
"'",
"'--",
"'80040e",
"';",
"'='",
"'or",
"'username'",
"'||",
"(",
")",
");/",
");id;",
");id|",
")|/",
")|id",
")|id;",
"*",
"*/",
"+acj-",
"+ad4apb-",
"+ad7-",
"+adz-",
",",
",null",
"-",
"--",
".",
".7z",
".bak",
".cfg",
".cobalt",
".config",
".connect",
".gz",
".inc",
".old",
".rar",
".sql",
".tar",
".zip",
"/",
"/%c0%ae",
"/%c0%ae%c0%ae",
"/%c0%ae%c0%ae/",
"/*",
"/**/",
"//filter/",
"/3tvars",
"/4iv9",
"/5vkmc",
"/5ytus",
"/?",
"/_showjavartdetails",
"/_showpooldetails",
"/a_domlog",
"/a_security",
"/acart2_0",
"/access",
"/access-options",
"/account",
"/accounts",
"/active",
"/addalink",
"/addcontent",
"/adovbs",
"/aedating4cms",
"/aedatingcms",
"/aexp2",
"/aexp2b",
"/aexp3",
"/aexp4",
"/aexp4b",
"/agentrunner",
"/ains_main",
"/alog",
"/amprops",
"/analyse",
"/anything",
"/apage",
"/apzufu",
"/architext_query",
"/args",
"/attach",
"/attrib",
"/auth_user_file",
"/author",
"/authors",
"/awebvisit",
"/awstats",
"/backup",
"/ban",
"/basilix",
"/bc4j",
"/bdir",
"/bdjra5dcb",
"/beaninfo",
"/bigconf",
"/billing",
"/bin",
"/biztalkhttpreceive",
"/blah-whatever",
"/blah-whatever-badfile",
"/blahb",
"/bookmark",
"/books",
"/botinfs",
"/bots",
"/buddies",
"/buddy",
"/buddylist",
"/buffer",
"/buffer2",
"/buffer4",
"/busytime",
"/calendar",
"/carbo",
"/carello",
"/cartcart",
"/catalog",
"/ccbill",
"/cersvr",
"/certa",
"/certlog",
"/certsrv",
"/cf-sinfo",
"/cfcache",
"/cfcexplorer",
"/cfdocs",
"/cfgwiz",
"/cfmlsyntaxcheck",
"/cgi",
"/cgi-sys/cgiecho",
"/cgi-sys/countedit",
"/cgichkmasterpwd",
"/cgimail",
"/chatlog",
"/chetcpasswd",
"/chkvol",
"/clbusy",
"/cldbdir",
"/clients",
"/clusta4",
"/clusterframe",
"/cnf_gi",
"/code",
"/codebrw",
"/collect4",
"/com",
"/com_minibb",
"/command",
"/convert",
"/copy",
"/countdown",
"/counter",
"/cpa",
"/cphost",
"/cplogfile",
"/cpshost",
"/cschatrbox",
"/csguestbook",
"/cslivesupport",
"/csnews",
"/cte",
"/ctguestb",
"/cthzrcbsobmimq",
"/ctss",
"/customerdata",
"/da",
"/dadentries",
"/dan_o",
"/db",
"/db2000",
"/dba4",
"/dbconnect",
"/dbprod2_prod",
"/dclf",
"/deasappdesign",
"/deaslog",
"/deaslog0",
"/deaslog02",
"/deaslog03",
"/deaslog04",
"/deaslog05",
"/decsadm",
"/decsdoc",
"/decslog",
"/deesadmin",
"/delete",
"/deptodoc",
"/desktop",
"/detail",
"/details",
"/diag_dbtest",
"/displayopenedfile",
"/doladmin",
"/dols_help",
"/domadmin",
"/domcfg",
"/domguide",
"/domlog",
"/dpnecentral",
"/dpnepolicyservice",
"/dsn",
"/dsnform",
"/dspug",
"/duxqcmbiq",
"/dvwssr",
"/dwssap",
"/e7uo7v7d",
"/easylog",
"/ecxotaping",
"/eipc",
"/english",
"/entropybanner",
"/entropysearch",
"/env",
"/environ",
"/etc",
"/etc/passwd",
"/evaluate",
"/event",
"/events",
"/events4",
"/events5",
"/exprcalc",
"/ext",
"/extends",
"/extends2",
"/ezadmin",
"/ezboard",
"/fastjsdata",
"/fck_flash",
"/fck_image",
"/fck_link",
"/fcring",
"/fdir",
"/file-that-is-not-real-2002",
"/fileexists",
"/filetime",
"/form_results",
"/formmail-clone",
"/forms5",
"/forum",
"/fp30reg",
"/fpadmcgi",
"/fpcount",
"/fpremadm",
"/fpsrvadm",
"/ftayrbj",
"/funhist",
"/generalchassisconfig",
"/get_od_toc",
"/getdrvrs",
"/getfile",
"/getrend",
"/getservers",
"/gettempdirectory",
"/getvars",
"/getwhen",
"/glist",
"/gm-2-b2",
"/gozila",
"/group",
"/groups",
"/gwweb",
"/haffzeqgulj",
"/hellouser",
"/help4",
"/help5_admin",
"/help5_client",
"/help5_designer",
"/helpadmin",
"/helpdesk",
"/helplt4",
"/hidden",
"/hits",
"/hnvyuzwaqq",
"/hosts",
"/htpasswd",
"/hywsrkdlyfhyrb",
"/i8ya5llb0qb",
"/icoduserguide",
"/id",
"/iisadmpwd",
"/imadminlogon",
"/import",
"/internet",
"/intersl",
"/ip_password_result",
"/ism",
"/ixmail_netattach",
"/javapg",
"/jdkrqnotify",
"/jluwpkdfrgvwfs",
"/jotter",
"/judy_tech_book",
"/judysort",
"/junk",
"/junk988",
"/junk999",
"/junk_nonexistant",
"/kbccv",
"/kbnv",
"/kbssvv",
"/krkiuwjugrom",
"/kywndbrexogmih",
"/l_domlog",
"/lancard",
"/lancgi",
"/lang",
"/language",
"/lccon",
"/lcgitest",
"/lcon",
"/ldap",
"/ldhpsaoeanyd",
"/learn-msg",
"/leiadm",
"/leilog",
"/leivlt",
"/lib",
"/license",
"/link",
"/linkinfo",
"/local",
"/lpt9",
"/lsxlc",
"/lygmasbkidzlu/cgi-bin",
"/mab",
"/main",
"/mainframeset",
"/manage",
"/master",
"/mbox-list",
"/mchat",
"/md",
"/mdefre8m4ml",
"/member_log",
"/metacart",
"/middle_help_intro",
"/midicart",
"/migrate",
"/mime",
"/motd",
"/mountain",
"/mpcsoftweb_guestdata",
"/msdwda",
"/msg",
"/mtatbls",
"/mtstore",
"/musicqueue",
"/mysql",
"/names",
"/nbxovzsmbguzvznzzqpiu",
"/nd00000",
"/nd000000",
"/nd000002",
"/nd000003",
"/nd000004",
"/ndslogin",
"/ndsobj",
"/netbasic",
"/netdetector",
"/netpanzer",
"/newdsn",
"/newpro",
"/news",
"/nikto",
"/nikto-test-7zpdybyd",
"/nikto-test-bgl4esul",
"/nikto-test-ksa8x6xq",
"/nikto-test-ons",
"/nikto-test-ttjw6",
"/nntppost",
"/no-such-file",
"/notes",
"/npn_admn",
"/npn_rn",
"/nsmanager",
"/ntp_primer",
"/ntsync4",
"/ntsync45",
"/nul",
"/null",
"/obwupzwyakykba",
"/oder",
"/oem",
"/ofscan",
"/okjdkewqqdobah/cgi-bin",
"/onrequestend",
"/openfile",
"/openview5",
"/opt",
"/order",
"/order_log",
"/order_log_v",
"/orders",
"/ovlaunch",
"/ovlogin",
"/owa_util",
"/pagedouble",
"/pageimport2",
"/pageiserrorpage",
"/pageutil",
"/parse_xml",
"/passgen",
"/passwd",
"/passwdfile",
"/password",
"/passwords",
"/payload_encoding_call4",
"/payload_encoding_fnstenv",
"/payload_encoding_jmp_call",
"/pbserver",
"/people",
"/perl/printenv",
"/perweb",
"/pfzozrh",
"/pitc_ag",
"/planning_superdome_configs",
"/ppzcljsmvsnzwofqxug",
"/pqbopmnkhoxsisdh",
"/pqjgjw",
"/print",
"/private",
"/probe",
"/proc",
"/pt_config",
"/ptg_upgrade_pkg",
"/pubfld",
"/public",
"/qfullhit",
"/qpadmin",
"/qstart50",
"/qsumrhit",
"/query",
"/queryhit",
"/quikstore",
"/randhtml",
"/rd",
"/rdprocess",
"/reademail",
"/realhelpdesk",
"/realsignup",
"/registry",
"/release-msg",
"/ren",
"/reports",
"/reports/ndrqm",
"/reports/yumjnuzv",
"/repqof",
"/rhhvengt26x6rh",
"/rpc",
"/rtm",
"/rvbshld",
"/rvdhe880gl",
"/sam",
"/sample/site3w4646",
"/schema50",
"/secret",
"/self",
"/send",
"/sendemail",
"/sendmail",
"/service",
"/services",
"/session",
"/session/admnlogin",
"/set",
"/setpasswd",
"/setsecurity",
"/shadow",
"/share",
"/shop",
"/shopper",
"/shopping300",
"/shopping400",
"/shtml",
"/simple",
"/site",
"/site_searcher",
"/sitemap",
"/skbvqsy",
"/slist",
"/smadmin",
"/smbcfg",
"/smconf",
"/smency",
"/smg_smxcfg30",
"/smhelp",
"/smmsg",
"/smquar",
"/smsolar",
"/smtime",
"/smtp",
"/smtpibwq",
"/smtpobwq",
"/smtptbls",
"/smvlog",
"/snmpviewer",
"/snoop",
"/soapconfig",
"/software",
"/source",
"/spywall",
"/sqljdemo",
"/sqlnet",
"/srchadm",
"/srvinst",
"/srvnam",
"/ss",
"/sscd_suncourier",
"/stat",
"/stat_what",
"/statmail",
"/statrep",
"/stats",
"/statusmap",
"/stauths",
"/stautht",
"/stconf",
"/stconfig",
"/stdnaset",
"/stdomino",
"/stlog",
"/streg",
"/stsrc",
"/svacl",
"/svcacl",
"/syxwptffnnuyexftov",
"/tmp",
"/today",
"/toolbar",
"/tovvjrbwrdrpmonx",
"/tqmm8",
"/trace",
"/tradecli",
"/trends",
"/tstisapi",
"/turwwwwhhm",
"/type",
"/url",
"/usebean",
"/usr",
"/uurfnmhfhvtn",
"/uygv2i3lv6ij",
"/var",
"/vfolder",
"/viewexample",
"/volscgi",
"/vpuserinfo",
"/vwchqjxorzitbm",
"/vxvm_ag",
"/vxvm_hwnotes",
"/vxvm_ig",
"/vxvm_mig",
"/vxvm_notes",
"/vxvm_tshoot",
"/vxvm_ug",
"/w3proxy",
"/w3tvars",
"/welcome",
"/wfreassign",
"/wg_user-info",
"/whatever",
"/whateverwrzb",
"/whereami",
"/win",
"/windows",
"/winmsdp",
"/wksinst",
"/wml",
"/wp-config",
"/wpconfig",
"/writeto",
"/ws_ftp",
"/wwforum",
"/wwsample",
"/xagogktctnspa",
"/xsqlconfig",
"/yabb",
"/ynnwsuao",
"/yokhehviqwnn",
"/zskwhg8jniabcd",
"00relnotes",
"08a80340-06d3-11ea-9f87-0242ac11000f",
"0x",
"0x800a0bcd",
"1",
"27",
"2f",
"2guest",
"3mduh",
"45a0mzr",
"6",
"7z",
"80040e",
":",
";",
";--",
";dir",
";id",
";id;",
";id|",
";|/",
"<",
"<!--",
"<!attlist",
"<!doctype",
"<!element",
"<!entity",
"<%",
"</b>",
"<>",
"<?",
"<?php",
"<?xml",
"<a",
"<abbr",
"<acronym",
"<address",
"<applet",
"<area",
"<article",
"<aside",
"<audio",
"<b",
"<b>warning</b>",
"<base",
"<basefont",
"<bdi",
"<bdo",
"<big",
"<binding",
"<blockquote",
"<body",
"<br",
"<br>timeout",
"<button",
"<canvas",
"<caption",
"<center",
"<cite",
"<code",
"<col",
"<colgroup",
"<datalist",
"<dd",
"<del",
"<details",
"<dfn",
"<dialog",
"<dir",
"<div",
"<dl",
"<dt",
"<em",
"<embed",
"<event-source",
"<fieldset",
"<figcaption",
"<figure",
"<font",
"<footer",
"<form",
"<frame",
"<frameset",
"<h",
"<h2",
"<h3",
"<h4",
"<h5",
"<h6",
"<head",
"<header",
"<hr",
"<html",
"<i",
"<iframe",
"<img",
"<input",
"<ins",
"<jsp",
"<kbd",
"<keygen",
"<label",
"<legend",
"<li",
"<link",
"<main",
"<map",
"<mark",
"<math",
"<menu",
"<menuitem",
"<message",
"<meta",
"<meter",
"<nav",
"<noframes",
"<noscript",
"<object",
"<ol",
"<optgroup",
"<option",
"<output",
"<p",
"<param",
"<porttype",
"<pre",
"<progress",
"<q",
"<restriction",
"<rp",
"<rt",
"<ruby",
"<s",
"<samp",
"<script",
"<section",
"<select",
"<service",
"<small",
"<source",
"<span",
"<strike",
"<strong",
"<style",
"<sub",
"<summary",
"<sup",
"<svg",
"<table",
"<tbody",
"<td",
"<textarea",
"<tfoot",
"<th",
"<thead",
"<time",
"<title",
"<title>index",
"<tr",
"<track",
"<tt",
"<u",
"<ul",
"<var",
"<video",
"<wbr",
"=",
">",
">internal",
"?",
"?/",
"?>",
"?onfig",
"@",
"@datadir",
"@eval",
"@hostname",
"@import",
"@ini_get",
"@select",
"@variable",
"@version",
"[",
"[+!",
"[]",
"[dm_query_e_syntax]",
"[ibm]",
"[java",
"[macromedia]",
"[macromedia][sqlserver",
"[microsoft]",
"[microsoft][odbc",
"[mysql]",
"[odbc]",
"[sqlexception",
"[sqlexception]",
"[sqlite_error]",
"[sqlserver",
"\\",
"\\admin",
"\\inetpub",
"\\logicworks",
"\\n",
"\\php",
"\\win",
"\\windows",
"\\winnt",
"\\wwwroot",
"\\x23",
"]",
"]]]",
"__class__",
"__definesetter__",
"_self",
"`",
"`dir`",
"a",
"abstract",
"addheader",
"admin",
"administrator",
"adodb",
"alert",
"all",
"allcfgconv",
"allocate",
"allocation",
"and",
"and_or_having",
"and_or_union",
"apache",
"appendchild",
"application",
"apply",
"arguments",
"array",
"array_map",
"arraymap",
"arrived",
"ascii",
"assert",
"assign",
"attr",
"attribute",
"attributegroup",
"auctiondeluxe",
"auth_data",
"avg",
"awk",
"awl",
"awstats",
"b",
"back",
"backup",
"base64",
"base64_decode",
"basedecode",
"basename",
"bash",
"bash_history",
"bash_logut",
"bboardservlet",
"bck",
"benchmark",
"between",
"binarywrite",
"biz",
"blog",
"body",
"book",
"boot",
"boozt",
"bu3m",
"bulk",
"by",
"c",
"c32",
"calendar",
"call",
"call_user_func",
"callback",
"calluserfunc",
"cannot",
"cart32",
"case",
"casee",
"cast",
"cat",
"catalina",
"catch",
"cbmc",
"cd",
"cellsprint",
"cgi-bin",
"cgiwrap",
"char",
"char@",
"character",
"chr",
"class",
"classifieds",
"clearconfig",
"cmd",
"cn",
"code</b>",
"code_execution_prefix_set",
"column_name",
"command",
"comment",
"common",
"commonname",
"compilation",
"complextype",
"components",
"components[",
"concat",
"conf",
"config",
"configuration",
"confirm",
"connect",
"console",
"constructor",
"content-length",
"context",
"controller",
"convert",
"copy",
"count",
"counterfiglet",
"create",
"create_function",
"createelement",
"createfunction",
"createobject",
"createtextfile",
"csmailto",
"cspassword",
"curl",
"cutecast",
"d",
"dash",
"dasp",
"data",
"database",
"date",
"dateformat",
"datetimeimmutable",
"datetimeinterface",
"db",
"db2_",
"db4web_c",
"dba_users",
"dbman",
"dbo",
"dcshop",
"declare",
"decode",
"decodeuri",
"delay",
"delete",
"die",
"dir",
"directory]<",
"distinct",
"dll",
"document",
"document[",
"doesn't",
"driver",
"driver]",
"driver][db2/6000]",
"dshell",
"dual",
"dump",
"dynamic",
"dynsrc",
"e",
"echo",
"elt",
"encoding",
"end",
"entity",
"env",
"eq",
"equal_colon",
"error",
"error</title>",
"error_log",
"errorexception",
"eshop",
"etc",
"etc2fpasswd",
"eval",
"evasions",
"ex",
"exception",
"exceptions",
"exe",
"exec",
"execcommand",
"execscript",
"execute",
"execution",
"exists",
"exit",
"expect://",
"expected",
"export",
"expression",
"expression_url",
"extension",
"extract",
"extractvalue",
"extremely",
"ezshopper2",
"ezshopper3",
"f",
"fatal",
"field",
"file",
"file_extentions_set",
"file_get_contents",
"file_put_contents",
"filegetcontents",
"filemanager",
"fileoutputstream",
"fileputcontents",
"filesystemobject",
"finally",
"find",
"firewall",
"flush",
"fopen",
"foreach",
"forward",
"forward_static_call",
"fread",
"from",
"fromcharcode",
"func",
"function",
"function_names",
"g",
"gbook",
"gcc",
"ge",
"generator",
"genpopuplist",
"get_host_address",
"getbytes",
"getclass",
"getenv",
"getfile",
"getfilter",
"gethostaddress",
"getparameter",
"getpath",
"getrealpath",
"getruntime",
"getscript",
"gif",
"givenname",
"glob://",
"globalthis[",
"group",
"group_concat",
"groupconcat",
"gt",
"gtid_subset",
"gtidsubset",
"guestbook",
"gw5",
"h",
"hash",
"hashbytes",
"having",
"hex",
"history",
"home",
"horde",
"hostname",
"hosts",
"href=",
"hsqldb",
"htdocs",
"html",
"htmlencode",
"i",
"id",
"id;",
"identifier",
"id|",
"ifconfig",
"iframe",
"iif",
"ikonboard",
"illegal",
"imagefolio",
"img",
"import",
"include",
"incorrect",
"incorrecta",
"increment",
"info_all",
"info_configuration",
"info_credits",
"info_environment",
"info_general",
"info_license",
"info_modules",
"info_variables",
"information",
"information_schema",
"informationschema",
"informix",
"ini",
"innerhtml",
"insert",
"install",
"installing",
"instantiate",
"intldateformatter",
"into",
"invalid",
"ipconfig",
"irelnotes",
"is",
"isnull",
"isnumeric",
"isrb",
"isset",
"iterated",
"java",
"javascript",
"javascriptval",
"jndi",
"join",
"k",
"keystore",
"ksh_history",
"l",
"la",
"lcdispatcher",
"ldap_set_()*",
"ldap_set_(|%",
"ldap_words",
"le",
"len",
"length",
"less",
"lib",
"like",
"limit",
"limit_offset",
"ll",
"load_file",
"loadfile",
"loadfromfile",
"loading",
"loadtemplate",
"localgroup",
"localhost",
"location",
"location=",
"location[",
"log",
"logs",
"lookupmethod",
"lower",
"lowsrc",
"ls",
"m",
"mage",
"mail",
"make_set",
"manager",
"mappath",
"mariadb",
"master",
"match",
"md",
"md5",
"member",
"message",
"messageformatter",
"method",
"microsoft",
"mid",
"min",
"mojo",
"move_uploaded_file",
"moveuploadedfile",
"mro",
"mro__[",
"ms_proxy_auth_query",
"msgbox",
"mssql_query",
"mt-static",
"mysql_fetch_array",
"mysqlclient",
"n",
"name",
"name_const",
"nameconst",
"namespace",
"navigate",
"nc",
"nchar",
"ncommerce3",
"ne",
"nesting",
"net",
"net)",
"netcat",
"netsh",
"netstat",
"new",
"nosql_set",
"not",
"npgsql",
"nslookup",
"null",
"null,",
"null_postfix_set",
"nullpointerexception",
"numberformatter",
"nvarchar",
"o",
"object",
"objectclass",
"objects",
"occurred",
"offset",
"offsets",
"ogg://",
"oledbexception",
"on",
"onerror=",
"open",
"open_basedir",
"openssl",
"or",
"or'",
"ora-",
"oracle",
"ord",
"order",
"orders",
"os_command_probing",
"os_command_separators",
"os_command_terminators",
"os_commands1",
"os_commands2",
"os_tools",
"overflow",
"overloaded",
"override",
"ownerdocument",
"ownerdocument[",
"p",
"parameter",
"parameters",
"parent",
"parent[",
"parsing",
"pass",
"passthru",
"passwd",
"password",
"path",
"perl",
"pg_exec",
"pg_query",
"pg_sleep",
"pgsleep",
"phar://",
"photo",
"php",
"php://",
"php_uname",
"phpinfo",
"phpuname",
"phpversion",
"php~",
"ping",
"ping6",
"plugins",
"popen",
"postgresql",
"preg_replace",
"pregreplace",
"print",
"print_r",
"printer",
"printf",
"println",
"printr",
"private",
"procedure",
"prompt",
"prompt_alert",
"properties",
"property",
"protected",
"protocol",
"ps",
"psqlexception",
"pwd",
"python",
"quotation",
"quotations",
"quotes",
"r",
"rand",
"randomblob",
"rar://",
"rbsserv",
"rcpt",
"read",
"readdirsync",
"readfile",
"realpath",
"redeclare",
"redefine",
"redirect",
"reference",
"references",
"reflect",
"regex",
"register",
"relevant_characters_10",
"relevant_characters_11",
"relevant_characters_14",
"relevant_characters_2",
"relevant_characters_3",
"relevant_characters_4",
"relevant_characters_5",
"relevant_characters_6",
"relevant_characters_7",
"relevant_characters_8",
"render_css",
"render_warning_screen",
"replace",
"replicator",
"request",
"request[",
"requested",
"request|",
"require",
"require_once",
"required",
"requireonce",
"requires",
"res",
"resourcebundle",
"response",
"restriction",
"result",
"return",
"reverse",
"rightfax",
"rlike",
"roadhouse",
"rownum",
"rtreedepth",
"ruby/object",
"rwcgi60",
"s",
"sbcgi",
"script",
"second",
"sed",
"select",
"self",
"self[",
"serialization",
"serialize",
"server",
"serverexception",
"servlet",
"session",
"set",
"setcache",
"setcookie",
"setinterval",
"settimeout",
"setup",
"sgb_dir",
"sh",
"sha",
"shell_exec",
"shop",
"show_query_columns",
"show_source",
"showsource",
"simpletype",
"slashes",
"sleep",
"slice",
"sn",
"sort",
"source",
"specified",
"spoofchecker",
"sprintf",
"sql",
"sql_compare",
"sql_comparison",
"sql_conditions",
"sql_equal",
"sql_like",
"sql_operators",
"sql_operators2",
"sql_prefix",
"sql_prefix2",
"sql_verbs",
"sqlclient",
"sqlexception",
"sqlite/jdbcdriver",
"sqliteexception",
"sqlstate",
"src",
"src=",
"srcdoc",
"ssh",
"ssh2://",
"stack",
"stacktrace')\"",
"stat",
"statements",
"statically",
"stats",
"stats-bin-p",
"stats_old",
"store",
"str_replace",
"str_rot",
"string",
"strreplace",
"strrev",
"style",
"style=\"font",
"subclasses",
"subclasses__",
"subject",
"substring",
"sum",
"supplied",
"support",
"supported",
"surname",
"sws",
"sybase",
"syntax",
"sys",
"sysdatabases",
"sysmessages",
"sysobjects",
"system",
"system_user",
"systeminfo",
"systemuser",
"t",
"table",
"table_name",
"table_schema",
"tail",
"tar",
"temp",
"tempnam",
"test",
"texis",
"texis.exe",
"text/vbscript",
"tgz",
"therefore",
"this",
"this[",
"thread",
"thrown",
"to",
"top",
"top[",
"tostring",
"touch",
"tr",
"traceroute",
"traceroute6",
"tracert",
"transaction",
"trappable",
"type",
"typehint",
"u",
"unable",
"uname",
"uncloneable",
"undeclared",
"undefined",
"unescape",
"unexpected",
"unhex",
"union",
"unknown",
"unresolved",
"unserialize",
"unspecified",
"unsupported",
"update",
"updatexml",
"upload",
"uploadservlet",
"upper",
"url",
"urlencode",
"user",
"user_name",
"username",
"userpassword",
"utm",
"v",
"validate_stmt",
"validation",
"value",
"valueof",
"var_dump",
"varchar",
"vardump",
"variables",
"vbscript",
"version",
"view",
"vol",
"vtmxqnwv",
"vuln_urls_set",
"vuln_web_set1",
"vuln_web_set2",
"vuln_web_set3",
"w",
"waitfor",
"waitfor_set",
"warning",
"wc",
"web.exe",
"webcgi",
"wget",
"when",
"where",
"which",
"whoami",
"wildcard_characters",
"window",
"window,frames",
"window[",
"winnt",
"wordpress",
"write",
"writefile",
"writeln",
"wscript",
"wso_version",
"wwwthreads",
"x",
"xlink",
"xss_event",
"xss_pentest_tags",
"xsstest",
"y",
"zend_call_function",
"zip",
"zip://",
"zlib://",
"{",
"{main}",
"{php}",
"{target}",
"{{",
"{{}}",
"|",
"|/",
"|dir",
"|dir|",
"|id",
"||",
"}",
"}}"
],
"preconditions": {
"": [
[
"regex",
"(?P<quotes_space_ev_fast_reg9d52>(\\\"\\s*\\\"))",
""
],
[
"regex",
"(?P<hi_acur_fast_reg_evasion_3>(%uff[0-5][0-9,a-f]))",
""
],
[
"regex",
"(?P<hi_acur_fast_reg_evasion_2>(%u221))",
""
],
[
"regex",
"(?P<hi_acur_fast_reg_evasion48ff>(%uf025))",
""
],
[
"regex",
"(?P<hi_acur_fast_reg_evasion9228>(%uefc8))",
""
],
[
"regex",
"(?P<hi_acur_fast_reg_evasion_1>([\\x00-\\x08]+|[\\x0a-\\x1f]+))",
""
]
],
"\n": [
[
"and_condition",
"3_\r,\n,="
]
],
"\r": [
[
"and_condition",
"3_\r,\n,="
]
],
" ": [
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
]
],
"!": [
[
"set",
"sql_compare"
],
[
"set",
"sql_operators"
]
],
"!!": [
[
"regex",
"(?P<encoding_charsfb50>\\+[\\s\\)]*(\\(|//|`)\\!\\!)",
""
]
],
"!![]": [
[
"regex",
"(?P<encoding_chars108a>[\\s\\)]*(\\(|//|`)\\!\\!\\[\\])",
""
]
],
"\"": [
[
"and_condition",
"3_admin,\",#"
],
[
"regex",
"(?P<medium_acuracy>\\\")",
"_noregex"
],
[
"regex",
"(?P<quotes_ev_fast_reg_2>(\"\\w*\"))",
""
],
[
"and_condition",
"3_\",(,)"
],
[
"and_condition",
"2_\",:"
],
[
"set",
"os_command_terminators"
],
[
"set",
"sql_prefix"
],
[
"set",
"sql_prefix2"
],
[
"set",
"quotes"
]
],
"\"=\"": [
[
"regex",
"(?P<sqli_medium_acuracy_7>\\\"\\=\\\")",
"_noregex"
]
],
"\"username\"": [
[
"regex",
"(?P<ldap_injection_1>\\\"username\\\")",
"_noregex"
]
],
"#": [
[
"and_condition",
"3_admin,\",#"
],
[
"regex",
"(?P<os_cmd_sep_medium_acuracy_5>\\#)",
"_noregex"
]
],
"$": [
[
"and_condition",
"2_[,$"
],
[
"and_condition",
"2_=,$"
],
[
"regex",
"(?P<high_acuracy_code_exec035f>\\$[\\s\\)]*(\\(|//|`))",
""
],
[
"set",
"relevant_characters_6"
]
],
"$*": [
[
"regex",
"(?P<quotes_ev_fast_reg_3>(\\$\\*))",
""
]
],
"$@": [
[
"regex",
"(?P<quotes_ev_fast_reg_1>(\\$@))",
""
]
],
"$_cookie[": [
[
"regex",
"(?P<high_acuracy_code_execution_49>\\$\\_cookie\\[)",
"_noregex"
]
],
"$_files_napost": [
[
"regex",
"(?P<high_acuracy_code_execf08e>\\$\\_files(?!\\w))",
"_noregex"
]
],
"$_get[": [
[
"regex",
"(?P<high_acuracy_code_execution_9>\\$\\_get\\[)",
"_noregex"
]
],
"$_get_napost": [
[
"regex",
"(?P<high_acuracy_code_exec5015>\\$\\_get(?!\\w))",
"_noregex"
]
],
"$_post[": [
[
"regex",
"(?P<high_acuracy_code_execution_51>\\$\\_post\\[)",
"_noregex"
]
],
"$_request[": [
[
"regex",
"(?P<high_acuracy_2>\\$\\_request\\[)",
"_noregex"
],
[
"regex",
"(?P<high_acuracy_code_execution_59>\\$\\_request\\[)",
"_noregex"
]
],
"$_server[": [
[
"regex",
"(?P<high_acuracy_code_execution_16>\\$\\_server\\[)",
"_noregex"
]
],
"$comment_napost": [
[
"regex",
"(?P<sqli_generic506a>\\$comment(?!\\w))",
"_noregex"
]
],
"$env{": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_6>\\$env\\{)",
"_noregex"
]
],
"$http_get_vars[": [
[
"regex",
"(?P<high_acuracy_code_execution_25>\\$http\\_get\\_vars\\[)",
"_noregex"
]
],
"$php_md5": [
[
"set",
"os_commands2"
]
],
"$query_napost": [
[
"regex",
"(?P<xss_html_special_63>\\$query(?!\\w))",
"_noregex"
]
],
"$shell_napost": [
[
"regex",
"(?P<os_commands_2>\\$shell(?!\\w))",
"_noregex"
]
],
"$where_napost": [
[
"regex",
"(?P<sqli_genericec02>\\$where(?!\\w))",
"_noregex"
]
],
"${": [
[
"regex",
"(?P<ssti_6>\\$\\{)",
"_noregex"
],
[
"regex",
"(?P<high_acuracy_18>\\$\\{)",
"_noregex"
]
],
"%": [
[
"and_condition",
"3_=,<,%"
],
[
"set",
"evasions"
],
[
"set",
"ldap_set_(|%"
]
],
"%25c0%25ae%25c0%25ae/": [
[
"regex",
"(?P<path_traversal_2>\\%25c0\\%25ae\\%25c0\\%25ae\\/)",
"_noregex"
]
],
"%>": [
[
"regex",
"(?P<high_acuracy_code_exec5aa6>\\%\\>)",
"_noregex"
]
],
"%env_napost": [
[
"regex",
"(?P<url_scanning7ce2>\\%env(?!\\w))",
"_noregex"
]
],
"%u22": [
[
"regex",
"(?P<evasion_high_acuracy90a4>\\%u22\\d+)",
""
]
],
"%uefc8": [
[
"regex",
"(?P<evasion_high_acuracyfb73>\\%uefc8)",
"_noregex"
]
],
"%uf025": [
[
"regex",
"(?P<evasion_high_acuracy557d>\\%uf025)",
"_noregex"
]
],
"%uff0e_napost": [
[
"regex",
"(?P<encoding_chars_3>\\%uff0e(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_15>\\%uff0e(?!\\w))",
"_noregex"
]
],
"&": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy>\\&)",
"_noregex"
],
[
"set",
"sql_conditions"
],
[
"set",
"code_execution_prefix_set"
],
[
"set",
"sql_prefix"
],
[
"set",
"os_command_separators"
],
[
"set",
"sql_prefix2"
]
],
"&#x00000072;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_18>\\&\\#x00000072\\;)",
"_noregex"
]
],
"&#x000003c;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_9>\\&\\#x000003c\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_9>\\&\\#x000003c\\;)",
"_noregex"
]
],
"&#x00003c;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_6>\\&\\#x00003c\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_6>\\&\\#x00003c\\;)",
"_noregex"
]
],
"&#x0003c;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_23>\\&\\#x0003c\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_23>\\&\\#x0003c\\;)",
"_noregex"
]
],
"&#x00074;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_21>\\&\\#x00074\\;)",
"_noregex"
]
],
"&#x003c;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_3>\\&\\#x003c\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_3>\\&\\#x003c\\;)",
"_noregex"
]
],
"&#x006": [
[
"regex",
"(?P<detect_evasion_high_acuracy_16>\\&\\#x006\\d+\\;)",
""
]
],
"&#x0065;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_12>\\&\\#x0065\\;)",
"_noregex"
]
],
"&#x03c;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_17>\\&\\#x03c\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_17>\\&\\#x03c\\;)",
"_noregex"
]
],
"&#x06c;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_19>\\&\\#x06c\\;)",
"_noregex"
]
],
"&#x09;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"_noregex"
]
],
"&#x0a;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_0>\\&\\#x0a\\;)",
"_noregex"
]
],
"&#x3c;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_14>\\&\\#x3c\\;)",
"_noregex"
],
[
"regex",
"(?P<detect_evasion_high_acuracy_14>\\&\\#x3c\\;)",
"_noregex"
]
],
"&#x6": [
[
"regex",
"(?P<detect_evasion_high_acuracy_4>\\&\\#x6\\d+\\;)",
""
]
],
"&#x65;": [
[
"regex",
"(?P<detect_evasion_high_acuracy_5>\\&\\#x65\\;)",
"_noregex"
]
],
"'": [
[
"regex",
"(?P<medium_acuracy>\\')",
"_noregex"
],
[
"regex",
"(?P<quotes_ev_fast_reg_0>('\\w*'))",
""
],
[
"and_condition",
"4_eval,[,],'"
],
[
"and_condition",
"3_sql_conditions,',sql_operators"
],
[
"and_condition",
"2_sql_like,'"
],
[
"set",
"sql_conditions"
],
[
"set",
"os_command_terminators"
],
[
"set",
"evasions"
],
[
"set",
"sql_prefix"
],
[
"set",
"sql_prefix2"
],
[
"set",
"quotes"
]
],
"'--": [
[
"regex",
"(?P<sqli_medium_acuracy_0>\\'\\-\\-)",
"_noregex"
]
],
"'80040e": [
[
"regex",
"(?P<resp_body_data_leak_sql_20>\\'80040e\\d+4\\')",
""
]
],
"';": [
[
"regex",
"(?P<sqli_medium_acuracy_1>\\'\\;)",
"_noregex"
]
],
"'='": [
[
"regex",
"(?P<sqli_medium_acuracy_6>\\'\\=\\')",
"_noregex"
]
],
"'or_napost": [
[
"regex",
"(?P<sqli_medium_acuracy_4>\\'or(?!\\w))",
"_noregex"
]
],
"'username'": [
[
"regex",
"(?P<ldap_injection_0>\\'username\\')",
"_noregex"
]
],
"'||": [
[
"regex",
"(?P<sqli_medium_acuracy_3>\\'\\|\\|)",
"_noregex"
]
],
"(": [
[
"and_condition",
"2_(,/"
],
[
"and_condition",
"2_(,:"
],
[
"and_condition",
"3_(,),]"
],
[
"and_condition",
"3_(,=,)"
],
[
"and_condition",
"2_ldap_words,("
],
[
"and_condition",
"2_function,("
],
[
"and_condition",
"2_(,)"
],
[
"and_condition",
"3_exec,(,)"
],
[
"and_condition",
"3_\",(,)"
],
[
"and_condition",
"3_expression_url,:,("
],
[
"and_condition",
"2_{,("
],
[
"and_condition",
"3_[,],("
],
[
"and_condition",
"2_sys,("
],
[
"and_condition",
"2_sql_conditions,("
],
[
"and_condition",
"2_sql_verbs,("
],
[
"and_condition",
"2_case,("
],
[
"and_condition",
"3_(,),@"
],
[
"and_condition",
"2_(,."
],
[
"set",
"os_command_terminators"
],
[
"set",
"ldap_set_()*"
],
[
"set",
"ldap_set_(|%"
]
],
")": [
[
"and_condition",
"3_(,),]"
],
[
"and_condition",
"3_(,=,)"
],
[
"and_condition",
"2_(,)"
],
[
"and_condition",
"3_exec,(,)"
],
[
"and_condition",
"3_\",(,)"
],
[
"and_condition",
"3_(,),@"
],
[
"and_condition",
"2_),."
],
[
"and_condition",
"2_),="
],
[
"set",
"code_execution_prefix_set"
],
[
"set",
"ldap_set_()*"
],
[
"set",
"sql_prefix"
],
[
"set",
"os_command_separators"
],
[
"set",
"null_postfix_set"
]
],
");/": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy_7>\\)\\;\\/)",
"_noregex"
]
],
");id;": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_18>\\)\\;id\\;)",
"_noregex"
]
],
");id|": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_4>\\)\\;id\\|)",
"_noregex"
]
],
")|/": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy_1>\\)\\|\\/)",
"_noregex"
]
],
")|id;": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_0>\\)\\|id\\;)",
"_noregex"
]
],
")|id_napost": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy>\\)\\|id(?!\\w))",
"_noregex"
]
],
"*": [
[
"and_condition",
"2_admin,*"
],
[
"and_condition",
"2_*,="
],
[
"and_condition",
"2_*,@"
],
[
"regex",
"(?P<ldap_injection>\\*)",
"_noregex"
],
[
"regex",
"(?P<quotes_ev_fast_reg_4>(\\*))",
""
],
[
"set",
"ldap_set_()*"
],
[
"set",
"evasions"
]
],
"*/": [
[
"regex",
"(?P<sqli_detection_evasion_1>\\*\\/)",
"_noregex"
],
[
"regex",
"(?P<high_acuracy_16>\\*\\/)",
"_noregex"
]
],
"+acj-": [
[
"regex",
"(?P<detect_evasion_high_acuracy_22>\\+acj\\-)",
"_noregex"
]
],
"+ad4apb-": [
[
"regex",
"(?P<detect_evasion_high_acuracy_2>\\+ad4apb\\-)",
"_noregex"
]
],
"+ad7-": [
[
"regex",
"(?P<detect_evasion_high_acuracy_13>\\+ad7\\-)",
"_noregex"
]
],
"+adz-": [
[
"regex",
"(?P<detect_evasion_high_acuracy_1>\\+adz\\-)",
"_noregex"
]
],
",": [
[
"and_condition",
"3_,,[,]"
],
[
"set",
"null_postfix_set"
]
],
",null_napost": [
[
"regex",
"(?P<sqli_generic_61>\\,null(?!\\w))",
"_noregex"
]
],
"-": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg_4>(\\w+\\s+-+[a-z]+(\\s|$)))",
""
]
],
"--": [
[
"and_condition",
"2_--,sql_prefix"
],
[
"regex",
"(?P<sqli_medium_acuracy>\\-\\-)",
"_noregex"
],
[
"regex",
"(?P<high_acuracy_code_execution_54>\\-\\-\\s*\\!)",
""
]
],
".": [
[
"regex",
"(?P<regex_code_execution_1>(\\d{1,3}\\.){3}\\d{1,3})",
""
],
[
"and_condition",
"2_(,."
],
[
"and_condition",
"2_),."
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"separators_set"
],
[
"set",
"relevant_characters_7"
]
],
".7z": [
[
"set",
"file_extentions_set"
]
],
".bak": [
[
"set",
"file_extentions_set"
]
],
".cfg": [
[
"set",
"file_extentions_set"
]
],
".cobalt": [
[
"set",
"vuln_web_set3"
]
],
".config": [
[
"set",
"file_extentions_set"
]
],
".connect": [
[
"set",
"file_extentions_set"
]
],
".gz": [
[
"set",
"file_extentions_set"
]
],
".inc": [
[
"set",
"vuln_web_set2"
]
],
".old": [
[
"set",
"file_extentions_set"
]
],
".rar": [
[
"set",
"file_extentions_set"
]
],
".sql": [
[
"set",
"file_extentions_set"
]
],
".tar": [
[
"set",
"file_extentions_set"
]
],
".zip": [
[
"set",
"file_extentions_set"
],
[
"set",
"file_extentions_set"
]
],
"/": [
[
"and_condition",
"2_(,/"
],
[
"and_condition",
"2_@,/"
],
[
"regex",
"(?P<xpath_injeciton_regex_2>/\\w+\\s*(:|\\())",
""
],
[
"and_condition",
"3_/,vuln_web_set1,vuln_web_set2"
],
[
"and_condition",
"2_[,/"
],
[
"and_condition",
"3_[,/,@"
],
[
"and_condition",
"3_[,/,book"
],
[
"regex",
"(?P<os_cmd_exec_susp_dir_patts>\\/\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<os_cmd_exec_susp_dir_patts_0>\\s*\\.\\s*\\s*\\.\\s*\\/)",
""
],
[
"regex",
"(?P<path_traversal_1>\\/\\s*\\.\\s*\\s*\\.\\s*)",
""
],
[
"and_condition",
"2_cd,/"
],
[
"regex",
"(?P<os_cmd_exec_susp_dir_patts_2>\\/\\s*\\.\\s*\\s*\\.\\s*)",
""
],
[
"and_condition",
"2_/,<"
],
[
"and_condition",
"2_<,/"
],
[
"and_condition",
"3_{,foreach,/"
],
[
"and_condition",
"2_/,sql_operators2"
],
[
"regex",
"(?P<comment_ev_fast_reg_0>(\\/\\/.*[\\n\\r]+))",
""
],
[
"regex",
"(?P<high_acuracy_1>\\s*\\.\\s*\\s*\\.\\s*\\/)",
""
],
[
"set",
"slashes"
],
[
"set",
"evasions"
]
],
"/%c0%ae%c0%ae/": [
[
"regex",
"(?P<path_traversal_0>\\/\\%c0\\%ae\\%c0\\%ae\\/)",
"_noregex"
]
],
"/%c0%ae%c0%ae_napost": [
[
"regex",
"(?P<path_traversal>\\/\\%c0\\%ae\\%c0\\%ae(?!\\w))",
"_noregex"
]
],
"/%c0%ae_napost": [
[
"regex",
"(?P<path_traversal>\\/\\%c0\\%ae(?!\\w))",
"_noregex"
]
],
"/*": [
[
"regex",
"(?P<sqli_detection_evasion>\\/\\*)",
"_noregex"
],
[
"regex",
"(?P<high_acuracy496d>\\/\\*)",
"_noregex"
]
],
"/**/": [
[
"regex",
"(?P<sqli_detection_evasion_0>\\/\\*\\*\\/)",
"_noregex"
]
],
"//filter/_napre": [
[
"regex",
"(?P<high_acuracy_code_execfccf>(?<!\\w)php\\s*\\:\\s*\\/\\/filter\\/)",
""
]
],
"/3tvars_napost": [
[
"regex",
"(?P<vuln_web_files_603>\\/3tvars\\s*\\.\\s*pm(?!\\w))",
""
]
],
"/4iv9_napost": [
[
"regex",
"(?P<vuln_web_files_893>\\/4iv9\\s*\\.\\s*php(?!\\w))",
""
]
],
"/5vkmc_napost": [
[
"regex",
"(?P<vuln_web_files_139>\\/5vkmc\\s*\\.\\s*htw(?!\\w))",
""
]
],
"/5ytus_napost": [
[
"regex",
"(?P<vuln_web_files_415>\\/5ytus\\s*\\.\\s*php(?!\\w))",
""
]
],
"/?": [
[
"regex",
"(?P<detect_evasion_high_acuracy_20>\\/\\?)",
"_noregex"
]
],
"/_showjavartdetails_napost": [
[
"regex",
"(?P<vuln_web_files_344>\\/\\_showjavartdetails\\s*\\.\\s*java(?!\\w))",
""
]
],
"/_showpooldetails_napost": [
[
"regex",
"(?P<vuln_web_files_120>\\/\\_showpooldetails\\s*\\.\\s*java(?!\\w))",
""
]
],
"/a_domlog_napost": [
[
"regex",
"(?P<vuln_web_files_155>\\/a\\_domlog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_155>\\/a\\_domlog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/a_security_napost": [
[
"regex",
"(?P<vuln_web_files_746>\\/a\\_security\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/acart2_0_napost": [
[
"regex",
"(?P<vuln_web_files_836>\\/acart2\\_0\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/access-options_napost": [
[
"regex",
"(?P<vuln_web_files_514>\\/access\\-options\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/access_napost": [
[
"regex",
"(?P<vuln_web_files_668>\\/access\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_668>\\/access\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_548>\\/access\\s*\\.\\s*log(?!\\w))",
""
]
],
"/account_napost": [
[
"regex",
"(?P<vuln_web_files_749>\\/account\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_749>\\/account\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/accounts_napost": [
[
"regex",
"(?P<vuln_web_files_404>\\/accounts\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_404>\\/accounts\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/active_napost": [
[
"regex",
"(?P<vuln_web_files_1130>\\/active\\s*\\.\\s*log(?!\\w))",
""
]
],
"/addalink_napost": [
[
"regex",
"(?P<vuln_web_files_1043>\\/addalink\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/addcontent_napost": [
[
"regex",
"(?P<vuln_web_files_489>\\/addcontent\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_489>\\/addcontent\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/adovbs_napost": [
[
"regex",
"(?P<vuln_web_files_63>\\/adovbs\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/aedating4cms_napost": [
[
"regex",
"(?P<vuln_web_files_728>\\/aedating4cms\\s*\\.\\s*php(?!\\w))",
""
]
],
"/aedatingcms_napost": [
[
"regex",
"(?P<vuln_web_files_1126>\\/aedatingcms\\s*\\.\\s*php(?!\\w))",
""
]
],
"/aexp2_napost": [
[
"regex",
"(?P<vuln_web_files_524>\\/aexp2\\s*\\.\\s*htr(?!\\w))",
""
]
],
"/aexp2b_napost": [
[
"regex",
"(?P<vuln_web_files_1038>\\/aexp2b\\s*\\.\\s*htr(?!\\w))",
""
]
],
"/aexp3_napost": [
[
"regex",
"(?P<vuln_web_files_1094>\\/aexp3\\s*\\.\\s*htr(?!\\w))",
""
]
],
"/aexp4_napost": [
[
"regex",
"(?P<vuln_web_files_1162>\\/aexp4\\s*\\.\\s*htr(?!\\w))",
""
]
],
"/aexp4b_napost": [
[
"regex",
"(?P<vuln_web_files_859>\\/aexp4b\\s*\\.\\s*htr(?!\\w))",
""
]
],
"/agentrunner_napost": [
[
"regex",
"(?P<vuln_web_files_492>\\/agentrunner\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_492>\\/agentrunner\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/ains_main_napost": [
[
"regex",
"(?P<vuln_web_files_806>\\/ains\\_main\\s*\\.\\s*php(?!\\w))",
""
]
],
"/alog_napost": [
[
"regex",
"(?P<vuln_web_files_996>\\/alog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_996>\\/alog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/amprops_napost": [
[
"regex",
"(?P<vuln_web_files_790>\\/amprops\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/analyse_napost": [
[
"regex",
"(?P<vuln_web_files_793>\\/analyse\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/anything_napost": [
[
"regex",
"(?P<vuln_web_files_868>\\/anything\\s*\\.\\s*snp(?!\\w))",
""
]
],
"/apage_napost": [
[
"regex",
"(?P<vuln_web_files_1025>\\/apage\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/apzufu_napost": [
[
"regex",
"(?P<vuln_web_files_589>\\/apzufu\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/architext_query_napost": [
[
"regex",
"(?P<vuln_web_files_616>\\/architext\\_query\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/args_napost": [
[
"regex",
"(?P<vuln_web_files_693>\\/args\\s*\\.\\s*bat(?!\\w))",
""
]
],
"/attach_napost": [
[
"regex",
"(?P<vuln_web_files_676>\\/attach\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/attrib_napost": [
[
"regex",
"(?P<vuln_web_files_482>\\/attrib\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/auth_user_file_napost": [
[
"regex",
"(?P<vuln_web_files_356>\\/auth\\_user\\_file\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/author_napost": [
[
"regex",
"(?P<vuln_web_files_847>\\/author\\s*\\.\\s*exe(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_395>\\/author\\s*\\.\\s*dll(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_312>\\/author\\s*\\.\\s*idq(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_847>\\/author\\s*\\.\\s*exe(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_395>\\/author\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/authors_napost": [
[
"regex",
"(?P<vuln_web_files_503>\\/authors\\s*\\.\\s*pwd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_503>\\/authors\\s*\\.\\s*pwd(?!\\w))",
""
]
],
"/awebvisit_napost": [
[
"regex",
"(?P<vuln_web_files_824>\\/awebvisit\\s*\\.\\s*stat(?!\\w))",
""
]
],
"/awstats_napost": [
[
"regex",
"(?P<vuln_web_files_902>\\/awstats\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/backup_napost": [
[
"regex",
"(?P<vuln_os_dirs_4>\\/backup(?!\\w))",
"_noregex"
]
],
"/ban_napost": [
[
"regex",
"(?P<vuln_web_files_1128>\\/ban\\s*\\.\\s*bak(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_505>\\/ban\\s*\\.\\s*dat(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_99>\\/ban\\s*\\.\\s*log(?!\\w))",
""
]
],
"/basilix": [
[
"regex",
"(?P<vuln_web_files_817>\\/basilix\\s*\\.\\s*php3)",
""
]
],
"/bc4j_napost": [
[
"regex",
"(?P<vuln_web_files_761>\\/bc4j\\s*\\.\\s*html(?!\\w))",
""
]
],
"/bdir_napost": [
[
"regex",
"(?P<vuln_web_files_402>\\/bdir\\s*\\.\\s*htr(?!\\w))",
""
]
],
"/bdjra5dcb_napost": [
[
"regex",
"(?P<vuln_web_files_964>\\/bdjra5dcb\\s*\\.\\s*php(?!\\w))",
""
]
],
"/beaninfo_napost": [
[
"regex",
"(?P<vuln_web_files_467>\\/beaninfo\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_467>\\/beaninfo\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/bigconf_napost": [
[
"regex",
"(?P<vuln_web_files_937>\\/bigconf\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/billing_napost": [
[
"regex",
"(?P<vuln_web_files_2>\\/billing\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_2>\\/billing\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_276>\\/billing\\s*\\.\\s*apw(?!\\w))",
""
]
],
"/bin_napost": [
[
"regex",
"(?P<vuln_os_dirs2c17>\\/bin(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<high_acuracy2c17>\\/bin(?!\\w))",
"_noregex"
]
],
"/biztalkhttpreceive_napost": [
[
"regex",
"(?P<vuln_web_files_573>\\/biztalkhttpreceive\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/blah-whatever-badfile_napost": [
[
"regex",
"(?P<vuln_web_files_551>\\/blah\\-whatever\\-badfile\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/blah-whatever_napost": [
[
"regex",
"(?P<vuln_web_files_322>\\/blah\\-whatever\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/blahb_napost": [
[
"regex",
"(?P<vuln_web_files_739>\\/blahb\\s*\\.\\s*idq(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_393>\\/blahb\\s*\\.\\s*ida(?!\\w))",
""
]
],
"/bookmark_napost": [
[
"regex",
"(?P<vuln_web_files_445>\\/bookmark\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_445>\\/bookmark\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/books_napost": [
[
"regex",
"(?P<vuln_web_files_101>\\/books\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_101>\\/books\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/botinfs_napost": [
[
"regex",
"(?P<vuln_web_files_209>\\/botinfs\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_209>\\/botinfs\\s*\\.\\s*cnf(?!\\w))",
""
]
],
"/bots_napost": [
[
"regex",
"(?P<vuln_web_files_690>\\/bots\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_690>\\/bots\\s*\\.\\s*cnf(?!\\w))",
""
]
],
"/buddies_napost": [
[
"regex",
"(?P<vuln_web_files_363>\\/buddies\\s*\\.\\s*blt(?!\\w))",
""
]
],
"/buddy_napost": [
[
"regex",
"(?P<vuln_web_files_323>\\/buddy\\s*\\.\\s*blt(?!\\w))",
""
]
],
"/buddylist_napost": [
[
"regex",
"(?P<vuln_web_files_279>\\/buddylist\\s*\\.\\s*blt(?!\\w))",
""
]
],
"/buffer2_napost": [
[
"regex",
"(?P<vuln_web_files_675>\\/buffer2\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/buffer4_napost": [
[
"regex",
"(?P<vuln_web_files_77>\\/buffer4\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/buffer_napost": [
[
"regex",
"(?P<vuln_web_files_925>\\/buffer\\d+\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/busytime_napost": [
[
"regex",
"(?P<vuln_web_files_969>\\/busytime\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_969>\\/busytime\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/calendar_napost": [
[
"regex",
"(?P<vuln_web_files_251>\\/calendar\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_251>\\/calendar\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/carbo_napost": [
[
"regex",
"(?P<vuln_web_files_1063>\\/carbo\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/carello_napost": [
[
"regex",
"(?P<vuln_web_files_287>\\/carello\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/cartcart_napost": [
[
"regex",
"(?P<vuln_web_files_652>\\/cartcart\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/catalog_napost": [
[
"regex",
"(?P<vuln_web_files_331>\\/catalog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_331>\\/catalog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/ccbill_napost": [
[
"regex",
"(?P<vuln_web_files_1179>\\/ccbill\\s*\\.\\s*log(?!\\w))",
""
]
],
"/cersvr_napost": [
[
"regex",
"(?P<vuln_web_files_1028>\\/cersvr\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1028>\\/cersvr\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/certa_napost": [
[
"regex",
"(?P<vuln_web_files_892>\\/certa\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_892>\\/certa\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/certlog_napost": [
[
"regex",
"(?P<vuln_web_files_1178>\\/certlog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1178>\\/certlog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/certsrv_napost": [
[
"regex",
"(?P<vuln_web_files_703>\\/certsrv\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_703>\\/certsrv\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/cf-sinfo_napost": [
[
"regex",
"(?P<vuln_web_files_417>\\/cf\\-sinfo\\s*\\.\\s*tpf(?!\\w))",
""
]
],
"/cfcache_napost": [
[
"regex",
"(?P<vuln_web_files_259>\\/cfcache\\s*\\.\\s*map(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_259>\\/cfcache\\s*\\.\\s*map(?!\\w))",
""
]
],
"/cfcexplorer_napost": [
[
"regex",
"(?P<vuln_web_files_1075>\\/cfcexplorer\\s*\\.\\s*cfc(?!\\w))",
""
]
],
"/cfdocs_napost": [
[
"regex",
"(?P<vuln_web_files_1122>\\/cfdocs\\s*\\.\\s*map(?!\\w))",
""
]
],
"/cfgwiz_napost": [
[
"regex",
"(?P<vuln_web_files_247>\\/cfgwiz\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/cfmlsyntaxcheck_napost": [
[
"regex",
"(?P<vuln_web_files_821>\\/cfmlsyntaxcheck\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_821>\\/cfmlsyntaxcheck\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/cgi-sys/cgiecho_napost": [
[
"regex",
"(?P<vuln_web_dirs_377>\\/cgi\\-sys\\/cgiecho(?!\\w))",
"_noregex"
]
],
"/cgi-sys/countedit_napost": [
[
"regex",
"(?P<vuln_web_dirs_102>\\/cgi\\-sys\\/countedit(?!\\w))",
"_noregex"
]
],
"/cgi_napost": [
[
"regex",
"(?P<vuln_os_dirs>\\/cgi(?!\\w))",
"_noregex"
]
],
"/cgichkmasterpwd_napost": [
[
"regex",
"(?P<vuln_web_files_656>\\/cgichkmasterpwd\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/cgimail_napost": [
[
"regex",
"(?P<vuln_web_files_14>\\/cgimail\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/chatlog_napost": [
[
"regex",
"(?P<vuln_web_files_221>\\/chatlog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_221>\\/chatlog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/chetcpasswd_napost": [
[
"regex",
"(?P<vuln_web_files_962>\\/chetcpasswd\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/chkvol_napost": [
[
"regex",
"(?P<vuln_web_files_663>\\/chkvol\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/clbusy_napost": [
[
"regex",
"(?P<vuln_web_files_183>\\/clbusy\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_183>\\/clbusy\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/cldbdir_napost": [
[
"regex",
"(?P<vuln_web_files_103>\\/cldbdir\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_103>\\/cldbdir\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/clients_napost": [
[
"regex",
"(?P<vuln_web_files_628>\\/clients\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/clusta4_napost": [
[
"regex",
"(?P<vuln_web_files_166>\\/clusta4\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_166>\\/clusta4\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/clusterframe_napost": [
[
"regex",
"(?P<vuln_web_files_920>\\/clusterframe\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/cnf_gi_napost": [
[
"regex",
"(?P<vuln_web_files_294>\\/cnf\\_gi\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/code_napost": [
[
"regex",
"(?P<vuln_web_files_901>\\/code\\s*\\.\\s*asp(?!\\w))",
""
]
],
"/codebrw_napost": [
[
"regex",
"(?P<vuln_web_files_74>\\/codebrw\\d+\\s*\\.\\s*asp(?!\\w))",
""
]
],
"/collect4_napost": [
[
"regex",
"(?P<vuln_web_files_659>\\/collect4\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_659>\\/collect4\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/com_minibb_napost": [
[
"regex",
"(?P<vuln_web_files_56>\\/com\\_minibb\\s*\\.\\s*php(?!\\w))",
""
]
],
"/com_napost": [
[
"regex",
"(?P<vuln_web_files_281>\\/com\\d+\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/command_napost": [
[
"regex",
"(?P<vuln_web_files_737>\\/command\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/convert_napost": [
[
"regex",
"(?P<vuln_web_files_135>\\/convert\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/copy_napost": [
[
"regex",
"(?P<vuln_web_files_189>\\/copy\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/countdown_napost": [
[
"regex",
"(?P<vuln_web_files_822>\\/countdown\\s*\\.\\s*xls(?!\\w))",
""
]
],
"/counter_napost": [
[
"regex",
"(?P<vuln_web_files_692>\\/counter\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/cpa_napost": [
[
"regex",
"(?P<vuln_web_files_1082>\\/cpa\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1082>\\/cpa\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/cphost_napost": [
[
"regex",
"(?P<vuln_web_files_15>\\/cphost\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/cplogfile_napost": [
[
"regex",
"(?P<vuln_web_files_730>\\/cplogfile\\s*\\.\\s*log(?!\\w))",
""
]
],
"/cpshost_napost": [
[
"regex",
"(?P<vuln_web_files_729>\\/cpshost\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/cschatrbox_napost": [
[
"regex",
"(?P<vuln_web_files_626>\\/cschatrbox\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/csguestbook_napost": [
[
"regex",
"(?P<vuln_web_files_262>\\/csguestbook\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/cslivesupport_napost": [
[
"regex",
"(?P<vuln_web_files_310>\\/cslivesupport\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/csnews_napost": [
[
"regex",
"(?P<vuln_web_files_924>\\/csnews\\s*\\.\\s*cgi(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_924>\\/csnews\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/cte_napost": [
[
"regex",
"(?P<vuln_web_files_463>\\/cte(?!\\w))",
"_noregex"
]
],
"/ctguestb_napost": [
[
"regex",
"(?P<vuln_web_files_535>\\/ctguestb\\s*\\.\\s*idc(?!\\w))",
""
]
],
"/cthzrcbsobmimq_napost": [
[
"regex",
"(?P<vuln_web_files_934>\\/cthzrcbsobmimq\\s*\\.\\s*action(?!\\w))",
""
]
],
"/ctss_napost": [
[
"regex",
"(?P<vuln_web_files_547>\\/ctss\\s*\\.\\s*idc(?!\\w))",
""
]
],
"/customerdata_napost": [
[
"regex",
"(?P<vuln_web_files_619>\\/customerdata\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_619>\\/customerdata\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/da_napost": [
[
"regex",
"(?P<vuln_web_files_108>\\/da\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_108>\\/da\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/dadentries_napost": [
[
"regex",
"(?P<vuln_web_files_1175>\\/dadentries\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/dan_o_napost": [
[
"regex",
"(?P<vuln_web_files_508>\\/dan\\_o\\s*\\.\\s*dat(?!\\w))",
""
]
],
"/db2000_napost": [
[
"regex",
"(?P<vuln_web_files_804>\\/db2000\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/db_napost": [
[
"regex",
"(?P<vuln_web_files_237>\\/db\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_237>\\/db\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/dba4_napost": [
[
"regex",
"(?P<vuln_web_files_414>\\/dba4\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/dbconnect_napost": [
[
"regex",
"(?P<vuln_web_files_282>\\/dbconnect\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/dbprod2_prod_napost": [
[
"regex",
"(?P<vuln_web_files_789>\\/dbprod2\\_prod\\s*\\.\\s*dbc(?!\\w))",
""
]
],
"/dclf_napost": [
[
"regex",
"(?P<vuln_web_files_786>\\/dclf\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_786>\\/dclf\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/deasappdesign_napost": [
[
"regex",
"(?P<vuln_web_files_985>\\/deasappdesign\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_985>\\/deasappdesign\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/deaslog02_napost": [
[
"regex",
"(?P<vuln_web_files_1049>\\/deaslog02\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1049>\\/deaslog02\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/deaslog03_napost": [
[
"regex",
"(?P<vuln_web_files_67>\\/deaslog03\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_67>\\/deaslog03\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/deaslog04_napost": [
[
"regex",
"(?P<vuln_web_files_425>\\/deaslog04\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_425>\\/deaslog04\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/deaslog05_napost": [
[
"regex",
"(?P<vuln_web_files_246>\\/deaslog05\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_246>\\/deaslog05\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/deaslog0_napost": [
[
"regex",
"(?P<vuln_web_files_945>\\/deaslog0\\d+\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_945>\\/deaslog0\\d+\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/deaslog_napost": [
[
"regex",
"(?P<vuln_web_files_1092>\\/deaslog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1092>\\/deaslog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/decsadm_napost": [
[
"regex",
"(?P<vuln_web_files_515>\\/decsadm\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_515>\\/decsadm\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/decsdoc_napost": [
[
"regex",
"(?P<vuln_web_files_389>\\/decsdoc\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_389>\\/decsdoc\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/decslog_napost": [
[
"regex",
"(?P<vuln_web_files_303>\\/decslog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_303>\\/decslog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/deesadmin_napost": [
[
"regex",
"(?P<vuln_web_files_582>\\/deesadmin\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_582>\\/deesadmin\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/delete_napost": [
[
"regex",
"(?P<vuln_web_files_447>\\/delete\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/deptodoc_napost": [
[
"regex",
"(?P<vuln_web_files_700>\\/deptodoc\\s*\\.\\s*btr(?!\\w))",
""
]
],
"/desktop_napost": [
[
"regex",
"(?P<vuln_os_files_5>\\/desktop\\s*\\.\\s*ini(?!\\w))",
""
]
],
"/detail_napost": [
[
"regex",
"(?P<vuln_web_files_226>\\/detail\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_226>\\/detail\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/details_napost": [
[
"regex",
"(?P<vuln_web_files_432>\\/details\\s*\\.\\s*idc(?!\\w))",
""
]
],
"/diag_dbtest_napost": [
[
"regex",
"(?P<vuln_web_files_102>\\/diag\\_dbtest\\s*\\.\\s*asp(?!\\w))",
""
]
],
"/displayopenedfile_napost": [
[
"regex",
"(?P<vuln_web_files_717>\\/displayopenedfile\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_717>\\/displayopenedfile\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/doladmin_napost": [
[
"regex",
"(?P<vuln_web_files_960>\\/doladmin\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_960>\\/doladmin\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/dols_help_napost": [
[
"regex",
"(?P<vuln_web_files_625>\\/dols\\_help\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_625>\\/dols\\_help\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/domadmin_napost": [
[
"regex",
"(?P<vuln_web_files_782>\\/domadmin\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_782>\\/domadmin\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/domcfg_napost": [
[
"regex",
"(?P<vuln_web_files_637>\\/domcfg\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_637>\\/domcfg\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/domguide_napost": [
[
"regex",
"(?P<vuln_web_files_542>\\/domguide\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_542>\\/domguide\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/domlog_napost": [
[
"regex",
"(?P<vuln_web_files_96>\\/domlog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_96>\\/domlog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/dpnecentral_napost": [
[
"regex",
"(?P<vuln_web_files_1037>\\/dpnecentral\\s*\\.\\s*asmx(?!\\w))",
""
]
],
"/dpnepolicyservice_napost": [
[
"regex",
"(?P<vuln_web_dirs_380>\\/dpnepolicyservice(?!\\w))",
"_noregex"
]
],
"/dsn_napost": [
[
"regex",
"(?P<vuln_web_files_61>\\/dsn\\s*\\.\\s*asp(?!\\w))",
""
]
],
"/dsnform_napost": [
[
"regex",
"(?P<vuln_web_files_1039>\\/dsnform\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/dspug_napost": [
[
"regex",
"(?P<vuln_web_files_145>\\/dspug\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_145>\\/dspug\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/duxqcmbiq_napost": [
[
"regex",
"(?P<vuln_web_files_126>\\/duxqcmbiq\\s*\\.\\s*php(?!\\w))",
""
]
],
"/dvwssr_napost": [
[
"regex",
"(?P<vuln_web_files_576>\\/dvwssr\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/dwssap_napost": [
[
"regex",
"(?P<vuln_web_files_1129>\\/dwssap(?!\\w))",
"_noregex"
]
],
"/e7uo7v7d": [
[
"regex",
"(?P<vuln_web_files_1123>\\/e7uo7v7d\\s*\\.\\s*cp866)",
""
],
[
"regex",
"(?P<vuln_web_files_950>\\/e7uo7v7d\\s*\\.\\s*php3)",
""
],
[
"regex",
"(?P<vuln_web_files_949>\\/e7uo7v7d\\s*\\.\\s*php4)",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*0)",
""
],
[
"regex",
"(?P<vuln_web_files_53>\\/e7uo7v7d\\s*\\.\\s*\\d+)",
""
],
[
"regex",
"(?P<vuln_web_files_629>\\/e7uo7v7d\\s*\\.\\s*2)",
""
],
[
"regex",
"(?P<vuln_web_files_968>\\/e7uo7v7d\\s*\\.\\s*\\_)",
""
],
[
"regex",
"(?P<vuln_web_files_40>\\/e7uo7v7d\\s*\\.\\s*utf8)",
""
],
[
"regex",
"(?P<vuln_web_files_1099>\\/e7uo7v7d\\s*\\.\\s*big5)",
""
],
[
"regex",
"(?P<vuln_web_files_903>\\/e7uo7v7d\\s*\\.\\s*smail893)",
""
]
],
"/e7uo7v7d_napost": [
[
"regex",
"(?P<vuln_web_files_292>\\/e7uo7v7d\\s*\\.\\s*ssifilter(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_306>\\/e7uo7v7d\\s*\\.\\s*jsa(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_605>\\/e7uo7v7d\\s*\\.\\s*jse(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_664>\\/e7uo7v7d\\s*\\.\\s*dpgs(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1005>\\/e7uo7v7d\\s*\\.\\s*jsp(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_851>\\/e7uo7v7d\\s*\\.\\s*idc(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_846>\\/e7uo7v7d\\s*\\.\\s*ida(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_261>\\/e7uo7v7d\\s*\\.\\s*prf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*show(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_143>\\/e7uo7v7d\\s*\\.\\s*var(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_620>\\/e7uo7v7d\\s*\\.\\s*es(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_745>\\/e7uo7v7d\\s*\\.\\s*dbm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_488>\\/e7uo7v7d\\s*\\.\\s*eml(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1070>\\/e7uo7v7d\\s*\\.\\s*config(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_686>\\/e7uo7v7d\\s*\\.\\s*tpf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*conf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1151>\\/e7uo7v7d\\s*\\.\\s*htaccess(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_536>\\/e7uo7v7d\\s*\\.\\s*ee(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_123>\\/e7uo7v7d\\s*\\.\\s*xml(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*nl(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_307>\\/e7uo7v7d\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_913>\\/e7uo7v7d\\s*\\.\\s*save(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_345>\\/e7uo7v7d\\s*\\.\\s*dbf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_89>\\/e7uo7v7d\\s*\\.\\s*dbc(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_895>\\/e7uo7v7d\\s*\\.\\s*htw(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_927>\\/e7uo7v7d\\s*\\.\\s*htr(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_285>\\/e7uo7v7d\\s*\\.\\s*axd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_926>\\/e7uo7v7d\\s*\\.\\s*htx(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_813>\\/e7uo7v7d\\s*\\.\\s*link(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_210>\\/e7uo7v7d\\s*\\.\\s*tw(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_18>\\/e7uo7v7d\\s*\\.\\s*nsconfig(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_97>\\/e7uo7v7d\\s*\\.\\s*inc(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_278>\\/e7uo7v7d\\s*\\.\\s*ini(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_615>\\/e7uo7v7d\\s*\\.\\s*fr(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_302>\\/e7uo7v7d\\s*\\.\\s*dtd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_853>\\/e7uo7v7d\\s*\\.\\s*pm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_623>\\/e7uo7v7d\\s*\\.\\s*aspx(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_473>\\/e7uo7v7d\\s*\\.\\s*access(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_601>\\/e7uo7v7d\\s*\\.\\s*tcl(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_28>\\/e7uo7v7d\\s*\\.\\s*java(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1184>\\/e7uo7v7d\\s*\\.\\s*gz(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_162>\\/e7uo7v7d\\s*\\.\\s*stat(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_792>\\/e7uo7v7d\\s*\\.\\s*snp(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_269>\\/e7uo7v7d\\s*\\.\\s*htpasswd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_744>\\/e7uo7v7d\\s*\\.\\s*cobalt(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1019>\\/e7uo7v7d\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_651>\\/e7uo7v7d\\s*\\.\\s*shm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1143>\\/e7uo7v7d\\s*\\.\\s*pt(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*pw(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_201>\\/e7uo7v7d\\s*\\.\\s*pl(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1148>\\/e7uo7v7d\\s*\\.\\s*wwwacl(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_831>\\/e7uo7v7d\\s*\\.\\s*notes(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_58>\\/e7uo7v7d\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_641>\\/e7uo7v7d\\s*\\.\\s*btr(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_338>\\/e7uo7v7d\\s*\\.\\s*bin(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_607>\\/e7uo7v7d\\s*\\.\\s*se(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_932>\\/e7uo7v7d\\s*\\.\\s*map(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_973>\\/e7uo7v7d\\s*\\.\\s*xls(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_886>\\/e7uo7v7d\\s*\\.\\s*csc(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_222>\\/e7uo7v7d\\s*\\.\\s*csp(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_917>\\/e7uo7v7d\\s*\\.\\s*zip(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*shtm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_486>\\/e7uo7v7d\\s*\\.\\s*xbb(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_869>\\/e7uo7v7d\\s*\\.\\s*password(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*c(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_759>\\/e7uo7v7d\\s*\\.\\s*ca(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_677>\\/e7uo7v7d\\s*\\.\\s*et(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1163>\\/e7uo7v7d\\s*\\.\\s*blt(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_624>\\/e7uo7v7d\\s*\\.\\s*en(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_271>\\/e7uo7v7d\\s*\\.\\s*el(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*no(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_16>\\/e7uo7v7d\\s*\\.\\s*nn(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_94>\\/e7uo7v7d\\s*\\.\\s*fhp(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_858>\\/e7uo7v7d\\s*\\.\\s*ml(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_588>\\/e7uo7v7d\\s*\\.\\s*exe(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_850>\\/e7uo7v7d\\s*\\.\\s*dll(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_905>\\/e7uo7v7d\\s*\\.\\s*cfg(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_352>\\/e7uo7v7d\\s*\\.\\s*cfc(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*sh(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*dat(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_260>\\/e7uo7v7d\\s*\\.\\s*box(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_225>\\/e7uo7v7d\\s*\\.\\s*stm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_55>\\/e7uo7v7d\\s*\\.\\s*passwd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_113>\\/e7uo7v7d\\s*\\.\\s*vts(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*asp(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_900>\\/e7uo7v7d\\s*\\.\\s*xsql(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*ap(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_147>\\/e7uo7v7d\\s*\\.\\s*asa(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_203>\\/e7uo7v7d\\s*\\.\\s*printer(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_9>\\/e7uo7v7d\\s*\\.\\s*bat(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_437>\\/e7uo7v7d\\s*\\.\\s*cmd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_779>\\/e7uo7v7d\\s*\\.\\s*bak(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_688>\\/e7uo7v7d\\s*\\.\\s*sys(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_497>\\/e7uo7v7d\\s*\\.\\s*class(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1104>\\/e7uo7v7d\\s*\\.\\s*old(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_154>\\/e7uo7v7d\\s*\\.\\s*mdb(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1052>\\/e7uo7v7d\\s*\\.\\s*pwd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_716>\\/e7uo7v7d\\s*\\.\\s*home(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1077>\\/e7uo7v7d\\s*\\.\\s*xtp(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1114>\\/e7uo7v7d\\s*\\.\\s*nlm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_485>\\/e7uo7v7d\\s*\\.\\s*idq(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_235>\\/e7uo7v7d\\s*\\.\\s*phtml(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_980>\\/e7uo7v7d\\s*\\.\\s*log(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_543>\\/e7uo7v7d\\s*\\.\\s*html(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_41>\\/e7uo7v7d\\s*\\.\\s*cgi(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1160>\\/e7uo7v7d\\s*\\.\\s*adjunct(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*php(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_993>\\/e7uo7v7d\\s*\\.\\s*ncf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_300>\\/e7uo7v7d\\s*\\.\\s*data(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_30>\\/e7uo7v7d\\s*\\.\\s*lst(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_349>\\/e7uo7v7d\\s*\\.\\s*thtml(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_540>\\/e7uo7v7d\\s*\\.\\s*shtml(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1108>\\/e7uo7v7d\\s*\\.\\s*de(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*print(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*db(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_71>\\/e7uo7v7d\\s*\\.\\s*dk(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1138>\\/e7uo7v7d\\s*\\.\\s*gif(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_840>\\/e7uo7v7d\\s*\\.\\s*it(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_941>\\/e7uo7v7d\\s*\\.\\s*signature(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_844>\\/e7uo7v7d\\s*\\.\\s*pdf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1180>\\/e7uo7v7d\\s*\\.\\s*org(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1016>\\/e7uo7v7d\\s*\\.\\s*bas(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_966>\\/e7uo7v7d\\s*\\.\\s*txt(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_818>\\/e7uo7v7d\\s*\\.\\s*types(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_857>\\/e7uo7v7d\\s*\\.\\s*tmp(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_360>\\/e7uo7v7d\\s*\\.\\s*listprint(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_372>\\/e7uo7v7d\\s*\\.\\s*www\\_acl(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_277>\\/e7uo7v7d\\s*\\.\\s*sql(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*list(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_38>\\/e7uo7v7d\\s*\\.\\s*apw(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_dirs>\\/e7uo7v7d(?!\\w))",
"_noregex"
]
],
"/easylog_napost": [
[
"regex",
"(?P<vuln_web_files_121>\\/easylog\\s*\\.\\s*html(?!\\w))",
""
]
],
"/ecxotaping_napost": [
[
"regex",
"(?P<vuln_web_files_234>\\/ecxotaping\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/eipc_napost": [
[
"regex",
"(?P<vuln_web_files_255>\\/eipc\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/english_napost": [
[
"regex",
"(?P<vuln_web_files_907>\\/english\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/entropybanner_napost": [
[
"regex",
"(?P<vuln_web_files_377>\\/entropybanner\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/entropysearch_napost": [
[
"regex",
"(?P<vuln_web_files_427>\\/entropysearch\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/env_napost": [
[
"regex",
"(?P<vuln_web_files_291>\\/env\\s*\\.\\s*bas(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_958>\\/env\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/environ_napost": [
[
"regex",
"(?P<vuln_os_dirs_13>\\/environ(?!\\w))",
"_noregex"
]
],
"/etc/passwd_napost": [
[
"regex",
"(?P<vuln_web_dirs_483>\\/etc\\/passwd(?!\\w))",
"_noregex"
]
],
"/etc_napost": [
[
"regex",
"(?P<vuln_os_dirs>\\/etc(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<high_acuracyc37d>\\/etc(?!\\w))",
"_noregex"
]
],
"/evaluate_napost": [
[
"regex",
"(?P<vuln_web_files_1166>\\/evaluate\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1166>\\/evaluate\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/event_napost": [
[
"regex",
"(?P<vuln_web_files_767>\\/event\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_767>\\/event\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/events4_napost": [
[
"regex",
"(?P<vuln_web_files_26>\\/events4\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_26>\\/events4\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/events5_napost": [
[
"regex",
"(?P<vuln_web_files_557>\\/events5\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_557>\\/events5\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/events_napost": [
[
"regex",
"(?P<vuln_web_files_766>\\/events\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_766>\\/events\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/exprcalc_napost": [
[
"regex",
"(?P<vuln_web_files_422>\\/exprcalc\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/ext_napost": [
[
"regex",
"(?P<vuln_web_files_286>\\/ext\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/extends2_napost": [
[
"regex",
"(?P<vuln_web_files_1152>\\/extends2\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/extends_napost": [
[
"regex",
"(?P<vuln_web_files_827>\\/extends\\d+\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/ezadmin_napost": [
[
"regex",
"(?P<vuln_web_files_563>\\/ezadmin\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/ezboard_napost": [
[
"regex",
"(?P<vuln_web_files_440>\\/ezboard\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/fastjsdata_napost": [
[
"regex",
"(?P<vuln_web_files_68>\\/fastjsdata\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/fck_flash_napost": [
[
"regex",
"(?P<vuln_web_files_496>\\/fck\\_flash\\s*\\.\\s*html(?!\\w))",
""
]
],
"/fck_image_napost": [
[
"regex",
"(?P<vuln_web_files_772>\\/fck\\_image\\s*\\.\\s*html(?!\\w))",
""
]
],
"/fck_link_napost": [
[
"regex",
"(?P<vuln_web_files_434>\\/fck\\_link\\s*\\.\\s*html(?!\\w))",
""
]
],
"/fcring_napost": [
[
"regex",
"(?P<vuln_web_files_520>\\/fcring\\s*\\.\\s*php(?!\\w))",
""
]
],
"/fdir_napost": [
[
"regex",
"(?P<vuln_web_files_1095>\\/fdir\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/file-that-is-not-real-2002": [
[
"regex",
"(?P<vuln_web_files_832>\\/file\\-that\\-is\\-not\\-real\\-2002\\s*\\.\\s*php3)",
""
]
],
"/fileexists_napost": [
[
"regex",
"(?P<vuln_web_files_1085>\\/fileexists\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1085>\\/fileexists\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/filetime_napost": [
[
"regex",
"(?P<vuln_web_files_725>\\/filetime\\s*\\.\\s*idq(?!\\w))",
""
]
],
"/form_results_napost": [
[
"regex",
"(?P<vuln_web_files_879>\\/form\\_results\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/formmail-clone_napost": [
[
"regex",
"(?P<vuln_web_files_829>\\/formmail\\-clone\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/forms5_napost": [
[
"regex",
"(?P<vuln_web_files_128>\\/forms5\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_128>\\/forms5\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/forum_napost": [
[
"regex",
"(?P<vuln_web_files_988>\\/forum\\s*\\.\\s*ghp(?!\\w))",
""
]
],
"/fp30reg_napost": [
[
"regex",
"(?P<vuln_web_files_448>\\/fp30reg\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/fpadmcgi_napost": [
[
"regex",
"(?P<vuln_web_files_379>\\/fpadmcgi\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/fpcount_napost": [
[
"regex",
"(?P<vuln_web_files_848>\\/fpcount\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/fpremadm_napost": [
[
"regex",
"(?P<vuln_web_files_805>\\/fpremadm\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/fpsrvadm_napost": [
[
"regex",
"(?P<vuln_web_files_158>\\/fpsrvadm\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/ftayrbj_napost": [
[
"regex",
"(?P<vuln_web_files_618>\\/ftayrbj\\s*\\.\\s*do(?!\\w))",
""
]
],
"/funhist_napost": [
[
"regex",
"(?P<vuln_web_files_104>\\/funhist\\s*\\.\\s*c(?!\\w))",
""
]
],
"/generalchassisconfig_napost": [
[
"regex",
"(?P<vuln_web_files_541>\\/generalchassisconfig\\s*\\.\\s*html(?!\\w))",
""
]
],
"/get_od_toc_napost": [
[
"regex",
"(?P<vuln_web_files_50>\\/get\\_od\\_toc\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/getdrvrs_napost": [
[
"regex",
"(?P<vuln_web_files_1003>\\/getdrvrs\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/getfile_napost": [
[
"regex",
"(?P<vuln_web_files_795>\\/getfile\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/getrend_napost": [
[
"regex",
"(?P<vuln_web_files_671>\\/getrend\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/getservers_napost": [
[
"regex",
"(?P<vuln_web_files_1144>\\/getservers\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/gettempdirectory_napost": [
[
"regex",
"(?P<vuln_web_files_252>\\/gettempdirectory\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_252>\\/gettempdirectory\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/getvars_napost": [
[
"regex",
"(?P<vuln_web_files_718>\\/getvars\\s*\\.\\s*php(?!\\w))",
""
]
],
"/getwhen_napost": [
[
"regex",
"(?P<vuln_web_files_631>\\/getwhen\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/glist_napost": [
[
"regex",
"(?P<vuln_web_files_336>\\/glist\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/gm-2-b2_napost": [
[
"regex",
"(?P<vuln_web_files_164>\\/gm\\-2\\-b2\\s*\\.\\s*php(?!\\w))",
""
]
],
"/gozila_napost": [
[
"regex",
"(?P<vuln_web_files_852>\\/gozila\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/group_napost": [
[
"regex",
"(?P<vuln_web_files_316>\\/group\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_316>\\/group\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/groups_napost": [
[
"regex",
"(?P<vuln_web_files_979>\\/groups\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_979>\\/groups\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/gwweb_napost": [
[
"regex",
"(?P<vuln_web_files_1076>\\/gwweb\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/haffzeqgulj_napost": [
[
"regex",
"(?P<vuln_web_files_421>\\/haffzeqgulj\\s*\\.\\s*php(?!\\w))",
""
]
],
"/hellouser_napost": [
[
"regex",
"(?P<vuln_web_files_1098>\\/hellouser\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/help4_napost": [
[
"regex",
"(?P<vuln_web_files_1132>\\/help4\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1132>\\/help4\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/help5_admin_napost": [
[
"regex",
"(?P<vuln_web_files_1181>\\/help5\\_admin\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1181>\\/help5\\_admin\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/help5_client_napost": [
[
"regex",
"(?P<vuln_web_files_165>\\/help5\\_client\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_165>\\/help5\\_client\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/help5_designer_napost": [
[
"regex",
"(?P<vuln_web_files_834>\\/help5\\_designer\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_834>\\/help5\\_designer\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/helpadmin_napost": [
[
"regex",
"(?P<vuln_web_files_1031>\\/helpadmin\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1031>\\/helpadmin\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/helpdesk_napost": [
[
"regex",
"(?P<vuln_web_files_954>\\/helpdesk\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/helplt4_napost": [
[
"regex",
"(?P<vuln_web_files_254>\\/helplt4\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_254>\\/helplt4\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/hidden_napost": [
[
"regex",
"(?P<vuln_web_files_564>\\/hidden\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_564>\\/hidden\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/hits_napost": [
[
"regex",
"(?P<vuln_web_files_1155>\\/hits\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/hnvyuzwaqq_napost": [
[
"regex",
"(?P<vuln_web_files_1173>\\/hnvyuzwaqq\\s*\\.\\s*action(?!\\w))",
""
]
],
"/hosts_napost": [
[
"regex",
"(?P<vuln_os_dirs_14>\\/hosts(?!\\w))",
"_noregex"
]
],
"/htpasswd_napost": [
[
"regex",
"(?P<vuln_web_dirs_665>\\/htpasswd(?!\\w))",
"_noregex"
]
],
"/hywsrkdlyfhyrb_napost": [
[
"regex",
"(?P<vuln_web_files_648>\\/hywsrkdlyfhyrb\\s*\\.\\s*php(?!\\w))",
""
]
],
"/i8ya5llb0qb_napost": [
[
"regex",
"(?P<vuln_web_files_855>\\/i8ya5llb0qb\\s*\\.\\s*php(?!\\w))",
""
]
],
"/icoduserguide_napost": [
[
"regex",
"(?P<vuln_web_files_814>\\/icoduserguide\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/id_napost": [
[
"regex",
"(?P<vuln_web_files_212>\\/id\\s*\\.\\s*xbb(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_163>\\/id\\s*\\.\\s*pm(?!\\w))",
""
]
],
"/iisadmpwd_napost": [
[
"regex",
"(?P<vuln_web_dirs_74>\\/iisadmpwd(?!\\w))",
"_noregex"
]
],
"/imadminlogon_napost": [
[
"regex",
"(?P<vuln_web_files_190>\\/imadminlogon\\s*\\.\\s*asp(?!\\w))",
""
]
],
"/import_napost": [
[
"regex",
"(?P<vuln_web_files_727>\\/import\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/internet_napost": [
[
"regex",
"(?P<vuln_web_files_948>\\/internet\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_948>\\/internet\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/intersl_napost": [
[
"regex",
"(?P<vuln_web_files_799>\\/intersl\\s*\\.\\s*c(?!\\w))",
""
]
],
"/ip_password_result_napost": [
[
"regex",
"(?P<vuln_web_files_856>\\/ip\\_password\\_result\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/ism_napost": [
[
"regex",
"(?P<vuln_web_files_997>\\/ism\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/ixmail_netattach_napost": [
[
"regex",
"(?P<vuln_web_files_689>\\/ixmail\\_netattach\\s*\\.\\s*php(?!\\w))",
""
]
],
"/javapg_napost": [
[
"regex",
"(?P<vuln_web_files_57>\\/javapg\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_57>\\/javapg\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/jdkrqnotify_napost": [
[
"regex",
"(?P<vuln_web_files_915>\\/jdkrqnotify\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/jluwpkdfrgvwfs_napost": [
[
"regex",
"(?P<vuln_web_files_181>\\/jluwpkdfrgvwfs\\s*\\.\\s*php(?!\\w))",
""
]
],
"/jotter_napost": [
[
"regex",
"(?P<vuln_web_files_815>\\/jotter\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_815>\\/jotter\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/judy_tech_book_napost": [
[
"regex",
"(?P<vuln_web_files_1119>\\/judy\\_tech\\_book\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/judysort_napost": [
[
"regex",
"(?P<vuln_web_files_1090>\\/judysort\\s*\\.\\s*c(?!\\w))",
""
]
],
"/junk988_napost": [
[
"regex",
"(?P<vuln_web_files_667>\\/junk988\\s*\\.\\s*aspx(?!\\w))",
""
]
],
"/junk999": [
[
"regex",
"(?P<vuln_web_files_590>\\/junk999\\s*\\.\\s*php3)",
""
]
],
"/junk999_napost": [
[
"regex",
"(?P<vuln_web_files_521>\\/junk999\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files>\\/junk999\\s*\\.\\s*php(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_399>\\/junk999\\s*\\.\\s*asp(?!\\w))",
""
]
],
"/junk_napost": [
[
"regex",
"(?P<vuln_web_files_643>\\/junk\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1156>\\/junk\\s*\\.\\s*aspx(?!\\w))",
""
]
],
"/junk_nonexistant_napost": [
[
"regex",
"(?P<vuln_web_files_454>\\/junk\\_nonexistant\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/kbccv_napost": [
[
"regex",
"(?P<vuln_web_files_215>\\/kbccv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_215>\\/kbccv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/kbnv_napost": [
[
"regex",
"(?P<vuln_web_files_29>\\/kbnv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_29>\\/kbnv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/kbssvv_napost": [
[
"regex",
"(?P<vuln_web_files_644>\\/kbssvv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_644>\\/kbssvv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/krkiuwjugrom_napost": [
[
"regex",
"(?P<vuln_web_files_897>\\/krkiuwjugrom\\s*\\.\\s*php(?!\\w))",
""
]
],
"/kywndbrexogmih_napost": [
[
"regex",
"(?P<vuln_web_files_885>\\/kywndbrexogmih\\s*\\.\\s*php(?!\\w))",
""
]
],
"/l_domlog_napost": [
[
"regex",
"(?P<vuln_web_files_51>\\/l\\_domlog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_51>\\/l\\_domlog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/lancard_napost": [
[
"regex",
"(?P<vuln_web_files_682>\\/lancard\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/lancgi_napost": [
[
"regex",
"(?P<vuln_web_files_90>\\/lancgi\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/lang_napost": [
[
"regex",
"(?P<vuln_web_files_735>\\/lang\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/language_napost": [
[
"regex",
"(?P<vuln_web_files_587>\\/language\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/lccon_napost": [
[
"regex",
"(?P<vuln_web_files_685>\\/lccon\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_685>\\/lccon\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/lcgitest_napost": [
[
"regex",
"(?P<vuln_web_files_369>\\/lcgitest\\s*\\.\\s*nlm(?!\\w))",
""
]
],
"/lcon_napost": [
[
"regex",
"(?P<vuln_web_files_52>\\/lcon\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_52>\\/lcon\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/ldap_napost": [
[
"regex",
"(?P<vuln_web_files_207>\\/ldap\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_207>\\/ldap\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/ldhpsaoeanyd_napost": [
[
"regex",
"(?P<vuln_web_files_982>\\/ldhpsaoeanyd\\s*\\.\\s*php(?!\\w))",
""
]
],
"/learn-msg_napost": [
[
"regex",
"(?P<vuln_web_files_1110>\\/learn\\-msg\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/leiadm_napost": [
[
"regex",
"(?P<vuln_web_files_1100>\\/leiadm\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1100>\\/leiadm\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/leilog_napost": [
[
"regex",
"(?P<vuln_web_files_864>\\/leilog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_864>\\/leilog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/leivlt_napost": [
[
"regex",
"(?P<vuln_web_files_549>\\/leivlt\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_549>\\/leivlt\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/lib_napost": [
[
"regex",
"(?P<vuln_os_dirs>\\/lib(?!\\w))",
"_noregex"
]
],
"/license": [
[
"regex",
"(?P<vuln_web_files_301>\\/license\\s*\\.\\s*smail893)",
""
]
],
"/link_napost": [
[
"regex",
"(?P<vuln_web_files_679>\\/link\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/linkinfo_napost": [
[
"regex",
"(?P<vuln_web_files_769>\\/linkinfo\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_769>\\/linkinfo\\s*\\.\\s*cnf(?!\\w))",
""
]
],
"/local_napost": [
[
"regex",
"(?P<vuln_os_dirs>\\/local(?!\\w))",
"_noregex"
]
],
"/lpt9_napost": [
[
"regex",
"(?P<vuln_web_files_462>\\/lpt9\\s*\\.\\s*xtp(?!\\w))",
""
]
],
"/lsxlc_napost": [
[
"regex",
"(?P<vuln_web_files_881>\\/lsxlc\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_881>\\/lsxlc\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/lygmasbkidzlu/cgi-bin_napost": [
[
"regex",
"(?P<vuln_web_dirs_593>\\/lygmasbkidzlu\\/cgi\\-bin(?!\\w))",
"_noregex"
]
],
"/mab_napost": [
[
"regex",
"(?P<vuln_web_files_843>\\/mab\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_843>\\/mab\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/main_napost": [
[
"regex",
"(?P<vuln_web_files_1018>\\/main\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1018>\\/main\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/mainframeset_napost": [
[
"regex",
"(?P<vuln_web_files_538>\\/mainframeset\\s*\\.\\s*cfm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_538>\\/mainframeset\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/manage_napost": [
[
"regex",
"(?P<vuln_web_files_11>\\/manage\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/master_napost": [
[
"regex",
"(?P<vuln_os_dirs>\\/master(?!\\w))",
"_noregex"
]
],
"/mbox-list": [
[
"regex",
"(?P<vuln_web_files_178>\\/mbox\\-list\\s*\\.\\s*php3)",
""
]
],
"/mchat_napost": [
[
"regex",
"(?P<vuln_web_files_217>\\/mchat\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/md_napost": [
[
"regex",
"(?P<vuln_web_files_560>\\/md\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/mdefre8m4ml_napost": [
[
"regex",
"(?P<vuln_web_files_546>\\/mdefre8m4ml\\s*\\.\\s*php(?!\\w))",
""
]
],
"/member_log_napost": [
[
"regex",
"(?P<vuln_web_files_494>\\/member\\_log\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/metacart_napost": [
[
"regex",
"(?P<vuln_web_files_736>\\/metacart\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/middle_help_intro_napost": [
[
"regex",
"(?P<vuln_web_files_118>\\/middle\\_help\\_intro\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/midicart_napost": [
[
"regex",
"(?P<vuln_web_files_559>\\/midicart\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/migrate_napost": [
[
"regex",
"(?P<vuln_web_files_943>\\/migrate\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_943>\\/migrate\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/mime_napost": [
[
"regex",
"(?P<vuln_web_files_1060>\\/mime\\s*\\.\\s*types(?!\\w))",
""
]
],
"/motd": [
[
"regex",
"(?P<vuln_web_files_1111>\\/motd\\s*\\.\\s*php3)",
""
]
],
"/mountain_napost": [
[
"regex",
"(?P<vuln_web_files_92>\\/mountain\\s*\\.\\s*cfg(?!\\w))",
""
]
],
"/mpcsoftweb_guestdata_napost": [
[
"regex",
"(?P<vuln_web_files_863>\\/mpcsoftweb\\_guestdata\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/msdwda_napost": [
[
"regex",
"(?P<vuln_web_files_481>\\/msdwda\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_481>\\/msdwda\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/msg_napost": [
[
"regex",
"(?P<vuln_web_files_75>\\/msg\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/mtatbls_napost": [
[
"regex",
"(?P<vuln_web_files_1164>\\/mtatbls\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1164>\\/mtatbls\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/mtstore_napost": [
[
"regex",
"(?P<vuln_web_files_73>\\/mtstore\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_73>\\/mtstore\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/musicqueue_napost": [
[
"regex",
"(?P<vuln_web_files_1120>\\/musicqueue\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/mysql_napost": [
[
"regex",
"(?P<vuln_web_files_935>\\/mysql\\s*\\.\\s*class(?!\\w))",
""
]
],
"/names_napost": [
[
"regex",
"(?P<vuln_web_files_362>\\/names\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_362>\\/names\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/nbxovzsmbguzvznzzqpiu_napost": [
[
"regex",
"(?P<vuln_web_files_1133>\\/nbxovzsmbguzvznzzqpiu\\s*\\.\\s*html(?!\\w))",
""
]
],
"/nd000000_napost": [
[
"regex",
"(?P<vuln_web_files_662>\\/nd000000\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_662>\\/nd000000\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/nd000002_napost": [
[
"regex",
"(?P<vuln_web_files_466>\\/nd000002\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_466>\\/nd000002\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/nd000003_napost": [
[
"regex",
"(?P<vuln_web_files_288>\\/nd000003\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_288>\\/nd000003\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/nd000004_napost": [
[
"regex",
"(?P<vuln_web_files_1171>\\/nd000004\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1171>\\/nd000004\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/nd00000_napost": [
[
"regex",
"(?P<vuln_web_files_986>\\/nd00000\\d+\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_986>\\/nd00000\\d+\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/ndslogin_napost": [
[
"regex",
"(?P<vuln_web_files_453>\\/ndslogin\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/ndsobj_napost": [
[
"regex",
"(?P<vuln_web_files_1137>\\/ndsobj\\s*\\.\\s*nlm(?!\\w))",
""
]
],
"/netbasic_napost": [
[
"regex",
"(?P<vuln_web_dirs_280>\\/netbasic(?!\\w))",
"_noregex"
]
],
"/netdetector_napost": [
[
"regex",
"(?P<vuln_web_dirs_77>\\/netdetector(?!\\w))",
"_noregex"
]
],
"/netpanzer_napost": [
[
"regex",
"(?P<vuln_web_files_742>\\/netpanzer\\s*\\.\\s*php(?!\\w))",
""
]
],
"/newdsn_napost": [
[
"regex",
"(?P<vuln_web_files_839>\\/newdsn\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/newpro_napost": [
[
"regex",
"(?P<vuln_web_files_787>\\/newpro\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/news_napost": [
[
"regex",
"(?P<vuln_web_files_570>\\/news\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/nikto-test-7zpdybyd_napost": [
[
"regex",
"(?P<vuln_web_files_602>\\/nikto\\-test\\-7zpdybyd\\s*\\.\\s*html(?!\\w))",
""
]
],
"/nikto-test-bgl4esul_napost": [
[
"regex",
"(?P<vuln_web_files_904>\\/nikto\\-test\\-bgl4esul\\s*\\.\\s*html(?!\\w))",
""
]
],
"/nikto-test-ksa8x6xq_napost": [
[
"regex",
"(?P<vuln_web_files_1079>\\/nikto\\-test\\-ksa8x6xq\\s*\\.\\s*html(?!\\w))",
""
]
],
"/nikto-test-ons_napost": [
[
"regex",
"(?P<vuln_web_files_957>\\/nikto\\-test\\-ons\\d+8osl\\s*\\.\\s*html(?!\\w))",
""
]
],
"/nikto-test-ttjw6_napost": [
[
"regex",
"(?P<vuln_web_files_243>\\/nikto\\-test\\-ttjw6\\d+aq\\s*\\.\\s*html(?!\\w))",
""
]
],
"/nikto_napost": [
[
"regex",
"(?P<vuln_web_files_519>\\/nikto\\s*\\.\\s*ida(?!\\w))",
""
]
],
"/nntppost_napost": [
[
"regex",
"(?P<vuln_web_files_691>\\/nntppost\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_691>\\/nntppost\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/no-such-file_napost": [
[
"regex",
"(?P<vuln_web_files_91>\\/no\\-such\\-file\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/notes_napost": [
[
"regex",
"(?P<vuln_web_files_87>\\/notes\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_87>\\/notes\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/npn_admn_napost": [
[
"regex",
"(?P<vuln_web_files_842>\\/npn\\_admn\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_842>\\/npn\\_admn\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/npn_rn_napost": [
[
"regex",
"(?P<vuln_web_files_193>\\/npn\\_rn\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_193>\\/npn\\_rn\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/nsmanager_napost": [
[
"regex",
"(?P<vuln_web_files_1087>\\/nsmanager\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/ntp_primer_napost": [
[
"regex",
"(?P<vuln_web_files_959>\\/ntp\\_primer\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/ntsync45_napost": [
[
"regex",
"(?P<vuln_web_files_1182>\\/ntsync45\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1182>\\/ntsync45\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/ntsync4_napost": [
[
"regex",
"(?P<vuln_web_files_1177>\\/ntsync4\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1177>\\/ntsync4\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/nul_napost": [
[
"regex",
"(?P<vuln_web_files_1118>\\/nul\\s*\\.\\s*dbm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_198>\\/nul\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/null_napost": [
[
"regex",
"(?P<vuln_web_files_1101>\\/null\\s*\\.\\s*htw(?!\\w))",
""
]
],
"/obwupzwyakykba_napost": [
[
"regex",
"(?P<vuln_web_files_807>\\/obwupzwyakykba\\s*\\.\\s*action(?!\\w))",
""
]
],
"/oder_napost": [
[
"regex",
"(?P<vuln_web_files_36>\\/oder\\s*\\.\\s*log(?!\\w))",
""
]
],
"/oem_napost": [
[
"regex",
"(?P<vuln_web_files_390>\\/oem\\s*\\.\\s*conf(?!\\w))",
""
]
],
"/ofscan_napost": [
[
"regex",
"(?P<vuln_web_files_59>\\/ofscan\\s*\\.\\s*ini(?!\\w))",
""
]
],
"/okjdkewqqdobah/cgi-bin_napost": [
[
"regex",
"(?P<vuln_web_dirs_389>\\/okjdkewqqdobah\\/cgi\\-bin(?!\\w))",
"_noregex"
]
],
"/onrequestend_napost": [
[
"regex",
"(?P<vuln_web_files_403>\\/onrequestend\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/openfile_napost": [
[
"regex",
"(?P<vuln_web_files_572>\\/openfile\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/openview5_napost": [
[
"regex",
"(?P<vuln_web_files_518>\\/openview5\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/opt_napost": [
[
"regex",
"(?P<vuln_os_dirs>\\/opt(?!\\w))",
"_noregex"
]
],
"/order_log_napost": [
[
"regex",
"(?P<vuln_web_files_480>\\/order\\_log\\s*\\.\\s*dat(?!\\w))",
""
]
],
"/order_log_v_napost": [
[
"regex",
"(?P<vuln_web_files_168>\\/order\\_log\\_v\\d+2\\s*\\.\\s*dat(?!\\w))",
""
]
],
"/order_napost": [
[
"regex",
"(?P<vuln_web_files_866>\\/order\\s*\\.\\s*log(?!\\w))",
""
]
],
"/orders_napost": [
[
"regex",
"(?P<vuln_web_files_595>\\/orders\\s*\\.\\s*txt(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_289>\\/orders\\s*\\.\\s*log(?!\\w))",
""
]
],
"/ovlaunch_napost": [
[
"regex",
"(?P<vuln_web_files_929>\\/ovlaunch\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/ovlogin_napost": [
[
"regex",
"(?P<vuln_web_files_995>\\/ovlogin\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/owa_util_napost": [
[
"regex",
"(?P<vuln_web_files_84>\\/owa\\_util\\s*\\.\\s*signature(?!\\w))",
""
]
],
"/pagedouble_napost": [
[
"regex",
"(?P<vuln_web_files_581>\\/pagedouble\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/pageimport2_napost": [
[
"regex",
"(?P<vuln_web_files_574>\\/pageimport2\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/pageiserrorpage_napost": [
[
"regex",
"(?P<vuln_web_files_324>\\/pageiserrorpage\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/pageutil_napost": [
[
"regex",
"(?P<vuln_web_files_407>\\/pageutil\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/parse_xml_napost": [
[
"regex",
"(?P<vuln_web_files_678>\\/parse\\_xml\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/passgen_napost": [
[
"regex",
"(?P<vuln_web_files_20>\\/passgen\\s*\\.\\s*php(?!\\w))",
""
]
],
"/passwd": [
[
"regex",
"(?P<vuln_web_files_1187>\\/passwd\\s*\\.\\s*php3)",
""
]
],
"/passwd_napost": [
[
"regex",
"(?P<vuln_web_dirs>\\/passwd(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<vuln_os_dirs>\\/passwd(?!\\w))",
"_noregex"
]
],
"/passwdfile_napost": [
[
"regex",
"(?P<vuln_web_dirs_729>\\/passwdfile(?!\\w))",
"_noregex"
]
],
"/password_napost": [
[
"regex",
"(?P<vuln_os_dirs>\\/password(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<vuln_web_files_258>\\/password\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/passwords_napost": [
[
"regex",
"(?P<vuln_web_dirs_600>\\/passwords(?!\\w))",
"_noregex"
]
],
"/payload_encoding_call4_napost": [
[
"regex",
"(?P<vuln_web_files_947>\\/payload\\_encoding\\_call4\\s*\\.\\s*xls(?!\\w))",
""
]
],
"/payload_encoding_fnstenv_napost": [
[
"regex",
"(?P<vuln_web_files_1089>\\/payload\\_encoding\\_fnstenv\\s*\\.\\s*xls(?!\\w))",
""
]
],
"/payload_encoding_jmp_call_napost": [
[
"regex",
"(?P<vuln_web_files_283>\\/payload\\_encoding\\_jmp\\_call\\s*\\.\\s*xls(?!\\w))",
""
]
],
"/pbserver_napost": [
[
"regex",
"(?P<vuln_web_files_775>\\/pbserver\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/people_napost": [
[
"regex",
"(?P<vuln_web_files_955>\\/people\\s*\\.\\s*list(?!\\w))",
""
]
],
"/perl/printenv_napost": [
[
"regex",
"(?P<vuln_web_dirs_307>\\/perl\\/printenv(?!\\w))",
"_noregex"
]
],
"/perweb_napost": [
[
"regex",
"(?P<vuln_web_files_862>\\/perweb\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_862>\\/perweb\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/pfzozrh_napost": [
[
"regex",
"(?P<vuln_web_files_351>\\/pfzozrh\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/pitc_ag_napost": [
[
"regex",
"(?P<vuln_web_files_750>\\/pitc\\_ag\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/planning_superdome_configs_napost": [
[
"regex",
"(?P<vuln_web_files_159>\\/planning\\_superdome\\_configs\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/ppzcljsmvsnzwofqxug_napost": [
[
"regex",
"(?P<vuln_web_files_387>\\/ppzcljsmvsnzwofqxug\\s*\\.\\s*php(?!\\w))",
""
]
],
"/pqbopmnkhoxsisdh_napost": [
[
"regex",
"(?P<vuln_web_files_586>\\/pqbopmnkhoxsisdh\\s*\\.\\s*php(?!\\w))",
""
]
],
"/pqjgjw_napost": [
[
"regex",
"(?P<vuln_web_files_238>\\/pqjgjw\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/print_napost": [
[
"regex",
"(?P<vuln_web_files_451>\\/print\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/private_napost": [
[
"regex",
"(?P<vuln_web_files_1170>\\/private\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1170>\\/private\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/probe_napost": [
[
"regex",
"(?P<vuln_web_files_13>\\/probe\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/proc_napost": [
[
"regex",
"(?P<vuln_os_dirs_3>\\/proc(?!\\w))",
"_noregex"
]
],
"/pt_config_napost": [
[
"regex",
"(?P<vuln_web_files_1068>\\/pt\\_config\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/ptg_upgrade_pkg_napost": [
[
"regex",
"(?P<vuln_web_files_459>\\/ptg\\_upgrade\\_pkg\\s*\\.\\s*log(?!\\w))",
""
]
],
"/pubfld_napost": [
[
"regex",
"(?P<vuln_web_files_1062>\\/pubfld\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/public_napost": [
[
"regex",
"(?P<vuln_web_files_825>\\/public\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_825>\\/public\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/qfullhit_napost": [
[
"regex",
"(?P<vuln_web_files_65>\\/qfullhit\\s*\\.\\s*htw(?!\\w))",
""
]
],
"/qpadmin_napost": [
[
"regex",
"(?P<vuln_web_files_443>\\/qpadmin\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_443>\\/qpadmin\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/qstart50_napost": [
[
"regex",
"(?P<vuln_web_files_981>\\/qstart50\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_981>\\/qstart50\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/qsumrhit_napost": [
[
"regex",
"(?P<vuln_web_files_487>\\/qsumrhit\\s*\\.\\s*htw(?!\\w))",
""
]
],
"/query_napost": [
[
"regex",
"(?P<vuln_web_files_72>\\/query\\s*\\.\\s*xsql(?!\\w))",
""
]
],
"/queryhit_napost": [
[
"regex",
"(?P<vuln_web_files_23>\\/queryhit\\s*\\.\\s*idq(?!\\w))",
""
]
],
"/quikstore_napost": [
[
"regex",
"(?P<vuln_web_files_150>\\/quikstore\\s*\\.\\s*cgi(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_34>\\/quikstore\\s*\\.\\s*cfg(?!\\w))",
""
]
],
"/randhtml_napost": [
[
"regex",
"(?P<vuln_web_files_1135>\\/randhtml\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/rd_napost": [
[
"regex",
"(?P<vuln_web_files_250>\\/rd\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/rdprocess_napost": [
[
"regex",
"(?P<vuln_web_files_757>\\/rdprocess\\s*\\.\\s*aspx(?!\\w))",
""
]
],
"/reademail_napost": [
[
"regex",
"(?P<vuln_web_files_457>\\/reademail\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/realhelpdesk_napost": [
[
"regex",
"(?P<vuln_web_files_810>\\/realhelpdesk\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/realsignup_napost": [
[
"regex",
"(?P<vuln_web_files_910>\\/realsignup\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/registry_napost": [
[
"regex",
"(?P<vuln_web_files_1183>\\/registry\\s*\\.\\s*dat(?!\\w))",
""
]
],
"/release-msg_napost": [
[
"regex",
"(?P<vuln_web_files_1>\\/release\\-msg\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/ren_napost": [
[
"regex",
"(?P<vuln_web_files_313>\\/ren\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/reports/ndrqm_napost": [
[
"regex",
"(?P<vuln_web_dirs_712>\\/reports\\/ndrqm(?!\\w))",
"_noregex"
]
],
"/reports/yumjnuzv_napost": [
[
"regex",
"(?P<vuln_web_dirs_207>\\/reports\\/yumjnuzv(?!\\w))",
"_noregex"
]
],
"/reports_napost": [
[
"regex",
"(?P<vuln_web_files_1147>\\/reports\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1147>\\/reports\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/repqof_napost": [
[
"regex",
"(?P<vuln_web_files_1007>\\/repqof\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/rhhvengt26x6rh_napost": [
[
"regex",
"(?P<vuln_web_files_511>\\/rhhvengt26x6rh\\s*\\.\\s*php(?!\\w))",
""
]
],
"/rpc_napost": [
[
"regex",
"(?P<vuln_web_files_270>\\/rpc\\s*\\.\\s*php(?!\\w))",
""
]
],
"/rtm_napost": [
[
"regex",
"(?P<vuln_web_files_726>\\/rtm\\s*\\.\\s*log(?!\\w))",
""
]
],
"/rvbshld_napost": [
[
"regex",
"(?P<vuln_web_files_124>\\/rvbshld\\s*\\.\\s*php(?!\\w))",
""
]
],
"/rvdhe880gl_napost": [
[
"regex",
"(?P<vuln_web_files_122>\\/rvdhe880gl\\s*\\.\\s*php(?!\\w))",
""
]
],
"/sam": [
[
"regex",
"(?P<vuln_web_files_380>\\/sam\\s*\\.\\s*\\_)",
""
]
],
"/sam_napost": [
[
"regex",
"(?P<vuln_web_files_833>\\/sam\\s*\\.\\s*bin(?!\\w))",
""
]
],
"/sample/site3w4646": [
[
"regex",
"(?P<vuln_web_dirs_170>\\/sample\\/site3w4646)",
"_noregex"
]
],
"/schema50_napost": [
[
"regex",
"(?P<vuln_web_files_37>\\/schema50\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_37>\\/schema50\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/secret_napost": [
[
"regex",
"(?P<vuln_web_files_1050>\\/secret\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1050>\\/secret\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/self_napost": [
[
"regex",
"(?P<vuln_os_dirs_8>\\/self(?!\\w))",
"_noregex"
]
],
"/send_napost": [
[
"regex",
"(?P<vuln_web_files_320>\\/send\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/sendemail_napost": [
[
"regex",
"(?P<vuln_web_files_1157>\\/sendemail\\s*\\.\\s*ghp(?!\\w))",
""
]
],
"/sendmail_napost": [
[
"regex",
"(?P<vuln_web_files_267>\\/sendmail\\s*\\.\\s*inc(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_117>\\/sendmail\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/service_napost": [
[
"regex",
"(?P<vuln_web_files_1136>\\/service\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_136>\\/service\\s*\\.\\s*pwd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1136>\\/service\\s*\\.\\s*cnf(?!\\w))",
""
]
],
"/services_napost": [
[
"regex",
"(?P<vuln_web_files_896>\\/services\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_896>\\/services\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_378>\\/services\\s*\\.\\s*org(?!\\w))",
""
]
],
"/session/admnlogin_napost": [
[
"regex",
"(?P<vuln_web_dirs_40>\\/session\\/admnlogin(?!\\w))",
"_noregex"
]
],
"/session_napost": [
[
"regex",
"(?P<vuln_web_files_998>\\/session\\s*\\.\\s*inc(?!\\w))",
""
]
],
"/set_napost": [
[
"regex",
"(?P<vuln_web_files_1027>\\/set\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/setpasswd_napost": [
[
"regex",
"(?P<vuln_web_files_1150>\\/setpasswd\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/setsecurity_napost": [
[
"regex",
"(?P<vuln_web_files_152>\\/setsecurity\\s*\\.\\s*shm(?!\\w))",
""
]
],
"/shadow_napost": [
[
"regex",
"(?P<vuln_os_dirs_1>\\/shadow(?!\\w))",
"_noregex"
]
],
"/share_napost": [
[
"regex",
"(?P<vuln_os_dirs3b59>\\/share(?!\\w))",
"_noregex"
]
],
"/shop_napost": [
[
"regex",
"(?P<vuln_web_files_206>\\/shop\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/shopper_napost": [
[
"regex",
"(?P<vuln_web_files_348>\\/shopper\\s*\\.\\s*conf(?!\\w))",
""
]
],
"/shopping300_napost": [
[
"regex",
"(?P<vuln_web_files_119>\\/shopping300\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/shopping400_napost": [
[
"regex",
"(?P<vuln_web_files_229>\\/shopping400\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/shtml_napost": [
[
"regex",
"(?P<vuln_web_files_54>\\/shtml\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/simple_napost": [
[
"regex",
"(?P<vuln_web_files_854>\\/simple\\s*\\.\\s*idq(?!\\w))",
""
]
],
"/site_napost": [
[
"regex",
"(?P<vuln_web_files_760>\\/site\\s*\\.\\s*csc(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_474>\\/site\\s*\\.\\s*ini(?!\\w))",
""
]
],
"/site_searcher_napost": [
[
"regex",
"(?P<vuln_web_files_967>\\/site\\_searcher\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/sitemap_napost": [
[
"regex",
"(?P<vuln_web_files_1080>\\/sitemap\\s*\\.\\s*xml(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_157>\\/sitemap\\s*\\.\\s*gz(?!\\w))",
""
]
],
"/skbvqsy_napost": [
[
"regex",
"(?P<vuln_web_files_871>\\/skbvqsy\\s*\\.\\s*php(?!\\w))",
""
]
],
"/slist_napost": [
[
"regex",
"(?P<vuln_web_files_1014>\\/slist\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/smadmin_napost": [
[
"regex",
"(?P<vuln_web_files_533>\\/smadmin\\s*\\.\\s*html(?!\\w))",
""
]
],
"/smbcfg_napost": [
[
"regex",
"(?P<vuln_web_files_698>\\/smbcfg\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_698>\\/smbcfg\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smconf_napost": [
[
"regex",
"(?P<vuln_web_files_173>\\/smconf\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_173>\\/smconf\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smency_napost": [
[
"regex",
"(?P<vuln_web_files_838>\\/smency\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_838>\\/smency\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smg_smxcfg30_napost": [
[
"regex",
"(?P<vuln_web_files_708>\\/smg\\_smxcfg30\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/smhelp_napost": [
[
"regex",
"(?P<vuln_web_files_188>\\/smhelp\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_188>\\/smhelp\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smmsg_napost": [
[
"regex",
"(?P<vuln_web_files_321>\\/smmsg\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_321>\\/smmsg\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smquar_napost": [
[
"regex",
"(?P<vuln_web_files_873>\\/smquar\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_873>\\/smquar\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smsolar_napost": [
[
"regex",
"(?P<vuln_web_files_295>\\/smsolar\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_295>\\/smsolar\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smtime_napost": [
[
"regex",
"(?P<vuln_web_files_446>\\/smtime\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_446>\\/smtime\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smtp_napost": [
[
"regex",
"(?P<vuln_web_files_472>\\/smtp\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_444>\\/smtp\\s*\\.\\s*box(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_472>\\/smtp\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_444>\\/smtp\\s*\\.\\s*box(?!\\w))",
""
]
],
"/smtpibwq_napost": [
[
"regex",
"(?P<vuln_web_files_495>\\/smtpibwq\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_495>\\/smtpibwq\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smtpobwq_napost": [
[
"regex",
"(?P<vuln_web_files_887>\\/smtpobwq\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_887>\\/smtpobwq\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smtptbls_napost": [
[
"regex",
"(?P<vuln_web_files_765>\\/smtptbls\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_765>\\/smtptbls\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/smvlog_napost": [
[
"regex",
"(?P<vuln_web_files_1097>\\/smvlog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1097>\\/smvlog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/snmpviewer_napost": [
[
"regex",
"(?P<vuln_web_files_916>\\/snmpviewer\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/snoop_napost": [
[
"regex",
"(?P<vuln_web_files_436>\\/snoop\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/soapconfig_napost": [
[
"regex",
"(?P<vuln_web_files_1071>\\/soapconfig\\s*\\.\\s*xml(?!\\w))",
""
]
],
"/software_napost": [
[
"regex",
"(?P<vuln_web_files_1146>\\/software\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1146>\\/software\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/source_napost": [
[
"regex",
"(?P<xss_html_special8524>\\/fine\\s*\\.\\s*\\/source(?!\\w))",
""
]
],
"/spywall_napost": [
[
"regex",
"(?P<vuln_web_dirs_71>\\/spywall(?!\\w))",
"_noregex"
]
],
"/sqljdemo_napost": [
[
"regex",
"(?P<vuln_web_files_396>\\/sqljdemo\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/sqlnet_napost": [
[
"regex",
"(?P<vuln_web_files_39>\\/sqlnet\\s*\\.\\s*log(?!\\w))",
""
]
],
"/srchadm_napost": [
[
"regex",
"(?P<vuln_web_dirs_428>\\/srchadm(?!\\w))",
"_noregex"
]
],
"/srvinst_napost": [
[
"regex",
"(?P<vuln_web_files_479>\\/srvinst\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_479>\\/srvinst\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/srvnam_napost": [
[
"regex",
"(?P<vuln_web_files_809>\\/srvnam\\s*\\.\\s*htm(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_809>\\/srvnam\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/ss_napost": [
[
"regex",
"(?P<vuln_web_files_1023>\\/ss\\s*\\.\\s*cfg(?!\\w))",
""
]
],
"/sscd_suncourier_napost": [
[
"regex",
"(?P<vuln_web_files_655>\\/sscd\\_suncourier\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/stat_napost": [
[
"regex",
"(?P<vuln_web_files_627>\\/stat\\s*\\.\\s*htm(?!\\w))",
""
]
],
"/stat_what_napost": [
[
"regex",
"(?P<vuln_web_files_566>\\/stat\\_what\\s*\\.\\s*log(?!\\w))",
""
]
],
"/statmail_napost": [
[
"regex",
"(?P<vuln_web_files_593>\\/statmail\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_593>\\/statmail\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/statrep_napost": [
[
"regex",
"(?P<vuln_web_files_756>\\/statrep\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_756>\\/statrep\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/stats_napost": [
[
"regex",
"(?P<vuln_web_files_419>\\/stats\\s*\\.\\s*txt(?!\\w))",
""
]
],
"/statusmap_napost": [
[
"regex",
"(?P<vuln_web_files_240>\\/statusmap\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/stauths_napost": [
[
"regex",
"(?P<vuln_web_files_95>\\/stauths\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_95>\\/stauths\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/stautht_napost": [
[
"regex",
"(?P<vuln_web_files_502>\\/stautht\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_502>\\/stautht\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/stconf_napost": [
[
"regex",
"(?P<vuln_web_files_493>\\/stconf\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_493>\\/stconf\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/stconfig_napost": [
[
"regex",
"(?P<vuln_web_files_409>\\/stconfig\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_409>\\/stconfig\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/stdnaset_napost": [
[
"regex",
"(?P<vuln_web_files_132>\\/stdnaset\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_132>\\/stdnaset\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/stdomino_napost": [
[
"regex",
"(?P<vuln_web_files_438>\\/stdomino\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_438>\\/stdomino\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/stlog_napost": [
[
"regex",
"(?P<vuln_web_files_337>\\/stlog\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_337>\\/stlog\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/streg_napost": [
[
"regex",
"(?P<vuln_web_files_811>\\/streg\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_811>\\/streg\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/stsrc_napost": [
[
"regex",
"(?P<vuln_web_files_1021>\\/stsrc\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1021>\\/stsrc\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/svacl_napost": [
[
"regex",
"(?P<vuln_web_files_878>\\/svacl\\s*\\.\\s*cnf(?!\\w))",
""
]
],
"/svcacl_napost": [
[
"regex",
"(?P<vuln_web_files_722>\\/svcacl\\s*\\.\\s*cnf(?!\\w))",
""
]
],
"/syxwptffnnuyexftov_napost": [
[
"regex",
"(?P<vuln_web_files_711>\\/syxwptffnnuyexftov\\s*\\.\\s*php(?!\\w))",
""
]
],
"/tmp_napost": [
[
"regex",
"(?P<vuln_os_dirs_11>\\/tmp(?!\\w))",
"_noregex"
]
],
"/today_napost": [
[
"regex",
"(?P<vuln_web_files_7>\\/today\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_7>\\/today\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/toolbar_napost": [
[
"regex",
"(?P<vuln_web_files_428>\\/toolbar\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/tovvjrbwrdrpmonx_napost": [
[
"regex",
"(?P<vuln_web_files_978>\\/tovvjrbwrdrpmonx\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/tqmm8_napost": [
[
"regex",
"(?P<vuln_web_files_431>\\/tqmm8\\s*\\.\\s*csp(?!\\w))",
""
]
],
"/trace_napost": [
[
"regex",
"(?P<vuln_web_files_912>\\/trace\\s*\\.\\s*axd(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_912>\\/trace\\s*\\.\\s*axd(?!\\w))",
""
]
],
"/tradecli_napost": [
[
"regex",
"(?P<vuln_web_files_1059>\\/tradecli\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/trends_napost": [
[
"regex",
"(?P<vuln_web_files_990>\\/trends\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/tstisapi_napost": [
[
"regex",
"(?P<vuln_web_files_984>\\/tstisapi\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/turwwwwhhm_napost": [
[
"regex",
"(?P<vuln_web_files_1096>\\/turwwwwhhm\\s*\\.\\s*php(?!\\w))",
""
]
],
"/type_napost": [
[
"regex",
"(?P<vuln_web_files_433>\\/type\\s*\\.\\s*bas(?!\\w))",
""
]
],
"/url_napost": [
[
"regex",
"(?P<vuln_web_files_649>\\/url\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/usebean_napost": [
[
"regex",
"(?P<vuln_web_files_522>\\/usebean\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/usr_napost": [
[
"regex",
"(?P<vuln_os_dirs_6>\\/usr(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<high_acuracy_10>\\/usr(?!\\w))",
"_noregex"
]
],
"/uurfnmhfhvtn_napost": [
[
"regex",
"(?P<vuln_web_files_227>\\/uurfnmhfhvtn\\s*\\.\\s*php(?!\\w))",
""
]
],
"/uygv2i3lv6ij_napost": [
[
"regex",
"(?P<vuln_web_files_233>\\/uygv2i3lv6ij\\s*\\.\\s*cshtml(?!\\w))",
""
]
],
"/var_napost": [
[
"regex",
"(?P<vuln_os_dirs_10>\\/var(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<vuln_os_dirs_10>\\/var(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<high_acuracy_13>\\/var(?!\\w))",
"_noregex"
]
],
"/vfolder_napost": [
[
"regex",
"(?P<vuln_web_files_192>\\/vfolder\\s*\\.\\s*ghp(?!\\w))",
""
]
],
"/viewexample_napost": [
[
"regex",
"(?P<vuln_web_files_171>\\/viewexample\\s*\\.\\s*cfm(?!\\w))",
""
]
],
"/volscgi_napost": [
[
"regex",
"(?P<vuln_web_files_1045>\\/volscgi\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/vpuserinfo_napost": [
[
"regex",
"(?P<vuln_web_files_630>\\/vpuserinfo\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_630>\\/vpuserinfo\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/vwchqjxorzitbm_napost": [
[
"regex",
"(?P<vuln_web_files_175>\\/vwchqjxorzitbm\\s*\\.\\s*php(?!\\w))",
""
]
],
"/vxvm_ag_napost": [
[
"regex",
"(?P<vuln_web_files_596>\\/vxvm\\_ag\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/vxvm_hwnotes_napost": [
[
"regex",
"(?P<vuln_web_files_719>\\/vxvm\\_hwnotes\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/vxvm_ig_napost": [
[
"regex",
"(?P<vuln_web_files_311>\\/vxvm\\_ig\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/vxvm_mig_napost": [
[
"regex",
"(?P<vuln_web_files_800>\\/vxvm\\_mig\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/vxvm_notes_napost": [
[
"regex",
"(?P<vuln_web_files_27>\\/vxvm\\_notes\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/vxvm_tshoot_napost": [
[
"regex",
"(?P<vuln_web_files_989>\\/vxvm\\_tshoot\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/vxvm_ug_napost": [
[
"regex",
"(?P<vuln_web_files_374>\\/vxvm\\_ug\\s*\\.\\s*pdf(?!\\w))",
""
]
],
"/w3proxy_napost": [
[
"regex",
"(?P<vuln_web_files_350>\\/w3proxy\\s*\\.\\s*dll(?!\\w))",
""
]
],
"/w3tvars_napost": [
[
"regex",
"(?P<vuln_web_files_115>\\/w3tvars\\s*\\.\\s*pm(?!\\w))",
""
]
],
"/welcome_napost": [
[
"regex",
"(?P<vuln_web_files_645>\\/welcome\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_645>\\/welcome\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/wfreassign_napost": [
[
"regex",
"(?P<vuln_web_files_530>\\/wfreassign\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"/wg_user-info_napost": [
[
"regex",
"(?P<vuln_web_files_484>\\/wg\\_user\\-info\\s*\\.\\s*ml(?!\\w))",
""
]
],
"/whatever_napost": [
[
"regex",
"(?P<vuln_web_files_803>\\/whatever\\s*\\.\\s*htr(?!\\w))",
""
]
],
"/whateverwrzb_napost": [
[
"regex",
"(?P<vuln_web_files_701>\\/whateverwrzb\\s*\\.\\s*html(?!\\w))",
""
]
],
"/whereami_napost": [
[
"regex",
"(?P<vuln_web_files_923>\\/whereami\\s*\\.\\s*cgi(?!\\w))",
""
]
],
"/win_napost": [
[
"regex",
"(?P<vuln_os_files_3>\\/win\\s*\\.\\s*ini(?!\\w))",
""
]
],
"/windows_napost": [
[
"regex",
"(?P<vuln_os_dirs_5>\\/windows(?!\\w))",
"_noregex"
]
],
"/winmsdp_napost": [
[
"regex",
"(?P<vuln_web_files_642>\\/winmsdp\\s*\\.\\s*exe(?!\\w))",
""
]
],
"/wksinst_napost": [
[
"regex",
"(?P<vuln_web_files_550>\\/wksinst\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_550>\\/wksinst\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/wml_napost": [
[
"regex",
"(?P<vuln_os_dirs_15>\\/wml(?!\\w))",
"_noregex"
]
],
"/wp-config_napost": [
[
"regex",
"(?P<vuln_web_files>\\/wp\\-config(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<vuln_web_files5e7d>\\/wp\\-config\\s*\\.\\s*bak(?!\\w))",
""
]
],
"/wpconfig_napost": [
[
"regex",
"(?P<vuln_web_files>\\/wpconfig(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<vuln_web_files1a13>\\/wpconfig\\s*\\.\\s*bak(?!\\w))",
""
]
],
"/writeto_napost": [
[
"regex",
"(?P<vuln_web_files_429>\\/writeto\\s*\\.\\s*cnf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_429>\\/writeto\\s*\\.\\s*cnf(?!\\w))",
""
]
],
"/ws_ftp_napost": [
[
"regex",
"(?P<vuln_web_files_1159>\\/ws\\_ftp\\s*\\.\\s*log(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_922>\\/ws\\_ftp\\s*\\.\\s*ini(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1159>\\/ws\\_ftp\\s*\\.\\s*log(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_922>\\/ws\\_ftp\\s*\\.\\s*ini(?!\\w))",
""
]
],
"/wwforum_napost": [
[
"regex",
"(?P<vuln_web_files_784>\\/wwforum\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"/wwsample_napost": [
[
"regex",
"(?P<vuln_web_files_392>\\/wwsample\\s*\\.\\s*nsf(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_392>\\/wwsample\\s*\\.\\s*nsf(?!\\w))",
""
]
],
"/xagogktctnspa_napost": [
[
"regex",
"(?P<vuln_web_files_308>\\/xagogktctnspa\\s*\\.\\s*php(?!\\w))",
""
]
],
"/xsqlconfig_napost": [
[
"regex",
"(?P<vuln_web_files_882>\\/xsqlconfig\\s*\\.\\s*xml(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_882>\\/xsqlconfig\\s*\\.\\s*xml(?!\\w))",
""
]
],
"/yabb_napost": [
[
"regex",
"(?P<vuln_web_files_333>\\/yabb\\s*\\.\\s*pl(?!\\w))",
""
]
],
"/ynnwsuao": [
[
"regex",
"(?P<vuln_web_dirs_121>\\/ynnwsuao\\d+6)",
""
]
],
"/yokhehviqwnn_napost": [
[
"regex",
"(?P<vuln_web_dirs_185>\\/yokhehviqwnn(?!\\w))",
"_noregex"
]
],
"/zskwhg8jniabcd_napost": [
[
"regex",
"(?P<vuln_web_files_186>\\/zskwhg8jniabcd\\s*\\.\\s*html(?!\\w))",
""
]
],
"00relnotes_napost": [
[
"regex",
"(?P<vuln_web_files_598>\\/\\d+\\d+\\s*\\.\\s*00relnotes(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_918>\\/e7uo7v7d\\s*\\.\\s*00relnotes(?!\\w))",
""
]
],
"08a80340-06d3-11ea-9f87-0242ac11000f": [
[
"regex",
"(?P<high_acuracy_fast_reg_xxe_0>(08a80340-06d3-11ea-9f87-0242ac11000f))",
""
]
],
"0x": [
[
"set",
"evasions"
]
],
"0x800a0bcd_napost": [
[
"regex",
"(?P<resp_body_data_leak_sql_48>0x800a0bcd(?!\\w))",
"_noregex"
]
],
"1": [
[
"set",
"vuln_urls_set"
]
],
"27": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_21>\\d+27\\s*\\.\\s*0\\s*\\.\\s*0\\s*\\.\\s*\\d+)",
""
]
],
"2_\",:": [
[
"regex",
"(?P<regex_xss_5>^\\w+\\s*,\\s*\"[^\\\\\"]*\"\\s*:[\\w_\"]+$)",
""
]
],
"2_(,)": [
[
"regex",
"(?P<regex_code_execution_4>\\([^\\)]+\\$[^\\)]+\\)\\s*\\()",
""
]
],
"2_(,.": [
[
"regex",
"(?P<code_execution_fast_reg_2>(\\(\\$\\w+\\s*\\.))",
""
]
],
"2_(,/": [
[
"regex",
"(?P<xpath_injeciton_regex_0>\\(\\s*/)",
""
]
],
"2_(,:": [
[
"regex",
"(?P<xpath_injeciton_regex_3>:\\s*\\w+\\s*\\()",
""
]
],
"2_),.": [
[
"regex",
"(?P<code_execution_fast_reg_0>(\\.\\s*\\$?\\w+\\s*\\)))",
""
]
],
"2_),=": [
[
"regex",
"(?P<general_injection_regex_0>\\)\\s*=\\s*[\\w'\"])",
""
]
],
"2_*,=": [
[
"regex",
"(?P<ldap_injection_regex_1>\\w*\\s*=\\s*\\w*\\*)",
""
]
],
"2_*,@": [
[
"regex",
"(?P<ldap_injection_regex_3>@\\s*\\*)",
""
]
],
"2_--,sql_prefix": [
[
"regex",
"(?P<regex_sqli_1>('|\"|\\);)\\s*--')",
""
]
],
"2_/,<": [
[
"regex",
"(?P<high_acuracy_fast_reg_xss0315>(<\\w+/\\w+))",
""
]
],
"2_/,sql_operators2": [
[
"regex",
"(?P<comment_newline_bypass_regex_0>(=|or|and|select|union|rlike|like|waitfor|having|null|is|limit|offset|order|by|all|case|when)\\s*//)",
""
]
],
"2_:,<": [
[
"regex",
"(?P<high_acuracy_fast_reg_xssd0fb>(<\\w+:\\w+))",
""
]
],
"2_:,\\": [
[
"regex",
"(?P<regex_high_acuracy_crlf_inj_1>\\\\r\\\\n\\w+\\s*:\\s)",
""
]
],
"2_:,slashes": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg_2>((?<!\\w)\\w:[/\\\\]))",
""
]
],
"2_:,waitfor_set": [
[
"regex",
"(?P<regex_sqli_3>\\s(waitfor|delay)\\s.*\\d+:\\d+:\\d+)",
""
]
],
"2_<,/": [
[
"regex",
"(?P<regex_xss_evasion_0><\\w+\\/)",
""
]
],
"2_=,$": [
[
"regex",
"(?P<code_execution_fast_reg_1>(\\$\\w+\\s*=\\s*\\w+\\s*;))",
""
]
],
"2_@,/": [
[
"regex",
"(?P<xpath_injeciton_regex_1>\\/\\s*\\@)",
""
]
],
"2_[,$": [
[
"regex",
"(?P<regex_code_execution_5>\\w+\\s*\\[\\s*\\$)",
""
]
],
"2_[,/": [
[
"regex",
"(?P<xpath_injection_regex_0>/\\w+\\s*\\[)",
""
]
],
"2_[,]": [
[
"regex",
"(?P<os_cmd_ev_fast_reg642a>(\\[([a-z])(\\4)\\]))",
""
]
],
"2_admin,*": [
[
"regex",
"(?P<ldap_injection_regex_0>admin\\s*\\*)",
""
]
],
"2_between,and": [
[
"regex",
"(?P<sqli_fast_reg7dbf>(between\\s+[^\\s]+\\s+and\\s+))",
""
]
],
"2_case,(": [
[
"regex",
"(?P<sqli_fast_reg_0>(\\(\\s*case))",
""
]
],
"2_case,when": [
[
"regex",
"(?P<regex_sqli_27>case\\s*when\\s+\\w+)",
""
]
],
"2_cat,<": [
[
"regex",
"(?P<code_execution_fast_reg_3>(cat\\s*<))",
""
]
],
"2_cd,/": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg7f90>((?>\\b)cd\\s+/))",
""
]
],
"2_cgi-bin,vuln_web_set3": [
[
"regex",
"(?P<vuln_web_filex_fast_reg_0>(/cgi-bin/(shop|boozt|mojo|logs|rightfax|dasp|photo|webcgi|ezshopper2|wwwthreads|db4web_c|session|imagefolio|ikonboard|calendar|classifieds|orders|sbcgi|counterfiglet|gw5|horde|.cobalt|log|cutecast|data|cspassword|dcshop|blog|test|sws|include|csmailto|utm|store|stats-bin-p|stat|cbmc|replicator|texis|bulk|ms_proxy_auth_query|awl|stats|stats_old|ezshopper3|cgiwrap|gbook|guestbook|rwcgi60|admin|awstats|sgb_dir|c32web.exe|mt-static|auth_data|texis.exe|common|dbman|auctiondeluxe|ncommerce3|backup)))",
""
]
],
"2_content-length,\\": [
[
"regex",
"(?P<regex_high_acuracy_crlf_inj_2>content-length.*\\\\r\\\\n\\\\r\\\\n.*<)",
""
]
],
"2_echo,os_command_terminators": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg32ff>((?>\\b)echo\\s+[\\(\"'`]))",
""
]
],
"2_exec,cmd": [
[
"regex",
"(?P<regex_code_execution_0>exec\\s*cmd=\\s*('.*'|\".*\"))",
""
]
],
"2_function,(": [
[
"regex",
"(?P<regex_code_execution_3>function\\s+[^\\s]+\\s*\\()",
""
]
],
"2_function_names,quotes": [
[
"regex",
"(?P<fn_name_pass_regex_0>\\\\?['\"](system|echo|exit|bck|eval|benchmark|pgsleep|attr|class|request|subclasses|class|writefile|getpath|getruntime|exec|clearconfig|setcache|loadtemplate|getfilter|ex|config|sum|convert|concat|ascii|randomblob|elt|like|sha|rand|lower|substring|upper|count|gethostaddress|username|isnull|varchar|nvarchar|nchar|sleep|nameconst|unhex|hex|version|basedecode|loadfile|systemuser|hash|extractvalue|cast|avg|case|user|reverse|min|gtidsubset|updatexml|updatexml|hashbytes|database|informationschema|sys|database|user|groupconcat|dbo|md|extractvalue|master|sysmessages|this|conf|exe|ini|function|alert|char|pregreplace|sleep|body|appendchild|createelement|self|document|components|lookupmethod|window|location|catch|hash|constructor|constructor|parent|ownerdocument|alert|execscript|slice|expression|setinterval|top|find|history|forward|url|settimeout|back|prompt|msgbox|javascriptval|phpinfo|eval|popen|execute|vardump|func|mid|len|isnumeric|passthru|system|include|basename|realpath|moveuploadedfile|printr|sprintf|fopen|require|copy|readfile|tempnam|touch|assert|fileputcontents|exec|filegetcontents|fileputcontents|unserialize|requireonce|popen|createfunction|strrev|function|die|basedecode|arraymap|chr|pregreplace|isset|fread|strreplace|calluserfunc|ord|decode|request|getparameter|fileoutputstream|application|getrealpath|response|write|getbytes|setcookie|res|end|readdirsync|tostring|serialize|phpuname|phpversion|array|thread|join|valueof|length|writeln|decodeuri|navigate|reflect|open|set)\\\\?['\"])",
""
]
],
"2_insert,into": [
[
"regex",
"(?P<regex_sqli_25>insert\\s+into\\s+\\w)",
""
]
],
"2_ldap_set_(|%,ldap_set_()*": [
[
"regex",
"(?P<ldap_injection_regex_2>(\\)|\\(|\\*)\\s*(\\(|\\||\\%))",
""
]
],
"2_ldap_words,(": [
[
"regex",
"(?P<ldap_injection_regex_6>\\(\\s*(userpassword|surname|name|cn|sn|objectclass|mail|givenname|commonname)(?!\\w))",
""
]
],
"2_ldap_words,equal_colon": [
[
"regex",
"(?P<ldap_injection_regex_5>(?<!\\w)(userpassword|surname|name|cn|sn|objectclass|mail|givenname|commonname)\\s*(=|:))",
""
]
],
"2_null,null_postfix_set": [
[
"regex",
"(?P<regex_sqli_9>null\\s*[,\\)])",
""
],
[
"regex",
"(?P<regex_sqli_11>[,\\)]\\s*null)",
""
]
],
"2_on,=": [
[
"regex",
"(?P<high_acuracy_fast_reg_xss_0>(\\son\\w+\\s*=))",
""
],
[
"regex",
"(?P<regex_xss_1>[^\\w]on(canplaythrough|help|show|layoutcomplete|beforeeditfocus|move|focus|medialoadfailed|ended|toggle|pointerout|afterprint|selectstart|beforepaste|mediaslip|loadend|cut|transitionstart|durationchange|volumechange|rowsinserted|aftercopy|stalled|mouseout|input|focusin|cuechange|seeking|datasetcomplete|stop|keydown|mousemove|resizestart|webkitanimationstart|movestart|offline|beforeupdate|pointerrawupdate|dragenter|seek|drop|hashchange|transitionrun|beforedeactivate|loadedmetadata|pointerenter|beforescriptexecute|loadeddata|activate|animationstart|rowdelete|rowexit|begin|bounce|selectionchange|repeat|resizeend|webkittransitionend|dragover|close|pointermove|losecapture|animationiteration|pagehide|webkitanimationiteration|deactivate|keypress|fullscreenchange|waiting|blur|progress|dragleave|touchend|animationend|resume|undo|pointerdown|pause|trackchange|beforeactivate|change|search|seeksegmenttime|mediacomplete|reverse|canplay|mediaerror|textinput|load|suspend|datasetchanged|emptied|auxclick|beforeprint|dragstart|rowsdelete|message|redo|transitionend|select|timeupdate|seeked|paste|propertychange|submit|seeksegmenttime|start|dragdrop|syncrestored|errorupdate|mouseenter|pageshow|pointerup|outofsync|copy|resize|reset|ratechange|unload|dataavailable|rowsexit|popstate|rowsenter|error|rowenter|animationcancel|moveend|transitioncancel|focusout|mouseup|controlselect|abort|resync|unhandledrejection|urlflip|beforeunload|webkitanimationend|cellchange|end|touchstart|loadstart|keyup|beforecopy|invalid|click|readystatechange|touchmove|afteractivate|online|urlflip|wheel|play|finish|mousewheel|scriptcommand|filterchange|storage|drag|mousedown|timeerror|beforecut|pointerover|mouseleave|rowinserted|contextmenu|afterscriptexecute|scroll|pointerleave|dragend|dblclick|afterupdate|mouseover|playing|mozfullscreenchange)\\s*=)",
""
]
],
"2_or,sql_comparison": [
[
"regex",
"(?P<regex_sqli_30>or\\s+(\\s*not\\s*)?\\d+(\\.\\d+)?\\s*[=<>]+\\s*\\d+(\\.\\d+)?)",
""
]
],
"2_os_command_probing,os_command_separators": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_regd6e8>([)&|;`]+\\s*(?<!\\w)(vol|id|ls|dir)(?!\\w)|(?<!\\w)(vol|id|ls|dir)(?!\\w)\\s*[|;(`&]+))",
""
]
],
"2_os_commands2,os_command_separators": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg_9>((;|&|\\||&)\\s*?\\s?(curl|wc|hostname|export|date|$php_md5|ll|la|ls|less|bash|ping|wget|cat|pwd|tail|echo|systeminfo|net|netsh|netstat|type|ipconfig|ifconfig|id|cd|vol)(?!\\w)))",
""
]
],
"2_prompt_alert,=": [
[
"regex",
"(?P<high_acuracy_fast_reg_xss2841>(=\\s*(prompt|alert)\\b))",
""
]
],
"2_quotes,=": [
[
"regex",
"(?P<regex_postfix_1>=\\s*('|\")\\w+)",
""
]
],
"2_select,from": [
[
"regex",
"(?P<regex_sqli_28>select[\\w\\s\\-\\.\\^\\@~]+from)",
""
]
],
"2_sql_conditions,(": [
[
"regex",
"(?P<regex_sqli_19>(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?\\s+\\w+\\s*\\()",
""
]
],
"2_sql_conditions,=": [
[
"regex",
"(?P<regex_sqli_7>(and|\\||\\&|\\|\\||\\&\\&)\\s*\\d+\\s*=)",
""
]
],
"2_sql_conditions,quotes": [
[
"regex",
"(?P<regex_sqli_26>(and|or)(\\s*not\\s*)?\\s+('|\"))",
""
]
],
"2_sql_conditions,select": [
[
"regex",
"(?P<regex_sqli_20>('|and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?.*select\\s+(.*,){3,}.*(from|[\\);'\"\\|]{2,}|--|/\\*|#))",
""
]
],
"2_sql_conditions,sql_compare": [
[
"regex",
"(?P<regex_sqli_12>-?\\d+(\\.\\d+)?\\s+(or|and|\\||\\&|\\|\\||\\&\\&|having)(\\s*not\\s*)?\\s+-?\\d+(\\.\\d+)?\\s*(!|=|<|>|is))",
""
]
],
"2_sql_like,'": [
[
"regex",
"(?P<regex_sqli_10>like\\s['\"][^'\"]*$)",
""
]
],
"2_sql_prefix2,and_or_having": [
[
"regex",
"(?P<regex_prefix_1>^[\\w\\s]*('|\"|;|\\|\\&)+\\s+(and|or|having))",
""
]
],
"2_sql_verbs,(": [
[
"regex",
"(?P<sqli_fast_reg_3>(\\(\\s*(select|insert|update|delete)))",
""
]
],
"2_sys,(": [
[
"regex",
"(?P<regex_sqli_18>sys\\.[\\w]+\\s*\\()",
""
]
],
"2_union,select": [
[
"regex",
"(?P<regex_sqli_23>^[\\.\\-\\w\\^\\']+\\s*union\\s*select)",
""
],
[
"regex",
"(?P<regex_sqli_24>union\\s*(all\\s*)?select)",
""
]
],
"2_union,sql_verbs": [
[
"regex",
"(?P<sqli_fast_reg_5>(^[\\.\\-\\w\\^\\']+\\s*union\\s*(select|insert|update|delete)))",
""
],
[
"regex",
"(?P<sqli_fast_reg_1>(union\\s*(all\\s*)?(select|insert|update|delete)))",
""
],
[
"regex",
"(?P<sqli_fast_reg_2>(union[\\w\\s]+(select|insert|update|delete)[\\w\\s]+from[\\w\\s]+))",
""
]
],
"2_vuln_urls_set,file_extentions_set": [
[
"regex",
"(?P<url_scanning_regex_0>(backup|db|dump|htdocs|home|html|data|backup|database|setup|install|localhost|backup|wordpress|blog|admin|eshop|admin|store|m|mariadb|mage|1)[\\w\\-~\\.]*\\.(rar|zip|tar|sql|7z|zip|gz|bak|config|connect|old|cfg))",
""
]
],
"2_which,os_tools": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg4c37>((?>\\b)which\\s+(python|perl|netcat|nc|gcc|curl|openssl)))",
""
]
],
"2_{,(": [
[
"regex",
"(?P<regex_xss_3>\\{[^\"']*\\()",
""
]
],
"2_{,foreach": [
[
"regex",
"(?P<ssti_fast_reg_0>({\\s*foreach))",
""
]
],
"2_{,}": [
[
"regex",
"(?P<ssti_fast_reg_2>({.*\\w+\\s*(\\.:\\|)\\s*\\w+.+}))",
""
],
[
"regex",
"(?P<ssti_fast_reg_4>({[^\"].+}))",
""
],
[
"regex",
"(?P<ssti_fast_reg_1>({[^\"].+\\$\\w.*}))",
""
],
[
"regex",
"(?P<ssti_fast_regc807>(\\{\\{[\\w\\s]+}\\}))",
""
],
[
"regex",
"(?P<ssti_fast_regdcd5>(#\\{[\\w\\s]+}))",
""
]
],
"2f_napost": [
[
"regex",
"(?P<path_traversal65ba>\\s*\\.\\s*\\s*\\.\\s*2f(?!\\w))",
""
],
[
"regex",
"(?P<path_traversal6625>\\s*\\.\\s*\\s*\\.\\s*2f\\s*\\.\\s*\\s*\\.\\s*2f\\s*\\.\\s*\\s*\\.\\s*2f(?!\\w))",
""
]
],
"2guest_napost": [
[
"regex",
"(?P<vuln_web_files_911>\\/o\\d+2guest\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"3_\r,\n,=": [
[
"regex",
"(?P<high_acuracy_fast_reg_xss3420>(\\w\\\\r\\\\n\\s*=))",
""
]
],
"3_\",(,)": [
[
"regex",
"(?P<regex_code_execution_8>\\)\\s*\\(\\s*\"\\w+\"\\s*\\))",
""
]
],
"3_(,),@": [
[
"regex",
"(?P<ssti_fast_reg2d28>(@\\s*\\())",
""
]
],
"3_(,),]": [
[
"regex",
"(?P<high_acuracy_fast_reg_xss5e81>(\\]\\s*\\([\\w\\s]+\\)))",
""
]
],
"3_(,=,)": [
[
"regex",
"(?P<ldap_injection_regex_4>\\(\\s*\\w+\\s*=\\s*\\w+\\s*\\w+\\*?\\s*\\))",
""
]
],
"3_,,[,]": [
[
"regex",
"(?P<regex_xss_4>^[^[\\[]+\\]\\s*,.*\\[[^\\]]+$)",
""
]
],
"3_/,vuln_web_set1,vuln_web_set2": [
[
"regex",
"(?P<vuln_web_filex_fast_reg_1>(/(plugins|include\\w*|lib|upload)[^\\s]*/(\\w*upload|filemanager|admin|config|controller|.inc|[\\w\\-]*manager|temp)))",
""
]
],
"3_<!doctype,entity,system": [
[
"regex",
"(?P<regex_xxe_0><!doctype[^\\[]+\\[[^\\]]+<!entity[^\\]]+system[^\\]]+\\w+:[^\\]]+\\])",
""
]
],
"3_=,<,%": [
[
"regex",
"(?P<regex_code_execution_7>\\w+\\s*=\\s*<%)",
""
]
],
"3_[,/,@": [
[
"regex",
"(?P<xpath_injection_regex_2>\\[\\s*@)",
""
]
],
"3_[,/,book": [
[
"regex",
"(?P<xpath_injection_regex_3>/book\\[[\\d\"'])",
""
]
],
"3_[,],(": [
[
"regex",
"(?P<regex_xss_7>\\w+\\[\\s*['\"\\w]+\\s*\\]\\s*\\()",
""
]
],
"3_[,],nosql_set": [
[
"regex",
"(?P<no_sql_fast_reg0397>(\\[\\s*\\$(gt|eq|ge|le|regex|pass|ne|exists)\\s*\\]))",
""
],
[
"regex",
"(?P<no_sql_fast_rega323>(^\\s*\\$(gt|eq|ge|le|regex|pass|ne|exists)\\s*$))",
""
]
],
"3_admin,\",#": [
[
"regex",
"(?P<xpath_injeciton_regex_4>admin\" #)",
""
]
],
"3_exec,(,)": [
[
"regex",
"(?P<regex_code_execution_6>\\(\\s*exec\\s*\\))",
""
]
],
"3_expression_url,:,(": [
[
"regex",
"(?P<regex_xss_2>\\w+\\s*:\\s*(expression|url)\\s*\\()",
""
]
],
"3_select,from,where": [
[
"regex",
"(?P<regex_sqli_4>select.*(,\\w+).*from.*where)",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_10": [
[
"regex",
"(?P<evasion_wildcard_regex_7>[\\/\\\\](?:[?a][?l][?l][?c][?f][?g][?c][?o][?n][?v]|[?t][?r][?a][?c][?e][?r][?o][?u][?t][?e]|[?l][?o][?c][?a][?l][?g][?r][?o][?u][?p])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_11": [
[
"regex",
"(?P<evasion_wildcard_regex_8>[\\/\\\\](?:[?d][?e][?s][?k][?t][?o][?p][?.][?i][?n][?i]|[?t][?r][?a][?c][?e][?r][?o][?u][?t][?e][?6])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_14": [
[
"regex",
"(?P<evasion_wildcard_regex_9>[\\/\\\\](?:[?n][?e][?t][?s][?h][? ][?f][?i][?r][?e][?w][?a][?l][?l])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_2": [
[
"regex",
"(?P<evasion_wildcard_regex_0>[\\/\\\\](?:[?p][?s]|[?i][?d]|[?l][?s]|[?l][?l]|[?l][?a]|[?t][?r]|[?s][?h]|[?w][?c])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_3": [
[
"regex",
"(?P<evasion_wildcard_regex_1>[\\/\\\\](?:[?w][?m][?l]|[?w][?e][?b]|[?o][?p][?t]|[?b][?i][?n]|[?l][?o][?g]|[?c][?a][?t]|[?p][?w][?d]|[?a][?w][?k]|[?c][?g][?i]|[?e][?t][?c]|[?s][?e][?d]|[?v][?a][?r]|[?t][?m][?p]|[?l][?i][?b]|[?u][?s][?r]|[?d][?i][?r])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_4": [
[
"regex",
"(?P<evasion_wildcard_regex_2>[\\/\\\\](?:[?s][?o][?r][?t]|[?h][?t][?t][?p]|[?l][?e][?s][?s]|[?s][?e][?l][?f]|[?c][?u][?r][?l]|[?c][?o][?n][?f]|[?l][?o][?g][?s]|[?d][?a][?s][?h]|[?p][?r][?o][?c]|[?.][?e][?x][?e]|[?p][?a][?t][?h]|[?b][?a][?s][?h]|[?.][?d][?l][?l]|[?p][?i][?n][?g]|[?m][?a][?i][?l]|[?e][?c][?h][?o]|[?w][?g][?e][?t])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_5": [
[
"regex",
"(?P<evasion_wildcard_regex_3>[\\/\\\\](?:[?p][?i][?n][?g][?6]|[?l][?o][?c][?a][?l]|[?s][?h][?a][?r][?e]|[?u][?n][?a][?m][?e]|[?w][?i][?n][?n][?t]|[?h][?o][?s][?t][?s]|[?n][?e][?t][?s][?h])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_6": [
[
"regex",
"(?P<evasion_wildcard_regex_4>[\\/\\\\](?:[?s][?h][?a][?d][?o][?w]|[?b][?a][?c][?k][?u][?p]|[?w][?e][?b][?a][?c][?c]|[?w][?h][?o][?a][?m][?i]|[?m][?a][?s][?t][?e][?r]|[?e][?x][?p][?o][?r][?t]|[?$][?s][?h][?e][?l][?l]|[?p][?a][?s][?s][?w][?d]|[?s][?y][?s][?t][?e][?m])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_7": [
[
"regex",
"(?P<evasion_wildcard_regex_5>[\\/\\\\](?:[?w][?i][?n][?.][?i][?n][?i]|[?t][?r][?a][?c][?e][?r][?t]|[?w][?w][?w][?r][?o][?o][?t]|[?n][?e][?t][?s][?t][?a][?t]|[?w][?i][?n][?d][?o][?w][?s]|[?i][?n][?e][?t][?p][?u][?b]|[?e][?n][?v][?i][?r][?o][?n]|[?o][?p][?e][?n][?s][?s][?l])(?=[^\\w?<>:]|$))",
""
]
],
"3_slashes,wildcard_characters,relevant_characters_8": [
[
"regex",
"(?P<evasion_wildcard_regex_6>[\\/\\\\](?:[?n][?e][?t][? ][?v][?i][?e][?w]|[?n][?s][?l][?o][?o][?k][?u][?p]|[?i][?p][?c][?o][?n][?f][?i][?g]|[?i][?f][?c][?o][?n][?f][?i][?g]|[?p][?a][?s][?s][?w][?o][?r][?d]|[?h][?o][?s][?t][?n][?a][?m][?e]|[?b][?o][?o][?t][?.][?i][?n][?i]|[?n][?e][?t][? ][?u][?s][?e][?r])(?=[^\\w?<>:]|$))",
""
]
],
"3_sql_conditions,',sql_operators": [
[
"regex",
"(?P<regex_sqli_2>'\\s+(and|\\||\\&|\\|\\||\\&\\&)(\\s*not\\s*)?\\s+'[^']+'\\s*([=\\!]+|like|rlike)\\s*')",
""
]
],
"3_sql_conditions,sql_equal,quotes": [
[
"regex",
"(?P<regex_sqli_13>(['\"]|\\d)\\s+(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?\\s+[\"']\\w+[\"']\\s*(=|is))",
""
]
],
"3_sql_verbs,union,all": [
[
"regex",
"(?P<sqli_fast_reg_4>(union\\s+all\\s+(select|insert|update|delete)))",
""
]
],
"3_union,select,from": [
[
"regex",
"(?P<regex_sqli_6>union[\\w\\s]+select[\\w\\s]+from[\\w\\s]+)",
""
]
],
"3_xss_pentest_tags,=,xss_event": [
[
"regex",
"(?P<regex_xss_0><(script|img|iframe)[^>]*[a-z]*(src|on\\w+)\\s*=)",
""
]
],
"3_{,foreach,/": [
[
"regex",
"(?P<ssti_fast_reg_3>({\\s*/\\s*foreach}))",
""
]
],
"3mduh_napost": [
[
"regex",
"(?P<vuln_web_files_304>\\/rtoy23\\d+3mduh\\s*\\.\\s*php(?!\\w))",
""
]
],
"45a0mzr_napost": [
[
"regex",
"(?P<vuln_web_files_412>\\/rsso\\d+45a0mzr\\s*\\.\\s*php(?!\\w))",
""
]
],
"4_eval,[,],'": [
[
"regex",
"(?P<regex_xss_6>\\[\\s*'eval'\\s*\\])",
""
]
],
"4_sql_conditions,null,not,is": [
[
"regex",
"(?P<regex_sqli_16>^\\s*(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?.*is\\s*?(not\\s*)null)",
""
]
],
"4_waitfor,delay,sql_prefix,:": [
[
"regex",
"(?P<regex_sqli_5>waitfor[\\s+]delay[\\s+][\"']\\d+:\\d:\\d+[\"'])",
""
]
],
"4_{,},:,nosql_set": [
[
"regex",
"(?P<no_sql_fast_reg7acf>(\\{\\$(gt|eq|ge|le|regex|pass|ne|exists)\\s*))",
""
],
[
"regex",
"(?P<no_sql_fast_regb128>(\\$(gt|eq|ge|le|regex|pass|ne|exists)\\s*:))",
""
]
],
"6": [
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
]
],
"7z_napost": [
[
"regex",
"(?P<url_scanning_1>\\s*\\.\\s*7z(?!\\w))",
""
]
],
"80040e": [
[
"regex",
"(?P<resp_body_data_leak_sql_39>80040e\\d+4)",
""
]
],
":": [
[
"and_condition",
"2_(,:"
],
[
"and_condition",
"4_{,},:,nosql_set"
],
[
"and_condition",
"4_{,},:,nosql_set"
],
[
"and_condition",
"2_:,slashes"
],
[
"and_condition",
"2_:,<"
],
[
"regex",
"(?P<regex_high_acuracy_crlf_inj_0>\\r\\n\\w+\\s*:\\s)",
""
],
[
"and_condition",
"2_:,\\"
],
[
"and_condition",
"3_expression_url,:,("
],
[
"and_condition",
"2_\",:"
],
[
"and_condition",
"2_:,waitfor_set"
],
[
"and_condition",
"4_waitfor,delay,sql_prefix,:"
],
[
"set",
"equal_colon"
],
[
"set",
"separators_set"
]
],
";": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy>\\;)",
"_noregex"
],
[
"regex",
"(?P<os_cmd_sep_medium_acuracy>\\;)",
"_noregex"
],
[
"set",
"code_execution_prefix_set"
],
[
"set",
"os_command_separators"
],
[
"set",
"sql_prefix2"
]
],
";--": [
[
"regex",
"(?P<sqli_medium_acuracy_5>\\;\\-\\-)",
"_noregex"
]
],
";dir_napost": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_1>\\;dir(?!\\w))",
"_noregex"
]
],
";id;": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_20>\\;id\\;)",
"_noregex"
]
],
";id_napost": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy>\\;id(?!\\w))",
"_noregex"
]
],
";id|": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_9>\\;id\\|)",
"_noregex"
]
],
";|/": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy_6>\\;\\|\\/)",
"_noregex"
]
],
"<": [
[
"and_condition",
"2_:,<"
],
[
"and_condition",
"2_/,<"
],
[
"regex",
"(?P<medium_acuracy>\\<)",
"_noregex"
],
[
"and_condition",
"3_=,<,%"
],
[
"and_condition",
"2_<,/"
],
[
"and_condition",
"2_cat,<"
],
[
"set",
"sql_compare"
],
[
"set",
"sql_comparison"
]
],
"<!--": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_11>\\<\\!\\-\\-)",
"_noregex"
],
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_10>\\<\\!\\-\\-)",
"_noregex"
]
],
"<!attlist_napost": [
[
"regex",
"(?P<xss_html_special_64>\\<\\!attlist(?!\\w))",
"_noregex"
]
],
"<!doctype": [
[
"and_condition",
"3_<!doctype,entity,system"
]
],
"<!doctype_napost": [
[
"regex",
"(?P<xxe>\\<\\!doctype(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<xss_html_tags_high_acuracy2968>\\<\\!doctype(?!\\w))",
"_noregex"
]
],
"<!element_napost": [
[
"regex",
"(?P<xxe_0>\\<\\!element(?!\\w))",
"_noregex"
]
],
"<!entity_napost": [
[
"regex",
"(?P<xxe_2>\\<\\!entity(?!\\w))",
"_noregex"
]
],
"<%": [
[
"regex",
"(?P<high_acuracy_code_exec048d>\\<\\%)",
"_noregex"
]
],
"</b>": [
[
"regex",
"(?P<resp_body_php_errors_138>\\<\\/b\\>\\s*on\\s*line\\s*\\<b\\>)",
""
]
],
"<>": [
[
"regex",
"(?P<quotes_ev_fast_regab4e>(\\<\\>))",
""
]
],
"<?": [
[
"regex",
"(?P<high_acuracy_code_exec59c8>\\<\\?)",
"_noregex"
]
],
"<?php_napost": [
[
"regex",
"(?P<high_acuracy_4>\\<\\?php(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<high_acuracy_code_execution_6>\\<\\?php(?!\\w))",
"_noregex"
]
],
"<?xml_napost": [
[
"regex",
"(?P<xxe_3>\\<\\?xml(?!\\w))",
"_noregex"
]
],
"<a_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy0ec1>\\<a(?!\\w))",
"_noregex"
]
],
"<abbr_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_51>\\<abbr(?!\\w))",
"_noregex"
]
],
"<acronym_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_16>\\<acronym(?!\\w))",
"_noregex"
]
],
"<address_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_104>\\<address(?!\\w))",
"_noregex"
]
],
"<applet_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_81>\\<applet(?!\\w))",
"_noregex"
]
],
"<area_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_49>\\<area(?!\\w))",
"_noregex"
]
],
"<article_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_103>\\<article(?!\\w))",
"_noregex"
]
],
"<aside_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_65>\\<aside(?!\\w))",
"_noregex"
]
],
"<audio_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_3>\\<audio(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<xss_html_tags_high_acuracy_3>\\<audio(?!\\w))",
"_noregex"
]
],
"<b>warning</b>": [
[
"regex",
"(?P<resp_body_data_leak_sql_3>\\<b\\>warning\\<\\/b\\>\\s*\\:\\s*\\s*ibase\\_)",
""
],
[
"regex",
"(?P<resp_body_php_errors_59>\\<b\\>warning\\<\\/b\\>\\s*\\:\\s*)",
""
]
],
"<b_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy11aa>\\<b(?!\\w))",
"_noregex"
]
],
"<base_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy5e70>\\<base(?!\\w))",
"_noregex"
]
],
"<basefont_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_22>\\<basefont(?!\\w))",
"_noregex"
]
],
"<bdi_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_28>\\<bdi(?!\\w))",
"_noregex"
]
],
"<bdo_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_68>\\<bdo(?!\\w))",
"_noregex"
]
],
"<big_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_100>\\<big(?!\\w))",
"_noregex"
]
],
"<binding_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_94>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<binding(?!\\w))",
""
]
],
"<blockquote_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_40>\\<blockquote(?!\\w))",
"_noregex"
]
],
"<body_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_105>\\<body(?!\\w))",
"_noregex"
]
],
"<br>timeout": [
[
"regex",
"(?P<resp_body_data_leak_iis_3>\\<br\\>timeout\\s*expired\\<br\\>)",
""
]
],
"<br_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_9>\\<br(?!\\w))",
"_noregex"
]
],
"<button_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_97>\\<button(?!\\w))",
"_noregex"
]
],
"<canvas_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_64>\\<canvas(?!\\w))",
"_noregex"
]
],
"<caption_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_73>\\<caption(?!\\w))",
"_noregex"
]
],
"<center_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_76>\\<center(?!\\w))",
"_noregex"
]
],
"<cite_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_7>\\<cite(?!\\w))",
"_noregex"
]
],
"<code_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_50>\\<code(?!\\w))",
"_noregex"
]
],
"<col_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy5d04>\\<col(?!\\w))",
"_noregex"
]
],
"<colgroup_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_26>\\<colgroup(?!\\w))",
"_noregex"
]
],
"<datalist_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_91>\\<datalist(?!\\w))",
"_noregex"
]
],
"<dd_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_20>\\<dd(?!\\w))",
"_noregex"
]
],
"<del_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_27>\\<del(?!\\w))",
"_noregex"
]
],
"<details_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_67>\\<details(?!\\w))",
"_noregex"
]
],
"<dfn_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_38>\\<dfn(?!\\w))",
"_noregex"
]
],
"<dialog_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_99>\\<dialog(?!\\w))",
"_noregex"
]
],
"<dir_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_6>\\<dir(?!\\w))",
"_noregex"
]
],
"<div_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_17>\\<div(?!\\w))",
"_noregex"
]
],
"<dl_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_25>\\<dl(?!\\w))",
"_noregex"
]
],
"<dt_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_35>\\<dt(?!\\w))",
"_noregex"
]
],
"<em_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy3c13>\\<em(?!\\w))",
"_noregex"
]
],
"<embed_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_88>\\<embed(?!\\w))",
"_noregex"
]
],
"<event-source_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_69>\\<event\\-source(?!\\w))",
"_noregex"
]
],
"<fieldset_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_54>\\<fieldset(?!\\w))",
"_noregex"
]
],
"<figcaption_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_13>\\<figcaption(?!\\w))",
"_noregex"
]
],
"<figure_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_102>\\<figure(?!\\w))",
"_noregex"
]
],
"<font_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_48>\\<font(?!\\w))",
"_noregex"
]
],
"<footer_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_56>\\<footer(?!\\w))",
"_noregex"
]
],
"<form_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_33>\\<form(?!\\w))",
"_noregex"
]
],
"<frame_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy7463>\\<frame(?!\\w))",
"_noregex"
]
],
"<frameset_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_24>\\<frameset(?!\\w))",
"_noregex"
]
],
"<h": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_15>\\<h\\d+)",
""
]
],
"<h2": [
[
"regex",
"(?P<xss_html_tags_high_acuracy7f39>\\<h2)",
"_noregex"
]
],
"<h3": [
[
"regex",
"(?P<xss_html_tags_high_acuracybe83>\\<h3)",
"_noregex"
]
],
"<h4": [
[
"regex",
"(?P<xss_html_tags_high_acuracy356c>\\<h4)",
"_noregex"
]
],
"<h5": [
[
"regex",
"(?P<xss_html_tags_high_acuracy7058>\\<h5)",
"_noregex"
]
],
"<h6": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_0>\\<h6)",
"_noregex"
]
],
"<head_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracyd0d4>\\<head(?!\\w))",
"_noregex"
]
],
"<header_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_77>\\<header(?!\\w))",
"_noregex"
]
],
"<hr_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_37>\\<hr(?!\\w))",
"_noregex"
]
],
"<html_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_52>\\<html(?!\\w))",
"_noregex"
]
],
"<i_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy5422>\\<i(?!\\w))",
"_noregex"
]
],
"<iframe_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_41>\\<iframe(?!\\w))",
"_noregex"
]
],
"<img_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_8>\\<img(?!\\w))",
"_noregex"
]
],
"<input_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_58>\\<input(?!\\w))",
"_noregex"
]
],
"<ins_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_62>\\<ins(?!\\w))",
"_noregex"
]
],
"<jsp": [
[
"regex",
"(?P<resp_body_data_java_leak_16>\\<jsp\\s*\\:\\s*)",
""
]
],
"<kbd_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_87>\\<kbd(?!\\w))",
"_noregex"
]
],
"<keygen_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_90>\\<keygen(?!\\w))",
"_noregex"
]
],
"<label_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_63>\\<label(?!\\w))",
"_noregex"
]
],
"<legend_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_60>\\<legend(?!\\w))",
"_noregex"
]
],
"<li_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy2c91>\\<li(?!\\w))",
"_noregex"
]
],
"<link_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_14>\\<link(?!\\w))",
"_noregex"
]
],
"<main_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_46>\\<main(?!\\w))",
"_noregex"
]
],
"<map_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_84>\\<map(?!\\w))",
"_noregex"
]
],
"<mark_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_21>\\<mark(?!\\w))",
"_noregex"
]
],
"<math_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_29>\\<math(?!\\w))",
"_noregex"
]
],
"<menu_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracyaadf>\\<menu(?!\\w))",
"_noregex"
]
],
"<menuitem_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_10>\\<menuitem(?!\\w))",
"_noregex"
]
],
"<message_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_73>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<message(?!\\w))",
""
]
],
"<meta_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_86>\\<meta(?!\\w))",
"_noregex"
]
],
"<meter_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_95>\\<meter(?!\\w))",
"_noregex"
]
],
"<nav_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_44>\\<nav(?!\\w))",
"_noregex"
]
],
"<noframes_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_43>\\<noframes(?!\\w))",
"_noregex"
]
],
"<noscript_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_59>\\<noscript(?!\\w))",
"_noregex"
]
],
"<object_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_2>\\<object(?!\\w))",
"_noregex"
]
],
"<ol_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_78>\\<ol(?!\\w))",
"_noregex"
]
],
"<optgroup_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_18>\\<optgroup(?!\\w))",
"_noregex"
]
],
"<option_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_19>\\<option(?!\\w))",
"_noregex"
]
],
"<output_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_12>\\<output(?!\\w))",
"_noregex"
]
],
"<p_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracye36b>\\<p(?!\\w))",
"_noregex"
]
],
"<param_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_31>\\<param(?!\\w))",
"_noregex"
]
],
"<porttype_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_40>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<porttype(?!\\w))",
""
]
],
"<pre_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_61>\\<pre(?!\\w))",
"_noregex"
]
],
"<progress_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_57>\\<progress(?!\\w))",
"_noregex"
]
],
"<q_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_23>\\<q(?!\\w))",
"_noregex"
]
],
"<restriction_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_117>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*\\<restriction(?!\\w))",
""
]
],
"<rp_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_72>\\<rp(?!\\w))",
"_noregex"
]
],
"<rt_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_101>\\<rt(?!\\w))",
"_noregex"
]
],
"<ruby_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_75>\\<ruby(?!\\w))",
"_noregex"
]
],
"<s_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracydd7f>\\<s(?!\\w))",
"_noregex"
]
],
"<samp_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_34>\\<samp(?!\\w))",
"_noregex"
]
],
"<script_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_66>\\<script(?!\\w))",
"_noregex"
]
],
"<section_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_93>\\<section(?!\\w))",
"_noregex"
]
],
"<select_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_96>\\<select(?!\\w))",
"_noregex"
]
],
"<service_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_29>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<service(?!\\w))",
""
]
],
"<small_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_79>\\<small(?!\\w))",
"_noregex"
]
],
"<source_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_55>\\<source(?!\\w))",
"_noregex"
]
],
"<span_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_71>\\<span(?!\\w))",
"_noregex"
]
],
"<strike_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_36>\\<strike(?!\\w))",
"_noregex"
]
],
"<strong_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_32>\\<strong(?!\\w))",
"_noregex"
]
],
"<style_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_80>\\<style(?!\\w))",
"_noregex"
]
],
"<sub_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_82>\\<sub(?!\\w))",
"_noregex"
]
],
"<summary_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_4>\\<summary(?!\\w))",
"_noregex"
]
],
"<sup_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_83>\\<sup(?!\\w))",
"_noregex"
]
],
"<svg_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_30>\\<svg(?!\\w))",
"_noregex"
]
],
"<table_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_45>\\<table(?!\\w))",
"_noregex"
]
],
"<tbody_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_42>\\<tbody(?!\\w))",
"_noregex"
]
],
"<td_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_53>\\<td(?!\\w))",
"_noregex"
]
],
"<textarea_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_94>\\<textarea(?!\\w))",
"_noregex"
]
],
"<tfoot_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_98>\\<tfoot(?!\\w))",
"_noregex"
]
],
"<th_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy32c9>\\<th(?!\\w))",
"_noregex"
]
],
"<thead_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_74>\\<thead(?!\\w))",
"_noregex"
]
],
"<time_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_70>\\<time(?!\\w))",
"_noregex"
]
],
"<title>index": [
[
"regex",
"(?P<resp_body_generic_data_leak_0>\\<title\\>index\\s*of\\s*\\.\\s*)",
""
]
],
"<title_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_39>\\<title(?!\\w))",
"_noregex"
]
],
"<tr_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy2d32>\\<tr(?!\\w))",
"_noregex"
]
],
"<track_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_85>\\<track(?!\\w))",
"_noregex"
]
],
"<tt_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_89>\\<tt(?!\\w))",
"_noregex"
]
],
"<u_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracya34b>\\<u(?!\\w))",
"_noregex"
]
],
"<ul_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_47>\\<ul(?!\\w))",
"_noregex"
]
],
"<var_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_92>\\<var(?!\\w))",
"_noregex"
]
],
"<video_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_1>\\<video(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<xss_html_tags_high_acuracy_1>\\<video(?!\\w))",
"_noregex"
]
],
"<wbr_napost": [
[
"regex",
"(?P<xss_html_tags_high_acuracy_5>\\<wbr(?!\\w))",
"_noregex"
]
],
"=": [
[
"and_condition",
"2_prompt_alert,="
],
[
"and_condition",
"2_on,="
],
[
"and_condition",
"3_\r,\n,="
],
[
"and_condition",
"2_*,="
],
[
"and_condition",
"3_(,=,)"
],
[
"regex",
"(?P<medium_acuracy>\\=)",
"_noregex"
],
[
"and_condition",
"3_=,<,%"
],
[
"and_condition",
"2_quotes,="
],
[
"and_condition",
"3_xss_pentest_tags,=,xss_event"
],
[
"and_condition",
"2_on,="
],
[
"and_condition",
"2_sql_conditions,="
],
[
"and_condition",
"2_=,$"
],
[
"and_condition",
"2_),="
],
[
"set",
"sql_compare"
],
[
"set",
"sql_operators2"
],
[
"set",
"sql_equal"
],
[
"set",
"equal_colon"
],
[
"set",
"sql_operators"
]
],
">": [
[
"regex",
"(?P<medium_acuracy_0>\\>)",
"_noregex"
],
[
"set",
"sql_compare"
],
[
"set",
"sql_comparison"
]
],
">internal": [
[
"regex",
"(?P<resp_body_data_leak_iis_4>\\<h\\d+\\>internal\\s*server\\s*error\\<\\/h\\d+\\>)",
""
]
],
"?": [
[
"set",
"wildcard_characters"
]
],
"?/": [
[
"regex",
"(?P<detect_evasion_high_acuracy_10>\\?\\/)",
"_noregex"
]
],
"?>": [
[
"regex",
"(?P<high_acuracy_code_execution_26>\\?\\>)",
"_noregex"
]
],
"?onfig_napost": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracyb605>\\?onfig\\s*\\.\\s*inc(?!\\w))",
""
]
],
"@": [
[
"and_condition",
"2_@,/"
],
[
"and_condition",
"3_[,/,@"
],
[
"and_condition",
"2_*,@"
],
[
"and_condition",
"3_(,),@"
]
],
"@datadir_napost": [
[
"regex",
"(?P<sqli_generic_58>\\@datadir(?!\\w))",
"_noregex"
]
],
"@eval": [
[
"regex",
"(?P<high_acuracy_code_exec20f9>\\@eval[\\s\\)]*(\\(|//|`))",
""
]
],
"@hostname_napost": [
[
"regex",
"(?P<sqli_generic_21>\\@hostname(?!\\w))",
"_noregex"
]
],
"@import_napost": [
[
"regex",
"(?P<xss_html_special_33>\\@import(?!\\w))",
"_noregex"
]
],
"@ini_get": [
[
"regex",
"(?P<high_acuracy_code_exec1f6f>\\@ini\\_get[\\s\\)]*(\\(|//|`))",
""
]
],
"@select_napost": [
[
"regex",
"(?P<sqli_genericc23f>\\@select(?!\\w))",
"_noregex"
]
],
"@variable_napost": [
[
"regex",
"(?P<high_acuracy_code_execution_53>\\@variable(?!\\w))",
"_noregex"
]
],
"@version_napost": [
[
"regex",
"(?P<sqli_generic_13>\\@version(?!\\w))",
"_noregex"
]
],
"[": [
[
"and_condition",
"2_[,/"
],
[
"regex",
"(?P<xpath_injection_regex_1>\\[\\s*\\w+[\\(<>=!])",
""
],
[
"and_condition",
"3_[,/,@"
],
[
"and_condition",
"3_[,/,book"
],
[
"and_condition",
"2_[,]"
],
[
"and_condition",
"3_[,],nosql_set"
],
[
"and_condition",
"3_[,],nosql_set"
],
[
"and_condition",
"2_[,$"
],
[
"and_condition",
"3_,,[,]"
],
[
"and_condition",
"4_eval,[,],'"
],
[
"and_condition",
"3_[,],("
]
],
"[+!": [
[
"regex",
"(?P<encoding_chars_4>\\[\\+\\!)",
"_noregex"
]
],
"[]": [
[
"regex",
"(?P<ssti_16>\\[\\]\\s*\\.\\s*)",
""
]
],
"[dm_query_e_syntax]": [
[
"regex",
"(?P<resp_body_data_leak_sql_32>\\[dm\\_query\\_e\\_syntax\\])",
"_noregex"
]
],
"[ibm]": [
[
"regex",
"(?P<resp_body_data_leak_sql_66>\\[ibm\\])",
"_noregex"
]
],
"[java": [
[
"regex",
"(?P<resp_body_data_java_leak_12>\\[java\\s*\\.\\s*lang\\s*\\.\\s*)",
""
]
],
"[macromedia]": [
[
"regex",
"(?P<resp_body_data_leak_sql_18>\\[macromedia\\])",
"_noregex"
]
],
"[macromedia][sqlserver": [
[
"regex",
"(?P<resp_body_data_leak_sql_97>\\[macromedia\\]\\[sqlserver\\s*jdbc\\s*driver\\])",
""
]
],
"[microsoft]": [
[
"regex",
"(?P<resp_body_data_leak_sql_37>\\[microsoft\\])",
"_noregex"
]
],
"[microsoft][odbc": [
[
"regex",
"(?P<resp_body_data_leak_sql_38>\\[microsoft\\]\\[odbc\\s*sql\\s*server\\s*driver\\])",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_45>\\[microsoft\\]\\[odbc\\s*microsoft\\s*access\\s*driver\\])",
""
]
],
"[mysql]": [
[
"regex",
"(?P<resp_body_data_leak_sql_75>\\[mysql\\])",
"_noregex"
],
[
"regex",
"(?P<resp_body_data_leak_sql_75>\\[mysql\\])",
"_noregex"
]
],
"[odbc]": [
[
"regex",
"(?P<resp_body_data_leak_sql_67>\\[odbc\\])",
"_noregex"
],
[
"regex",
"(?P<resp_body_data_leak_sql_67>\\[odbc\\])",
"_noregex"
]
],
"[sqlexception]": [
[
"regex",
"(?P<resp_body_data_leak_sql_92>\\[sqlexception\\])",
"_noregex"
]
],
"[sqlexception_napost": [
[
"regex",
"(?P<resp_body_data_leak_sql_22>\\[sqlexception(?!\\w))",
"_noregex"
]
],
"[sqlite_error]": [
[
"regex",
"(?P<resp_body_data_leak_sql_27>\\[sqlite\\_error\\])",
"_noregex"
]
],
"[sqlserver": [
[
"regex",
"(?P<resp_body_data_leak_sql_47>\\[sqlserver\\s*jdbc\\s*driver\\])",
""
]
],
"\\": [
[
"regex",
"(?P<os_cmd_exec_susp_dir_patts>\\\\\\s*\\.\\s*\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<os_cmd_exec_susp_dir_patts_1>\\s*\\.\\s*\\s*\\.\\s*\\\\)",
""
],
[
"regex",
"(?P<path_traversal_1>\\\\\\s*\\.\\s*\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<path_traversal_3>\\\\\\s*\\.\\s*\\s*\\.\\s*\\/\\s*\\.\\s*\\s*\\.\\s*)",
""
],
[
"and_condition",
"2_:,\\"
],
[
"and_condition",
"2_content-length,\\"
],
[
"regex",
"(?P<high_acuracy65ab>\\\\\\s*\\.\\s*\\s*\\.\\s*)",
""
],
[
"set",
"slashes"
],
[
"set",
"evasions"
]
],
"\\admin_napost": [
[
"regex",
"(?P<vuln_web_files00a6>\\\\admin\\s*\\.\\s*ini(?!\\w))",
""
]
],
"\\inetpub_napost": [
[
"regex",
"(?P<vuln_os_dirs_16>\\\\inetpub(?!\\w))",
"_noregex"
]
],
"\\logicworks_napost": [
[
"regex",
"(?P<vuln_web_files1b74>\\\\logicworks\\s*\\.\\s*ini(?!\\w))",
""
]
],
"\\n_napost": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy_2>\\\\n(?!\\w))",
"_noregex"
]
],
"\\php_napost": [
[
"regex",
"(?P<vuln_web_filesacb6>\\\\php\\s*\\.\\s*ini(?!\\w))",
""
]
],
"\\win_napost": [
[
"regex",
"(?P<vuln_os_files_0>\\\\win\\s*\\.\\s*ini(?!\\w))",
""
]
],
"\\windows_napost": [
[
"regex",
"(?P<vuln_os_dirs_0>\\\\windows(?!\\w))",
"_noregex"
]
],
"\\winnt_napost": [
[
"regex",
"(?P<vuln_os_dirs_17>\\\\winnt(?!\\w))",
"_noregex"
]
],
"\\wwwroot_napost": [
[
"regex",
"(?P<vuln_os_dirs_2>\\\\wwwroot(?!\\w))",
"_noregex"
]
],
"\\x23": [
[
"regex",
"(?P<detect_evasion_high_acuracy_11>\\\\x23)",
"_noregex"
]
],
"]": [
[
"regex",
"(?P<xss_html_special_2>\\]\\s*\\.\\s*)",
""
],
[
"and_condition",
"2_[,]"
],
[
"and_condition",
"3_[,],nosql_set"
],
[
"and_condition",
"3_[,],nosql_set"
],
[
"and_condition",
"3_(,),]"
],
[
"and_condition",
"3_,,[,]"
],
[
"and_condition",
"4_eval,[,],'"
],
[
"and_condition",
"3_[,],("
]
],
"]]]": [
[
"regex",
"(?P<encoding_chars_2>\\]\\]\\])",
"_noregex"
]
],
"__class__": [
[
"regex",
"(?P<ssti_0>\\_\\_class\\_\\_\\s*\\.\\s*)",
""
]
],
"__definesetter__": [
[
"regex",
"(?P<xss_html_speciald85b>\\_\\_definesetter\\_\\_[\\s\\)]*(\\(|//|`))",
""
]
],
"_self": [
[
"regex",
"(?P<high_acuracy_code_exec99db>\\_self\\s*\\.\\s*)",
""
]
],
"`": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy>\\`)",
"_noregex"
],
[
"set",
"code_execution_prefix_set"
],
[
"set",
"os_command_terminators"
],
[
"set",
"os_command_separators"
]
],
"`dir`": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_13>\\`dir\\`)",
"_noregex"
]
],
"a": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"abstract_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_152>(?<!\\w)cannot\\s*call\\s*abstract\\s*method(?!\\w))",
""
]
],
"addheader_napost": [
[
"regex",
"(?P<resp_body_data_java_leak_10>\\s*\\.\\s*addheader(?!\\w))",
""
]
],
"admin": [
[
"and_condition",
"3_admin,\",#"
],
[
"and_condition",
"2_admin,*"
],
[
"set",
"vuln_web_set2"
],
[
"set",
"vuln_web_set3"
],
[
"set",
"vuln_urls_set"
],
[
"set",
"vuln_urls_set"
]
],
"administrator_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_74>(?<!\\w)dcom\\s*has\\s*been\\s*disabled\\s*by\\s*your\\s*administrator(?!\\w))",
""
]
],
"adodb_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_69>(?<!\\w)adodb\\s*\\.\\s*field(?!\\w))",
""
]
],
"adodb_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql085a>(?<!\\w)adodb\\s*\\.\\s*field\\s*[\\s\\)]*(\\(|//|`)0x800a0bcd\\))",
""
]
],
"alert": [
[
"set",
"function_names"
],
[
"set",
"function_names"
],
[
"set",
"prompt_alert"
]
],
"alert_napre": [
[
"regex",
"(?P<xss_html_speciala652>(?<!\\w)alert[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracya652>(?<!\\w)alert[\\s\\)]*(\\(|//|`))",
""
]
],
"all": [
[
"and_condition",
"3_sql_verbs,union,all"
],
[
"set",
"sql_operators2"
]
],
"all_napost_napre": [
[
"regex",
"(?P<sqli_generic>(?<!\\w)all(?!\\w))",
"_noregex"
]
],
"allcfgconv_napost_napre": [
[
"regex",
"(?P<os_commands_10>(?<!\\w)allcfgconv(?!\\w))",
"_noregex"
]
],
"allocate_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors3f4d>(?<!\\w)balloc[\\s\\)]*(\\(|//|`)\\)\\s*failed\\s*to\\s*allocate\\s*memory(?!\\w))",
""
]
],
"allocation_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_43>(?<!\\w)possible\\s*integer\\s*overflow\\s*in\\s*memory\\s*allocation(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors8e64>(?<!\\w)balloc[\\s\\)]*(\\(|//|`)\\)\\s*allocation\\s*exceeds\\s*list\\s*boundary(?!\\w))",
""
]
],
"and": [
[
"and_condition",
"2_between,and"
],
[
"set",
"sql_conditions"
],
[
"set",
"and_or_union"
],
[
"set",
"sql_operators2"
],
[
"set",
"and_or_having"
]
],
"and_napost_napre": [
[
"regex",
"(?P<sqli_generic_65>(?<!\\w)and(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<medium_acuracy_1>(?<!\\w)and(?!\\w))",
"_noregex"
]
],
"and_or_having": [
[
"and_condition",
"2_sql_prefix2,and_or_having"
]
],
"and_or_union": [
[
"regex",
"(?P<regex_postfix_0>\\s(and|or|union)\\s.*([\\);'\"\\|]{2,}|--|/\\*|#))",
""
]
],
"apache_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_11>(?<!\\w)at\\s*org\\s*\\.\\s*apache\\s*\\.\\s*coyote\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<resp_body_data_java_leak_24>(?<!\\w)at\\s*org\\s*\\.\\s*apache\\s*\\.\\s*tomcat\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<resp_body_data_java_leak_3>(?<!\\w)at\\s*org\\s*\\.\\s*apache\\s*\\.\\s*jasper\\s*\\.\\s*)",
""
]
],
"appendchild": [
[
"set",
"function_names"
]
],
"appendchild_napost": [
[
"regex",
"(?P<xss_html_special_46>\\s*\\.\\s*appendchild(?!\\w))",
""
]
],
"application": [
[
"set",
"function_names"
]
],
"application_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_9>(?<!\\w)application\\s*uses\\s*a\\s*value\\s*of\\s*the\\s*wrong\\s*type\\s*for\\s*the\\s*current\\s*operation(?!\\w))",
""
]
],
"application_napre": [
[
"regex",
"(?P<high_acuracy_code_execution_66>(?<!\\w)application\\s*\\.\\s*)",
""
]
],
"apply_napre": [
[
"regex",
"(?P<xss_html_special99fb>(?<!\\w)apply[\\s\\)]*(\\(|//|`))",
""
]
],
"arguments_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_13>(?<!\\w)cannot\\s*get\\s*arguments\\s*for(?!\\w))",
""
]
],
"array": [
[
"set",
"function_names"
]
],
"array_map_napre": [
[
"regex",
"(?P<high_acuracy_code_exec7e9f>(?<!\\w)array\\_map[\\s\\)]*(\\(|//|`))",
""
]
],
"array_napre": [
[
"regex",
"(?P<high_acuracy_code_exec91f3>(?<!\\w)array[\\s\\)]*(\\(|//|`))",
""
]
],
"arraymap": [
[
"set",
"function_names"
]
],
"arrived_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_126>(?<!\\w)arrived\\s*at\\s*end\\s*of\\s*main\\s*loop\\s*which\\s*shouldn(?!\\w))",
""
]
],
"ascii": [
[
"set",
"function_names"
]
],
"ascii_napre": [
[
"regex",
"(?P<sqli_genericd497>(?<!\\w)ascii[\\s\\)]*(\\(|//|`))",
""
]
],
"assert": [
[
"set",
"function_names"
]
],
"assert_napre": [
[
"regex",
"(?P<high_acuracy_code_exec323a>(?<!\\w)assert[\\s\\)]*(\\(|//|`))",
""
]
],
"assign": [
[
"regex",
"(?P<xss_html_specialcb24>\\s*\\.\\s*assign[\\s\\)]*(\\(|//|`))",
""
]
],
"attr": [
[
"set",
"function_names"
]
],
"attr_napre": [
[
"regex",
"(?P<sstifdb4>(?<!\\w)attr[\\s\\)]*(\\(|//|`))",
""
]
],
"attribute_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_70>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*attribute(?!\\w))",
""
]
],
"attributegroup_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_12>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*attributegroup(?!\\w))",
""
]
],
"auctiondeluxe": [
[
"set",
"vuln_web_set3"
]
],
"auth_data": [
[
"set",
"vuln_web_set3"
]
],
"avg": [
[
"set",
"function_names"
]
],
"avg_napre": [
[
"regex",
"(?P<sqli_generic4271>(?<!\\w)avg[\\s\\)]*(\\(|//|`))",
""
]
],
"awk_napost_napre": [
[
"regex",
"(?P<os_commands2ea6>(?<!\\w)awk(?!\\w))",
"_noregex"
]
],
"awl": [
[
"set",
"vuln_web_set3"
]
],
"awstats": [
[
"set",
"vuln_web_set3"
]
],
"b": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_7"
]
],
"back": [
[
"set",
"function_names"
]
],
"back_napre": [
[
"regex",
"(?P<xss_html_specialbe34>(?<!\\w)back[\\s\\)]*(\\(|//|`))",
""
]
],
"backup": [
[
"set",
"vuln_web_set3"
],
[
"set",
"vuln_urls_set"
],
[
"set",
"vuln_urls_set"
],
[
"set",
"vuln_urls_set"
]
],
"base64_decode_napre": [
[
"regex",
"(?P<sqli_genericea23>(?<!\\w)base64\\_decode[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracy_code_execea23>(?<!\\w)base64\\_decode[\\s\\)]*(\\(|//|`))",
""
]
],
"base64_napre": [
[
"regex",
"(?P<xss_html_special>(?<!\\w)base64)",
"_noregex"
]
],
"basedecode": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"basename": [
[
"set",
"function_names"
]
],
"basename_napre": [
[
"regex",
"(?P<high_acuracy_code_exec9e8c>(?<!\\w)basename[\\s\\)]*(\\(|//|`))",
""
]
],
"bash": [
[
"set",
"os_commands2"
]
],
"bash_history_napost": [
[
"regex",
"(?P<url_scanning6bf5>\\s*\\.\\s*bash\\_history(?!\\w))",
""
]
],
"bash_logut_napost": [
[
"regex",
"(?P<url_scanning6f3d>\\s*\\.\\s*bash\\_logut(?!\\w))",
""
]
],
"bash_napost_napre": [
[
"regex",
"(?P<os_commands_20>(?<!\\w)bash(?!\\w))",
"_noregex"
]
],
"bboardservlet_napost": [
[
"regex",
"(?P<vuln_web_files_397>\\/sunexamples\\s*\\.\\s*bboardservlet(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_721>\\/e7uo7v7d\\s*\\.\\s*bboardservlet(?!\\w))",
""
]
],
"bck": [
[
"set",
"function_names"
]
],
"bck_napost": [
[
"regex",
"(?P<url_scanning_15>\\s*\\.\\s*bck(?!\\w))",
""
]
],
"benchmark": [
[
"set",
"function_names"
]
],
"benchmark_napre": [
[
"regex",
"(?P<sqli_blinda6e0>(?<!\\w)benchmark[\\s\\)]*(\\(|//|`))",
""
]
],
"between": [
[
"and_condition",
"2_between,and"
]
],
"binarywrite_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_22>(?<!\\w)response\\s*\\.\\s*binarywrite(?!\\w))",
""
]
],
"biz_napost": [
[
"regex",
"(?P<vuln_web_files_284>\\/j\\d+biz\\s*\\.\\s*jsp(?!\\w))",
""
]
],
"blog": [
[
"set",
"vuln_web_set3"
],
[
"set",
"vuln_urls_set"
]
],
"body": [
[
"set",
"function_names"
]
],
"body_napre": [
[
"regex",
"(?P<xss_html_special_20>(?<!\\w)body\\s*\\.\\s*)",
""
]
],
"book": [
[
"and_condition",
"3_[,/,book"
]
],
"boot_napost_napre": [
[
"regex",
"(?P<vuln_os_files_1>(?<!\\w)boot\\s*\\.\\s*ini(?!\\w))",
""
],
[
"regex",
"(?P<high_acuracy_3>(?<!\\w)boot\\s*\\.\\s*ini(?!\\w))",
""
]
],
"boozt": [
[
"set",
"vuln_web_set3"
]
],
"bu3m_napost": [
[
"regex",
"(?P<vuln_web_files_64>\\/\\d+bu3m\\s*\\.\\s*xml(?!\\w))",
""
]
],
"bulk": [
[
"set",
"vuln_web_set3"
]
],
"by": [
[
"set",
"sql_operators2"
]
],
"c": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"c32": [
[
"set",
"vuln_web_set3"
]
],
"calendar": [
[
"set",
"vuln_web_set3"
]
],
"call_napost": [
[
"regex",
"(?P<xss_html_special4a8e>\\s*\\.\\s*call(?!\\w))",
""
]
],
"call_napre": [
[
"regex",
"(?P<xss_html_special6675>(?<!\\w)call[\\s\\)]*(\\(|//|`))",
""
]
],
"call_user_func_napre": [
[
"regex",
"(?P<high_acuracy_code_exec2ed8>(?<!\\w)call\\_user\\_func[\\s\\)]*(\\(|//|`))",
""
]
],
"callback_napre": [
[
"regex",
"(?P<resp_body_php_errors_19>(?<!\\w)array\\s*callback\\s*has\\s*to\\s*contain\\s*indices\\s*0\\s*and\\s*\\d+)",
""
]
],
"calluserfunc": [
[
"set",
"function_names"
]
],
"cannot_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_49>(?<!\\w)cannot\\s*access\\s*parent(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_88>(?<!\\w)cannot\\s*access\\s*self(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_51>(?<!\\w)cannot\\s*access\\s*static(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_32>(?<!\\w)cannot\\s*break(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_127>(?<!\\w)cannot\\s*call\\s*non\\s*static\\s*method(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_21>(?<!\\w)cannot\\s*use(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_72>(?<!\\w)cannot\\s*use\\s*assign(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_44>(?<!\\w)cannot\\s*use\\s*object\\s*as\\s*array(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_102>(?<!\\w)cannot\\s*use\\s*object\\s*of\\s*type(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_111>(?<!\\w)cannot\\s*use\\s*string\\s*offset\\s*as\\s*an\\s*array(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_75>(?<!\\w)cannot\\s*use\\s*string\\s*offset\\s*as\\s*an\\s*object(?!\\w))",
""
]
],
"cart32_napost_napre": [
[
"regex",
"(?P<vuln_web_files2919>(?<!\\w)cart32\\s*\\.\\s*ini(?!\\w))",
""
]
],
"case": [
[
"and_condition",
"2_case,when"
],
[
"and_condition",
"2_case,("
],
[
"set",
"function_names"
],
[
"set",
"sql_operators2"
]
],
"case_napre": [
[
"regex",
"(?P<sqli_generic936a>(?<!\\w)case[\\s\\)]*(\\(|//|`))",
""
]
],
"casee_napre": [
[
"regex",
"(?P<high_acuracy_code_execa88a>(?<!\\w)casee[\\s\\)]*(\\(|//|`))",
""
]
],
"cast": [
[
"set",
"function_names"
]
],
"cast_napre": [
[
"regex",
"(?P<sqli_generic4c86>(?<!\\w)cast[\\s\\)]*(\\(|//|`))",
""
]
],
"cat": [
[
"and_condition",
"2_cat,<"
],
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"cat_napost_napre": [
[
"regex",
"(?P<os_commands>(?<!\\w)cat(?!\\w))",
"_noregex"
]
],
"catalina_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_17>(?<!\\w)at\\s*org\\s*\\.\\s*apache\\s*\\.\\s*catalina(?!\\w))",
""
]
],
"catch": [
[
"set",
"function_names"
]
],
"catch_napre": [
[
"regex",
"(?P<xss_html_special171d>(?<!\\w)catch[\\s\\)]*(\\(|//|`))",
""
]
],
"cbmc": [
[
"set",
"vuln_web_set3"
]
],
"cd": [
[
"and_condition",
"2_cd,/"
],
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"cd_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_19>(?<!\\w)cd\\s*\\s*\\.\\s*\\s*\\.\\s*)",
""
]
],
"cellsprint_napost": [
[
"regex",
"(?P<vuln_web_files_401>\\/owa\\_util\\s*\\.\\s*cellsprint(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_17>\\/e7uo7v7d\\s*\\.\\s*cellsprint(?!\\w))",
""
]
],
"cgi-bin": [
[
"and_condition",
"2_cgi-bin,vuln_web_set3"
]
],
"cgiwrap": [
[
"set",
"vuln_web_set3"
]
],
"char": [
[
"set",
"function_names"
]
],
"char@_napre": [
[
"regex",
"(?P<sqli_generic0ceb>(?<!\\w)char\\@)",
"_noregex"
]
],
"char_napre": [
[
"regex",
"(?P<high_acuracy34a1>(?<!\\w)char[\\s\\)]*(\\(|//|`))",
""
]
],
"character_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_91>(?<!\\w)an\\s*illegal\\s*character\\s*has\\s*been\\s*found\\s*in\\s*the\\s*statement(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_53>(?<!\\w)after\\s*the\\s*character\\s*string(?!\\w))",
""
]
],
"chr": [
[
"set",
"function_names"
]
],
"chr_napre": [
[
"regex",
"(?P<high_acuracy_code_exec315e>(?<!\\w)chr[\\s\\)]*(\\(|//|`))",
""
]
],
"class": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"class_napost_napre": [
[
"regex",
"(?P<ssti_2>(?<!\\w)class\\s*\\.\\s*base(?!\\w))",
""
]
],
"class_napre": [
[
"regex",
"(?P<ssti>(?<!\\w)class\\s*\\.\\s*)",
""
]
],
"classifieds": [
[
"set",
"vuln_web_set3"
]
],
"clearconfig": [
[
"set",
"function_names"
]
],
"clearconfig_napre": [
[
"regex",
"(?P<ssti2553>(?<!\\w)clearconfig[\\s\\)]*(\\(|//|`))",
""
]
],
"cmd": [
[
"and_condition",
"2_exec,cmd"
]
],
"cn": [
[
"set",
"ldap_words"
]
],
"code</b>_napre": [
[
"regex",
"(?P<resp_body_php_errorsea88>(?<!\\w)eval[\\s\\)]*(\\(|//|`)\\)\\'d\\s*code\\<\\/b\\>\\s*on\\s*line\\s*\\<b\\>)",
""
]
],
"code_execution_prefix_set": [
[
"regex",
"(?P<regex_code_execution_2>[)&|;`]+\\s*\\w+\\s*(\\-\\w|http|ftp|file|\\.*\\/))",
""
]
],
"column_name_napost_napre": [
[
"regex",
"(?P<sqli_generic_22>(?<!\\w)column\\_name(?!\\w))",
"_noregex"
]
],
"command_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_18>(?<!\\w)adodb\\s*\\.\\s*command(?!\\w))",
""
]
],
"comment_napre": [
[
"regex",
"(?P<xpath_injection671f>(?<!\\w)comment[\\s\\)]*(\\(|//|`))",
""
]
],
"common": [
[
"set",
"vuln_web_set3"
]
],
"commonname": [
[
"set",
"ldap_words"
]
],
"compilation_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_11>(?<!\\w)microsoft\\s*vbscript\\s*compilation\\s*error(?!\\w))",
""
]
],
"compilation_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis4e9f>(?<!\\w)microsoft\\s*vbscript\\s*compilation\\s*[\\s\\)]*(\\(|//|`)0x8)",
""
]
],
"complextype_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_140>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*complextype(?!\\w))",
""
]
],
"components": [
[
"set",
"function_names"
]
],
"components[_napre": [
[
"regex",
"(?P<xss_html_special_45>(?<!\\w)components\\[)",
"_noregex"
]
],
"components_napre": [
[
"regex",
"(?P<xss_html_special_21>(?<!\\w)components\\s*\\.\\s*)",
""
]
],
"concat": [
[
"set",
"function_names"
]
],
"concat_napre": [
[
"regex",
"(?P<sqli_generic4fa4>(?<!\\w)concat[\\s\\)]*(\\(|//|`))",
""
]
],
"conf": [
[
"set",
"function_names"
]
],
"conf_napost": [
[
"regex",
"(?P<high_acuracy_0>\\s*\\.\\s*conf(?!\\w))",
""
]
],
"config": [
[
"set",
"function_names"
],
[
"set",
"vuln_web_set2"
]
],
"config_napost_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy0f71>(?<!\\w)config\\s*\\.\\s*inc(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files87e1>(?<!\\w)config\\s*\\.\\s*ini(?!\\w))",
""
]
],
"config_napre": [
[
"regex",
"(?P<ssti>(?<!\\w)config\\s*\\.\\s*)",
""
]
],
"configuration_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_10>(?<!\\w)part\\s*of\\s*the\\s*server\\s*has\\s*crashed\\s*or\\s*it\\s*has\\s*a\\s*configuration\\s*error\\s*\\.\\s*\\<\\/h2\\>)",
""
]
],
"confirm_napre": [
[
"regex",
"(?P<xss_html_special7168>(?<!\\w)confirm[\\s\\)]*(\\(|//|`))",
""
]
],
"connect_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_15>(?<!\\w)cannot\\s*connect\\s*to\\s*the\\s*server\\s*\\:\\s*\\s*timed\\s*out(?!\\w))",
""
]
],
"console_napost_napre": [
[
"regex",
"(?P<vuln_web_files_194>(?<!\\w)console\\s*\\.\\s*log(?!\\w))",
""
]
],
"constructor": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"constructor_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_105>(?<!\\w)cannot\\s*call\\s*constructor(?!\\w))",
""
]
],
"constructor_napre": [
[
"regex",
"(?P<xss_html_special_34>(?<!\\w)constructor\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<xss_html_special1720>(?<!\\w)constructor[\\s\\)]*(\\(|//|`))",
""
]
],
"content-length": [
[
"and_condition",
"2_content-length,\\"
],
[
"regex",
"(?P<regex_high_acuracy_crlf_inj_3>content-length.*\\r\\n\\r\\n.*<)",
""
]
],
"context_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_169>(?<!\\w)using\\s*\\$this\\s*when\\s*not\\s*in\\s*object\\s*context(?!\\w))",
""
]
],
"controller": [
[
"set",
"vuln_web_set2"
]
],
"convert": [
[
"set",
"function_names"
]
],
"convert_napre": [
[
"regex",
"(?P<sqli_generic3928>(?<!\\w)convert[\\s\\)]*(\\(|//|`))",
""
]
],
"copy": [
[
"set",
"function_names"
]
],
"copy_napre": [
[
"regex",
"(?P<high_acuracy_code_exece0bc>(?<!\\w)copy[\\s\\)]*(\\(|//|`))",
""
]
],
"count": [
[
"set",
"function_names"
]
],
"count_napost_napre": [
[
"regex",
"(?P<sqli_generic>(?<!\\w)count(?!\\w))",
"_noregex"
]
],
"count_napre": [
[
"regex",
"(?P<sqli_generice043>(?<!\\w)count[\\s\\)]*(\\(|//|`)\\*\\))",
""
],
[
"regex",
"(?P<sqli_generic3c80>(?<!\\w)count[\\s\\)]*(\\(|//|`))",
""
]
],
"counterfiglet": [
[
"set",
"vuln_web_set3"
]
],
"create_function_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_93>(?<!\\w)unexpected\\s*inconsistency\\s*in\\s*create\\_function(?!\\w))",
""
],
[
"regex",
"(?P<high_acuracy_code_exec4753>(?<!\\w)create\\_function(?!\\w))",
"_noregex"
]
],
"create_function_napre": [
[
"regex",
"(?P<high_acuracy_code_execaf62>(?<!\\w)create\\_function[\\s\\)]*(\\(|//|`))",
""
]
],
"create_napost_napre": [
[
"regex",
"(?P<sqli_generic>(?<!\\w)create(?!\\w))",
"_noregex"
]
],
"createelement": [
[
"set",
"function_names"
]
],
"createelement_napost": [
[
"regex",
"(?P<xss_html_special_12>\\s*\\.\\s*createelement(?!\\w))",
""
]
],
"createfunction": [
[
"set",
"function_names"
]
],
"createobject_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_18>(?<!\\w)server\\s*\\.\\s*createobject(?!\\w))",
""
]
],
"createtextfile_napost": [
[
"regex",
"(?P<resp_body_data_java_leak_13>\\s*\\.\\s*createtextfile(?!\\w))",
""
]
],
"csmailto": [
[
"set",
"vuln_web_set3"
]
],
"cspassword": [
[
"set",
"vuln_web_set3"
]
],
"curl": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
],
[
"set",
"os_tools"
]
],
"curl_napost_napre": [
[
"regex",
"(?P<os_commands_24>(?<!\\w)curl(?!\\w))",
"_noregex"
]
],
"cutecast": [
[
"set",
"vuln_web_set3"
]
],
"d": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"dash_napost_napre": [
[
"regex",
"(?P<os_commandsbdd9>(?<!\\w)dash(?!\\w))",
"_noregex"
]
],
"dasp": [
[
"set",
"vuln_web_set3"
]
],
"data": [
[
"set",
"vuln_web_set3"
],
[
"set",
"vuln_urls_set"
]
],
"data_napre": [
[
"regex",
"(?P<xss_html_special_6>(?<!\\w)data\\s*\\:\\s*)",
""
]
],
"database": [
[
"set",
"function_names"
],
[
"set",
"function_names"
],
[
"set",
"vuln_urls_set"
]
],
"database_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_9>(?<!\\w)jet\\s*database\\s*engine(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_13>(?<!\\w)access\\s*database\\s*engine(?!\\w))",
""
],
[
"regex",
"(?P<sqli_genericadd9>(?<!\\w)drop\\s*database(?!\\w))",
""
]
],
"database_napre": [
[
"regex",
"(?P<sqli_generic587a>(?<!\\w)database[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<sqli_generic587a>(?<!\\w)database[\\s\\)]*(\\(|//|`))",
""
]
],
"date": [
[
"set",
"os_commands2"
]
],
"dateformat_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_167>(?<!\\w)dateformat\\s*class\\s*not\\s*defined(?!\\w))",
""
]
],
"datetimeimmutable_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_35>(?<!\\w)invalid\\s*serialization\\s*data\\s*for\\s*datetimeimmutable\\s*object(?!\\w))",
""
]
],
"datetimeinterface_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_86>(?<!\\w)datetimeinterface\\s*can(?!\\w))",
""
]
],
"db": [
[
"set",
"vuln_urls_set"
]
],
"db2__napre": [
[
"regex",
"(?P<resp_body_data_leak_sql7ecf>(?<!\\w)db2\\_)",
"_noregex"
]
],
"db4web_c": [
[
"set",
"vuln_web_set3"
]
],
"dba_users_napost_napre": [
[
"regex",
"(?P<sqli_generic_14>(?<!\\w)dba\\_users(?!\\w))",
"_noregex"
]
],
"dbman": [
[
"set",
"vuln_web_set3"
]
],
"dbo": [
[
"set",
"function_names"
]
],
"dbo_napre": [
[
"regex",
"(?P<sqli_generic_60>(?<!\\w)dbo\\s*\\.\\s*)",
""
]
],
"dcshop": [
[
"set",
"vuln_web_set3"
]
],
"declare": [
[
"regex",
"(?P<regex_sqli_32>declare\\s*@)",
""
]
],
"declare_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_45>(?<!\\w)cannot\\s*declare\\s*self(?!\\w))",
""
]
],
"decode": [
[
"set",
"function_names"
]
],
"decode_napre": [
[
"regex",
"(?P<high_acuracy_code_exec6274>(?<!\\w)decode[\\s\\)]*(\\(|//|`))",
""
]
],
"decodeuri": [
[
"set",
"function_names"
]
],
"decodeuri_napre": [
[
"regex",
"(?P<xss_html_special883e>(?<!\\w)decodeuri[\\s\\)]*(\\(|//|`))",
""
]
],
"delay": [
[
"and_condition",
"4_waitfor,delay,sql_prefix,:"
],
[
"set",
"waitfor_set"
]
],
"delay_napost_napre": [
[
"regex",
"(?P<sqli_blind_0>(?<!\\w)delay(?!\\w))",
"_noregex"
]
],
"delete": [
[
"set",
"sql_verbs"
]
],
"die": [
[
"set",
"function_names"
]
],
"die_napre": [
[
"regex",
"(?P<high_acuracy_code_exec7b77>(?<!\\w)die[\\s\\)]*(\\(|//|`))",
""
]
],
"dir": [
[
"set",
"os_command_probing"
],
[
"set",
"os_commands1"
]
],
"dir_napost_napre": [
[
"regex",
"(?P<os_commands_16>(?<!\\w)dir(?!\\w))",
"_noregex"
]
],
"directory]<": [
[
"regex",
"(?P<resp_body_generic_data_leak_1>\\>\\[to\\s*parent\\s*directory\\]\\<)",
""
]
],
"distinct_napost_napre": [
[
"regex",
"(?P<sqli_generic_41>(?<!\\w)distinct(?!\\w))",
"_noregex"
]
],
"dll_napost": [
[
"regex",
"(?P<vuln_os_files_2>\\s*\\.\\s*dll(?!\\w))",
""
]
],
"document": [
[
"set",
"function_names"
]
],
"document[_napre": [
[
"regex",
"(?P<xss_html_specialba96>(?<!\\w)document\\[)",
"_noregex"
]
],
"document_napost_napre": [
[
"regex",
"(?P<xss_html_special_44>(?<!\\w)document\\s*\\.\\s*cookie(?!\\w))",
""
],
[
"regex",
"(?P<xss_html_special_50>(?<!\\w)document\\s*\\.\\s*location(?!\\w))",
""
],
[
"regex",
"(?P<xss_html_speciala9ba>(?<!\\w)document\\s*\\.\\s*domain(?!\\w))",
""
]
],
"document_napre": [
[
"regex",
"(?P<xss_html_special>(?<!\\w)document\\s*\\.\\s*)",
""
]
],
"doesn't_napost": [
[
"regex",
"(?P<resp_body_data_leak_sql_95>\\'\\s*doesn\\'t\\s*exist(?!\\w))",
""
]
],
"doesn't_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_60>(?<!\\w)column\\s*count\\s*doesn\\'t\\s*match\\s*value\\s*count\\s*at\\s*row(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_42>(?<!\\w)column\\s*count\\s*doesn\\'t\\s*match(?!\\w))",
""
]
],
"driver]": [
[
"regex",
"(?P<resp_body_data_leak_sql_51>\\[cli\\s*driver\\])",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_70>\\[odbc\\s*sql\\s*server\\s*driver\\])",
""
]
],
"driver][db2/6000]": [
[
"regex",
"(?P<resp_body_data_leak_sql_11>\\[ibm\\]\\[cli\\s*driver\\]\\[db2\\/6000\\])",
""
]
],
"driver_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_24>(?<!\\w)cli\\s*driver(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_36>(?<!\\w)driver(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<resp_body_php_errors_28>(?<!\\w)pdo\\s*\\:\\s*\\s*driver(?!\\w))",
""
]
],
"dshell_napre": [
[
"regex",
"(?P<sqli_genericb28b>(?<!\\w)dshell[\\s\\)]*(\\(|//|`))",
""
]
],
"dual_napost_napre": [
[
"regex",
"(?P<sqli_generic_11>(?<!\\w)dual(?!\\w))",
"_noregex"
]
],
"dump": [
[
"set",
"vuln_urls_set"
]
],
"dump_napost_napre": [
[
"regex",
"(?P<url_scanning_7>(?<!\\w)dump\\s*\\.\\s*sql(?!\\w))",
""
],
[
"regex",
"(?P<url_scanning_9>(?<!\\w)dump\\s*\\.\\s*tar(?!\\w))",
""
]
],
"dynamic_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_71>(?<!\\w)dynamic\\s*sql\\s*error(?!\\w))",
""
]
],
"dynsrc_napost_napre": [
[
"regex",
"(?P<xss_html_special_41>(?<!\\w)dynsrc(?!\\w))",
"_noregex"
]
],
"e": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_7"
]
],
"echo": [
[
"and_condition",
"2_echo,os_command_terminators"
],
[
"set",
"function_names"
],
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"echo_napost_napre": [
[
"regex",
"(?P<os_commands>(?<!\\w)echo(?!\\w))",
"_noregex"
]
],
"echo_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracyd71b>(?<!\\w)echo[\\s\\)]*(\\(|//|`))",
""
]
],
"elt": [
[
"set",
"function_names"
]
],
"elt_napre": [
[
"regex",
"(?P<sqli_generic7598>(?<!\\w)elt[\\s\\)]*(\\(|//|`))",
""
]
],
"encoding_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_10>(?<!\\w)encoding\\s*\\:\\s*\\s*attribute(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_99>(?<!\\w)encoding\\s*\\:\\s*\\s*can(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_3>(?<!\\w)encoding\\s*\\:\\s*\\s*cannot(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_104>(?<!\\w)encoding\\s*\\:\\s*\\s*element(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_149>(?<!\\w)encoding\\s*\\:\\s*\\s*error(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_118>(?<!\\w)encoding\\s*\\:\\s*\\s*external(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_164>(?<!\\w)encoding\\s*\\:\\s*\\s*internal(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_114>(?<!\\w)encoding\\s*\\:\\s*\\s*invalid(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_60>(?<!\\w)encoding\\s*\\:\\s*\\s*soapvar(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_122>(?<!\\w)encoding\\s*\\:\\s*\\s*violation(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_89>(?<!\\w)encoding\\s*\\:\\s*\\s*object(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_121>(?<!\\w)encoding\\s*\\:\\s*\\s*string(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_62>(?<!\\w)encoding\\s*\\:\\s*\\s*\\'\\*\\'\\s*may\\s*only\\s*be\\s*first\\s*arraysize\\s*value\\s*in\\s*list(?!\\w))",
""
]
],
"end": [
[
"set",
"function_names"
]
],
"end_napre": [
[
"regex",
"(?P<high_acuracy_code_execbcd6>(?<!\\w)end[\\s\\)]*(\\(|//|`))",
""
]
],
"entity": [
[
"and_condition",
"3_<!doctype,entity,system"
]
],
"env_napost": [
[
"regex",
"(?P<high_acuracy_code_execc50f>\\s*\\.\\s*env(?!\\w))",
""
]
],
"eq": [
[
"set",
"nosql_set"
]
],
"equal_colon": [
[
"and_condition",
"2_ldap_words,equal_colon"
]
],
"error</title>": [
[
"regex",
"(?P<resp_body_data_leak_iis_8>\\<title\\>500\\s*internal\\s*server\\s*error\\<\\/title\\>)",
""
]
],
"error_log_napost_napre": [
[
"regex",
"(?P<url_scanning4716>(?<!\\w)error\\_log(?!\\w))",
"_noregex"
]
],
"error_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_54>(?<!\\w)db2\\s*sql\\s*error(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_28>(?<!\\w)you\\s*have\\s*an\\s*error\\s*in\\s*your\\s*sql(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_34>(?<!\\w)sql\\s*error(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_79>(?<!\\w)error(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<url_scanningd475>(?<!\\w)error\\s*\\.\\s*log(?!\\w))",
""
]
],
"error_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_87>(?<!\\w)db2\\s*sql\\s*error\\s*\\:\\s*)",
""
],
[
"regex",
"(?P<resp_body_data_leak_iis_2>(?<!\\w)error\\s*\\'800)",
""
]
],
"errorexception_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_135>(?<!\\w)wrong\\s*parameters\\s*for\\s*errorexception(?!\\w))",
""
]
],
"eshop": [
[
"set",
"vuln_urls_set"
]
],
"etc2fpasswd_napost_napre": [
[
"regex",
"(?P<path_traversal913d>(?<!\\w)etc2fpasswd(?!\\w))",
"_noregex"
]
],
"etc_napost_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_8>(?<!\\w)cd\\s*etc(?!\\w))",
""
]
],
"eval": [
[
"and_condition",
"4_eval,[,],'"
],
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"eval_napre": [
[
"regex",
"(?P<xss_html_speciald37a>(?<!\\w)eval\\s*\\.\\s*call[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<xss_html_cmds_high_acuracy3bfa>(?<!\\w)eval[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracy_code_exec3bfa>(?<!\\w)eval[\\s\\)]*(\\(|//|`))",
""
]
],
"evasions": [
[
"regex",
"(?P<hi_acur_fast_reg_evasion_0>(\\/\\*|\\*\\/|\\/\\*\\*\\/|(?<!\\w)0x\\w{2}(?!\\w)|\\\\\\\\u([01][\\w])|%u([01][\\w])|\\\\\\\\[x]\\w\\w|\\'\\s*\\.\\'\\s*|\\\\\\n))",
""
]
],
"ex": [
[
"set",
"function_names"
]
],
"ex_napre": [
[
"regex",
"(?P<sstib08a>(?<!\\w)ex[\\s\\)]*(\\(|//|`))",
""
]
],
"exception_napost": [
[
"regex",
"(?P<resp_body_php_errors93dd>\\s*\\:\\s*\\s*\\:\\s*\\_\\_tostring[\\s\\)]*(\\(|//|`)\\)\\s*must\\s*not\\s*throw\\s*an\\s*exception(?!\\w))",
""
]
],
"exception_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_4>(?<!\\w)sqlite\\s*\\.\\s*exception(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_89>(?<!\\w)exception(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<resp_body_php_errors_139>(?<!\\w)attempt\\s*to\\s*destruct\\s*pending\\s*exception(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_119>(?<!\\w)cannot\\s*set\\s*non\\s*exception\\s*as\\s*previous\\s*exception(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_101>(?<!\\w)exception\\s*thrown\\s*without\\s*a\\s*stack\\s*frame(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_107>(?<!\\w)need\\s*to\\s*supply\\s*an\\s*object\\s*when\\s*throwing\\s*an\\s*exception(?!\\w))",
""
]
],
"exception_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_26>(?<!\\w)exception\\s*)",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql637a>(?<!\\w)exception[\\s\\)]*(\\(|//|`))",
""
]
],
"exceptions_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_63>(?<!\\w)com\\s*\\.\\s*mysql\\s*\\.\\s*jdbc\\s*\\.\\s*exceptions(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_54>(?<!\\w)exceptions\\s*must\\s*be\\s*valid\\s*objects\\s*derived\\s*from\\s*the\\s*exception\\s*base\\s*class(?!\\w))",
""
]
],
"exe": [
[
"set",
"function_names"
]
],
"exe_napost": [
[
"regex",
"(?P<vuln_os_files_4>\\s*\\.\\s*exe(?!\\w))",
""
],
[
"regex",
"(?P<high_acuracy_15>\\s*\\.\\s*exe(?!\\w))",
""
]
],
"exec": [
[
"and_condition",
"2_exec,cmd"
],
[
"and_condition",
"3_exec,(,)"
],
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"exec_napost_napre": [
[
"regex",
"(?P<medium_acuracy>(?<!\\w)exec(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<os_cmd_exec_medium_acuracy>(?<!\\w)exec(?!\\w))",
"_noregex"
]
],
"exec_napre": [
[
"regex",
"(?P<ssti32bf>(?<!\\w)exec[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracy_code_exec32bf>(?<!\\w)exec[\\s\\)]*(\\(|//|`))",
""
]
],
"execcommand_napre": [
[
"regex",
"(?P<xss_html_special8893>(?<!\\w)execcommand[\\s\\)]*(\\(|//|`))",
""
]
],
"execscript": [
[
"set",
"function_names"
]
],
"execscript_napre": [
[
"regex",
"(?P<xss_html_specialdd4a>(?<!\\w)execscript[\\s\\)]*(\\(|//|`))",
""
]
],
"execute": [
[
"set",
"function_names"
]
],
"execute_napost": [
[
"regex",
"(?P<high_acuracy_code_execbb03>\\s*\\.\\s*execute(?!\\w))",
""
]
],
"execute_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_30>(?<!\\w)cannot\\s*execute\\s*a\\s*blank\\s*command\\s*in(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_java_leak_14>(?<!\\w)server\\s*\\.\\s*execute(?!\\w))",
""
]
],
"execute_napre": [
[
"regex",
"(?P<high_acuracy_code_exec8386>(?<!\\w)execute[\\s\\)]*(\\(|//|`))",
""
]
],
"execution_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_57>(?<!\\w)maximum\\s*execution\\s*time\\s*of(?!\\w))",
""
]
],
"exists": [
[
"set",
"nosql_set"
]
],
"exit": [
[
"set",
"function_names"
]
],
"exit_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy065c>(?<!\\w)exit[\\s\\)]*(\\(|//|`))",
""
]
],
"expect://": [
[
"regex",
"(?P<php_proto_wrappers_fast_reged42>(expect://\\w+))",
""
]
],
"expected_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_67>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*expected(?!\\w))",
""
]
],
"export": [
[
"set",
"os_commands2"
]
],
"export_napost_napre": [
[
"regex",
"(?P<os_commands_9>(?<!\\w)export(?!\\w))",
"_noregex"
]
],
"expression": [
[
"set",
"function_names"
],
[
"set",
"expression_url"
]
],
"expression_napost": [
[
"regex",
"(?P<resp_body_data_leak_sql_52>\\s*in\\s*query\\s*expression(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_iis_0>\\>syntax\\s*error\\s*in\\s*string\\s*in\\s*query\\s*expression(?!\\w))",
""
]
],
"expression_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_65>(?<!\\w)syntax\\s*error\\s*in\\s*string\\s*in\\s*query\\s*expression(?!\\w))",
""
]
],
"expression_napre": [
[
"regex",
"(?P<xss_html_special27db>(?<!\\w)expression[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_74>(?<!\\w)data\\s*type\\s*mismatch\\s*in\\s*criteria\\s*expression\\s*\\.\\s*)",
""
]
],
"expression_url": [
[
"and_condition",
"3_expression_url,:,("
]
],
"extension_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_108>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*extension(?!\\w))",
""
]
],
"extract_napre": [
[
"regex",
"(?P<high_acuracy_code_exec0b93>(?<!\\w)extract[\\s\\)]*(\\(|//|`))",
""
]
],
"extractvalue": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"extractvalue_napre": [
[
"regex",
"(?P<sqli_generic2c9a>(?<!\\w)extractvalue[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<sqli_generic2c9a>(?<!\\w)extractvalue[\\s\\)]*(\\(|//|`))",
""
]
],
"extremely_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_90>(?<!\\w)extremely\\s*fatal\\s*error\\s*\\:\\s*\\s*jmpbuf(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_113>(?<!\\w)extremely\\s*fatal\\s*error\\s*\\:\\s*\\s*longjmp(?!\\w))",
""
]
],
"ezshopper2": [
[
"set",
"vuln_web_set3"
]
],
"ezshopper3": [
[
"set",
"vuln_web_set3"
]
],
"f": [
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_10"
]
],
"fatal_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_63>(?<!\\w)fatal\\s*error(?!\\w))",
""
]
],
"field_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_143>(?<!\\w)field\\s*width(?!\\w))",
""
]
],
"file_extentions_set": [
[
"and_condition",
"2_vuln_urls_set,file_extentions_set"
]
],
"file_get_contents_napre": [
[
"regex",
"(?P<high_acuracy_code_execd217>(?<!\\w)file\\_get\\_contents[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracy_code_execd217>(?<!\\w)file\\_get\\_contents[\\s\\)]*(\\(|//|`))",
""
]
],
"file_napre": [
[
"regex",
"(?P<xxe_1>(?<!\\w)file\\s*\\:\\s*)",
""
]
],
"file_put_contents_napre": [
[
"regex",
"(?P<high_acuracy_code_exec778e>(?<!\\w)file\\_put\\_contents[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracy_code_exec778e>(?<!\\w)file\\_put\\_contents[\\s\\)]*(\\(|//|`))",
""
]
],
"filegetcontents": [
[
"set",
"function_names"
]
],
"filemanager": [
[
"set",
"vuln_web_set2"
]
],
"fileoutputstream": [
[
"set",
"function_names"
]
],
"fileoutputstream_napre": [
[
"regex",
"(?P<high_acuracy_code_execa7da>(?<!\\w)fileoutputstream[\\s\\)]*(\\(|//|`))",
""
]
],
"fileputcontents": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"filesystemobject_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_25>(?<!\\w)scripting\\s*\\.\\s*filesystemobject(?!\\w))",
""
]
],
"finally_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_130>(?<!\\w)cannot\\s*yield\\s*from\\s*finally\\s*in\\s*a\\s*force(?!\\w))",
""
]
],
"find": [
[
"set",
"function_names"
]
],
"find_napre": [
[
"regex",
"(?P<xss_html_specialdec0>(?<!\\w)find[\\s\\)]*(\\(|//|`))",
""
]
],
"firewall_napost_napre": [
[
"regex",
"(?P<os_commands_6>(?<!\\w)netsh\\s*firewall(?!\\w))",
""
]
],
"flush": [
[
"regex",
"(?P<high_acuracy_code_exec5729>\\s*\\.\\s*flush[\\s\\)]*(\\(|//|`))",
""
]
],
"fopen": [
[
"set",
"function_names"
]
],
"fopen_napre": [
[
"regex",
"(?P<high_acuracy_code_exec063e>(?<!\\w)fopen[\\s\\)]*(\\(|//|`))",
""
]
],
"foreach": [
[
"and_condition",
"2_{,foreach"
],
[
"and_condition",
"3_{,foreach,/"
]
],
"forward": [
[
"set",
"function_names"
]
],
"forward_napre": [
[
"regex",
"(?P<xss_html_speciala3af>(?<!\\w)forward[\\s\\)]*(\\(|//|`))",
""
]
],
"forward_static_call_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_106>(?<!\\w)cannot\\s*call\\s*forward\\_static\\_call(?!\\w))",
""
]
],
"fread": [
[
"set",
"function_names"
]
],
"fread_napre": [
[
"regex",
"(?P<high_acuracy_code_execa58d>(?<!\\w)fread[\\s\\)]*(\\(|//|`))",
""
]
],
"from": [
[
"and_condition",
"3_select,from,where"
],
[
"and_condition",
"3_union,select,from"
],
[
"and_condition",
"2_select,from"
]
],
"from_napost_napre": [
[
"regex",
"(?P<sqli_generic_37>(?<!\\w)from(?!\\w))",
"_noregex"
]
],
"from_napre": [
[
"regex",
"(?P<mail_attacks_0>(?<!\\w)mail\\s*from\\s*\\:\\s*)",
""
],
[
"regex",
"(?P<mail_attacks_2>(?<!\\w)from\\s*\\:\\s*\\s*)",
""
]
],
"fromcharcode_napost_napre": [
[
"regex",
"(?P<xss_html_special_16>(?<!\\w)string\\s*\\.\\s*fromcharcode(?!\\w))",
""
]
],
"func": [
[
"set",
"function_names"
]
],
"func_napre": [
[
"regex",
"(?P<high_acuracy_code_execbb0c>(?<!\\w)func[\\s\\)]*(\\(|//|`))",
""
]
],
"function": [
[
"and_condition",
"2_function,("
],
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"function_names": [
[
"and_condition",
"2_function_names,quotes"
]
],
"function_napost_napre": [
[
"regex",
"(?P<xss_html_cmds_high_acuracy2d26>(?<!\\w)function(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<resp_body_php_errors_76>(?<!\\w)base\\s*lambda\\s*function\\s*for\\s*closure\\s*not\\s*found(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_85>(?<!\\w)call\\s*to\\s*a\\s*member\\s*function(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_31>(?<!\\w)cannot\\s*destroy\\s*active\\s*lambda\\s*function(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_33>(?<!\\w)function\\s*name\\s*must\\s*be\\s*a\\s*string(?!\\w))",
""
]
],
"function_napre": [
[
"regex",
"(?P<high_acuracy_code_exec3afe>(?<!\\w)function[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracy3afe>(?<!\\w)function[\\s\\)]*(\\(|//|`))",
""
]
],
"g": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_10"
]
],
"gbook": [
[
"set",
"vuln_web_set3"
]
],
"gcc": [
[
"set",
"os_tools"
]
],
"ge": [
[
"set",
"nosql_set"
]
],
"generator_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_17>(?<!\\w)cannot\\s*resume\\s*an\\s*already\\s*running\\s*generator(?!\\w))",
""
]
],
"genpopuplist_napost": [
[
"regex",
"(?P<vuln_web_files_1083>\\/e7uo7v7d\\s*\\.\\s*genpopuplist(?!\\w))",
""
]
],
"get_host_address_napre": [
[
"regex",
"(?P<sqli_generic108f>(?<!\\w)get\\_host\\_address[\\s\\)]*(\\(|//|`))",
""
]
],
"getbytes": [
[
"set",
"function_names"
]
],
"getbytes_napre": [
[
"regex",
"(?P<high_acuracy_code_execa46c>(?<!\\w)getbytes[\\s\\)]*(\\(|//|`))",
""
]
],
"getclass": [
[
"regex",
"(?P<ssti2c4d>\\s*\\.\\s*getclass[\\s\\)]*(\\(|//|`))",
""
]
],
"getenv": [
[
"regex",
"(?P<high_acuracy_code_execbcbe>\\s*\\.\\s*getenv[\\s\\)]*(\\(|//|`))",
""
]
],
"getfile_napost": [
[
"regex",
"(?P<resp_body_data_java_leak_23>\\s*\\.\\s*getfile(?!\\w))",
""
]
],
"getfilter": [
[
"regex",
"(?P<high_acuracy_code_exec50f8>\\s*\\.\\s*getfilter[\\s\\)]*(\\(|//|`))",
""
],
[
"set",
"function_names"
]
],
"getfilter_napre": [
[
"regex",
"(?P<sstie907>(?<!\\w)getfilter[\\s\\)]*(\\(|//|`))",
""
]
],
"gethostaddress": [
[
"set",
"function_names"
]
],
"getparameter": [
[
"set",
"function_names"
]
],
"getparameter_napre": [
[
"regex",
"(?P<high_acuracy_code_exec5ff3>(?<!\\w)getparameter[\\s\\)]*(\\(|//|`))",
""
]
],
"getpath": [
[
"set",
"function_names"
]
],
"getpath_napre": [
[
"regex",
"(?P<sstid1c2>(?<!\\w)getpath[\\s\\)]*(\\(|//|`))",
""
]
],
"getrealpath": [
[
"set",
"function_names"
]
],
"getrealpath_napre": [
[
"regex",
"(?P<high_acuracy_code_execd061>(?<!\\w)getrealpath[\\s\\)]*(\\(|//|`))",
""
]
],
"getruntime": [
[
"set",
"function_names"
]
],
"getruntime_napre": [
[
"regex",
"(?P<ssti8e8b>(?<!\\w)getruntime[\\s\\)]*(\\(|//|`))",
""
]
],
"getscript": [
[
"regex",
"(?P<high_acuracy_code_execf877>\\s*\\.\\s*getscript[\\s\\)]*(\\(|//|`))",
""
]
],
"gif_napost": [
[
"regex",
"(?P<vuln_web_files_776>\\/\\d+23\\s*\\.\\s*gif(?!\\w))",
""
]
],
"givenname": [
[
"set",
"ldap_words"
]
],
"glob://": [
[
"regex",
"(?P<php_proto_wrappers_fast_reg151a>(glob://\\w+))",
""
]
],
"globalthis[_napre": [
[
"regex",
"(?P<xss_html_specialc12a>(?<!\\w)globalthis\\[)",
"_noregex"
]
],
"group_concat_napre": [
[
"regex",
"(?P<sqli_genericba83>(?<!\\w)group\\_concat[\\s\\)]*(\\(|//|`))",
""
]
],
"group_napost_napre": [
[
"regex",
"(?P<sqli_generic_4>(?<!\\w)group\\s*by(?!\\w))",
""
]
],
"groupconcat": [
[
"set",
"function_names"
]
],
"gt": [
[
"set",
"nosql_set"
]
],
"gtid_subset_napre": [
[
"regex",
"(?P<sqli_genericd47d>(?<!\\w)gtid\\_subset[\\s\\)]*(\\(|//|`))",
""
]
],
"gtidsubset": [
[
"set",
"function_names"
]
],
"guestbook": [
[
"set",
"vuln_web_set3"
]
],
"gw5": [
[
"set",
"vuln_web_set3"
]
],
"h": [
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_2"
]
],
"hash": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"hash_napost": [
[
"regex",
"(?P<xss_html_special_40>\\s*\\.\\s*hash(?!\\w))",
""
]
],
"hash_napre": [
[
"regex",
"(?P<sqli_generic39a4>(?<!\\w)hash[\\s\\)]*(\\(|//|`))",
""
]
],
"hashbytes": [
[
"set",
"function_names"
]
],
"hashbytes_napre": [
[
"regex",
"(?P<sqli_generic332b>(?<!\\w)hashbytes[\\s\\)]*(\\(|//|`))",
""
]
],
"having": [
[
"set",
"sql_conditions"
],
[
"set",
"sql_operators2"
],
[
"set",
"and_or_having"
]
],
"having_napost_napre": [
[
"regex",
"(?P<sqli_generic_50>(?<!\\w)having(?!\\w))",
"_noregex"
]
],
"hex": [
[
"set",
"function_names"
]
],
"hex_napre": [
[
"regex",
"(?P<sqli_generic502b>(?<!\\w)hex[\\s\\)]*(\\(|//|`))",
""
]
],
"history": [
[
"set",
"function_names"
]
],
"history_napre": [
[
"regex",
"(?P<xss_html_special_28>(?<!\\w)history\\s*\\.\\s*)",
""
]
],
"home": [
[
"set",
"vuln_urls_set"
]
],
"horde": [
[
"set",
"vuln_web_set3"
]
],
"hostname": [
[
"set",
"os_commands2"
]
],
"hostname_napost_napre": [
[
"regex",
"(?P<os_commands_27>(?<!\\w)hostname(?!\\w))",
"_noregex"
]
],
"hosts_napost_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_15>(?<!\\w)cat\\s*hosts(?!\\w))",
""
]
],
"href=_napre": [
[
"regex",
"(?P<xss_html_special_9>(?<!\\w)href\\=)",
"_noregex"
]
],
"hsqldb_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_2>(?<!\\w)org\\s*\\.\\s*hsqldb\\s*\\.\\s*jdbc(?!\\w))",
""
]
],
"htdocs": [
[
"set",
"vuln_urls_set"
]
],
"html": [
[
"set",
"vuln_urls_set"
]
],
"htmlencode_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_15>(?<!\\w)server\\s*\\.\\s*htmlencode(?!\\w))",
""
]
],
"i": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"id": [
[
"set",
"os_command_probing"
],
[
"set",
"os_commands2"
]
],
"id;_napre": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy_3>(?<!\\w)id\\;)",
"_noregex"
]
],
"id_napost_napre": [
[
"regex",
"(?P<os_commands>(?<!\\w)id(?!\\w))",
"_noregex"
]
],
"identifier_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_132>(?<!\\w)no\\s*row\\s*with\\s*the\\s*given\\s*identifier(?!\\w))",
""
]
],
"id|_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_2>(?<!\\w)id\\|)",
"_noregex"
]
],
"ifconfig": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"ifconfig_napost_napre": [
[
"regex",
"(?P<os_commands_3>(?<!\\w)ifconfig(?!\\w))",
"_noregex"
]
],
"iframe": [
[
"set",
"xss_pentest_tags"
]
],
"iif_napre": [
[
"regex",
"(?P<sqli_generic4d35>(?<!\\w)iif[\\s\\)]*(\\(|//|`))",
""
]
],
"ikonboard": [
[
"set",
"vuln_web_set3"
]
],
"illegal_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_58>(?<!\\w)illegal\\s*offset\\s*type(?!\\w))",
""
]
],
"imagefolio": [
[
"set",
"vuln_web_set3"
]
],
"img": [
[
"set",
"xss_pentest_tags"
]
],
"import_napre": [
[
"regex",
"(?P<xss_html_specialfcc5>(?<!\\w)import[\\s\\)]*(\\(|//|`))",
""
]
],
"include": [
[
"set",
"function_names"
],
[
"set",
"vuln_web_set1"
],
[
"set",
"vuln_web_set3"
]
],
"include_napre": [
[
"regex",
"(?P<high_acuracy_code_exec2880>(?<!\\w)include[\\s\\)]*(\\(|//|`))",
""
]
],
"incorrect_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_80>(?<!\\w)incorrect\\s*syntax\\s*near(?!\\w))",
""
]
],
"incorrecta_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_59>(?<!\\w)sintaxis\\s*incorrecta\\s*cerca\\s*de(?!\\w))",
""
]
],
"increment_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_46>(?<!\\w)cannot\\s*increment(?!\\w))",
""
]
],
"info_all_napost_napre": [
[
"regex",
"(?P<php_info_parameters0669>(?<!\\w)info\\_all(?!\\w))",
"_noregex"
]
],
"info_configuration_napost_napre": [
[
"regex",
"(?P<php_info_parameters3fdf>(?<!\\w)info\\_configuration(?!\\w))",
"_noregex"
]
],
"info_credits_napost_napre": [
[
"regex",
"(?P<php_info_parameters3f14>(?<!\\w)info\\_credits(?!\\w))",
"_noregex"
]
],
"info_environment_napost_napre": [
[
"regex",
"(?P<php_info_parameters8851>(?<!\\w)info\\_environment(?!\\w))",
"_noregex"
]
],
"info_general_napost_napre": [
[
"regex",
"(?P<php_info_parametersc394>(?<!\\w)info\\_general(?!\\w))",
"_noregex"
]
],
"info_license_napost_napre": [
[
"regex",
"(?P<php_info_parameterse68c>(?<!\\w)info\\_license(?!\\w))",
"_noregex"
]
],
"info_modules_napost_napre": [
[
"regex",
"(?P<php_info_parameters41db>(?<!\\w)info\\_modules(?!\\w))",
"_noregex"
]
],
"info_variables_napost_napre": [
[
"regex",
"(?P<php_info_parametersda77>(?<!\\w)info\\_variables(?!\\w))",
"_noregex"
]
],
"information": [
[
"regex",
"(?P<resp_body_data_leak_iis_19>\\<b\\>version\\s*information\\s*\\:\\s*\\<\\/b\\>)",
""
]
],
"information_schema_napost_napre": [
[
"regex",
"(?P<sqli_generic>(?<!\\w)information\\_schema(?!\\w))",
"_noregex"
]
],
"information_schema_napre": [
[
"regex",
"(?P<sqli_generic_38>(?<!\\w)information\\_schema\\s*\\.\\s*)",
""
]
],
"informationschema": [
[
"set",
"function_names"
]
],
"informix_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_35>(?<!\\w)com\\s*\\.\\s*informix\\s*\\.\\s*jdbc(?!\\w))",
""
]
],
"ini": [
[
"set",
"function_names"
]
],
"ini_napost": [
[
"regex",
"(?P<high_acuracy_5>\\s*\\.\\s*ini(?!\\w))",
""
]
],
"innerhtml_napost_napre": [
[
"regex",
"(?P<xss_html_special_56>(?<!\\w)innerhtml(?!\\w))",
"_noregex"
]
],
"insert": [
[
"and_condition",
"2_insert,into"
],
[
"set",
"sql_verbs"
]
],
"insert_napost_napre": [
[
"regex",
"(?P<sqli_generic>(?<!\\w)insert(?!\\w))",
"_noregex"
]
],
"install": [
[
"set",
"vuln_urls_set"
]
],
"installing_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_125>(?<!\\w)error\\s*installing\\s*signal\\s*handler\\s*for(?!\\w))",
""
]
],
"instantiate_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_154>(?<!\\w)cannot\\s*instantiate\\s*abstract\\s*class(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_6>(?<!\\w)cannot\\s*instantiate\\s*interface(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_18>(?<!\\w)cannot\\s*instantiate\\s*trait(?!\\w))",
""
]
],
"intldateformatter_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_20>(?<!\\w)failed\\s*to\\s*register\\s*intldateformatter\\s*class(?!\\w))",
""
]
],
"into": [
[
"and_condition",
"2_insert,into"
]
],
"into_napost_napre": [
[
"regex",
"(?P<sqli_generic_8>(?<!\\w)into(?!\\w))",
"_noregex"
]
],
"invalid_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_0>(?<!\\w)invalid\\s*opcode(?!\\w))",
""
]
],
"ipconfig": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"ipconfig_napost_napre": [
[
"regex",
"(?P<os_commands_8>(?<!\\w)ipconfig(?!\\w))",
"_noregex"
]
],
"irelnotes_napost": [
[
"regex",
"(?P<vuln_web_files_826>\\/\\d+\\d+irelnotes\\s*\\.\\s*html(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_441>\\/\\d+\\d+irelnotes\\s*\\.\\s*txt(?!\\w))",
""
]
],
"is": [
[
"and_condition",
"4_sql_conditions,null,not,is"
],
[
"set",
"sql_compare"
],
[
"set",
"sql_operators2"
],
[
"set",
"sql_equal"
]
],
"isnull": [
[
"set",
"function_names"
]
],
"isnull_napre": [
[
"regex",
"(?P<sqli_genericbb99>(?<!\\w)isnull[\\s\\)]*(\\(|//|`))",
""
]
],
"isnumeric": [
[
"set",
"function_names"
]
],
"isnumeric_napre": [
[
"regex",
"(?P<high_acuracy_code_exec7c99>(?<!\\w)isnumeric[\\s\\)]*(\\(|//|`))",
""
]
],
"isrb_napost": [
[
"regex",
"(?P<vuln_web_files_939>\\/\\d+\\d+isrb\\s*\\.\\s*txt(?!\\w))",
""
]
],
"isset": [
[
"set",
"function_names"
]
],
"isset_napre": [
[
"regex",
"(?P<high_acuracy_code_exec78ab>(?<!\\w)isset[\\s\\)]*(\\(|//|`))",
""
]
],
"iterated_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_161>(?<!\\w)the\\s*object\\s*to\\s*be\\s*iterated\\s*is\\s*in\\s*an\\s*invalid\\s*state(?!\\w))",
""
]
],
"java_napost_napre": [
[
"regex",
"(?P<high_acuracy_code_exec038e>(?<!\\w)java\\s*\\.\\s*lang(?!\\w))",
""
]
],
"java_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_0>(?<!\\w)class\\s*java\\s*\\.\\s*lang\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<resp_body_data_java_leak_21>(?<!\\w)at\\s*java\\s*\\.\\s*lang\\s*\\.\\s*)",
""
]
],
"javascript_napre": [
[
"regex",
"(?P<xss_html_special_35>(?<!\\w)javascript\\s*\\:\\s*)",
""
]
],
"javascriptval": [
[
"set",
"function_names"
]
],
"javascriptval_napre": [
[
"regex",
"(?P<xss_html_special91ee>(?<!\\w)javascriptval[\\s\\)]*(\\(|//|`))",
""
]
],
"jndi_napre": [
[
"regex",
"(?P<high_acuracy1246>(?<!\\w)jndi\\s*\\:\\s*)",
""
]
],
"join": [
[
"set",
"function_names"
]
],
"k": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
]
],
"keystore_napost": [
[
"regex",
"(?P<url_scanning1f1b>\\s*\\.\\s*keystore(?!\\w))",
""
]
],
"ksh_history_napost": [
[
"regex",
"(?P<url_scanningf977>\\s*\\.\\s*ksh\\_history(?!\\w))",
""
]
],
"l": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"la": [
[
"set",
"os_commands2"
]
],
"la_napost_napre": [
[
"regex",
"(?P<os_commands_12>(?<!\\w)la(?!\\w))",
"_noregex"
]
],
"lcdispatcher_napost": [
[
"regex",
"(?P<vuln_web_files_951>\\/e7uo7v7d\\s*\\.\\s*lcdispatcher(?!\\w))",
""
]
],
"ldap_set_()*": [
[
"and_condition",
"2_ldap_set_(|%,ldap_set_()*"
]
],
"ldap_set_(|%": [
[
"and_condition",
"2_ldap_set_(|%,ldap_set_()*"
]
],
"ldap_words": [
[
"and_condition",
"2_ldap_words,equal_colon"
],
[
"and_condition",
"2_ldap_words,("
]
],
"le": [
[
"set",
"nosql_set"
]
],
"len": [
[
"set",
"function_names"
]
],
"len_napre": [
[
"regex",
"(?P<high_acuracy_code_exec50a4>(?<!\\w)len[\\s\\)]*(\\(|//|`))",
""
]
],
"length": [
[
"set",
"function_names"
]
],
"less": [
[
"set",
"os_commands2"
]
],
"less_napost_napre": [
[
"regex",
"(?P<os_commands_23>(?<!\\w)less(?!\\w))",
"_noregex"
]
],
"lib": [
[
"set",
"vuln_web_set1"
]
],
"like": [
[
"set",
"function_names"
],
[
"set",
"sql_operators2"
],
[
"set",
"sql_like"
],
[
"set",
"sql_operators"
]
],
"like_napre": [
[
"regex",
"(?P<sqli_generic4ffb>(?<!\\w)like[\\s\\)]*(\\(|//|`))",
""
]
],
"limit": [
[
"set",
"limit_offset"
],
[
"set",
"sql_operators2"
]
],
"limit_napost_napre": [
[
"regex",
"(?P<sqli_generic_18>(?<!\\w)limit(?!\\w))",
"_noregex"
]
],
"limit_offset": [
[
"regex",
"(?P<regex_sqli_14>(limit|offset)\\s+\\d+)",
""
]
],
"ll": [
[
"set",
"os_commands2"
]
],
"ll_napost_napre": [
[
"regex",
"(?P<os_commands_7>(?<!\\w)ll(?!\\w))",
"_noregex"
]
],
"load_file_napre": [
[
"regex",
"(?P<sqli_genericdb7b>(?<!\\w)load\\_file[\\s\\)]*(\\(|//|`))",
""
]
],
"loadfile": [
[
"set",
"function_names"
]
],
"loadfromfile_napost": [
[
"regex",
"(?P<resp_body_data_java_leak_2>\\s*\\.\\s*loadfromfile(?!\\w))",
""
]
],
"loading_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_148>(?<!\\w)you\\s*must\\s*load\\s*pdo\\s*before\\s*loading\\s*any\\s*pdo\\s*drivers(?!\\w))",
""
]
],
"loadtemplate": [
[
"set",
"function_names"
]
],
"loadtemplate_napre": [
[
"regex",
"(?P<ssti3c17>(?<!\\w)loadtemplate[\\s\\)]*(\\(|//|`))",
""
]
],
"localgroup_napost_napre": [
[
"regex",
"(?P<os_commands_11>(?<!\\w)localgroup(?!\\w))",
"_noregex"
]
],
"localhost": [
[
"set",
"vuln_urls_set"
]
],
"location": [
[
"set",
"function_names"
]
],
"location=_napre": [
[
"regex",
"(?P<xss_html_special8a9f>(?<!\\w)location\\=)",
"_noregex"
]
],
"location[_napre": [
[
"regex",
"(?P<xss_html_special_0>(?<!\\w)location\\[)",
"_noregex"
]
],
"location_napost_napre": [
[
"regex",
"(?P<xss_html_special_38>(?<!\\w)location\\s*\\.\\s*href(?!\\w))",
""
]
],
"location_napre": [
[
"regex",
"(?P<xss_html_special>(?<!\\w)location\\s*\\.\\s*)",
""
]
],
"log": [
[
"set",
"vuln_web_set3"
]
],
"logs": [
[
"set",
"vuln_web_set3"
]
],
"lookupmethod": [
[
"set",
"function_names"
]
],
"lookupmethod_napre": [
[
"regex",
"(?P<xss_html_special6763>(?<!\\w)lookupmethod[\\s\\)]*(\\(|//|`))",
""
]
],
"lower": [
[
"set",
"function_names"
]
],
"lower_napre": [
[
"regex",
"(?P<sqli_generic2a58>(?<!\\w)lower[\\s\\)]*(\\(|//|`))",
""
]
],
"lowsrc_napost_napre": [
[
"regex",
"(?P<xss_html_special_22>(?<!\\w)lowsrc(?!\\w))",
"_noregex"
]
],
"ls": [
[
"set",
"os_command_probing"
],
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"ls_napost": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_22>\\|\\s*ls(?!\\w))",
""
]
],
"ls_napost_napre": [
[
"regex",
"(?P<os_commands_18>(?<!\\w)ls(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_17>(?<!\\w)ls(?!\\w))",
"_noregex"
]
],
"m": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"vuln_urls_set"
]
],
"mage": [
[
"set",
"vuln_urls_set"
]
],
"mail": [
[
"set",
"ldap_words"
]
],
"make_set_napre": [
[
"regex",
"(?P<sqli_generic9ef6>(?<!\\w)make\\_set[\\s\\)]*(\\(|//|`))",
""
]
],
"manager": [
[
"set",
"vuln_web_set2"
]
],
"mappath_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_4>(?<!\\w)server\\s*\\.\\s*mappath(?!\\w))",
""
]
],
"mariadb": [
[
"set",
"vuln_urls_set"
]
],
"master": [
[
"set",
"function_names"
]
],
"master_napre": [
[
"regex",
"(?P<sqli_generic_5>(?<!\\w)master\\s*\\.\\s*)",
""
]
],
"match": [
[
"regex",
"(?P<high_acuracy_code_exec043f>\\s*\\.\\s*match[\\s\\)]*(\\(|//|`))",
""
]
],
"match_napre": [
[
"regex",
"(?P<sqli_genericce64>(?<!\\w)match[\\s\\)]*(\\(|//|`))",
""
]
],
"md": [
[
"set",
"function_names"
]
],
"md5_napre": [
[
"regex",
"(?P<sqli_generic9dce>(?<!\\w)md5[\\s\\)]*(\\(|//|`))",
""
]
],
"member_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_120>(?<!\\w)first\\s*array\\s*member\\s*is\\s*not\\s*a\\s*valid\\s*class\\s*name\\s*or\\s*object(?!\\w))",
""
]
],
"message_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_6>(?<!\\w)server\\s*message(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_19>(?<!\\w)sybase\\s*message(?!\\w))",
""
]
],
"message_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_25>(?<!\\w)sybase\\s*message\\s*\\:\\s*)",
""
]
],
"messageformatter_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_96>(?<!\\w)failed\\s*to\\s*register\\s*messageformatter\\s*class(?!\\w))",
""
]
],
"method_napost": [
[
"regex",
"(?P<resp_body_php_errors_48>\\-\\s*not\\s*a\\s*class\\s*\\:\\s*\\s*\\:\\s*method(?!\\w))",
""
]
],
"method_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_124>(?<!\\w)method\\s*name\\s*must\\s*be\\s*a\\s*string(?!\\w))",
""
]
],
"microsoft": [
[
"regex",
"(?P<resp_body_data_leak_sql_56>\\[odbc\\s*microsoft\\s*access\\s*driver\\])",
""
]
],
"microsoft_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_88>(?<!\\w)microsoft\\s*ole\\s*db\\s*provider\\s*for\\s*odbc\\s*drivers(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_iis_13>(?<!\\w)microsoft\\s*ole\\s*db\\s*provider\\s*for\\s*sql\\s*server(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_21>(?<!\\w)microsoft\\s*ole\\s*db\\s*provider\\s*for\\s*sql\\s*server(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_iis_17>(?<!\\w)microsoft\\s*\\.\\s*net\\s*framework(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_iis_21>(?<!\\w)microsoft\\s*vbscript\\s*runtime\\s*error(?!\\w))",
""
]
],
"microsoft_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis01ef>(?<!\\w)microsoft\\s*vbscript\\s*runtime\\s*[\\s\\)]*(\\(|//|`)0x8)",
""
],
[
"regex",
"(?P<resp_body_data_leak_iis_7>(?<!\\w)microsoft\\s*\\s*\\.\\s*net\\s*framework\\s*version\\s*\\:\\s*)",
""
]
],
"mid": [
[
"set",
"function_names"
]
],
"mid_napre": [
[
"regex",
"(?P<high_acuracy_code_exec2f16>(?<!\\w)mid[\\s\\)]*(\\(|//|`))",
""
]
],
"min": [
[
"set",
"function_names"
]
],
"min_napre": [
[
"regex",
"(?P<sqli_generic559b>(?<!\\w)min[\\s\\)]*(\\(|//|`))",
""
]
],
"mojo": [
[
"set",
"vuln_web_set3"
]
],
"move_uploaded_file_napre": [
[
"regex",
"(?P<high_acuracy_code_exec56df>(?<!\\w)move\\_uploaded\\_file[\\s\\)]*(\\(|//|`))",
""
]
],
"moveuploadedfile": [
[
"set",
"function_names"
]
],
"mro": [
[
"regex",
"(?P<sstib9c5>\\s*\\.\\s*mro[\\s\\)]*(\\(|//|`))",
""
]
],
"mro__[_napre": [
[
"regex",
"(?P<ssti_20>(?<!\\w)mro\\_\\_\\[)",
"_noregex"
]
],
"ms_proxy_auth_query": [
[
"set",
"vuln_web_set3"
]
],
"msgbox": [
[
"set",
"function_names"
]
],
"msgbox_napre": [
[
"regex",
"(?P<xss_html_specialfca1>(?<!\\w)msgbox[\\s\\)]*(\\(|//|`))",
""
]
],
"mssql_query_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sqld3de>(?<!\\w)mssql\\_query(?!\\w))",
"_noregex"
]
],
"mssql_query_napre": [
[
"regex",
"(?P<resp_body_data_leak_sqlbd5b>(?<!\\w)mssql\\_query[\\s\\)]*(\\(|//|`)\\))",
""
]
],
"mt-static": [
[
"set",
"vuln_web_set3"
]
],
"mysql_fetch_array_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql16c6>(?<!\\w)mysql\\_fetch\\_array[\\s\\)]*(\\(|//|`)\\))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql3dd8>(?<!\\w)mysql\\_fetch\\_array[\\s\\)]*(\\(|//|`))",
""
]
],
"mysqlclient_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_81>(?<!\\w)mysqlclient\\s*\\.\\s*)",
""
]
],
"n": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_7"
]
],
"name": [
[
"set",
"ldap_words"
]
],
"name_const_napre": [
[
"regex",
"(?P<sqli_generic95c8>(?<!\\w)name\\_const[\\s\\)]*(\\(|//|`))",
""
]
],
"name_napre": [
[
"regex",
"(?P<ldap_injectionf0b9>(?<!\\w)name[\\s\\)]*(\\(|//|`))",
""
]
],
"nameconst": [
[
"set",
"function_names"
]
],
"namespace_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_66>(?<!\\w)namespace\\s*must\\s*not\\s*match\\s*the\\s*enclosing\\s*schema(?!\\w))",
""
]
],
"navigate": [
[
"set",
"function_names"
]
],
"navigate_napre": [
[
"regex",
"(?P<xss_html_special94dc>(?<!\\w)navigate[\\s\\)]*(\\(|//|`))",
""
]
],
"nc": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg_10>((?<!\\w)nc\\s+(\\w+\\.){2,}))",
""
],
[
"set",
"os_tools"
]
],
"nchar": [
[
"set",
"function_names"
]
],
"ncommerce3": [
[
"set",
"vuln_web_set3"
]
],
"ne": [
[
"set",
"nosql_set"
]
],
"nesting_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_166>(?<!\\w)nesting\\s*level\\s*too\\s*deep(?!\\w))",
""
]
],
"net": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"net)_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_1>(?<!\\w)asp\\s*\\.\\s*net\\)\\s*version\\s*\\:\\s*)",
""
]
],
"netcat": [
[
"set",
"os_tools"
]
],
"netsh": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"netsh_napost_napre": [
[
"regex",
"(?P<os_commands>(?<!\\w)netsh(?!\\w))",
"_noregex"
]
],
"netstat": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"netstat_napost_napre": [
[
"regex",
"(?P<os_commands_14>(?<!\\w)netstat(?!\\w))",
"_noregex"
]
],
"new_napre": [
[
"regex",
"(?P<generic_keywordsce36>(?<!\\w)new[\\s\\)]*(\\(|//|`))",
""
]
],
"nosql_set": [
[
"and_condition",
"3_[,],nosql_set"
],
[
"and_condition",
"3_[,],nosql_set"
],
[
"and_condition",
"4_{,},:,nosql_set"
],
[
"and_condition",
"4_{,},:,nosql_set"
]
],
"not": [
[
"and_condition",
"4_sql_conditions,null,not,is"
]
],
"npgsql_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_33>(?<!\\w)npgsql\\s*\\.\\s*)",
""
]
],
"nslookup_napost_napre": [
[
"regex",
"(?P<os_commands8744>(?<!\\w)nslookup(?!\\w))",
"_noregex"
]
],
"null": [
[
"and_condition",
"2_null,null_postfix_set"
],
[
"and_condition",
"2_null,null_postfix_set"
],
[
"and_condition",
"4_sql_conditions,null,not,is"
],
[
"set",
"sql_operators2"
]
],
"null,_napre": [
[
"regex",
"(?P<sqli_generic_47>(?<!\\w)null\\,)",
"_noregex"
]
],
"null_napost_napre": [
[
"regex",
"(?P<generic_keywords>(?<!\\w)null(?!\\w))",
"_noregex"
]
],
"null_postfix_set": [
[
"and_condition",
"2_null,null_postfix_set"
],
[
"and_condition",
"2_null,null_postfix_set"
]
],
"nullpointerexception_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_19>(?<!\\w)java\\s*\\.\\s*lang\\s*\\.\\s*nullpointerexception(?!\\w))",
""
]
],
"numberformatter_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_11>(?<!\\w)failed\\s*to\\s*register\\s*numberformatter\\s*class(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_100>(?<!\\w)numberformatter\\s*class\\s*not\\s*defined(?!\\w))",
""
]
],
"nvarchar": [
[
"set",
"function_names"
]
],
"nvarchar_napre": [
[
"regex",
"(?P<sqli_genericc98e>(?<!\\w)nvarchar[\\s\\)]*(\\(|//|`))",
""
]
],
"o": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_7"
]
],
"object_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_41>(?<!\\w)class\\s*name\\s*must\\s*be\\s*a\\s*valid\\s*object\\s*or\\s*a\\s*string(?!\\w))",
""
]
],
"objectclass": [
[
"set",
"ldap_words"
]
],
"objects_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_150>(?<!\\w)can\\s*only\\s*throw\\s*objects(?!\\w))",
""
]
],
"occurred_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_16>(?<!\\w)an\\s*error\\s*has\\s*occurred(?!\\w))",
""
]
],
"occurred_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_40>(?<!\\w)has\\s*occurred\\s*in\\s*the\\s*vicinity\\s*of\\s*\\:\\s*)",
""
]
],
"offset": [
[
"set",
"limit_offset"
],
[
"set",
"sql_operators2"
]
],
"offset_napost_napre": [
[
"regex",
"(?P<sqli_generic_10>(?<!\\w)offset(?!\\w))",
"_noregex"
]
],
"offsets_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_65>(?<!\\w)cannot\\s*unset\\s*string\\s*offsets(?!\\w))",
""
]
],
"ogg://": [
[
"regex",
"(?P<php_proto_wrappers_fast_reg6c96>(ogg://\\w+))",
""
]
],
"oledbexception_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_77>(?<!\\w)oledb\\s*\\.\\s*oledbexception(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_17>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*oledb\\s*\\.\\s*oledbexception(?!\\w))",
""
]
],
"on": [
[
"and_condition",
"2_on,="
],
[
"and_condition",
"2_on,="
],
[
"set",
"xss_event"
]
],
"onerror=_napre": [
[
"regex",
"(?P<high_acuracy_12>(?<!\\w)onerror\\=)",
"_noregex"
]
],
"open": [
[
"set",
"function_names"
]
],
"open_basedir_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_23>(?<!\\w)open\\_basedir\\s*restriction\\s*in\\s*effect(?!\\w))",
""
]
],
"open_napre": [
[
"regex",
"(?P<xss_html_special3ba9>(?<!\\w)open[\\s\\)]*(\\(|//|`))",
""
]
],
"openssl": [
[
"set",
"os_commands1"
],
[
"set",
"os_tools"
]
],
"openssl_napost_napre": [
[
"regex",
"(?P<os_commands_21>(?<!\\w)openssl(?!\\w))",
"_noregex"
]
],
"or": [
[
"regex",
"(?P<regex_sqli_0>^[\\d\\s+\\'\\)\";]+or\\s)",
""
],
[
"and_condition",
"2_or,sql_comparison"
],
[
"regex",
"(?P<sqli_fast_rega9c5>([^\\w]\\d+or\\d[^\\w]))",
""
],
[
"set",
"sql_conditions"
],
[
"set",
"and_or_union"
],
[
"set",
"sql_operators2"
],
[
"set",
"and_or_having"
]
],
"or'_napre": [
[
"regex",
"(?P<sqli_medium_acuracy_2>(?<!\\w)or\\')",
"_noregex"
]
],
"or_napost_napre": [
[
"regex",
"(?P<medium_acuracy>(?<!\\w)or(?!\\w))",
"_noregex"
]
],
"ora-_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_5>(?<!\\w)ora\\-)",
"_noregex"
]
],
"oracle_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_1>(?<!\\w)oracle\\s*error(?!\\w))",
""
]
],
"ord": [
[
"set",
"function_names"
]
],
"ord_napre": [
[
"regex",
"(?P<high_acuracy_code_execc123>(?<!\\w)ord[\\s\\)]*(\\(|//|`))",
""
]
],
"order": [
[
"set",
"sql_conditions"
],
[
"set",
"sql_operators2"
]
],
"order_napost_napre": [
[
"regex",
"(?P<sqli_generic2bdb>(?<!\\w)order\\s*by(?!\\w))",
""
]
],
"orders": [
[
"set",
"vuln_web_set3"
]
],
"os_command_probing": [
[
"and_condition",
"2_os_command_probing,os_command_separators"
]
],
"os_command_separators": [
[
"and_condition",
"2_os_commands2,os_command_separators"
],
[
"and_condition",
"2_os_command_probing,os_command_separators"
]
],
"os_command_terminators": [
[
"and_condition",
"2_echo,os_command_terminators"
]
],
"os_commands1": [
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg_0>((?<!\\w)(dir|ls|curl|openssl|ping|wget|cat|echo|systeminfo|pwd|net|netsh|netstat|type|ipconfig|ifconfig|cd|vol)\\s+([\\-/]\\w+|/|[\\w.-]+|https?:|ftp:|file:|\\w:\\\\)))",
""
]
],
"os_commands2": [
[
"and_condition",
"2_os_commands2,os_command_separators"
]
],
"os_tools": [
[
"and_condition",
"2_which,os_tools"
]
],
"overflow_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_36>(?<!\\w)string\\s*size\\s*overflow(?!\\w))",
""
]
],
"overloaded_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_170>(?<!\\w)cannot\\s*access\\s*undefined\\s*property\\s*for\\s*object\\s*with\\s*overloaded\\s*property\\s*access(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_61>(?<!\\w)cannot\\s*assign\\s*by\\s*reference\\s*to\\s*overloaded\\s*object(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_24>(?<!\\w)cannot\\s*call\\s*overloaded\\s*function\\s*for\\s*non(?!\\w))",
""
]
],
"override_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_14>(?<!\\w)cannot\\s*override\\s*final(?!\\w))",
""
]
],
"ownerdocument": [
[
"set",
"function_names"
]
],
"ownerdocument[_napre": [
[
"regex",
"(?P<xss_html_special_31>(?<!\\w)ownerdocument\\[)",
"_noregex"
]
],
"ownerdocument_napre": [
[
"regex",
"(?P<xss_html_special_13>(?<!\\w)ownerdocument\\s*\\.\\s*)",
""
]
],
"p": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"parameter_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_131>(?<!\\w)cannot\\s*pass\\s*parameter(?!\\w))",
""
]
],
"parameters_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_77>(?<!\\w)wrong\\s*parameters\\s*for\\s*exception(?!\\w))",
""
]
],
"parent": [
[
"set",
"function_names"
]
],
"parent[_napre": [
[
"regex",
"(?P<xss_html_special_51>(?<!\\w)parent\\[)",
"_noregex"
]
],
"parent_napre": [
[
"regex",
"(?P<xss_html_special_61>(?<!\\w)parent\\s*\\.\\s*)",
""
]
],
"parsing_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_9>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*can(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_80>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*element(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_39>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*group(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_95>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*include(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_103>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*missing(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_87>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<fault(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_142>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*could(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_56>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*couldn(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_2>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*missing(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_47>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*no(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_128>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*the(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_109>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*unknown(?!\\w))",
""
]
],
"pass": [
[
"set",
"nosql_set"
]
],
"passthru": [
[
"set",
"function_names"
]
],
"passthru_napre": [
[
"regex",
"(?P<high_acuracy_code_exec562c>(?<!\\w)passthru[\\s\\)]*(\\(|//|`))",
""
]
],
"passwd_napost_napre": [
[
"regex",
"(?P<os_commands_1>(?<!\\w)passwd(?!\\w))",
"_noregex"
]
],
"password_napost": [
[
"regex",
"(?P<vuln_web_files_297>\\/master\\s*\\.\\s*password(?!\\w))",
""
]
],
"path_napost_napre": [
[
"regex",
"(?P<os_commands_19>(?<!\\w)path(?!\\w))",
"_noregex"
]
],
"perl": [
[
"set",
"os_tools"
]
],
"pg_exec_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql75d2>(?<!\\w)pg\\_exec[\\s\\)]*(\\(|//|`)\\)\\s*\\[\\s*\\:\\s*)",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql4c8f>(?<!\\w)pg\\_exec[\\s\\)]*(\\(|//|`))",
""
]
],
"pg_query_napre": [
[
"regex",
"(?P<resp_body_data_leak_sqlaf58>(?<!\\w)pg\\_query[\\s\\)]*(\\(|//|`)\\)\\s*\\[\\s*\\:\\s*)",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql263c>(?<!\\w)pg\\_query[\\s\\)]*(\\(|//|`))",
""
]
],
"pg_sleep_napre": [
[
"regex",
"(?P<sqli_blind8a50>(?<!\\w)pg\\_sleep[\\s\\)]*(\\(|//|`))",
""
]
],
"pgsleep": [
[
"set",
"function_names"
]
],
"phar://": [
[
"regex",
"(?P<php_proto_wrappers_fast_reg022a>(phar://\\w+))",
""
]
],
"photo": [
[
"set",
"vuln_web_set3"
]
],
"php://": [
[
"regex",
"(?P<php_proto_wrappers_fast_regba9d>(php://\\w+))",
""
]
],
"php_napost": [
[
"regex",
"(?P<url_scanning_14>\\s*\\.\\s*php\\s*\\.\\s*bak(?!\\w))",
""
],
[
"regex",
"(?P<url_scanning_12>\\s*\\.\\s*php\\s*\\.\\s*bck(?!\\w))",
""
],
[
"regex",
"(?P<url_scanning_5>\\s*\\.\\s*php\\s*\\.\\s*old(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_780>\\/blah\\d+23\\s*\\.\\s*php(?!\\w))",
""
]
],
"php_napre": [
[
"regex",
"(?P<high_acuracy_code_exec8ef9>(?<!\\w)php\\s*\\:\\s*\\/\\/)",
""
]
],
"php_uname_napre": [
[
"regex",
"(?P<high_acuracy_code_exec11b0>(?<!\\w)php\\_uname[\\s\\)]*(\\(|//|`))",
""
]
],
"phpinfo": [
[
"set",
"function_names"
]
],
"phpinfo_napre": [
[
"regex",
"(?P<high_acuracy_code_exec560f>(?<!\\w)phpinfo[\\s\\)]*(\\(|//|`))",
""
]
],
"phpuname": [
[
"set",
"function_names"
]
],
"phpversion": [
[
"set",
"function_names"
]
],
"phpversion_napre": [
[
"regex",
"(?P<high_acuracy_code_execa9f6>(?<!\\w)phpversion[\\s\\)]*(\\(|//|`))",
""
]
],
"php~": [
[
"regex",
"(?P<url_scanning_11>\\s*\\.\\s*php\\~)",
""
],
[
"regex",
"(?P<url_scanning_11>\\s*\\.\\s*php\\~)",
""
],
[
"regex",
"(?P<url_scanning_11>\\s*\\.\\s*php\\~)",
""
]
],
"ping": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"ping6_napre": [
[
"regex",
"(?P<os_commands272f>(?<!\\w)ping6)",
"_noregex"
]
],
"ping_napost_napre": [
[
"regex",
"(?P<os_commands>(?<!\\w)ping(?!\\w))",
"_noregex"
]
],
"plugins": [
[
"set",
"vuln_web_set1"
]
],
"popen": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"popen_napre": [
[
"regex",
"(?P<high_acuracy_code_exec485a>(?<!\\w)popen[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracy_code_exec485a>(?<!\\w)popen[\\s\\)]*(\\(|//|`))",
""
]
],
"postgresql_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_8>(?<!\\w)valid\\s*postgresql\\s*result(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_15>(?<!\\w)unable\\s*to\\s*connect\\s*to\\s*postgresql\\s*server(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_46>(?<!\\w)postgresql(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<resp_body_data_leak_sql_31>(?<!\\w)supplied\\s*argument\\s*is\\s*not\\s*a\\s*valid\\s*postgresql\\s*result(?!\\w))",
""
]
],
"postgresql_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_64>(?<!\\w)postgresql\\s*query\\s*failed\\s*\\:\\s*)",
""
]
],
"preg_replace_napre": [
[
"regex",
"(?P<high_acuracy_code_execb269>(?<!\\w)preg\\_replace[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracyb269>(?<!\\w)preg\\_replace[\\s\\)]*(\\(|//|`))",
""
]
],
"pregreplace": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"print_napost": [
[
"regex",
"(?P<vuln_web_files_341>\\/htp\\s*\\.\\s*print(?!\\w))",
""
]
],
"print_r_napre": [
[
"regex",
"(?P<high_acuracy_code_exec2e22>(?<!\\w)print\\_r[\\s\\)]*(\\(|//|`))",
""
]
],
"printer_napost": [
[
"regex",
"(?P<vuln_web_files_483>\\/null\\s*\\.\\s*printer(?!\\w))",
""
]
],
"printf": [
[
"regex",
"(?P<regex_code_execution_10>printf\\s+['\"\"])",
""
]
],
"println": [
[
"regex",
"(?P<high_acuracy_code_exec0b2c>\\s*\\.\\s*println[\\s\\)]*(\\(|//|`))",
""
]
],
"printr": [
[
"set",
"function_names"
]
],
"private_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_26>(?<!\\w)call\\s*to\\s*private(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_15>(?<!\\w)cannot\\s*call\\s*private(?!\\w))",
""
]
],
"procedure_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_50>(?<!\\w)procedure\\s*or\\s*function\\s*)",
""
]
],
"prompt": [
[
"set",
"function_names"
],
[
"set",
"prompt_alert"
]
],
"prompt_alert": [
[
"and_condition",
"2_prompt_alert,="
]
],
"prompt_napre": [
[
"regex",
"(?P<xss_html_specialf1c4>(?<!\\w)prompt[\\s\\)]*(\\(|//|`))",
""
]
],
"properties_napost": [
[
"regex",
"(?P<vuln_web_files_510>\\/e7uo7v7d\\s*\\.\\s*properties(?!\\w))",
""
]
],
"property_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_144>(?<!\\w)attempt\\s*to\\s*unset\\s*static\\s*property(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_68>(?<!\\w)cannot\\s*access\\s*empty\\s*property(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_145>(?<!\\w)cannot\\s*access\\s*property\\s*started\\s*with(?!\\w))",
""
]
],
"protected_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_83>(?<!\\w)call\\s*to\\s*protected(?!\\w))",
""
]
],
"protocol": [
[
"regex",
"(?P<xss_html_special0e69>\\s*\\.\\s*protocol[\\s\\)]*(\\(|//|`))",
""
]
],
"ps_napost_napre": [
[
"regex",
"(?P<os_commands_5>(?<!\\w)ps(?!\\w))",
"_noregex"
]
],
"psqlexception_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_58>(?<!\\w)org\\s*\\.\\s*postgresql\\s*\\.\\s*util\\s*\\.\\s*psqlexception(?!\\w))",
""
]
],
"pwd": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"pwd_napost_napre": [
[
"regex",
"(?P<os_commands_25>(?<!\\w)pwd(?!\\w))",
"_noregex"
]
],
"python": [
[
"set",
"os_tools"
]
],
"quotation_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_7>(?<!\\w)unclosed\\s*quotation\\s*mark(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_23>(?<!\\w)unclosed\\s*quotation\\s*mark\\s*before\\s*the\\s*character\\s*string(?!\\w))",
""
]
],
"quotations_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_94>(?<!\\w)unclosed\\s*quotations\\s*marks(?!\\w))",
""
]
],
"quotes": [
[
"and_condition",
"2_quotes,="
],
[
"and_condition",
"3_sql_conditions,sql_equal,quotes"
],
[
"and_condition",
"2_sql_conditions,quotes"
],
[
"and_condition",
"2_function_names,quotes"
]
],
"r": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"rand": [
[
"set",
"function_names"
]
],
"rand_napre": [
[
"regex",
"(?P<sqli_genericb11c>(?<!\\w)rand[\\s\\)]*(\\(|//|`))",
""
]
],
"randomblob": [
[
"set",
"function_names"
]
],
"randomblob_napre": [
[
"regex",
"(?P<sqli_generic0cd1>(?<!\\w)randomblob[\\s\\)]*(\\(|//|`))",
""
]
],
"rar://": [
[
"regex",
"(?P<php_proto_wrappers_fast_reg4f07>(rar://\\w+))",
""
]
],
"rbsserv_napost_napre": [
[
"regex",
"(?P<vuln_web_files_230>(?<!\\w)rbsserv\\s*\\.\\s*mdb(?!\\w))",
""
]
],
"rcpt_napre": [
[
"regex",
"(?P<mail_attacks_4>(?<!\\w)rcpt\\s*to\\s*\\:\\s*)",
""
]
],
"read_napost": [
[
"regex",
"(?P<high_acuracy_code_execf01b>\\)\\s*\\.\\s*read(?!\\w))",
""
]
],
"readdirsync": [
[
"set",
"function_names"
]
],
"readdirsync_napre": [
[
"regex",
"(?P<high_acuracy_code_execd415>(?<!\\w)readdirsync[\\s\\)]*(\\(|//|`))",
""
]
],
"readfile": [
[
"set",
"function_names"
]
],
"readfile_napre": [
[
"regex",
"(?P<high_acuracy_code_exec575a>(?<!\\w)readfile[\\s\\)]*(\\(|//|`))",
""
]
],
"realpath": [
[
"set",
"function_names"
]
],
"realpath_napre": [
[
"regex",
"(?P<high_acuracy_code_execf565>(?<!\\w)realpath[\\s\\)]*(\\(|//|`))",
""
]
],
"redeclare_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_133>(?<!\\w)cannot\\s*redeclare(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_162>(?<!\\w)cannot\\s*redeclare\\s*class(?!\\w))",
""
]
],
"redefine_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_158>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*redefine(?!\\w))",
""
]
],
"redirect_napre": [
[
"regex",
"(?P<xss_html_specialb0c1>(?<!\\w)redirect\\s*302)",
""
]
],
"reference_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_165>(?<!\\w)an\\s*iterator\\s*cannot\\s*be\\s*used\\s*with\\s*foreach\\s*by\\s*reference(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_52>(?<!\\w)cannot\\s*return\\s*string\\s*offsets\\s*by\\s*reference(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_159>(?<!\\w)cannot\\s*yield\\s*string\\s*offsets\\s*by\\s*reference(?!\\w))",
""
]
],
"references_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_155>(?<!\\w)cannot\\s*create\\s*references\\s*to(?!\\w))",
""
]
],
"reflect": [
[
"set",
"function_names"
]
],
"reflect_napre": [
[
"regex",
"(?P<xss_html_special31d4>(?<!\\w)reflect[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<xss_html_special_59>(?<!\\w)reflect\\s*\\.\\s*)",
""
]
],
"regex": [
[
"set",
"nosql_set"
]
],
"register_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_25>(?<!\\w)cannot\\s*register\\s*a\\s*reverse\\s*output\\s*handler\\s*conflict\\s*outside\\s*of\\s*minit(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_91>(?<!\\w)cannot\\s*register\\s*an\\s*output\\s*handler\\s*alias\\s*outside\\s*of\\s*minit(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_110>(?<!\\w)cannot\\s*register\\s*an\\s*output\\s*handler\\s*conflict\\s*outside\\s*of\\s*minit(?!\\w))",
""
]
],
"relevant_characters_10": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_10"
]
],
"relevant_characters_11": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_11"
]
],
"relevant_characters_14": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_14"
]
],
"relevant_characters_2": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_2"
]
],
"relevant_characters_3": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_3"
]
],
"relevant_characters_4": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_4"
]
],
"relevant_characters_5": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_5"
]
],
"relevant_characters_6": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_6"
]
],
"relevant_characters_7": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_7"
]
],
"relevant_characters_8": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_8"
]
],
"render_css_napost": [
[
"regex",
"(?P<vuln_web_files_1127>\\/e7uo7v7d\\s*\\.\\s*render\\_css(?!\\w))",
""
]
],
"render_warning_screen_napost": [
[
"regex",
"(?P<vuln_web_files_819>\\/e7uo7v7d\\s*\\.\\s*render\\_warning\\_screen(?!\\w))",
""
]
],
"replace": [
[
"regex",
"(?P<xss_html_special7b2e>\\s*\\.\\s*replace[\\s\\)]*(\\(|//|`))",
""
]
],
"replicator": [
[
"set",
"vuln_web_set3"
]
],
"request": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"request[_napre": [
[
"regex",
"(?P<ssti_22>(?<!\\w)request\\[)",
"_noregex"
]
],
"request_napost_napre": [
[
"regex",
"(?P<ssti_5>(?<!\\w)request\\s*\\.\\s*args(?!\\w))",
""
]
],
"request_napre": [
[
"regex",
"(?P<ssti>(?<!\\w)request\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<high_acuracy_code_exec1457>(?<!\\w)request\\s*\\.\\s*)",
""
]
],
"requested_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_116>(?<!\\w)class\\s*entry\\s*requested\\s*for\\s*an\\s*object\\s*without\\s*php\\s*class(?!\\w))",
""
]
],
"request|_napre": [
[
"regex",
"(?P<ssti_12>(?<!\\w)request\\|)",
"_noregex"
]
],
"require": [
[
"set",
"function_names"
]
],
"require_napre": [
[
"regex",
"(?P<high_acuracy_code_exec6d5b>(?<!\\w)require[\\s\\)]*(\\(|//|`))",
""
]
],
"require_once_napre": [
[
"regex",
"(?P<high_acuracy_code_exec7065>(?<!\\w)require\\_once[\\s\\)]*(\\(|//|`))",
""
]
],
"required_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_22>(?<!\\w)object\\s*required\\s*\\:\\s*\\s*\\')",
""
]
],
"requireonce": [
[
"set",
"function_names"
]
],
"requires_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_16>(?<!\\w)requires\\s*pdo\\s*api\\s*version(?!\\w))",
""
]
],
"res": [
[
"set",
"function_names"
]
],
"res_napre": [
[
"regex",
"(?P<high_acuracy_code_execution_46>(?<!\\w)res\\s*\\.\\s*)",
""
]
],
"resourcebundle_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_163>(?<!\\w)failed\\s*to\\s*register\\s*resourcebundle\\s*class(?!\\w))",
""
]
],
"response": [
[
"set",
"function_names"
]
],
"response_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_8>(?<!\\w)response\\s*\\.\\s*write(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_sql_errors_0>(?<!\\w)response\\s*error(?!\\w))",
""
]
],
"response_napre": [
[
"regex",
"(?P<high_acuracy_code_execution_12>(?<!\\w)response\\s*\\.\\s*)",
""
]
],
"restriction_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_112>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*restriction(?!\\w))",
""
]
],
"result_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_57>(?<!\\w)on\\s*mysql\\s*result\\s*index(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_72>(?<!\\w)valid\\s*mysql\\s*result(?!\\w))",
""
]
],
"return": [
[
"regex",
"(?P<regex_code_execution_9>^\\s*\\.\\s*return)",
""
]
],
"reverse": [
[
"set",
"function_names"
]
],
"reverse_napre": [
[
"regex",
"(?P<sqli_generic155c>(?<!\\w)reverse[\\s\\)]*(\\(|//|`))",
""
]
],
"rightfax": [
[
"set",
"vuln_web_set3"
]
],
"rlike": [
[
"set",
"sql_operators2"
],
[
"set",
"sql_like"
],
[
"set",
"sql_operators"
]
],
"roadhouse_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_78>(?<!\\w)roadhouse\\s*\\.\\s*cms\\s*\\.\\s*)",
""
]
],
"rownum_napost_napre": [
[
"regex",
"(?P<sqli_generic_16>(?<!\\w)rownum(?!\\w))",
"_noregex"
]
],
"rtreedepth_napre": [
[
"regex",
"(?P<high_acuracy_code_exec2c66>(?<!\\w)rtreedepth[\\s\\)]*(\\(|//|`))",
""
]
],
"ruby/object_napost_napre": [
[
"regex",
"(?P<high_acuracy_code_execution_1>(?<!\\w)ruby\\/object(?!\\w))",
"_noregex"
]
],
"rwcgi60": [
[
"set",
"vuln_web_set3"
]
],
"s": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"sbcgi": [
[
"set",
"vuln_web_set3"
]
],
"script": [
[
"set",
"xss_pentest_tags"
]
],
"second_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_5>(?<!\\w)second\\s*array\\s*member\\s*is\\s*not\\s*a\\s*valid\\s*method(?!\\w))",
""
]
],
"sed_napost_napre": [
[
"regex",
"(?P<os_commandsdd75>(?<!\\w)sed(?!\\w))",
"_noregex"
]
],
"select": [
[
"and_condition",
"3_select,from,where"
],
[
"and_condition",
"3_union,select,from"
],
[
"and_condition",
"2_sql_conditions,select"
],
[
"and_condition",
"2_union,select"
],
[
"and_condition",
"2_union,select"
],
[
"and_condition",
"2_select,from"
],
[
"regex",
"(?P<regex_sqli_31>select\\s*@)",
""
],
[
"set",
"sql_operators2"
],
[
"set",
"sql_verbs"
]
],
"select_napost_napre": [
[
"regex",
"(?P<sqli_generic>(?<!\\w)select(?!\\w))",
"_noregex"
]
],
"self": [
[
"set",
"function_names"
]
],
"self[_napre": [
[
"regex",
"(?P<xss_html_special_17>(?<!\\w)self\\[)",
"_noregex"
]
],
"self_napre": [
[
"regex",
"(?P<xss_html_special>(?<!\\w)self\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<ssti_18>(?<!\\w)self\\s*\\.\\s*env\\s*\\.\\s*)",
""
]
],
"serialization_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_171>(?<!\\w)invalid\\s*serialization\\s*data\\s*for\\s*dateperiod\\s*object(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_168>(?<!\\w)invalid\\s*serialization\\s*data\\s*for\\s*datetime\\s*object(?!\\w))",
""
]
],
"serialize": [
[
"set",
"function_names"
]
],
"serialize_napre": [
[
"regex",
"(?P<high_acuracy_code_exec12a1>(?<!\\w)serialize[\\s\\)]*(\\(|//|`))",
""
]
],
"server_napost": [
[
"regex",
"(?P<resp_body_data_leak_sql_43>\\s*sql\\s*server(?!\\w))",
""
]
],
"server_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_93>(?<!\\w)sql\\s*server(?!\\w))",
""
]
],
"serverexception_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_7>(?<!\\w)java\\s*\\.\\s*rmi\\s*\\.\\s*serverexception(?!\\w))",
""
]
],
"servlet_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_9>(?<!\\w)javax\\s*\\.\\s*servlet(?!\\w))",
""
]
],
"session": [
[
"set",
"vuln_web_set3"
]
],
"set": [
[
"set",
"function_names"
]
],
"set_napre": [
[
"regex",
"(?P<xss_html_specialc3dd>(?<!\\w)set[\\s\\)]*(\\(|//|`))",
""
]
],
"setcache": [
[
"set",
"function_names"
]
],
"setcache_napre": [
[
"regex",
"(?P<ssticd8d>(?<!\\w)setcache[\\s\\)]*(\\(|//|`))",
""
]
],
"setcookie": [
[
"set",
"function_names"
]
],
"setcookie_napre": [
[
"regex",
"(?P<high_acuracy_code_exec6db9>(?<!\\w)setcookie[\\s\\)]*(\\(|//|`))",
""
]
],
"setinterval": [
[
"set",
"function_names"
]
],
"setinterval_napre": [
[
"regex",
"(?P<xss_html_speciala329>(?<!\\w)setinterval[\\s\\)]*(\\(|//|`))",
""
]
],
"settimeout": [
[
"set",
"function_names"
]
],
"settimeout_napre": [
[
"regex",
"(?P<xss_html_special4f36>(?<!\\w)settimeout[\\s\\)]*(\\(|//|`))",
""
]
],
"setup": [
[
"set",
"vuln_urls_set"
]
],
"sgb_dir": [
[
"set",
"vuln_web_set3"
]
],
"sh_napost_napre": [
[
"regex",
"(?P<os_commands>(?<!\\w)sh(?!\\w))",
"_noregex"
]
],
"sha": [
[
"set",
"function_names"
]
],
"sha_napre": [
[
"regex",
"(?P<sqli_generic20ed>(?<!\\w)sha\\d+[\\s\\)]*(\\(|//|`))",
""
]
],
"shell_exec_napre": [
[
"regex",
"(?P<high_acuracy_code_exec461a>(?<!\\w)shell\\_exec[\\s\\)]*(\\(|//|`))",
""
]
],
"shop": [
[
"set",
"vuln_web_set3"
]
],
"show_query_columns_napost": [
[
"regex",
"(?P<vuln_web_files_231>\\/owa\\_util\\s*\\.\\s*show\\_query\\_columns(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_149>\\/e7uo7v7d\\s*\\.\\s*show\\_query\\_columns(?!\\w))",
""
]
],
"show_source_napre": [
[
"regex",
"(?P<high_acuracy_code_exec6338>(?<!\\w)show\\_source[\\s\\)]*(\\(|//|`))",
""
]
],
"showsource_napost": [
[
"regex",
"(?P<vuln_web_files_458>\\/owa\\_util\\s*\\.\\s*showsource(?!\\w))",
""
],
[
"regex",
"(?P<vuln_web_files_1081>\\/e7uo7v7d\\s*\\.\\s*showsource(?!\\w))",
""
]
],
"simpletype_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_64>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*simpletype(?!\\w))",
""
]
],
"slashes": [
[
"and_condition",
"2_:,slashes"
],
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg0e76>((\\/\\w*\\?)\\w+[^=]|\\?\\w*\\/))",
""
],
[
"regex",
"(?P<os_cmd_high_acuracy_fast_reg_8>(/\\w*\\*|\\\\\\w*\\*|w*\\*/\\|\\w*\\*\\\\))",
""
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_2"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_3"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_4"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_5"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_6"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_7"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_8"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_10"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_11"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_14"
]
],
"sleep": [
[
"regex",
"(?P<sqli_fast_reg6210>(sleep\\s+\\d))",
""
],
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"sleep_napre": [
[
"regex",
"(?P<sqli_generic6a8c>(?<!\\w)sleep[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<high_acuracy6a8c>(?<!\\w)sleep[\\s\\)]*(\\(|//|`))",
""
]
],
"slice": [
[
"set",
"function_names"
]
],
"slice_napre": [
[
"regex",
"(?P<xss_html_specialb902>(?<!\\w)slice[\\s\\)]*(\\(|//|`))",
""
]
],
"sn": [
[
"set",
"ldap_words"
]
],
"sort_napost_napre": [
[
"regex",
"(?P<os_commandsff70>(?<!\\w)sort(?!\\w))",
"_noregex"
]
],
"source": [
[
"regex",
"(?P<high_acuracy_fast_reg_xss52a6>(/.source))",
""
]
],
"specified_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_79>(?<!\\w)illegal\\s*length\\s*modifier\\s*specified(?!\\w))",
""
]
],
"spoofchecker_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_37>(?<!\\w)failed\\s*to\\s*clone\\s*spoofchecker\\s*object(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_84>(?<!\\w)spoofchecker\\s*class\\s*not\\s*defined(?!\\w))",
""
]
],
"sprintf": [
[
"set",
"function_names"
]
],
"sprintf_napre": [
[
"regex",
"(?P<high_acuracy_code_execf7a4>(?<!\\w)sprintf[\\s\\)]*(\\(|//|`))",
""
]
],
"sql_compare": [
[
"and_condition",
"2_sql_conditions,sql_compare"
]
],
"sql_comparison": [
[
"regex",
"(?P<regex_sqli_29>^\\s*\\w+\\s*[<>]+\\s*\\w+\\s*$)",
""
],
[
"and_condition",
"2_or,sql_comparison"
]
],
"sql_conditions": [
[
"and_condition",
"3_sql_conditions,',sql_operators"
],
[
"and_condition",
"2_sql_conditions,="
],
[
"regex",
"(?P<regex_sqli_8>^\\d(\\^\\w+)*\\s*(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?\\s*\\w$)",
""
],
[
"and_condition",
"2_sql_conditions,sql_compare"
],
[
"and_condition",
"3_sql_conditions,sql_equal,quotes"
],
[
"regex",
"(?P<regex_sqli_15>^\\s*(and|\\||\\&|\\|\\||\\&\\&|or|having)(\\s*not\\s*)?\\s*\\d+\\s*([^\\w\\s]+|$))",
""
],
[
"and_condition",
"4_sql_conditions,null,not,is"
],
[
"regex",
"(?P<regex_sqli_17>(\\s(and|\\||\\&|\\|\\||\\&\\&|or|having)|\\^)(\\s*not\\s*)?\\s+([\"'\\.\\-_\\(\\),\\w]+)\\s*([=%>&<+\\-\\!\\|]+|(like|rlike))[\\w\\s])",
""
],
[
"and_condition",
"2_sql_conditions,("
],
[
"and_condition",
"2_sql_conditions,select"
],
[
"regex",
"(?P<regex_sqli_21>\\s(and|\\||\\&|\\|\\||\\&\\&|or|having|order\\s+by)(\\s*not\\s*)?\\s[\\s\\w\\(\\)]*([\\);'\"\\|]{2,}|--|\\/\\*|#))",
""
],
[
"regex",
"(?P<regex_sqli_22>('|\"|\\)|;|\\||\\&)+\\s*(and|\\||\\&|\\|\\||\\&\\&|or|having|order\\s+by)\\s)",
""
],
[
"and_condition",
"2_sql_conditions,quotes"
]
],
"sql_equal": [
[
"and_condition",
"3_sql_conditions,sql_equal,quotes"
]
],
"sql_like": [
[
"and_condition",
"2_sql_like,'"
]
],
"sql_napost": [
[
"regex",
"(?P<url_scanning_8>\\s*\\.\\s*sql\\s*\\.\\s*tar(?!\\w))",
""
],
[
"regex",
"(?P<url_scanning>\\s*\\.\\s*sql(?!\\w))",
""
]
],
"sql_operators": [
[
"and_condition",
"3_sql_conditions,',sql_operators"
]
],
"sql_operators2": [
[
"and_condition",
"2_/,sql_operators2"
]
],
"sql_prefix": [
[
"and_condition",
"2_--,sql_prefix"
],
[
"and_condition",
"4_waitfor,delay,sql_prefix,:"
]
],
"sql_prefix2": [
[
"regex",
"(?P<regex_prefix_0>^[\\w\\s]*('|\"|;|\\|\\&)+\\s)",
""
],
[
"and_condition",
"2_sql_prefix2,and_or_having"
]
],
"sql_verbs": [
[
"and_condition",
"3_sql_verbs,union,all"
],
[
"and_condition",
"2_sql_verbs,("
],
[
"and_condition",
"2_union,sql_verbs"
],
[
"and_condition",
"2_union,sql_verbs"
],
[
"and_condition",
"2_union,sql_verbs"
]
],
"sqlclient_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_68>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*sqlclient\\s*\\.\\s*)",
""
]
],
"sqlexception_napost": [
[
"regex",
"(?P<resp_body_data_leak_sql_10>\\s*\\.\\s*sqlclient\\s*\\.\\s*sqlexception(?!\\w))",
""
]
],
"sqlexception_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_83>(?<!\\w)java\\s*\\.\\s*sql\\s*\\.\\s*sqlexception(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_44>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*sqlclient\\s*\\.\\s*sqlexception(?!\\w))",
""
]
],
"sqlite/jdbcdriver_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_76>(?<!\\w)sqlite\\/jdbcdriver(?!\\w))",
"_noregex"
]
],
"sqliteexception_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_16>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*sqlite\\s*\\.\\s*sqliteexception(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_82>(?<!\\w)sqliteexception(?!\\w))",
"_noregex"
]
],
"sqlstate_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_84>(?<!\\w)ingres\\s*sqlstate(?!\\w))",
""
]
],
"src": [
[
"set",
"xss_event"
]
],
"src=": [
[
"regex",
"(?P<regex_xss_8>src=\\s*\\w)",
""
]
],
"srcdoc_napost_napre": [
[
"regex",
"(?P<xss_html_special_26>(?<!\\w)srcdoc(?!\\w))",
"_noregex"
]
],
"ssh2://": [
[
"regex",
"(?P<php_proto_wrappers_fast_reg1e0f>(ssh2://\\w+))",
""
]
],
"ssh_napost": [
[
"regex",
"(?P<url_scanningf544>\\s*\\.\\s*ssh(?!\\w))",
""
]
],
"stack_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_146>(?<!\\w)stack\\s*trace(?!\\w))",
""
]
],
"stacktrace')\"_napre": [
[
"regex",
"(?P<resp_body_data_java_leak2848>(?<!\\w)onclick\\=\\\"toggle[\\s\\)]*(\\(|//|`)\\'full\\s*exception\\s*chain\\s*stacktrace\\'\\)\\\")",
""
]
],
"stat": [
[
"set",
"vuln_web_set3"
]
],
"statements_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_49>(?<!\\w)the\\s*used\\s*select\\s*statements\\s*have\\s*different\\s*number\\s*of\\s*columns(?!\\w))",
""
]
],
"statically_napost": [
[
"regex",
"(?P<resp_body_php_errors4436>[\\s\\)]*(\\(|//|`)\\)\\s*cannot\\s*be\\s*called\\s*statically(?!\\w))",
""
]
],
"stats": [
[
"set",
"vuln_web_set3"
]
],
"stats-bin-p": [
[
"set",
"vuln_web_set3"
]
],
"stats_old": [
[
"set",
"vuln_web_set3"
]
],
"store": [
[
"set",
"vuln_web_set3"
],
[
"set",
"vuln_urls_set"
]
],
"str_replace_napre": [
[
"regex",
"(?P<high_acuracy_code_exec78da>(?<!\\w)str\\_replace[\\s\\)]*(\\(|//|`))",
""
]
],
"str_rot_napre": [
[
"regex",
"(?P<high_acuracy_code_exec3c96>(?<!\\w)str\\_rot\\d+3[\\s\\)]*(\\(|//|`))",
""
]
],
"string_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_1>(?<!\\w)input\\s*string\\s*is\\s*too\\s*long(?!\\w))",
""
]
],
"string_napre": [
[
"regex",
"(?P<high_acuracy_code_exec0668>(?<!\\w)string\\s*\\.\\s*)",
""
]
],
"strreplace": [
[
"set",
"function_names"
]
],
"strrev": [
[
"set",
"function_names"
]
],
"strrev_napre": [
[
"regex",
"(?P<high_acuracy_code_execdaf9>(?<!\\w)strrev[\\s\\)]*(\\(|//|`))",
""
]
],
"style=\"font": [
[
"regex",
"(?P<resp_body_data_leak_iis_14>\\<h2\\s*style\\=\\\"font\\s*\\:\\s*8pt\\/\\d+\\d+pt\\s*verdana\\;\\s*color\\s*\\:\\s*000000\\\"\\>http\\s*403\\s*\\.\\s*6\\s*\\-\\s*forbidden\\s*\\:\\s*\\s*ip\\s*address\\s*rejected\\<br\\>)",
""
]
],
"style_napost_napre": [
[
"regex",
"(?P<xss_html_special_18>(?<!\\w)style(?!\\w))",
"_noregex"
]
],
"subclasses": [
[
"regex",
"(?P<ssti6c6e>\\s*\\.\\s*subclasses[\\s\\)]*(\\(|//|`))",
""
],
[
"set",
"function_names"
]
],
"subclasses___napre": [
[
"regex",
"(?P<sstid61d>(?<!\\w)subclasses\\_\\_[\\s\\)]*(\\(|//|`))",
""
]
],
"subject_napre": [
[
"regex",
"(?P<mail_attacks_1>(?<!\\w)subject\\s*\\:\\s*\\s*)",
""
]
],
"substring": [
[
"set",
"function_names"
]
],
"substring_napre": [
[
"regex",
"(?P<sqli_genericb981>(?<!\\w)substring[\\s\\)]*(\\(|//|`))",
""
]
],
"sum": [
[
"set",
"function_names"
]
],
"sum_napre": [
[
"regex",
"(?P<sqli_generic2717>(?<!\\w)sum[\\s\\)]*(\\(|//|`))",
""
]
],
"supplied_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_0>(?<!\\w)supplied\\s*argument\\s*is\\s*not\\s*a\\s*valid\\s*mysql(?!\\w))",
""
]
],
"support_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_147>(?<!\\w)object\\s*does\\s*not\\s*support\\s*method\\s*calls(?!\\w))",
""
]
],
"supported_napost": [
[
"regex",
"(?P<resp_body_php_errors_81>\\[\\]\\s*operator\\s*not\\s*supported\\s*for\\s*strings(?!\\w))",
""
]
],
"surname": [
[
"set",
"ldap_words"
]
],
"sws": [
[
"set",
"vuln_web_set3"
]
],
"sybase_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_55>(?<!\\w)sybase(?!\\w))",
"_noregex"
]
],
"syntax_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_90>(?<!\\w)sql\\s*syntax(?!\\w))",
""
]
],
"sys": [
[
"and_condition",
"2_sys,("
],
[
"set",
"function_names"
]
],
"sys_napre": [
[
"regex",
"(?P<sqli_generic_33>(?<!\\w)sys\\s*\\.\\s*)",
""
]
],
"sysdatabases_napost_napre": [
[
"regex",
"(?P<sqli_generic_25>(?<!\\w)sysdatabases(?!\\w))",
"_noregex"
]
],
"sysmessages": [
[
"set",
"function_names"
]
],
"sysmessages_napost": [
[
"regex",
"(?P<sqli_generic_63>\\s*\\.\\s*sysmessages(?!\\w))",
""
]
],
"sysobjects_napost_napre": [
[
"regex",
"(?P<sqli_generic_27>(?<!\\w)sysobjects(?!\\w))",
"_noregex"
]
],
"system": [
[
"and_condition",
"3_<!doctype,entity,system"
],
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"system_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy30f1>(?<!\\w)system[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<resp_body_data_leak_sql_61>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*)",
""
],
[
"regex",
"(?P<high_acuracy_code_exec30f1>(?<!\\w)system[\\s\\)]*(\\(|//|`))",
""
]
],
"system_user_napre": [
[
"regex",
"(?P<sqli_genericb844>(?<!\\w)system\\_user[\\s\\)]*(\\(|//|`))",
""
]
],
"systeminfo": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"systemuser": [
[
"set",
"function_names"
]
],
"t": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"table_name_napost_napre": [
[
"regex",
"(?P<sqli_generic_42>(?<!\\w)table\\_name(?!\\w))",
"_noregex"
]
],
"table_napost_napre": [
[
"regex",
"(?P<sqli_generic>(?<!\\w)table(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<sqli_genericba4a>(?<!\\w)drop\\s*table(?!\\w))",
""
]
],
"table_schema_napost_napre": [
[
"regex",
"(?P<sqli_generic_28>(?<!\\w)table\\_schema(?!\\w))",
"_noregex"
]
],
"tail": [
[
"set",
"os_commands2"
]
],
"tar_napost": [
[
"regex",
"(?P<url_scanning>\\s*\\.\\s*tar(?!\\w))",
""
],
[
"regex",
"(?P<url_scanning_13>\\s*\\.\\s*tar\\s*\\.\\s*gz(?!\\w))",
""
]
],
"temp": [
[
"set",
"vuln_web_set2"
]
],
"tempnam": [
[
"set",
"function_names"
]
],
"tempnam_napre": [
[
"regex",
"(?P<high_acuracy_code_execca3c>(?<!\\w)tempnam[\\s\\)]*(\\(|//|`))",
""
]
],
"test": [
[
"set",
"vuln_web_set3"
]
],
"texis": [
[
"set",
"vuln_web_set3"
]
],
"texis.exe": [
[
"set",
"vuln_web_set3"
]
],
"text/vbscript_napost_napre": [
[
"regex",
"(?P<xss_html_special_60>(?<!\\w)text\\/vbscript(?!\\w))",
"_noregex"
]
],
"tgz_napost": [
[
"regex",
"(?P<url_scanning_2>\\s*\\.\\s*tgz(?!\\w))",
""
]
],
"therefore_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_134>(?<!\\w)and\\s*must\\s*therefore\\s*be\\s*declared\\s*abstract\\s*or\\s*implement\\s*the\\s*remaining\\s*methods(?!\\w))",
""
]
],
"this": [
[
"set",
"function_names"
]
],
"this[_napre": [
[
"regex",
"(?P<high_acuracy_code_execution_4>(?<!\\w)this\\[)",
"_noregex"
]
],
"this_napre": [
[
"regex",
"(?P<high_acuracy_7>(?<!\\w)this\\s*\\.\\s*)",
""
]
],
"thread": [
[
"set",
"function_names"
]
],
"thread_napre": [
[
"regex",
"(?P<high_acuracy_code_execution_18>(?<!\\w)thread\\s*\\.\\s*)",
""
]
],
"thrown_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_8>(?<!\\w)thrown\\s*in\\s*\\<b(?!\\w))",
""
]
],
"to_napre": [
[
"regex",
"(?P<mail_attacks_3>(?<!\\w)to\\s*\\:\\s*\\s*)",
""
]
],
"top": [
[
"set",
"function_names"
]
],
"top[_napre": [
[
"regex",
"(?P<xss_html_special_3>(?<!\\w)top\\[)",
"_noregex"
],
[
"regex",
"(?P<high_acuracy_17>(?<!\\w)top\\[)",
"_noregex"
]
],
"top_napre": [
[
"regex",
"(?P<xss_html_special_4>(?<!\\w)top\\s*\\.\\s*)",
""
]
],
"tostring": [
[
"set",
"function_names"
]
],
"tostring_napre": [
[
"regex",
"(?P<high_acuracy_code_exec79c4>(?<!\\w)tostring[\\s\\)]*(\\(|//|`))",
""
]
],
"touch": [
[
"set",
"function_names"
]
],
"touch_napre": [
[
"regex",
"(?P<high_acuracy_code_execce3b>(?<!\\w)touch[\\s\\)]*(\\(|//|`))",
""
]
],
"tr_napost_napre": [
[
"regex",
"(?P<os_commands>(?<!\\w)tr(?!\\w))",
"_noregex"
]
],
"traceroute6_napre": [
[
"regex",
"(?P<os_commandsefda>(?<!\\w)traceroute6)",
"_noregex"
]
],
"traceroute_napost_napre": [
[
"regex",
"(?P<os_commands>(?<!\\w)traceroute(?!\\w))",
"_noregex"
]
],
"tracert_napost_napre": [
[
"regex",
"(?P<os_commands2cf4>(?<!\\w)tracert(?!\\w))",
"_noregex"
]
],
"transaction_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_96>(?<!\\w)transaction\\s*rollback(?!\\w))",
""
]
],
"trappable_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_iis_6>(?<!\\w)trappable\\s*error\\s*occurred\\s*in\\s*an\\s*external\\s*object\\s*\\.\\s*\\s*the\\s*script\\s*cannot\\s*continue\\s*running(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_leak_iis_20>(?<!\\w)a\\s*trappable\\s*error\\s*occurred\\s*in\\s*an\\s*external\\s*object\\s*\\.\\s*\\s*the\\s*script\\s*cannot\\s*continue\\s*running(?!\\w))",
""
]
],
"type": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"typehint_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_50>(?<!\\w)unknown\\s*typehint(?!\\w))",
""
]
],
"u": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_11"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_7"
]
],
"unable_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_22>(?<!\\w)unable\\s*to\\s*call(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_69>(?<!\\w)unable\\s*to\\s*cast\\s*node\\s*to\\s*string(?!\\w))",
""
]
],
"uname_napost_napre": [
[
"regex",
"(?P<os_commands_4>(?<!\\w)uname(?!\\w))",
"_noregex"
]
],
"uncloneable_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_151>(?<!\\w)trying\\s*to\\s*clone\\s*an\\s*uncloneable\\s*object(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_141>(?<!\\w)trying\\s*to\\s*clone\\s*an\\s*uncloneable\\s*object\\s*of\\s*class(?!\\w))",
""
]
],
"undeclared_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_98>(?<!\\w)access\\s*to\\s*undeclared\\s*static\\s*property(?!\\w))",
""
]
],
"undefined_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_55>(?<!\\w)call\\s*to\\s*undefined\\s*function(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_71>(?<!\\w)call\\s*to\\s*undefined\\s*method(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_153>(?<!\\w)undefined\\s*class\\s*constant(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_78>(?<!\\w)undefined\\s*constant(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_82>(?<!\\w)undefined\\s*offset\\s*for\\s*object\\s*of\\s*type(?!\\w))",
""
]
],
"unescape_napre": [
[
"regex",
"(?P<xss_html_special64b9>(?<!\\w)unescape\\s*\\.\\s*)",
""
]
],
"unexpected_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_29>(?<!\\w)unexpected\\s*end\\s*of\\s*command(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_129>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*unexpected(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_92>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*unexpected(?!\\w))",
""
]
],
"unhex": [
[
"set",
"function_names"
]
],
"unhex_napre": [
[
"regex",
"(?P<sqli_generic3f67>(?<!\\w)unhex[\\s\\)]*(\\(|//|`))",
""
]
],
"union": [
[
"and_condition",
"3_union,select,from"
],
[
"and_condition",
"2_union,select"
],
[
"and_condition",
"2_union,select"
],
[
"and_condition",
"3_sql_verbs,union,all"
],
[
"and_condition",
"2_union,sql_verbs"
],
[
"and_condition",
"2_union,sql_verbs"
],
[
"and_condition",
"2_union,sql_verbs"
],
[
"set",
"and_or_union"
],
[
"set",
"sql_operators2"
]
],
"union_napost_napre": [
[
"regex",
"(?P<sqli_generic>(?<!\\w)union(?!\\w))",
"_noregex"
]
],
"unknown_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_97>(?<!\\w)unknown\\s*soap\\s*version(?!\\w))",
""
]
],
"unresolved_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_136>(?<!\\w)encoding\\s*\\:\\s*\\s*unresolved(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_42>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*unresolved(?!\\w))",
""
]
],
"unserialize": [
[
"set",
"function_names"
]
],
"unserialize_napre": [
[
"regex",
"(?P<high_acuracy_code_execaa33>(?<!\\w)unserialize[\\s\\)]*(\\(|//|`))",
""
]
],
"unspecified_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_123>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*unspecified(?!\\w))",
""
]
],
"unsupported_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_34>(?<!\\w)unsupported\\s*operand\\s*types(?!\\w))",
""
]
],
"update": [
[
"set",
"sql_verbs"
]
],
"updatexml": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"updatexml_napre": [
[
"regex",
"(?P<sqli_genericdd00>(?<!\\w)updatexml[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<sqli_genericdd00>(?<!\\w)updatexml[\\s\\)]*(\\(|//|`))",
""
]
],
"upload": [
[
"set",
"vuln_web_set1"
],
[
"set",
"vuln_web_set2"
]
],
"uploadservlet_napost": [
[
"regex",
"(?P<vuln_web_files_373>\\/e7uo7v7d\\s*\\.\\s*uploadservlet(?!\\w))",
""
]
],
"upper": [
[
"set",
"function_names"
]
],
"upper_napre": [
[
"regex",
"(?P<sqli_genericccae>(?<!\\w)upper[\\s\\)]*(\\(|//|`))",
""
]
],
"url": [
[
"set",
"function_names"
],
[
"set",
"expression_url"
]
],
"url_napre": [
[
"regex",
"(?P<xss_html_special6dda>(?<!\\w)url[\\s\\)]*(\\(|//|`))",
""
]
],
"urlencode_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_6>(?<!\\w)server\\s*\\.\\s*urlencode(?!\\w))",
""
]
],
"user": [
[
"set",
"function_names"
],
[
"set",
"function_names"
]
],
"user_name_napre": [
[
"regex",
"(?P<sqli_generic035a>(?<!\\w)user\\_name[\\s\\)]*(\\(|//|`))",
""
]
],
"user_napost_napre": [
[
"regex",
"(?P<os_commands_26>(?<!\\w)net\\s*user(?!\\w))",
""
]
],
"user_napre": [
[
"regex",
"(?P<sqli_generic062d>(?<!\\w)user[\\s\\)]*(\\(|//|`))",
""
],
[
"regex",
"(?P<sqli_generic062d>(?<!\\w)user[\\s\\)]*(\\(|//|`))",
""
]
],
"username": [
[
"set",
"function_names"
]
],
"userpassword": [
[
"set",
"ldap_words"
]
],
"utm": [
[
"set",
"vuln_web_set3"
]
],
"v": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_10"
],
[
"set",
"relevant_characters_7"
]
],
"validate_stmt_napost": [
[
"regex",
"(?P<vuln_web_files_936>\\/e7uo7v7d\\s*\\.\\s*validate\\_stmt(?!\\w))",
""
]
],
"validation_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_115>(?<!\\w)invalid\\s*relaxng\\s*validation\\s*context(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_php_errors_157>(?<!\\w)invalid\\s*schema\\s*validation\\s*context(?!\\w))",
""
]
],
"value_napre": [
[
"regex",
"(?P<xss_html_special8338>(?<!\\w)value[\\s\\)]*(\\(|//|`))",
""
]
],
"valueof": [
[
"set",
"function_names"
]
],
"valueof_napost_napre": [
[
"regex",
"(?P<xss_html_special_15>(?<!\\w)valueof(?!\\w))",
"_noregex"
]
],
"valueof_napre": [
[
"regex",
"(?P<xss_html_special_1>(?<!\\w)valueof\\s*\\:\\s*)",
""
]
],
"var_dump_napre": [
[
"regex",
"(?P<high_acuracy_code_exec4543>(?<!\\w)var\\_dump[\\s\\)]*(\\(|//|`))",
""
]
],
"varchar": [
[
"set",
"function_names"
]
],
"varchar_napre": [
[
"regex",
"(?P<sqli_generice54c>(?<!\\w)varchar[\\s\\)]*(\\(|//|`))",
""
]
],
"vardump": [
[
"set",
"function_names"
]
],
"variables_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_7>(?<!\\w)only\\s*variables\\s*can\\s*be\\s*passed\\s*by\\s*reference(?!\\w))",
""
]
],
"vbscript_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_5>(?<!\\w)vbscript\\s*\\.\\s*encode(?!\\w))",
""
]
],
"vbscript_napre": [
[
"regex",
"(?P<xss_html_special_19>(?<!\\w)vbscript\\s*\\:\\s*)",
""
]
],
"version": [
[
"set",
"function_names"
]
],
"version_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_12>(?<!\\w)mysql\\s*server\\s*version\\s*for\\s*the\\s*right\\s*syntax\\s*to\\s*use(?!\\w))",
""
]
],
"version_napre": [
[
"regex",
"(?P<sqli_genericdd3b>(?<!\\w)version[\\s\\)]*(\\(|//|`))",
""
]
],
"view_napost_napre": [
[
"regex",
"(?P<os_commands_17>(?<!\\w)net\\s*view(?!\\w))",
""
]
],
"vol": [
[
"set",
"os_command_probing"
],
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"vol_napost": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_16>\\|\\s*vol(?!\\w))",
""
]
],
"vol_napre": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_14>(?<!\\w)vol\\s*\\|)",
""
]
],
"vtmxqnwv_napost": [
[
"regex",
"(?P<vuln_web_dirs_689>\\/e\\d+vtmxqnwv(?!\\w))",
""
]
],
"vuln_urls_set": [
[
"and_condition",
"2_vuln_urls_set,file_extentions_set"
]
],
"vuln_web_set1": [
[
"and_condition",
"3_/,vuln_web_set1,vuln_web_set2"
]
],
"vuln_web_set2": [
[
"and_condition",
"3_/,vuln_web_set1,vuln_web_set2"
]
],
"vuln_web_set3": [
[
"and_condition",
"2_cgi-bin,vuln_web_set3"
]
],
"w": [
[
"set",
"relevant_characters_3"
],
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_5"
],
[
"set",
"relevant_characters_6"
],
[
"set",
"relevant_characters_8"
],
[
"set",
"relevant_characters_14"
],
[
"set",
"relevant_characters_2"
],
[
"set",
"relevant_characters_7"
]
],
"waitfor": [
[
"and_condition",
"4_waitfor,delay,sql_prefix,:"
],
[
"set",
"waitfor_set"
],
[
"set",
"sql_operators2"
]
],
"waitfor_napost_napre": [
[
"regex",
"(?P<sqli_blind>(?<!\\w)waitfor(?!\\w))",
"_noregex"
]
],
"waitfor_set": [
[
"and_condition",
"2_:,waitfor_set"
]
],
"warning_napost_napre": [
[
"regex",
"(?P<resp_body_data_leak_sql_62>(?<!\\w)warning(?!\\w))",
"_noregex"
]
],
"wc": [
[
"set",
"os_commands2"
]
],
"wc_napost_napre": [
[
"regex",
"(?P<os_commands_22>(?<!\\w)wc(?!\\w))",
"_noregex"
]
],
"web.exe": [
[
"set",
"vuln_web_set3"
]
],
"webcgi": [
[
"set",
"vuln_web_set3"
]
],
"wget": [
[
"set",
"os_commands1"
],
[
"set",
"os_commands2"
]
],
"wget_napost_napre": [
[
"regex",
"(?P<os_commands_15>(?<!\\w)wget(?!\\w))",
"_noregex"
]
],
"when": [
[
"and_condition",
"2_case,when"
],
[
"set",
"sql_operators2"
]
],
"where": [
[
"and_condition",
"3_select,from,where"
]
],
"where_napost_napre": [
[
"regex",
"(?P<sqli_generic_59>(?<!\\w)where(?!\\w))",
"_noregex"
]
],
"which": [
[
"and_condition",
"2_which,os_tools"
]
],
"whoami_napost_napre": [
[
"regex",
"(?P<os_commands_13>(?<!\\w)whoami(?!\\w))",
"_noregex"
]
],
"wildcard_characters": [
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_2"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_3"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_4"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_5"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_6"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_7"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_8"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_10"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_11"
],
[
"and_condition",
"3_slashes,wildcard_characters,relevant_characters_14"
]
],
"window": [
[
"set",
"function_names"
]
],
"window,frames_napost_napre": [
[
"regex",
"(?P<xss_html_special0c79>(?<!\\w)window\\,frames(?!\\w))",
"_noregex"
]
],
"window[_napre": [
[
"regex",
"(?P<xss_html_special_37>(?<!\\w)window\\[)",
"_noregex"
]
],
"window_napost_napre": [
[
"regex",
"(?P<xss_html_special47b3>(?<!\\w)window\\s*\\.\\s*frames(?!\\w))",
""
]
],
"window_napre": [
[
"regex",
"(?P<xss_html_special>(?<!\\w)window\\s*\\.\\s*)",
""
]
],
"winnt_napost_napre": [
[
"regex",
"(?P<os_commands_0>(?<!\\w)winnt(?!\\w))",
"_noregex"
]
],
"wordpress": [
[
"set",
"vuln_urls_set"
]
],
"write": [
[
"set",
"function_names"
]
],
"write_napre": [
[
"regex",
"(?P<high_acuracy_code_exec09c1>(?<!\\w)write[\\s\\)]*(\\(|//|`))",
""
]
],
"writefile": [
[
"set",
"function_names"
]
],
"writefile_napre": [
[
"regex",
"(?P<ssti43a8>(?<!\\w)writefile[\\s\\)]*(\\(|//|`))",
""
]
],
"writeln": [
[
"set",
"function_names"
]
],
"writeln_napre": [
[
"regex",
"(?P<xss_html_specialc80e>(?<!\\w)writeln[\\s\\)]*(\\(|//|`))",
""
]
],
"wscript_napost_napre": [
[
"regex",
"(?P<resp_body_data_java_leak_20>(?<!\\w)wscript\\s*\\.\\s*network(?!\\w))",
""
],
[
"regex",
"(?P<resp_body_data_java_leak_1>(?<!\\w)wscript\\s*\\.\\s*shell(?!\\w))",
""
]
],
"wso_version_napost_napre": [
[
"regex",
"(?P<high_acuracy_code_execution_20>(?<!\\w)wso\\_version(?!\\w))",
"_noregex"
]
],
"wwwthreads": [
[
"set",
"vuln_web_set3"
]
],
"x": [
[
"set",
"relevant_characters_4"
],
[
"set",
"relevant_characters_6"
]
],
"xlink_napre": [
[
"regex",
"(?P<xss_html_special_55>(?<!\\w)xlink\\s*\\:\\s*)",
""
]
],
"xss_event": [
[
"and_condition",
"3_xss_pentest_tags,=,xss_event"
]
],
"xss_pentest_tags": [
[
"and_condition",
"3_xss_pentest_tags,=,xss_event"
]
],
"xsstest_napost_napre": [
[
"regex",
"(?P<vuln_web_files_898>(?<!\\w)xsstest\\s*\\.\\s*xml(?!\\w))",
""
]
],
"y": [
[
"set",
"relevant_characters_6"
]
],
"zend_call_function_napost_napre": [
[
"regex",
"(?P<resp_body_php_errors_137>(?<!\\w)corrupted\\s*fcall\\_info\\s*provided\\s*to\\s*zend\\_call\\_function(?!\\w))",
""
]
],
"zip://": [
[
"regex",
"(?P<php_proto_wrappers_fast_reg7c51>(zip://\\w+))",
""
]
],
"zip_napost": [
[
"regex",
"(?P<url_scanning_6>\\s*\\.\\s*zip(?!\\w))",
""
]
],
"zlib://": [
[
"regex",
"(?P<php_proto_wrappers_fast_regbc7e>(zlib://\\w+))",
""
]
],
"{": [
[
"and_condition",
"4_{,},:,nosql_set"
],
[
"and_condition",
"4_{,},:,nosql_set"
],
[
"and_condition",
"2_{,("
],
[
"and_condition",
"2_{,}"
],
[
"and_condition",
"2_{,}"
],
[
"and_condition",
"2_{,foreach"
],
[
"and_condition",
"3_{,foreach,/"
],
[
"and_condition",
"2_{,}"
],
[
"and_condition",
"2_{,}"
],
[
"and_condition",
"2_{,}"
]
],
"{main}": [
[
"regex",
"(?P<resp_body_php_errors_4>\\#0\\s*\\{main\\})",
""
]
],
"{php}": [
[
"regex",
"(?P<ssti_24>\\{php\\})",
"_noregex"
]
],
"{target}": [
[
"regex",
"(?P<xss_html_special_23>\\{target\\})",
"_noregex"
]
],
"{{": [
[
"regex",
"(?P<ssti>\\{\\{)",
"_noregex"
]
],
"{{}}": [
[
"regex",
"(?P<ssti9606>\\{\\{\\}\\})",
"_noregex"
]
],
"|": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy>\\|)",
"_noregex"
],
[
"set",
"sql_conditions"
],
[
"set",
"code_execution_prefix_set"
],
[
"set",
"os_command_separators"
],
[
"set",
"separators_set"
],
[
"set",
"sql_prefix2"
],
[
"set",
"ldap_set_(|%"
]
],
"|/": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy_0>\\|\\/)",
"_noregex"
]
],
"|dir_napost": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy>\\|dir(?!\\w))",
"_noregex"
]
],
"|dir|": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_11>\\|dir\\|)",
"_noregex"
]
],
"|id_napost": [
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_12>\\|id(?!\\w))",
"_noregex"
],
[
"regex",
"(?P<os_cmd_exec_medium_acuracy_12>\\|id(?!\\w))",
"_noregex"
]
],
"||": [
[
"regex",
"(?P<os_cmd_sep_medium_acuracy_4>\\|\\|)",
"_noregex"
]
],
"}": [
[
"and_condition",
"4_{,},:,nosql_set"
],
[
"and_condition",
"4_{,},:,nosql_set"
],
[
"and_condition",
"2_{,}"
],
[
"and_condition",
"2_{,}"
],
[
"and_condition",
"2_{,}"
],
[
"and_condition",
"2_{,}"
],
[
"and_condition",
"2_{,}"
]
],
"}}": [
[
"regex",
"(?P<ssti_15>\\}\\})",
"_noregex"
]
]
},
"quotes_ev_pattern": "\\\"|\\'|\\*|\\$\\*|\\$@|\\<>",
"quotes_space_ev_fast_reg": "\\\"\\s*\\\"",
"remove_keywords_always": [
"/users.php",
"/secure",
"/sales",
"/users",
"/server",
"/www",
"/php",
"/downloads/js",
"/test.php",
"/html",
"/com",
"/master",
"/download",
"master.",
"/logs",
"/index.html",
"/account",
"/test",
".zip",
"/icons"
],
"resp_body_pattern_regex_list": [
"(?P<resp_body_regex_data_leak_sql_8>warning.*ingres_)",
"(?P<resp_body_regex_data_leak_sql_9>ingresw.*driver)",
"(?P<resp_body_regex_sql_errors_0>response er.*)",
"(?P<resp_body_regex_data_leak_sql_32>error \\w+ \\(\\w+\\))",
"(?P<resp_body_regex_data_leak_sql_5>cli driver.*db2)",
"(?P<resp_body_regex_data_leak_sql_27>warning.*sqlite_.*)",
"(?P<resp_body_regex_data_leak_sql_21>warning.*mysql_.*)",
"(?P<resp_body_regex_data_leak_sql_15>warning.*mssql_.*)",
"(?P<resp_body_regex_data_leak_sql_7>exception.*informix)",
"(?P<resp_body_regex_data_leak_sql_1>oracle.*driver)",
"(?P<resp_body_regex_data_leak_sql_14>ole db.*sql server)",
"(?P<resp_body_regex_data_leak_sql_29>warning.*sybase.*)",
"(?P<resp_body_regex_data_leak_sql_20>sql syntax.*mysql)",
"(?P<resp_body_regex_data_leak_sql_4>db2 sql error:)",
"(?P<resp_body_regex_data_leak_sql_18>sql server.*[0-9a-fa-f]{8})",
"(?P<resp_body_regex_data_leak_sql_26>supplied argument is not a valid postgresql)",
"(?P<resp_body_regex_data_leak_sql_12>procedure or function .* expects parameter)",
"(?P<resp_body_regex_data_leak_sql_25>pg::([a-za-z]*)error)",
"(?P<resp_body_regex_data_leak_0>title>index of.*?<h)",
"(?P<resp_body_regex_data_leak_sql_13>syntax error .* in query expression)",
"(?P<resp_body_regex_data_leak_sql_10>sql error.*pos([0-9]+).*)",
"(?P<resp_body_regex_data_leak_sql_19>exception.*wsystem.data.sqlclient.)",
"(?P<resp_body_regex_data_leak_sql_31>table '[w.]+' doesn't exist)",
"(?P<resp_body_regex_data_leak_1>error \\w+ \\(\\w+\\):)",
"(?P<resp_body_regex_data_leak_sql_24>warning.*pg_.*)",
"(?P<resp_body_regex_data_leak_sql_2>warning.*oci_.*)",
"(?P<resp_body_regex_data_leak_sql_0>ora-[0-9][0-9][0-9][0-9])",
"(?P<resp_body_regex_data_leak_sql_16>driver.*sql[-_ ]*server)",
"(?P<resp_body_regex_data_leak_sql_23>postgresql.*error)",
"(?P<resp_body_regex_data_leak_sql_11>warning.*maxdb.*)",
"(?P<resp_body_regex_data_leak_sql_28>warning.*sqlite3:)",
"(?P<resp_body_regex_data_leak_sql_22>postgresql query failed:)",
"(?P<resp_body_regex_data_leak_sql_6>db2_\\w+\\()",
"(?P<resp_body_regex_data_leak_sql_17>sql server.*driver)",
"(?P<resp_body_regex_data_leak_sql_30>sybase.*server message.*)",
"(?P<resp_body_regex_data_leak_sql_3>warning.*ora_.*)"
],
"resp_body_words_regex_list": [
"(?P<resp_body_data_leak_sql_67>\\[odbc\\])",
"(?P<resp_body_php_errors_49>(?<!\\w)cannot\\s*access\\s*parent(?!\\w))",
"(?P<resp_body_php_errors_59>\\<b\\>warning\\<\\/b\\>\\s*\\:\\s*)",
"(?P<resp_body_php_errors_50>(?<!\\w)unknown\\s*typehint(?!\\w))",
"(?P<resp_body_data_java_leak_16>\\<jsp\\s*\\:\\s*)",
"(?P<resp_body_php_errors_40>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<porttype(?!\\w))",
"(?P<resp_body_php_errors_98>(?<!\\w)access\\s*to\\s*undeclared\\s*static\\s*property(?!\\w))",
"(?P<resp_body_data_leak_sql_63>(?<!\\w)com\\s*\\.\\s*mysql\\s*\\.\\s*jdbc\\s*\\.\\s*exceptions(?!\\w))",
"(?P<resp_body_data_leak_sql_87>(?<!\\w)db2\\s*sql\\s*error\\s*\\:\\s*)",
"(?P<resp_body_data_leak_sql_48>0x800a0bcd(?!\\w))",
"(?P<resp_body_php_errors_136>(?<!\\w)encoding\\s*\\:\\s*\\s*unresolved(?!\\w))",
"(?P<resp_body_data_leak_sql_28>(?<!\\w)you\\s*have\\s*an\\s*error\\s*in\\s*your\\s*sql(?!\\w))",
"(?P<resp_body_data_leak_sql_50>(?<!\\w)procedure\\s*or\\s*function\\s*)",
"(?P<resp_body_php_errors_9>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*can(?!\\w))",
"(?P<resp_body_data_java_leak_12>\\[java\\s*\\.\\s*lang\\s*\\.\\s*)",
"(?P<resp_body_php_errors_122>(?<!\\w)encoding\\s*\\:\\s*\\s*violation(?!\\w))",
"(?P<resp_body_data_java_leak_4>(?<!\\w)server\\s*\\.\\s*mappath(?!\\w))",
"(?P<resp_body_data_leak_iis_18>(?<!\\w)adodb\\s*\\.\\s*command(?!\\w))",
"(?P<resp_body_php_errors_76>(?<!\\w)base\\s*lambda\\s*function\\s*for\\s*closure\\s*not\\s*found(?!\\w))",
"(?P<resp_body_data_leak_sql_10>\\s*\\.\\s*sqlclient\\s*\\.\\s*sqlexception(?!\\w))",
"(?P<resp_body_data_leak_sql_17>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*oledb\\s*\\.\\s*oledbexception(?!\\w))",
"(?P<resp_body_data_leak_sql_38>\\[microsoft\\]\\[odbc\\s*sql\\s*server\\s*driver\\])",
"(?P<resp_body_php_errors_21>(?<!\\w)cannot\\s*use(?!\\w))",
"(?P<resp_body_php_errors_130>(?<!\\w)cannot\\s*yield\\s*from\\s*finally\\s*in\\s*a\\s*force(?!\\w))",
"(?P<resp_body_php_errors_26>(?<!\\w)call\\s*to\\s*private(?!\\w))",
"(?P<resp_body_data_java_leak_9>(?<!\\w)javax\\s*\\.\\s*servlet(?!\\w))",
"(?P<resp_body_php_errors_67>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*expected(?!\\w))",
"(?P<resp_body_php_errors_54>(?<!\\w)exceptions\\s*must\\s*be\\s*valid\\s*objects\\s*derived\\s*from\\s*the\\s*exception\\s*base\\s*class(?!\\w))",
"(?P<resp_body_php_errors_60>(?<!\\w)encoding\\s*\\:\\s*\\s*soapvar(?!\\w))",
"(?P<resp_body_data_leak_sql_15>(?<!\\w)unable\\s*to\\s*connect\\s*to\\s*postgresql\\s*server(?!\\w))",
"(?P<resp_body_php_errors_24>(?<!\\w)cannot\\s*call\\s*overloaded\\s*function\\s*for\\s*non(?!\\w))",
"(?P<resp_body_php_errors_105>(?<!\\w)cannot\\s*call\\s*constructor(?!\\w))",
"(?P<resp_body_php_errors_89>(?<!\\w)encoding\\s*\\:\\s*\\s*object(?!\\w))",
"(?P<resp_body_data_leak_sql_49>(?<!\\w)the\\s*used\\s*select\\s*statements\\s*have\\s*different\\s*number\\s*of\\s*columns(?!\\w))",
"(?P<resp_body_data_leak_sql_31>(?<!\\w)supplied\\s*argument\\s*is\\s*not\\s*a\\s*valid\\s*postgresql\\s*result(?!\\w))",
"(?P<resp_body_php_errors_69>(?<!\\w)unable\\s*to\\s*cast\\s*node\\s*to\\s*string(?!\\w))",
"(?P<resp_body_data_leak_sql_55>(?<!\\w)sybase(?!\\w))",
"(?P<resp_body_data_leak_iis_4>\\<h\\d+\\>internal\\s*server\\s*error\\<\\/h\\d+\\>)",
"(?P<resp_body_php_errors_138>\\<\\/b\\>\\s*on\\s*line\\s*\\<b\\>)",
"(?P<resp_body_php_errors_100>(?<!\\w)numberformatter\\s*class\\s*not\\s*defined(?!\\w))",
"(?P<resp_body_php_errors_57>(?<!\\w)maximum\\s*execution\\s*time\\s*of(?!\\w))",
"(?P<resp_body_php_errors_13>(?<!\\w)cannot\\s*get\\s*arguments\\s*for(?!\\w))",
"(?P<resp_body_data_leak_sql_89>(?<!\\w)exception(?!\\w))",
"(?P<resp_body_data_leak_sql_95>\\'\\s*doesn\\'t\\s*exist(?!\\w))",
"(?P<resp_body_data_leak_sql_13>(?<!\\w)access\\s*database\\s*engine(?!\\w))",
"(?P<resp_body_php_errors_149>(?<!\\w)encoding\\s*\\:\\s*\\s*error(?!\\w))",
"(?P<resp_body_data_java_leak_22>(?<!\\w)response\\s*\\.\\s*binarywrite(?!\\w))",
"(?P<resp_body_data_leak_sql_25>(?<!\\w)sybase\\s*message\\s*\\:\\s*)",
"(?P<resp_body_php_errors_115>(?<!\\w)invalid\\s*relaxng\\s*validation\\s*context(?!\\w))",
"(?P<resp_body_php_errors_162>(?<!\\w)cannot\\s*redeclare\\s*class(?!\\w))",
"(?P<resp_body_php_errors_42>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*unresolved(?!\\w))",
"(?P<resp_body_data_leak_sql_5>(?<!\\w)ora\\-)",
"(?P<resp_body_php_errors_97>(?<!\\w)unknown\\s*soap\\s*version(?!\\w))",
"(?P<resp_body_php_errors_33>(?<!\\w)function\\s*name\\s*must\\s*be\\s*a\\s*string(?!\\w))",
"(?P<resp_body_php_errors_152>(?<!\\w)cannot\\s*call\\s*abstract\\s*method(?!\\w))",
"(?P<resp_body_php_errors_129>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*unexpected(?!\\w))",
"(?P<resp_body_data_leak_sql_39>80040e\\d+4)",
"(?P<resp_body_php_errors_101>(?<!\\w)exception\\s*thrown\\s*without\\s*a\\s*stack\\s*frame(?!\\w))",
"(?P<resp_body_php_errors_8>(?<!\\w)thrown\\s*in\\s*\\<b(?!\\w))",
"(?P<resp_body_data_leak_sql_12>(?<!\\w)mysql\\s*server\\s*version\\s*for\\s*the\\s*right\\s*syntax\\s*to\\s*use(?!\\w))",
"(?P<resp_body_data_leak_iis_10>(?<!\\w)part\\s*of\\s*the\\s*server\\s*has\\s*crashed\\s*or\\s*it\\s*has\\s*a\\s*configuration\\s*error\\s*\\.\\s*\\<\\/h2\\>)",
"(?P<resp_body_php_errors_68>(?<!\\w)cannot\\s*access\\s*empty\\s*property(?!\\w))",
"(?P<resp_body_sql_errors_0>(?<!\\w)response\\s*error(?!\\w))",
"(?P<resp_body_data_leak_sql_93>(?<!\\w)sql\\s*server(?!\\w))",
"(?P<resp_body_php_errors_102>(?<!\\w)cannot\\s*use\\s*object\\s*of\\s*type(?!\\w))",
"(?P<resp_body_data_leak_sql_80>(?<!\\w)incorrect\\s*syntax\\s*near(?!\\w))",
"(?P<resp_body_php_errors_143>(?<!\\w)field\\s*width(?!\\w))",
"(?P<resp_body_php_errors_4>\\#0\\s*\\{main\\})",
"(?P<resp_body_data_java_leak_13>\\s*\\.\\s*createtextfile(?!\\w))",
"(?P<resp_body_php_errors_134>(?<!\\w)and\\s*must\\s*therefore\\s*be\\s*declared\\s*abstract\\s*or\\s*implement\\s*the\\s*remaining\\s*methods(?!\\w))",
"(?P<resp_body_php_errors_6>(?<!\\w)cannot\\s*instantiate\\s*interface(?!\\w))",
"(?P<resp_body_data_leak_sql_43>\\s*sql\\s*server(?!\\w))",
"(?P<resp_body_data_java_leak_6>(?<!\\w)server\\s*\\.\\s*urlencode(?!\\w))",
"(?P<resp_body_php_errors_61>(?<!\\w)cannot\\s*assign\\s*by\\s*reference\\s*to\\s*overloaded\\s*object(?!\\w))",
"(?P<resp_body_php_errors_99>(?<!\\w)encoding\\s*\\:\\s*\\s*can(?!\\w))",
"(?P<resp_body_data_leak_sql_74>(?<!\\w)data\\s*type\\s*mismatch\\s*in\\s*criteria\\s*expression\\s*\\.\\s*)",
"(?P<resp_body_data_leak_sql_44>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*sqlclient\\s*\\.\\s*sqlexception(?!\\w))",
"(?P<resp_body_php_errors_161>(?<!\\w)the\\s*object\\s*to\\s*be\\s*iterated\\s*is\\s*in\\s*an\\s*invalid\\s*state(?!\\w))",
"(?P<resp_body_data_leak_iis_8>\\<title\\>500\\s*internal\\s*server\\s*error\\<\\/title\\>)",
"(?P<resp_body_generic_data_leak_1>\\>\\[to\\s*parent\\s*directory\\]\\<)",
"(?P<resp_body_php_errors_83>(?<!\\w)call\\s*to\\s*protected(?!\\w))",
"(?P<resp_body_php_errors_94>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<binding(?!\\w))",
"(?P<resp_body_php_errors_29>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<service(?!\\w))",
"(?P<resp_body_data_leak_sql_29>(?<!\\w)unexpected\\s*end\\s*of\\s*command(?!\\w))",
"(?P<resp_body_php_errors_72>(?<!\\w)cannot\\s*use\\s*assign(?!\\w))",
"(?P<resp_body_data_leak_sql_27>\\[sqlite\\_error\\])",
"(?P<resp_body_data_leak_sql_91>(?<!\\w)an\\s*illegal\\s*character\\s*has\\s*been\\s*found\\s*in\\s*the\\s*statement(?!\\w))",
"(?P<resp_body_php_errors_14>(?<!\\w)cannot\\s*override\\s*final(?!\\w))",
"(?P<resp_body_data_java_leak_17>(?<!\\w)at\\s*org\\s*\\.\\s*apache\\s*\\.\\s*catalina(?!\\w))",
"(?P<resp_body_php_errors_124>(?<!\\w)method\\s*name\\s*must\\s*be\\s*a\\s*string(?!\\w))",
"(?P<resp_body_data_leak_sql_47>\\[sqlserver\\s*jdbc\\s*driver\\])",
"(?P<resp_body_php_errors_147>(?<!\\w)object\\s*does\\s*not\\s*support\\s*method\\s*calls(?!\\w))",
"(?P<resp_body_php_errors_140>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*complextype(?!\\w))",
"(?P<resp_body_data_leak_sql_78>(?<!\\w)roadhouse\\s*\\.\\s*cms\\s*\\.\\s*)",
"(?P<resp_body_php_errors_165>(?<!\\w)an\\s*iterator\\s*cannot\\s*be\\s*used\\s*with\\s*foreach\\s*by\\s*reference(?!\\w))",
"(?P<resp_body_php_errors_90>(?<!\\w)extremely\\s*fatal\\s*error\\s*\\:\\s*\\s*jmpbuf(?!\\w))",
"(?P<resp_body_data_leak_sql_11>\\[ibm\\]\\[cli\\s*driver\\]\\[db2\\/6000\\])",
"(?P<resp_body_php_errors_16>(?<!\\w)requires\\s*pdo\\s*api\\s*version(?!\\w))",
"(?P<resp_body_data_leak_sql_59>(?<!\\w)sintaxis\\s*incorrecta\\s*cerca\\s*de(?!\\w))",
"(?P<resp_body_data_leak_iis_2>(?<!\\w)error\\s*\\'800)",
"(?P<resp_body_data_leak_iis_22>(?<!\\w)object\\s*required\\s*\\:\\s*\\s*\\')",
"(?P<resp_body_php_errors_133>(?<!\\w)cannot\\s*redeclare(?!\\w))",
"(?P<resp_body_data_leak_sql_35>(?<!\\w)com\\s*\\.\\s*informix\\s*\\.\\s*jdbc(?!\\w))",
"(?P<resp_body_data_leak_sql_90>(?<!\\w)sql\\s*syntax(?!\\w))",
"(?P<resp_body_data_leak_sql_83>(?<!\\w)java\\s*\\.\\s*sql\\s*\\.\\s*sqlexception(?!\\w))",
"(?P<resp_body_php_errors_30>(?<!\\w)cannot\\s*execute\\s*a\\s*blank\\s*command\\s*in(?!\\w))",
"(?P<resp_body_data_leak_sql_62>(?<!\\w)warning(?!\\w))",
"(?P<resp_body_php_errors_41>(?<!\\w)class\\s*name\\s*must\\s*be\\s*a\\s*valid\\s*object\\s*or\\s*a\\s*string(?!\\w))",
"(?P<resp_body_php_errors_22>(?<!\\w)unable\\s*to\\s*call(?!\\w))",
"(?P<resp_body_data_leak_sql_33>(?<!\\w)npgsql\\s*\\.\\s*)",
"(?P<resp_body_php_errors_62>(?<!\\w)encoding\\s*\\:\\s*\\s*\\'\\*\\'\\s*may\\s*only\\s*be\\s*first\\s*arraysize\\s*value\\s*in\\s*list(?!\\w))",
"(?P<resp_body_php_errors_5>(?<!\\w)second\\s*array\\s*member\\s*is\\s*not\\s*a\\s*valid\\s*method(?!\\w))",
"(?P<resp_body_data_java_leak_15>(?<!\\w)server\\s*\\.\\s*htmlencode(?!\\w))",
"(?P<resp_body_php_errors_119>(?<!\\w)cannot\\s*set\\s*non\\s*exception\\s*as\\s*previous\\s*exception(?!\\w))",
"(?P<resp_body_generic_data_leak_0>\\<title\\>index\\s*of\\s*\\.\\s*)",
"(?P<resp_body_php_errors_141>(?<!\\w)trying\\s*to\\s*clone\\s*an\\s*uncloneable\\s*object\\s*of\\s*class(?!\\w))",
"(?P<resp_body_data_java_leak_11>(?<!\\w)at\\s*org\\s*\\.\\s*apache\\s*\\.\\s*coyote\\s*\\.\\s*)",
"(?P<resp_body_php_errors_164>(?<!\\w)encoding\\s*\\:\\s*\\s*internal(?!\\w))",
"(?P<resp_body_data_java_leak_8>(?<!\\w)response\\s*\\.\\s*write(?!\\w))",
"(?P<resp_body_data_leak_sql_42>(?<!\\w)column\\s*count\\s*doesn\\'t\\s*match(?!\\w))",
"(?P<resp_body_data_leak_sql_96>(?<!\\w)transaction\\s*rollback(?!\\w))",
"(?P<resp_body_php_errors_166>(?<!\\w)nesting\\s*level\\s*too\\s*deep(?!\\w))",
"(?P<resp_body_data_leak_iis_14>\\<h2\\s*style\\=\\\"font\\s*\\:\\s*8pt\\/\\d+\\d+pt\\s*verdana\\;\\s*color\\s*\\:\\s*000000\\\"\\>http\\s*403\\s*\\.\\s*6\\s*\\-\\s*forbidden\\s*\\:\\s*\\s*ip\\s*address\\s*rejected\\<br\\>)",
"(?P<resp_body_php_errors_43>(?<!\\w)possible\\s*integer\\s*overflow\\s*in\\s*memory\\s*allocation(?!\\w))",
"(?P<resp_body_data_leak_sql_65>(?<!\\w)syntax\\s*error\\s*in\\s*string\\s*in\\s*query\\s*expression(?!\\w))",
"(?P<resp_body_data_leak_sql_77>(?<!\\w)oledb\\s*\\.\\s*oledbexception(?!\\w))",
"(?P<resp_body_php_errors_51>(?<!\\w)cannot\\s*access\\s*static(?!\\w))",
"(?P<resp_body_data_leak_sql_76>(?<!\\w)sqlite\\/jdbcdriver(?!\\w))",
"(?P<resp_body_php_errors_3>(?<!\\w)encoding\\s*\\:\\s*\\s*cannot(?!\\w))",
"(?P<resp_body_data_leak_sql_58>(?<!\\w)org\\s*\\.\\s*postgresql\\s*\\.\\s*util\\s*\\.\\s*psqlexception(?!\\w))",
"(?P<resp_body_data_java_leak_0>(?<!\\w)class\\s*java\\s*\\.\\s*lang\\s*\\.\\s*)",
"(?P<resp_body_php_errors_170>(?<!\\w)cannot\\s*access\\s*undefined\\s*property\\s*for\\s*object\\s*with\\s*overloaded\\s*property\\s*access(?!\\w))",
"(?P<resp_body_php_errors_145>(?<!\\w)cannot\\s*access\\s*property\\s*started\\s*with(?!\\w))",
"(?P<resp_body_php_errors_11>(?<!\\w)failed\\s*to\\s*register\\s*numberformatter\\s*class(?!\\w))",
"(?P<resp_body_php_errors_157>(?<!\\w)invalid\\s*schema\\s*validation\\s*context(?!\\w))",
"(?P<resp_body_php_errors_148>(?<!\\w)you\\s*must\\s*load\\s*pdo\\s*before\\s*loading\\s*any\\s*pdo\\s*drivers(?!\\w))",
"(?P<resp_body_data_java_leak_20>(?<!\\w)wscript\\s*\\.\\s*network(?!\\w))",
"(?P<resp_body_data_leak_sql_57>(?<!\\w)on\\s*mysql\\s*result\\s*index(?!\\w))",
"(?P<resp_body_php_errors_126>(?<!\\w)arrived\\s*at\\s*end\\s*of\\s*main\\s*loop\\s*which\\s*shouldn(?!\\w))",
"(?P<resp_body_data_leak_sql_72>(?<!\\w)valid\\s*mysql\\s*result(?!\\w))",
"(?P<resp_body_data_leak_sql_66>\\[ibm\\])",
"(?P<resp_body_php_errors_81>\\[\\]\\s*operator\\s*not\\s*supported\\s*for\\s*strings(?!\\w))",
"(?P<resp_body_data_leak_sql_1>(?<!\\w)oracle\\s*error(?!\\w))",
"(?P<resp_body_php_errors_31>(?<!\\w)cannot\\s*destroy\\s*active\\s*lambda\\s*function(?!\\w))",
"(?P<resp_body_php_errors_117>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*\\<restriction(?!\\w))",
"(?P<resp_body_php_errors_18>(?<!\\w)cannot\\s*instantiate\\s*trait(?!\\w))",
"(?P<resp_body_php_errors_135>(?<!\\w)wrong\\s*parameters\\s*for\\s*errorexception(?!\\w))",
"(?P<resp_body_data_leak_iis_13>(?<!\\w)microsoft\\s*ole\\s*db\\s*provider\\s*for\\s*sql\\s*server(?!\\w))",
"(?P<resp_body_data_leak_sql_45>\\[microsoft\\]\\[odbc\\s*microsoft\\s*access\\s*driver\\])",
"(?P<resp_body_data_leak_sql_56>\\[odbc\\s*microsoft\\s*access\\s*driver\\])",
"(?P<resp_body_data_leak_iis_7>(?<!\\w)microsoft\\s*\\s*\\.\\s*net\\s*framework\\s*version\\s*\\:\\s*)",
"(?P<resp_body_data_leak_sql_84>(?<!\\w)ingres\\s*sqlstate(?!\\w))",
"(?P<resp_body_data_java_leak_14>(?<!\\w)server\\s*\\.\\s*execute(?!\\w))",
"(?P<resp_body_php_errors_112>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*restriction(?!\\w))",
"(?P<resp_body_php_errors_87>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<fault(?!\\w))",
"(?P<resp_body_data_leak_sql_8>(?<!\\w)valid\\s*postgresql\\s*result(?!\\w))",
"(?P<resp_body_php_errors_153>(?<!\\w)undefined\\s*class\\s*constant(?!\\w))",
"(?P<resp_body_php_errors_65>(?<!\\w)cannot\\s*unset\\s*string\\s*offsets(?!\\w))",
"(?P<resp_body_data_java_leak_24>(?<!\\w)at\\s*org\\s*\\.\\s*apache\\s*\\.\\s*tomcat\\s*\\.\\s*)",
"(?P<resp_body_data_java_leak_23>\\s*\\.\\s*getfile(?!\\w))",
"(?P<resp_body_php_errors_110>(?<!\\w)cannot\\s*register\\s*an\\s*output\\s*handler\\s*conflict\\s*outside\\s*of\\s*minit(?!\\w))",
"(?P<resp_body_data_leak_iis_16>(?<!\\w)an\\s*error\\s*has\\s*occurred(?!\\w))",
"(?P<resp_body_php_errors_168>(?<!\\w)invalid\\s*serialization\\s*data\\s*for\\s*datetime\\s*object(?!\\w))",
"(?P<resp_body_php_errors_163>(?<!\\w)failed\\s*to\\s*register\\s*resourcebundle\\s*class(?!\\w))",
"(?P<resp_body_data_leak_sql_2>(?<!\\w)org\\s*\\.\\s*hsqldb\\s*\\.\\s*jdbc(?!\\w))",
"(?P<resp_body_data_leak_iis_15>(?<!\\w)cannot\\s*connect\\s*to\\s*the\\s*server\\s*\\:\\s*\\s*timed\\s*out(?!\\w))",
"(?P<resp_body_php_errors_108>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*extension(?!\\w))",
"(?P<resp_body_php_errors_64>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*simpletype(?!\\w))",
"(?P<resp_body_data_leak_iis_11>(?<!\\w)microsoft\\s*vbscript\\s*compilation\\s*error(?!\\w))",
"(?P<resp_body_php_errors_0>(?<!\\w)invalid\\s*opcode(?!\\w))",
"(?P<resp_body_data_leak_sql_94>(?<!\\w)unclosed\\s*quotations\\s*marks(?!\\w))",
"(?P<resp_body_php_errors_37>(?<!\\w)failed\\s*to\\s*clone\\s*spoofchecker\\s*object(?!\\w))",
"(?P<resp_body_php_errors_2>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*missing(?!\\w))",
"(?P<resp_body_data_leak_iis_1>(?<!\\w)asp\\s*\\.\\s*net\\)\\s*version\\s*\\:\\s*)",
"(?P<resp_body_php_errors_139>(?<!\\w)attempt\\s*to\\s*destruct\\s*pending\\s*exception(?!\\w))",
"(?P<resp_body_data_leak_sql_68>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*sqlclient\\s*\\.\\s*)",
"(?P<resp_body_php_errors_125>(?<!\\w)error\\s*installing\\s*signal\\s*handler\\s*for(?!\\w))",
"(?P<resp_body_php_errors_169>(?<!\\w)using\\s*\\$this\\s*when\\s*not\\s*in\\s*object\\s*context(?!\\w))",
"(?P<resp_body_php_errors_85>(?<!\\w)call\\s*to\\s*a\\s*member\\s*function(?!\\w))",
"(?P<resp_body_php_errors_154>(?<!\\w)cannot\\s*instantiate\\s*abstract\\s*class(?!\\w))",
"(?P<resp_body_php_errors_123>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*unspecified(?!\\w))",
"(?P<resp_body_php_errors_137>(?<!\\w)corrupted\\s*fcall\\_info\\s*provided\\s*to\\s*zend\\_call\\_function(?!\\w))",
"(?P<resp_body_php_errors_36>(?<!\\w)string\\s*size\\s*overflow(?!\\w))",
"(?P<resp_body_php_errors_82>(?<!\\w)undefined\\s*offset\\s*for\\s*object\\s*of\\s*type(?!\\w))",
"(?P<resp_body_php_errors_96>(?<!\\w)failed\\s*to\\s*register\\s*messageformatter\\s*class(?!\\w))",
"(?P<resp_body_php_errors_106>(?<!\\w)cannot\\s*call\\s*forward\\_static\\_call(?!\\w))",
"(?P<resp_body_data_java_leak_1>(?<!\\w)wscript\\s*\\.\\s*shell(?!\\w))",
"(?P<resp_body_php_errors_44>(?<!\\w)cannot\\s*use\\s*object\\s*as\\s*array(?!\\w))",
"(?P<resp_body_data_leak_sql_69>(?<!\\w)adodb\\s*\\.\\s*field(?!\\w))",
"(?P<resp_body_php_errors_118>(?<!\\w)encoding\\s*\\:\\s*\\s*external(?!\\w))",
"(?P<resp_body_data_leak_iis_0>\\>syntax\\s*error\\s*in\\s*string\\s*in\\s*query\\s*expression(?!\\w))",
"(?P<resp_body_data_java_leak_19>(?<!\\w)java\\s*\\.\\s*lang\\s*\\.\\s*nullpointerexception(?!\\w))",
"(?P<resp_body_data_leak_sql_7>(?<!\\w)unclosed\\s*quotation\\s*mark(?!\\w))",
"(?P<resp_body_php_errors_88>(?<!\\w)cannot\\s*access\\s*self(?!\\w))",
"(?P<resp_body_data_leak_sql_6>(?<!\\w)server\\s*message(?!\\w))",
"(?P<resp_body_php_errors_91>(?<!\\w)cannot\\s*register\\s*an\\s*output\\s*handler\\s*alias\\s*outside\\s*of\\s*minit(?!\\w))",
"(?P<resp_body_php_errors_46>(?<!\\w)cannot\\s*increment(?!\\w))",
"(?P<resp_body_php_errors_104>(?<!\\w)encoding\\s*\\:\\s*\\s*element(?!\\w))",
"(?P<resp_body_php_errors_171>(?<!\\w)invalid\\s*serialization\\s*data\\s*for\\s*dateperiod\\s*object(?!\\w))",
"(?P<resp_body_data_leak_sql_40>(?<!\\w)has\\s*occurred\\s*in\\s*the\\s*vicinity\\s*of\\s*\\:\\s*)",
"(?P<resp_body_php_errors_113>(?<!\\w)extremely\\s*fatal\\s*error\\s*\\:\\s*\\s*longjmp(?!\\w))",
"(?P<resp_body_php_errors_55>(?<!\\w)call\\s*to\\s*undefined\\s*function(?!\\w))",
"(?P<resp_body_php_errors_73>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*\\<message(?!\\w))",
"(?P<resp_body_php_errors_132>(?<!\\w)no\\s*row\\s*with\\s*the\\s*given\\s*identifier(?!\\w))",
"(?P<resp_body_data_leak_sql_36>(?<!\\w)driver(?!\\w))",
"(?P<resp_body_data_java_leak_5>(?<!\\w)vbscript\\s*\\.\\s*encode(?!\\w))",
"(?P<resp_body_data_leak_sql_9>(?<!\\w)jet\\s*database\\s*engine(?!\\w))",
"(?P<resp_body_data_leak_iis_21>(?<!\\w)microsoft\\s*vbscript\\s*runtime\\s*error(?!\\w))",
"(?P<resp_body_data_leak_sql_51>\\[cli\\s*driver\\])",
"(?P<resp_body_php_errors_48>\\-\\s*not\\s*a\\s*class\\s*\\:\\s*\\s*\\:\\s*method(?!\\w))",
"(?P<resp_body_data_leak_iis_20>(?<!\\w)a\\s*trappable\\s*error\\s*occurred\\s*in\\s*an\\s*external\\s*object\\s*\\.\\s*\\s*the\\s*script\\s*cannot\\s*continue\\s*running(?!\\w))",
"(?P<resp_body_php_errors_116>(?<!\\w)class\\s*entry\\s*requested\\s*for\\s*an\\s*object\\s*without\\s*php\\s*class(?!\\w))",
"(?P<resp_body_php_errors_1>(?<!\\w)input\\s*string\\s*is\\s*too\\s*long(?!\\w))",
"(?P<resp_body_data_leak_sql_64>(?<!\\w)postgresql\\s*query\\s*failed\\s*\\:\\s*)",
"(?P<resp_body_data_leak_sql_81>(?<!\\w)mysqlclient\\s*\\.\\s*)",
"(?P<resp_body_php_errors_19>(?<!\\w)array\\s*callback\\s*has\\s*to\\s*contain\\s*indices\\s*0\\s*and\\s*\\d+)",
"(?P<resp_body_php_errors_52>(?<!\\w)cannot\\s*return\\s*string\\s*offsets\\s*by\\s*reference(?!\\w))",
"(?P<resp_body_data_leak_iis_19>\\<b\\>version\\s*information\\s*\\:\\s*\\<\\/b\\>)",
"(?P<resp_body_data_java_leak_3>(?<!\\w)at\\s*org\\s*\\.\\s*apache\\s*\\.\\s*jasper\\s*\\.\\s*)",
"(?P<resp_body_data_leak_sql_88>(?<!\\w)microsoft\\s*ole\\s*db\\s*provider\\s*for\\s*odbc\\s*drivers(?!\\w))",
"(?P<resp_body_php_errors_39>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*group(?!\\w))",
"(?P<resp_body_php_errors_17>(?<!\\w)cannot\\s*resume\\s*an\\s*already\\s*running\\s*generator(?!\\w))",
"(?P<resp_body_php_errors_75>(?<!\\w)cannot\\s*use\\s*string\\s*offset\\s*as\\s*an\\s*object(?!\\w))",
"(?P<resp_body_php_errors_167>(?<!\\w)dateformat\\s*class\\s*not\\s*defined(?!\\w))",
"(?P<resp_body_data_leak_sql_16>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*sqlite\\s*\\.\\s*sqliteexception(?!\\w))",
"(?P<resp_body_php_errors_80>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*element(?!\\w))",
"(?P<resp_body_php_errors_114>(?<!\\w)encoding\\s*\\:\\s*\\s*invalid(?!\\w))",
"(?P<resp_body_php_errors_131>(?<!\\w)cannot\\s*pass\\s*parameter(?!\\w))",
"(?P<resp_body_php_errors_10>(?<!\\w)encoding\\s*\\:\\s*\\s*attribute(?!\\w))",
"(?P<resp_body_data_leak_sql_21>(?<!\\w)microsoft\\s*ole\\s*db\\s*provider\\s*for\\s*sql\\s*server(?!\\w))",
"(?P<resp_body_data_leak_sql_22>\\[sqlexception(?!\\w))",
"(?P<resp_body_data_leak_sql_54>(?<!\\w)db2\\s*sql\\s*error(?!\\w))",
"(?P<resp_body_php_errors_120>(?<!\\w)first\\s*array\\s*member\\s*is\\s*not\\s*a\\s*valid\\s*class\\s*name\\s*or\\s*object(?!\\w))",
"(?P<resp_body_php_errors_158>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*redefine(?!\\w))",
"(?P<resp_body_data_leak_iis_3>\\<br\\>timeout\\s*expired\\<br\\>)",
"(?P<resp_body_data_java_leak_21>(?<!\\w)at\\s*java\\s*\\.\\s*lang\\s*\\.\\s*)",
"(?P<resp_body_data_leak_sql_60>(?<!\\w)column\\s*count\\s*doesn\\'t\\s*match\\s*value\\s*count\\s*at\\s*row(?!\\w))",
"(?P<resp_body_data_leak_sql_23>(?<!\\w)unclosed\\s*quotation\\s*mark\\s*before\\s*the\\s*character\\s*string(?!\\w))",
"(?P<resp_body_data_leak_sql_34>(?<!\\w)sql\\s*error(?!\\w))",
"(?P<resp_body_php_errors_66>(?<!\\w)namespace\\s*must\\s*not\\s*match\\s*the\\s*enclosing\\s*schema(?!\\w))",
"(?P<resp_body_php_errors_25>(?<!\\w)cannot\\s*register\\s*a\\s*reverse\\s*output\\s*handler\\s*conflict\\s*outside\\s*of\\s*minit(?!\\w))",
"(?P<resp_body_php_errors_35>(?<!\\w)invalid\\s*serialization\\s*data\\s*for\\s*datetimeimmutable\\s*object(?!\\w))",
"(?P<resp_body_php_errors_127>(?<!\\w)cannot\\s*call\\s*non\\s*static\\s*method(?!\\w))",
"(?P<resp_body_php_errors_142>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*could(?!\\w))",
"(?P<resp_body_php_errors_70>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*attribute(?!\\w))",
"(?P<resp_body_php_errors_79>(?<!\\w)illegal\\s*length\\s*modifier\\s*specified(?!\\w))",
"(?P<resp_body_data_leak_sql_18>\\[macromedia\\])",
"(?P<resp_body_php_errors_74>(?<!\\w)dcom\\s*has\\s*been\\s*disabled\\s*by\\s*your\\s*administrator(?!\\w))",
"(?P<resp_body_data_leak_sql_82>(?<!\\w)sqliteexception(?!\\w))",
"(?P<resp_body_php_errors_144>(?<!\\w)attempt\\s*to\\s*unset\\s*static\\s*property(?!\\w))",
"(?P<resp_body_data_leak_sql_46>(?<!\\w)postgresql(?!\\w))",
"(?P<resp_body_php_errors_71>(?<!\\w)call\\s*to\\s*undefined\\s*method(?!\\w))",
"(?P<resp_body_php_errors_84>(?<!\\w)spoofchecker\\s*class\\s*not\\s*defined(?!\\w))",
"(?P<resp_body_php_errors_155>(?<!\\w)cannot\\s*create\\s*references\\s*to(?!\\w))",
"(?P<resp_body_data_leak_sql_61>(?<!\\w)system\\s*\\.\\s*data\\s*\\.\\s*)",
"(?P<resp_body_php_errors_47>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*no(?!\\w))",
"(?P<resp_body_data_leak_sql_19>(?<!\\w)sybase\\s*message(?!\\w))",
"(?P<resp_body_php_errors_32>(?<!\\w)cannot\\s*break(?!\\w))",
"(?P<resp_body_data_leak_sql_26>(?<!\\w)exception\\s*)",
"(?P<resp_body_php_errors_28>(?<!\\w)pdo\\s*\\:\\s*\\s*driver(?!\\w))",
"(?P<resp_body_php_errors_95>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*include(?!\\w))",
"(?P<resp_body_data_leak_sql_37>\\[microsoft\\])",
"(?P<resp_body_data_leak_sql_4>(?<!\\w)sqlite\\s*\\.\\s*exception(?!\\w))",
"(?P<resp_body_data_leak_sql_70>\\[odbc\\s*sql\\s*server\\s*driver\\])",
"(?P<resp_body_php_errors_93>(?<!\\w)unexpected\\s*inconsistency\\s*in\\s*create\\_function(?!\\w))",
"(?P<resp_body_data_leak_sql_75>\\[mysql\\])",
"(?P<resp_body_data_leak_sql_24>(?<!\\w)cli\\s*driver(?!\\w))",
"(?P<resp_body_php_errors_86>(?<!\\w)datetimeinterface\\s*can(?!\\w))",
"(?P<resp_body_php_errors_34>(?<!\\w)unsupported\\s*operand\\s*types(?!\\w))",
"(?P<resp_body_data_java_leak_10>\\s*\\.\\s*addheader(?!\\w))",
"(?P<resp_body_php_errors_20>(?<!\\w)failed\\s*to\\s*register\\s*intldateformatter\\s*class(?!\\w))",
"(?P<resp_body_php_errors_12>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*attributegroup(?!\\w))",
"(?P<resp_body_php_errors_58>(?<!\\w)illegal\\s*offset\\s*type(?!\\w))",
"(?P<resp_body_data_leak_sql_97>\\[macromedia\\]\\[sqlserver\\s*jdbc\\s*driver\\])",
"(?P<resp_body_php_errors_128>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*the(?!\\w))",
"(?P<resp_body_data_leak_sql_0>(?<!\\w)supplied\\s*argument\\s*is\\s*not\\s*a\\s*valid\\s*mysql(?!\\w))",
"(?P<resp_body_php_errors_23>(?<!\\w)open\\_basedir\\s*restriction\\s*in\\s*effect(?!\\w))",
"(?P<resp_body_data_leak_sql_92>\\[sqlexception\\])",
"(?P<resp_body_php_errors_109>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*unknown(?!\\w))",
"(?P<resp_body_data_java_leak_2>\\s*\\.\\s*loadfromfile(?!\\w))",
"(?P<resp_body_data_leak_iis_17>(?<!\\w)microsoft\\s*\\.\\s*net\\s*framework(?!\\w))",
"(?P<resp_body_php_errors_151>(?<!\\w)trying\\s*to\\s*clone\\s*an\\s*uncloneable\\s*object(?!\\w))",
"(?P<resp_body_data_leak_sql_52>\\s*in\\s*query\\s*expression(?!\\w))",
"(?P<resp_body_php_errors_78>(?<!\\w)undefined\\s*constant(?!\\w))",
"(?P<resp_body_php_errors_15>(?<!\\w)cannot\\s*call\\s*private(?!\\w))",
"(?P<resp_body_data_java_leak_7>(?<!\\w)java\\s*\\.\\s*rmi\\s*\\.\\s*serverexception(?!\\w))",
"(?P<resp_body_php_errors_150>(?<!\\w)can\\s*only\\s*throw\\s*objects(?!\\w))",
"(?P<resp_body_php_errors_111>(?<!\\w)cannot\\s*use\\s*string\\s*offset\\s*as\\s*an\\s*array(?!\\w))",
"(?P<resp_body_php_errors_103>(?<!\\w)parsing\\s*schema\\s*\\:\\s*\\s*missing(?!\\w))",
"(?P<resp_body_data_leak_sql_3>\\<b\\>warning\\<\\/b\\>\\s*\\:\\s*\\s*ibase\\_)",
"(?P<resp_body_php_errors_159>(?<!\\w)cannot\\s*yield\\s*string\\s*offsets\\s*by\\s*reference(?!\\w))",
"(?P<resp_body_data_java_leak_25>(?<!\\w)scripting\\s*\\.\\s*filesystemobject(?!\\w))",
"(?P<resp_body_data_leak_iis_6>(?<!\\w)trappable\\s*error\\s*occurred\\s*in\\s*an\\s*external\\s*object\\s*\\.\\s*\\s*the\\s*script\\s*cannot\\s*continue\\s*running(?!\\w))",
"(?P<resp_body_data_leak_sql_53>(?<!\\w)after\\s*the\\s*character\\s*string(?!\\w))",
"(?P<resp_body_php_errors_7>(?<!\\w)only\\s*variables\\s*can\\s*be\\s*passed\\s*by\\s*reference(?!\\w))",
"(?P<resp_body_data_leak_sql_32>\\[dm\\_query\\_e\\_syntax\\])",
"(?P<resp_body_php_errors_45>(?<!\\w)cannot\\s*declare\\s*self(?!\\w))",
"(?P<resp_body_data_java_leak_18>(?<!\\w)server\\s*\\.\\s*createobject(?!\\w))",
"(?P<resp_body_php_errors_77>(?<!\\w)wrong\\s*parameters\\s*for\\s*exception(?!\\w))",
"(?P<resp_body_data_leak_iis_9>(?<!\\w)application\\s*uses\\s*a\\s*value\\s*of\\s*the\\s*wrong\\s*type\\s*for\\s*the\\s*current\\s*operation(?!\\w))",
"(?P<resp_body_php_errors_63>(?<!\\w)fatal\\s*error(?!\\w))",
"(?P<resp_body_php_errors_92>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*unexpected(?!\\w))",
"(?P<resp_body_php_errors_121>(?<!\\w)encoding\\s*\\:\\s*\\s*string(?!\\w))",
"(?P<resp_body_php_errors_146>(?<!\\w)stack\\s*trace(?!\\w))",
"(?P<resp_body_data_leak_sql_71>(?<!\\w)dynamic\\s*sql\\s*error(?!\\w))",
"(?P<resp_body_data_leak_sql_79>(?<!\\w)error(?!\\w))",
"(?P<resp_body_data_leak_sql_20>\\'80040e\\d+4\\')",
"(?P<resp_body_php_errors_56>(?<!\\w)parsing\\s*wsdl\\s*\\:\\s*\\s*couldn(?!\\w))",
"(?P<resp_body_php_errors_107>(?<!\\w)need\\s*to\\s*supply\\s*an\\s*object\\s*when\\s*throwing\\s*an\\s*exception(?!\\w))",
"(?P<resp_body_data_java_leak2848>(?<!\\w)onclick\\=\\\"toggle[\\s\\)]*(\\(|//|`)\\'full\\s*exception\\s*chain\\s*stacktrace\\'\\)\\\")",
"(?P<resp_body_data_leak_iis01ef>(?<!\\w)microsoft\\s*vbscript\\s*runtime\\s*[\\s\\)]*(\\(|//|`)0x8)",
"(?P<resp_body_data_leak_iis4e9f>(?<!\\w)microsoft\\s*vbscript\\s*compilation\\s*[\\s\\)]*(\\(|//|`)0x8)",
"(?P<resp_body_data_leak_sql085a>(?<!\\w)adodb\\s*\\.\\s*field\\s*[\\s\\)]*(\\(|//|`)0x800a0bcd\\))",
"(?P<resp_body_data_leak_sql16c6>(?<!\\w)mysql\\_fetch\\_array[\\s\\)]*(\\(|//|`)\\))",
"(?P<resp_body_data_leak_sql263c>(?<!\\w)pg\\_query[\\s\\)]*(\\(|//|`))",
"(?P<resp_body_data_leak_sql3dd8>(?<!\\w)mysql\\_fetch\\_array[\\s\\)]*(\\(|//|`))",
"(?P<resp_body_data_leak_sql4c8f>(?<!\\w)pg\\_exec[\\s\\)]*(\\(|//|`))",
"(?P<resp_body_data_leak_sql637a>(?<!\\w)exception[\\s\\)]*(\\(|//|`))",
"(?P<resp_body_data_leak_sql75d2>(?<!\\w)pg\\_exec[\\s\\)]*(\\(|//|`)\\)\\s*\\[\\s*\\:\\s*)",
"(?P<resp_body_data_leak_sql7ecf>(?<!\\w)db2\\_)",
"(?P<resp_body_data_leak_sqlaf58>(?<!\\w)pg\\_query[\\s\\)]*(\\(|//|`)\\)\\s*\\[\\s*\\:\\s*)",
"(?P<resp_body_data_leak_sqlbd5b>(?<!\\w)mssql\\_query[\\s\\)]*(\\(|//|`)\\))",
"(?P<resp_body_data_leak_sqld3de>(?<!\\w)mssql\\_query(?!\\w))",
"(?P<resp_body_php_errors3f4d>(?<!\\w)balloc[\\s\\)]*(\\(|//|`)\\)\\s*failed\\s*to\\s*allocate\\s*memory(?!\\w))",
"(?P<resp_body_php_errors4436>[\\s\\)]*(\\(|//|`)\\)\\s*cannot\\s*be\\s*called\\s*statically(?!\\w))",
"(?P<resp_body_php_errors8e64>(?<!\\w)balloc[\\s\\)]*(\\(|//|`)\\)\\s*allocation\\s*exceeds\\s*list\\s*boundary(?!\\w))",
"(?P<resp_body_php_errors93dd>\\s*\\:\\s*\\s*\\:\\s*\\_\\_tostring[\\s\\)]*(\\(|//|`)\\)\\s*must\\s*not\\s*throw\\s*an\\s*exception(?!\\w))",
"(?P<resp_body_php_errorsea88>(?<!\\w)eval[\\s\\)]*(\\(|//|`)\\)\\'d\\s*code\\<\\/b\\>\\s*on\\s*line\\s*\\<b\\>)"
],
"resp_hdr_pattern_regex_list": [],
"resp_hdr_words_regex_list": [],
"specific_acuracy_keywords_regex_list": [
"(?P<xss_html_tags_high_acuracy_82>\\<sub(?!\\w))",
"(?P<xss_html_tags_high_acuracy_86>\\<meta(?!\\w))",
"(?P<xss_html_tags_high_acuracy_17>\\<div(?!\\w))",
"(?P<high_acuracy_code_execution_46>(?<!\\w)res\\s*\\.\\s*)",
"(?P<high_acuracy_code_execution_4>(?<!\\w)this\\[)",
"(?P<detect_evasion_high_acuracy_23>\\&\\#x0003c\\;)",
"(?P<high_acuracy_fast_reg_xss_0>(\\son\\w+\\s*=))",
"(?P<xss_html_tags_high_acuracy_37>\\<hr(?!\\w))",
"(?P<xss_html_tags_high_acuracy_4>\\<summary(?!\\w))",
"(?P<xss_html_tags_high_acuracy_35>\\<dt(?!\\w))",
"(?P<high_acuracy_code_execution_51>\\$\\_post\\[)",
"(?P<xss_html_tags_high_acuracy_58>\\<input(?!\\w))",
"(?P<xss_html_tags_high_acuracy_18>\\<optgroup(?!\\w))",
"(?P<detect_evasion_high_acuracy_16>\\&\\#x006\\d+\\;)",
"(?P<xss_html_tags_high_acuracy_14>\\<link(?!\\w))",
"(?P<high_acuracy_1>\\s*\\.\\s*\\s*\\.\\s*\\/)",
"(?P<xss_html_tags_high_acuracy_7>\\<cite(?!\\w))",
"(?P<xss_html_tags_high_acuracy_59>\\<noscript(?!\\w))",
"(?P<xss_html_tags_high_acuracy_27>\\<del(?!\\w))",
"(?P<xss_html_tags_high_acuracy_65>\\<aside(?!\\w))",
"(?P<xss_html_tags_high_acuracy_1>\\<video(?!\\w))",
"(?P<xss_html_tags_high_acuracy_26>\\<colgroup(?!\\w))",
"(?P<detect_evasion_high_acuracy_15>\\%uff0e(?!\\w))",
"(?P<xss_html_tags_high_acuracy_88>\\<embed(?!\\w))",
"(?P<xss_html_tags_high_acuracy_23>\\<q(?!\\w))",
"(?P<high_acuracy_12>(?<!\\w)onerror\\=)",
"(?P<xss_html_tags_high_acuracy_43>\\<noframes(?!\\w))",
"(?P<high_acuracy_16>\\*\\/)",
"(?P<xss_html_tags_high_acuracy_62>\\<ins(?!\\w))",
"(?P<xss_html_tags_high_acuracy_63>\\<label(?!\\w))",
"(?P<xss_html_tags_high_acuracy_3>\\<audio(?!\\w))",
"(?P<high_acuracy_3>(?<!\\w)boot\\s*\\.\\s*ini(?!\\w))",
"(?P<xss_html_tags_high_acuracy_40>\\<blockquote(?!\\w))",
"(?P<high_acuracy_code_execution_6>\\<\\?php(?!\\w))",
"(?P<hi_acur_fast_reg_evasion_2>(%u221))",
"(?P<xss_html_tags_high_acuracy_24>\\<frameset(?!\\w))",
"(?P<xss_html_tags_high_acuracy_78>\\<ol(?!\\w))",
"(?P<xss_html_tags_high_acuracy_38>\\<dfn(?!\\w))",
"(?P<high_acuracy_0>\\s*\\.\\s*conf(?!\\w))",
"(?P<xss_html_tags_high_acuracy_15>\\<h\\d+)",
"(?P<xss_html_tags_high_acuracy_73>\\<caption(?!\\w))",
"(?P<xss_html_tags_high_acuracy_66>\\<script(?!\\w))",
"(?P<xss_html_tags_high_acuracy_49>\\<area(?!\\w))",
"(?P<detect_evasion_high_acuracy_18>\\&\\#x00000072\\;)",
"(?P<xss_html_tags_high_acuracy_50>\\<code(?!\\w))",
"(?P<xss_html_tags_high_acuracy_9>\\<br(?!\\w))",
"(?P<xss_html_tags_high_acuracy_34>\\<samp(?!\\w))",
"(?P<os_cmd_high_acuracy_fast_reg_10>((?<!\\w)nc\\s+(\\w+\\.){2,}))",
"(?P<xss_html_tags_high_acuracy_21>\\<mark(?!\\w))",
"(?P<xss_html_tags_high_acuracy_97>\\<button(?!\\w))",
"(?P<high_acuracy_code_execution_66>(?<!\\w)application\\s*\\.\\s*)",
"(?P<xss_html_tags_high_acuracy_68>\\<bdo(?!\\w))",
"(?P<xss_html_tags_high_acuracy_101>\\<rt(?!\\w))",
"(?P<xss_html_tags_high_acuracy_89>\\<tt(?!\\w))",
"(?P<xss_html_tags_high_acuracy_52>\\<html(?!\\w))",
"(?P<high_acuracy_code_execution_18>(?<!\\w)thread\\s*\\.\\s*)",
"(?P<xss_html_tags_high_acuracy_29>\\<math(?!\\w))",
"(?P<xss_html_tags_high_acuracy_57>\\<progress(?!\\w))",
"(?P<xss_html_tags_high_acuracy_76>\\<center(?!\\w))",
"(?P<xss_html_tags_high_acuracy_55>\\<source(?!\\w))",
"(?P<os_cmd_high_acuracy_fast_reg_4>(\\w+\\s+-+[a-z]+(\\s|$)))",
"(?P<xss_html_tags_high_acuracy_28>\\<bdi(?!\\w))",
"(?P<xss_html_tags_high_acuracy_5>\\<wbr(?!\\w))",
"(?P<xss_html_tags_high_acuracy_22>\\<basefont(?!\\w))",
"(?P<xss_html_tags_high_acuracy_45>\\<table(?!\\w))",
"(?P<xss_html_tags_high_acuracy_39>\\<title(?!\\w))",
"(?P<xss_html_tags_high_acuracy_13>\\<figcaption(?!\\w))",
"(?P<xss_html_tags_high_acuracy_2>\\<object(?!\\w))",
"(?P<xss_html_tags_high_acuracy_98>\\<tfoot(?!\\w))",
"(?P<detect_evasion_high_acuracy_14>\\&\\#x3c\\;)",
"(?P<detect_evasion_high_acuracy_1>\\+adz\\-)",
"(?P<detect_evasion_high_acuracy_4>\\&\\#x6\\d+\\;)",
"(?P<detect_evasion_high_acuracy_20>\\/\\?)",
"(?P<xss_html_tags_high_acuracy_33>\\<form(?!\\w))",
"(?P<xss_html_tags_high_acuracy_56>\\<footer(?!\\w))",
"(?P<xss_html_tags_high_acuracy_91>\\<datalist(?!\\w))",
"(?P<xss_html_tags_high_acuracy_30>\\<svg(?!\\w))",
"(?P<xss_html_tags_high_acuracy_70>\\<time(?!\\w))",
"(?P<xss_html_tags_high_acuracy_25>\\<dl(?!\\w))",
"(?P<high_acuracy_7>(?<!\\w)this\\s*\\.\\s*)",
"(?P<xss_html_tags_high_acuracy_41>\\<iframe(?!\\w))",
"(?P<high_acuracy_18>\\$\\{)",
"(?P<high_acuracy_code_execution_59>\\$\\_request\\[)",
"(?P<high_acuracy_4>\\<\\?php(?!\\w))",
"(?P<xss_html_tags_high_acuracy_48>\\<font(?!\\w))",
"(?P<xss_html_tags_high_acuracy_77>\\<header(?!\\w))",
"(?P<xss_html_tags_high_acuracy_67>\\<details(?!\\w))",
"(?P<high_acuracy_code_execution_20>(?<!\\w)wso\\_version(?!\\w))",
"(?P<xss_html_tags_high_acuracy_46>\\<main(?!\\w))",
"(?P<xss_html_tags_high_acuracy_31>\\<param(?!\\w))",
"(?P<xss_html_tags_high_acuracy_42>\\<tbody(?!\\w))",
"(?P<high_acuracy_code_execution_53>\\@variable(?!\\w))",
"(?P<detect_evasion_high_acuracy_5>\\&\\#x65\\;)",
"(?P<xss_html_tags_high_acuracy_51>\\<abbr(?!\\w))",
"(?P<detect_evasion_high_acuracy_6>\\&\\#x00003c\\;)",
"(?P<xss_html_tags_high_acuracy_104>\\<address(?!\\w))",
"(?P<detect_evasion_high_acuracy_10>\\?\\/)",
"(?P<high_acuracy_5>\\s*\\.\\s*ini(?!\\w))",
"(?P<detect_evasion_high_acuracy_7>\\&\\#x09\\;)",
"(?P<xss_html_tags_high_acuracy_75>\\<ruby(?!\\w))",
"(?P<xss_html_tags_high_acuracy_90>\\<keygen(?!\\w))",
"(?P<xss_html_tags_high_acuracy_61>\\<pre(?!\\w))",
"(?P<xss_html_tags_high_acuracy_36>\\<strike(?!\\w))",
"(?P<xss_html_tags_high_acuracy_85>\\<track(?!\\w))",
"(?P<xss_html_tags_high_acuracy_10>\\<menuitem(?!\\w))",
"(?P<os_cmd_high_acuracy_fast_reg_8>(/\\w*\\*|\\\\\\w*\\*|w*\\*/\\|\\w*\\*\\\\))",
"(?P<xss_html_tags_high_acuracy_81>\\<applet(?!\\w))",
"(?P<xss_html_tags_high_acuracy_47>\\<ul(?!\\w))",
"(?P<high_acuracy_2>\\$\\_request\\[)",
"(?P<xss_html_tags_high_acuracy_74>\\<thead(?!\\w))",
"(?P<high_acuracy_fast_reg_xxe_0>(08a80340-06d3-11ea-9f87-0242ac11000f))",
"(?P<os_cmd_high_acuracy_fast_reg_9>((;|&|\\||&)\\s*?\\s?(curl|wc|hostname|export|date|$php_md5|ll|la|ls|less|bash|ping|wget|cat|pwd|tail|echo|systeminfo|net|netsh|netstat|type|ipconfig|ifconfig|id|cd|vol)(?!\\w)))",
"(?P<detect_evasion_high_acuracy_17>\\&\\#x03c\\;)",
"(?P<hi_acur_fast_reg_evasion_1>([\\x00-\\x08]+|[\\x0a-\\x1f]+))",
"(?P<detect_evasion_high_acuracy_19>\\&\\#x06c\\;)",
"(?P<detect_evasion_high_acuracy_9>\\&\\#x000003c\\;)",
"(?P<xss_html_tags_high_acuracy_93>\\<section(?!\\w))",
"(?P<detect_evasion_high_acuracy_3>\\&\\#x003c\\;)",
"(?P<detect_evasion_high_acuracy_2>\\+ad4apb\\-)",
"(?P<high_acuracy_15>\\s*\\.\\s*exe(?!\\w))",
"(?P<xss_html_tags_high_acuracy_99>\\<dialog(?!\\w))",
"(?P<high_acuracy_code_execution_1>(?<!\\w)ruby\\/object(?!\\w))",
"(?P<xss_html_tags_high_acuracy_92>\\<var(?!\\w))",
"(?P<detect_evasion_high_acuracy_22>\\+acj\\-)",
"(?P<high_acuracy_code_execution_9>\\$\\_get\\[)",
"(?P<xss_html_tags_high_acuracy_54>\\<fieldset(?!\\w))",
"(?P<xss_html_tags_high_acuracy_11>\\<\\!\\-\\-)",
"(?P<xss_html_tags_high_acuracy_53>\\<td(?!\\w))",
"(?P<detect_evasion_high_acuracy_21>\\&\\#x00074\\;)",
"(?P<xss_html_tags_high_acuracy_16>\\<acronym(?!\\w))",
"(?P<os_cmd_high_acuracy_fast_reg_2>((?<!\\w)\\w:[/\\\\]))",
"(?P<high_acuracy_code_execution_26>\\?\\>)",
"(?P<xss_html_tags_high_acuracy_20>\\<dd(?!\\w))",
"(?P<detect_evasion_high_acuracy_0>\\&\\#x0a\\;)",
"(?P<high_acuracy_code_execution_16>\\$\\_server\\[)",
"(?P<xss_html_tags_high_acuracy_32>\\<strong(?!\\w))",
"(?P<hi_acur_fast_reg_evasion_0>(\\/\\*|\\*\\/|\\/\\*\\*\\/|(?<!\\w)0x\\w{2}(?!\\w)|\\\\\\\\u([01][\\w])|%u([01][\\w])|\\\\\\\\[x]\\w\\w|\\'\\s*\\.\\'\\s*|\\\\\\n))",
"(?P<xss_html_tags_high_acuracy_103>\\<article(?!\\w))",
"(?P<xss_html_tags_high_acuracy_83>\\<sup(?!\\w))",
"(?P<xss_html_tags_high_acuracy_60>\\<legend(?!\\w))",
"(?P<xss_html_tags_high_acuracy_95>\\<meter(?!\\w))",
"(?P<xss_html_tags_high_acuracy_44>\\<nav(?!\\w))",
"(?P<high_acuracy_code_execution_12>(?<!\\w)response\\s*\\.\\s*)",
"(?P<high_acuracy_code_execution_25>\\$http\\_get\\_vars\\[)",
"(?P<high_acuracy_code_execution_54>\\-\\-\\s*\\!)",
"(?P<detect_evasion_high_acuracy_12>\\&\\#x0065\\;)",
"(?P<os_cmd_high_acuracy_fast_reg_0>((?<!\\w)(dir|ls|curl|openssl|ping|wget|cat|echo|systeminfo|pwd|net|netsh|netstat|type|ipconfig|ifconfig|cd|vol)\\s+([\\-/]\\w+|/|[\\w.-]+|https?:|ftp:|file:|\\w:\\\\)))",
"(?P<detect_evasion_high_acuracy_13>\\+ad7\\-)",
"(?P<xss_html_tags_high_acuracy_8>\\<img(?!\\w))",
"(?P<xss_html_tags_high_acuracy_0>\\<h6)",
"(?P<xss_html_tags_high_acuracy_71>\\<span(?!\\w))",
"(?P<xss_html_tags_high_acuracy_94>\\<textarea(?!\\w))",
"(?P<hi_acur_fast_reg_evasion_3>(%uff[0-5][0-9,a-f]))",
"(?P<high_acuracy_13>\\/var(?!\\w))",
"(?P<high_acuracy_10>\\/usr(?!\\w))",
"(?P<xss_html_tags_high_acuracy_64>\\<canvas(?!\\w))",
"(?P<detect_evasion_high_acuracy_11>\\\\x23)",
"(?P<xss_html_tags_high_acuracy_19>\\<option(?!\\w))",
"(?P<high_acuracy_17>(?<!\\w)top\\[)",
"(?P<xss_html_tags_high_acuracy_102>\\<figure(?!\\w))",
"(?P<xss_html_tags_high_acuracy_79>\\<small(?!\\w))",
"(?P<high_acuracy_code_execution_49>\\$\\_cookie\\[)",
"(?P<xss_html_tags_high_acuracy_6>\\<dir(?!\\w))",
"(?P<xss_html_tags_high_acuracy_84>\\<map(?!\\w))",
"(?P<xss_html_tags_high_acuracy_12>\\<output(?!\\w))",
"(?P<xss_html_tags_high_acuracy_105>\\<body(?!\\w))",
"(?P<xss_html_tags_high_acuracy_100>\\<big(?!\\w))",
"(?P<xss_html_tags_high_acuracy_72>\\<rp(?!\\w))",
"(?P<xss_html_tags_high_acuracy_87>\\<kbd(?!\\w))",
"(?P<xss_html_tags_high_acuracy_69>\\<event\\-source(?!\\w))",
"(?P<xss_html_tags_high_acuracy_80>\\<style(?!\\w))",
"(?P<xss_html_tags_high_acuracy_96>\\<select(?!\\w))",
"(?P<evasion_high_acuracy557d>\\%uf025)",
"(?P<evasion_high_acuracy90a4>\\%u22\\d+)",
"(?P<evasion_high_acuracyfb73>\\%uefc8)",
"(?P<hi_acur_fast_reg_evasion48ff>(%uf025))",
"(?P<hi_acur_fast_reg_evasion9228>(%uefc8))",
"(?P<high_acuracy1246>(?<!\\w)jndi\\s*\\:\\s*)",
"(?P<high_acuracy2c17>\\/bin(?!\\w))",
"(?P<high_acuracy34a1>(?<!\\w)char[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy3afe>(?<!\\w)function[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy496d>\\/\\*)",
"(?P<high_acuracy65ab>\\\\\\s*\\.\\s*\\s*\\.\\s*)",
"(?P<high_acuracy6a8c>(?<!\\w)sleep[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec035f>\\$[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec038e>(?<!\\w)java\\s*\\.\\s*lang(?!\\w))",
"(?P<high_acuracy_code_exec043f>\\s*\\.\\s*match[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec048d>\\<\\%)",
"(?P<high_acuracy_code_exec063e>(?<!\\w)fopen[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec0668>(?<!\\w)string\\s*\\.\\s*)",
"(?P<high_acuracy_code_exec09c1>(?<!\\w)write[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec0b2c>\\s*\\.\\s*println[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec0b93>(?<!\\w)extract[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec11b0>(?<!\\w)php\\_uname[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec12a1>(?<!\\w)serialize[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec1457>(?<!\\w)request\\s*\\.\\s*)",
"(?P<high_acuracy_code_exec1f6f>\\@ini\\_get[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec20f9>\\@eval[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec2880>(?<!\\w)include[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec2c66>(?<!\\w)rtreedepth[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec2e22>(?<!\\w)print\\_r[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec2ed8>(?<!\\w)call\\_user\\_func[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec2f16>(?<!\\w)mid[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec30f1>(?<!\\w)system[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec315e>(?<!\\w)chr[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec323a>(?<!\\w)assert[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec32bf>(?<!\\w)exec[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec3afe>(?<!\\w)function[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec3bfa>(?<!\\w)eval[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec3c96>(?<!\\w)str\\_rot\\d+3[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec4543>(?<!\\w)var\\_dump[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec461a>(?<!\\w)shell\\_exec[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec4753>(?<!\\w)create\\_function(?!\\w))",
"(?P<high_acuracy_code_exec485a>(?<!\\w)popen[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec5015>\\$\\_get(?!\\w))",
"(?P<high_acuracy_code_exec50a4>(?<!\\w)len[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec50f8>\\s*\\.\\s*getfilter[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec560f>(?<!\\w)phpinfo[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec562c>(?<!\\w)passthru[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec56df>(?<!\\w)move\\_uploaded\\_file[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec5729>\\s*\\.\\s*flush[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec575a>(?<!\\w)readfile[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec59c8>\\<\\?)",
"(?P<high_acuracy_code_exec5aa6>\\%\\>)",
"(?P<high_acuracy_code_exec5ff3>(?<!\\w)getparameter[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec6274>(?<!\\w)decode[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec6338>(?<!\\w)show\\_source[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec6d5b>(?<!\\w)require[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec6db9>(?<!\\w)setcookie[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec7065>(?<!\\w)require\\_once[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec778e>(?<!\\w)file\\_put\\_contents[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec78ab>(?<!\\w)isset[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec78da>(?<!\\w)str\\_replace[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec79c4>(?<!\\w)tostring[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec7b77>(?<!\\w)die[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec7c99>(?<!\\w)isnumeric[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec7e9f>(?<!\\w)array\\_map[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec8386>(?<!\\w)execute[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec8ef9>(?<!\\w)php\\s*\\:\\s*\\/\\/)",
"(?P<high_acuracy_code_exec91f3>(?<!\\w)array[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exec99db>\\_self\\s*\\.\\s*)",
"(?P<high_acuracy_code_exec9e8c>(?<!\\w)basename[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execa46c>(?<!\\w)getbytes[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execa58d>(?<!\\w)fread[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execa7da>(?<!\\w)fileoutputstream[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execa88a>(?<!\\w)casee[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execa9f6>(?<!\\w)phpversion[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execaa33>(?<!\\w)unserialize[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execaf62>(?<!\\w)create\\_function[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execb269>(?<!\\w)preg\\_replace[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execbb03>\\s*\\.\\s*execute(?!\\w))",
"(?P<high_acuracy_code_execbb0c>(?<!\\w)func[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execbcbe>\\s*\\.\\s*getenv[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execbcd6>(?<!\\w)end[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execc123>(?<!\\w)ord[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execc50f>\\s*\\.\\s*env(?!\\w))",
"(?P<high_acuracy_code_execca3c>(?<!\\w)tempnam[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execce3b>(?<!\\w)touch[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execd061>(?<!\\w)getrealpath[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execd217>(?<!\\w)file\\_get\\_contents[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execd415>(?<!\\w)readdirsync[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execdaf9>(?<!\\w)strrev[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_exece0bc>(?<!\\w)copy[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execea23>(?<!\\w)base64\\_decode[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execf01b>\\)\\s*\\.\\s*read(?!\\w))",
"(?P<high_acuracy_code_execf08e>\\$\\_files(?!\\w))",
"(?P<high_acuracy_code_execf565>(?<!\\w)realpath[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execf7a4>(?<!\\w)sprintf[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execf877>\\s*\\.\\s*getscript[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracy_code_execfccf>(?<!\\w)php\\s*\\:\\s*\\/\\/filter\\/)",
"(?P<high_acuracy_fast_reg_xss0315>(<\\w+/\\w+))",
"(?P<high_acuracy_fast_reg_xss2841>(=\\s*(prompt|alert)\\b))",
"(?P<high_acuracy_fast_reg_xss3420>(\\w\\\\r\\\\n\\s*=))",
"(?P<high_acuracy_fast_reg_xss52a6>(/.source))",
"(?P<high_acuracy_fast_reg_xss5e81>(\\]\\s*\\([\\w\\s]+\\)))",
"(?P<high_acuracy_fast_reg_xssd0fb>(<\\w+:\\w+))",
"(?P<high_acuracya652>(?<!\\w)alert[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracyb269>(?<!\\w)preg\\_replace[\\s\\)]*(\\(|//|`))",
"(?P<high_acuracyc37d>\\/etc(?!\\w))",
"(?P<os_cmd_high_acuracy_fast_reg0e76>((\\/\\w*\\?)\\w+[^=]|\\?\\w*\\/))",
"(?P<os_cmd_high_acuracy_fast_reg32ff>((?>\\b)echo\\s+[\\(\"'`]))",
"(?P<os_cmd_high_acuracy_fast_reg4c37>((?>\\b)which\\s+(python|perl|netcat|nc|gcc|curl|openssl)))",
"(?P<os_cmd_high_acuracy_fast_reg7f90>((?>\\b)cd\\s+/))",
"(?P<os_cmd_high_acuracy_fast_regd6e8>([)&|;`]+\\s*(?<!\\w)(vol|id|ls|dir)(?!\\w)|(?<!\\w)(vol|id|ls|dir)(?!\\w)\\s*[|;(`&]+))",
"(?P<xss_html_cmds_high_acuracy2d26>(?<!\\w)function(?!\\w))",
"(?P<xss_html_cmds_high_acuracy3bfa>(?<!\\w)eval[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_tags_high_acuracy0ec1>\\<a(?!\\w))",
"(?P<xss_html_tags_high_acuracy11aa>\\<b(?!\\w))",
"(?P<xss_html_tags_high_acuracy2968>\\<\\!doctype(?!\\w))",
"(?P<xss_html_tags_high_acuracy2c91>\\<li(?!\\w))",
"(?P<xss_html_tags_high_acuracy2d32>\\<tr(?!\\w))",
"(?P<xss_html_tags_high_acuracy32c9>\\<th(?!\\w))",
"(?P<xss_html_tags_high_acuracy356c>\\<h4)",
"(?P<xss_html_tags_high_acuracy3c13>\\<em(?!\\w))",
"(?P<xss_html_tags_high_acuracy5422>\\<i(?!\\w))",
"(?P<xss_html_tags_high_acuracy5d04>\\<col(?!\\w))",
"(?P<xss_html_tags_high_acuracy5e70>\\<base(?!\\w))",
"(?P<xss_html_tags_high_acuracy7058>\\<h5)",
"(?P<xss_html_tags_high_acuracy7463>\\<frame(?!\\w))",
"(?P<xss_html_tags_high_acuracy7f39>\\<h2)",
"(?P<xss_html_tags_high_acuracya34b>\\<u(?!\\w))",
"(?P<xss_html_tags_high_acuracyaadf>\\<menu(?!\\w))",
"(?P<xss_html_tags_high_acuracybe83>\\<h3)",
"(?P<xss_html_tags_high_acuracyd0d4>\\<head(?!\\w))",
"(?P<xss_html_tags_high_acuracydd7f>\\<s(?!\\w))",
"(?P<xss_html_tags_high_acuracye36b>\\<p(?!\\w))"
],
"un_escape_pattern": "\\/\\*|\\*\\/|\\/\\*\\*\\/|\\'\\s*\\.\\'\\s*|\\\\\\n",
"user_agent_prefix_re": "^pip\\/\\d+\\.\\d+\\.\\d+\\s*",
"wbxml_data_kw_filter": "^\\s*(all|and|or|from|from:|function|href=|style|subject:|to:|cc:|where|--|;|=|\\'|\\\"|\\*|base64|id|ls|ll|la|ps|sort|count|ldap_injection_regex_5|regex_code_execution_2|regex_postfix_1|repetition|fn_name_pass_regex_0|wc|sh|tr|ll|create|table|curl|text/html;?|>|<|<(!|\\w+)|<!--)\\s*$",
"words_regex_list": [
"(?P<generic_keywords>(?<!\\w)null(?!\\w))",
"(?P<ldap_injection>\\*)",
"(?P<medium_acuracy>\\')",
"(?P<medium_acuracy>\\=)",
"(?P<medium_acuracy>\\\")",
"(?P<medium_acuracy>(?<!\\w)or(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy>\\)\\|id(?!\\w))",
"(?P<os_cmd_exec_susp_dir_patts>\\/\\s*\\.\\s*)",
"(?P<os_cmd_exec_susp_dir_patts>\\\\\\s*\\.\\s*\\s*\\.\\s*)",
"(?P<os_cmd_sep_medium_acuracy>\\&)",
"(?P<os_cmd_sep_medium_acuracy>\\`)",
"(?P<os_commands>(?<!\\w)ping(?!\\w))",
"(?P<os_commands>(?<!\\w)sh(?!\\w))",
"(?P<os_commands>(?<!\\w)cat(?!\\w))",
"(?P<os_commands>(?<!\\w)echo(?!\\w))",
"(?P<os_commands>(?<!\\w)id(?!\\w))",
"(?P<os_commands>(?<!\\w)netsh(?!\\w))",
"(?P<os_commands>(?<!\\w)traceroute(?!\\w))",
"(?P<path_traversal>\\/\\%c0\\%ae\\%c0\\%ae(?!\\w))",
"(?P<sqli_blind>(?<!\\w)waitfor(?!\\w))",
"(?P<sqli_detection_evasion>\\/\\*)",
"(?P<sqli_generic>(?<!\\w)information\\_schema(?!\\w))",
"(?P<sqli_generic>(?<!\\w)all(?!\\w))",
"(?P<sqli_generic>(?<!\\w)union(?!\\w))",
"(?P<sqli_generic>(?<!\\w)table(?!\\w))",
"(?P<sqli_generic>(?<!\\w)select(?!\\w))",
"(?P<sqli_generic>(?<!\\w)insert(?!\\w))",
"(?P<sqli_medium_acuracy>\\-\\-)",
"(?P<ssti>(?<!\\w)config\\s*\\.\\s*)",
"(?P<ssti>(?<!\\w)request\\s*\\.\\s*)",
"(?P<ssti>\\{\\{)",
"(?P<ssti>(?<!\\w)class\\s*\\.\\s*)",
"(?P<url_scanning>\\s*\\.\\s*tar(?!\\w))",
"(?P<url_scanning>\\s*\\.\\s*sql(?!\\w))",
"(?P<vuln_os_dirs>\\/etc(?!\\w))",
"(?P<vuln_os_dirs>\\/passwd(?!\\w))",
"(?P<vuln_os_dirs>\\/password(?!\\w))",
"(?P<vuln_os_dirs>\\/master(?!\\w))",
"(?P<vuln_os_dirs>\\/cgi(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*pw(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*nl(?!\\w))",
"(?P<vuln_web_files>\\/wpconfig(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*0)",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*shtm(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*no(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*dat(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*list(?!\\w))",
"(?P<vuln_web_files>\\/wp\\-config(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*db(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*ap(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*show(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*conf(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*asp(?!\\w))",
"(?P<vuln_web_files>\\/junk999\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*print(?!\\w))",
"(?P<xss_html_special>(?<!\\w)location\\s*\\.\\s*)",
"(?P<xss_html_special>(?<!\\w)document\\s*\\.\\s*)",
"(?P<xss_html_special>(?<!\\w)window\\s*\\.\\s*)",
"(?P<xss_html_special>(?<!\\w)base64)",
"(?P<xss_html_special>(?<!\\w)self\\s*\\.\\s*)",
"(?P<xxe>\\<\\!doctype(?!\\w))",
"(?P<medium_acuracy>\\<)",
"(?P<medium_acuracy>(?<!\\w)exec(?!\\w))",
"(?P<os_cmd_sep_medium_acuracy>\\;)",
"(?P<os_cmd_sep_medium_acuracy>\\|)",
"(?P<os_commands>(?<!\\w)tr(?!\\w))",
"(?P<path_traversal>\\/\\%c0\\%ae(?!\\w))",
"(?P<sqli_generic>(?<!\\w)create(?!\\w))",
"(?P<sqli_generic>(?<!\\w)count(?!\\w))",
"(?P<vuln_web_dirs>\\/e7uo7v7d(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*c(?!\\w))",
"(?P<vuln_web_files>\\/e7uo7v7d\\s*\\.\\s*sh(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy>(?<!\\w)exec(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy>\\;id(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy>\\|dir(?!\\w))",
"(?P<path_traversal_1>\\\\\\s*\\.\\s*\\s*\\.\\s*)",
"(?P<vuln_os_dirs>\\/lib(?!\\w))",
"(?P<vuln_os_dirs>\\/local(?!\\w))",
"(?P<vuln_os_dirs>\\/opt(?!\\w))",
"(?P<vuln_web_dirs>\\/passwd(?!\\w))",
"(?P<ssti_6>\\$\\{)",
"(?P<ssti_15>\\}\\})",
"(?P<ssti_24>\\{php\\})",
"(?P<medium_acuracy_0>\\>)",
"(?P<xxe_3>\\<\\?xml(?!\\w))",
"(?P<ssti_16>\\[\\]\\s*\\.\\s*)",
"(?P<xxe_2>\\<\\!entity(?!\\w))",
"(?P<encoding_chars_4>\\[\\+\\!)",
"(?P<xxe_0>\\<\\!element(?!\\w))",
"(?P<encoding_chars_2>\\]\\]\\])",
"(?P<ssti_22>(?<!\\w)request\\[)",
"(?P<ssti_20>(?<!\\w)mro\\_\\_\\[)",
"(?P<ssti_12>(?<!\\w)request\\|)",
"(?P<xxe_1>(?<!\\w)file\\s*\\:\\s*)",
"(?P<quotes_ev_fast_reg_4>(\\*))",
"(?P<quotes_ev_fast_reg_1>(\\$@))",
"(?P<ssti_fast_reg_4>({[^\"].+}))",
"(?P<sqli_medium_acuracy_1>\\'\\;)",
"(?P<vuln_os_dirs_6>\\/usr(?!\\w))",
"(?P<quotes_ev_fast_reg_3>(\\$\\*))",
"(?P<vuln_os_dirs_10>\\/var(?!\\w))",
"(?P<vuln_os_dirs_3>\\/proc(?!\\w))",
"(?P<sqli_fast_reg_0>(\\(\\s*case))",
"(?P<vuln_os_dirs_8>\\/self(?!\\w))",
"(?P<vuln_os_dirs_15>\\/wml(?!\\w))",
"(?P<vuln_os_dirs_11>\\/tmp(?!\\w))",
"(?P<os_commands_2>\\$shell(?!\\w))",
"(?P<ssti_0>\\_\\_class\\_\\_\\s*\\.\\s*)",
"(?P<sqli_generic_61>\\,null(?!\\w))",
"(?P<quotes_ev_fast_reg_0>('\\w*'))",
"(?P<sqli_medium_acuracy_0>\\'\\-\\-)",
"(?P<sqli_medium_acuracy_5>\\;\\-\\-)",
"(?P<sqli_medium_acuracy_7>\\\"\\=\\\")",
"(?P<sqli_medium_acuracy_3>\\'\\|\\|)",
"(?P<quotes_ev_fast_reg_2>(\"\\w*\"))",
"(?P<sqli_medium_acuracy_6>\\'\\=\\')",
"(?P<ldap_injection_0>\\'username\\')",
"(?P<vuln_os_dirs_17>\\\\winnt(?!\\w))",
"(?P<vuln_os_dirs_14>\\/hosts(?!\\w))",
"(?P<sqli_detection_evasion_1>\\*\\/)",
"(?P<sqli_generic_47>(?<!\\w)null\\,)",
"(?P<vuln_os_dirs_4>\\/backup(?!\\w))",
"(?P<ssti_fast_reg_0>({\\s*foreach))",
"(?P<url_scanning_11>\\s*\\.\\s*php\\~)",
"(?P<xss_html_special_2>\\]\\s*\\.\\s*)",
"(?P<vuln_os_dirs_1>\\/shadow(?!\\w))",
"(?P<os_commands_5>(?<!\\w)ps(?!\\w))",
"(?P<ldap_injection_1>\\\"username\\\")",
"(?P<os_commands_7>(?<!\\w)ll(?!\\w))",
"(?P<os_commands_18>(?<!\\w)ls(?!\\w))",
"(?P<os_commands_12>(?<!\\w)la(?!\\w))",
"(?P<vuln_os_dirs_0>\\\\windows(?!\\w))",
"(?P<xss_html_special_23>\\{target\\})",
"(?P<vuln_os_dirs_2>\\\\wwwroot(?!\\w))",
"(?P<encoding_chars_3>\\%uff0e(?!\\w))",
"(?P<os_cmd_sep_medium_acuracy_5>\\#)",
"(?P<vuln_os_dirs_5>\\/windows(?!\\w))",
"(?P<os_commands_22>(?<!\\w)wc(?!\\w))",
"(?P<vuln_web_files_463>\\/cte(?!\\w))",
"(?P<os_commands_16>(?<!\\w)dir(?!\\w))",
"(?P<vuln_os_dirs_16>\\\\inetpub(?!\\w))",
"(?P<sqli_generic_58>\\@datadir(?!\\w))",
"(?P<sqli_blind_0>(?<!\\w)delay(?!\\w))",
"(?P<xss_html_special_3>(?<!\\w)top\\[)",
"(?P<sqli_generic_13>\\@version(?!\\w))",
"(?P<os_commands_25>(?<!\\w)pwd(?!\\w))",
"(?P<vuln_os_dirs_13>\\/environ(?!\\w))",
"(?P<url_scanning_1>\\s*\\.\\s*7z(?!\\w))",
"(?P<vuln_web_dirs_121>\\/ynnwsuao\\d+6)",
"(?P<ssti_fast_reg_1>({[^\"].+\\$\\w.*}))",
"(?P<os_commands_19>(?<!\\w)path(?!\\w))",
"(?P<sqli_generic_21>\\@hostname(?!\\w))",
"(?P<xss_html_special_9>(?<!\\w)href\\=)",
"(?P<vuln_web_dirs_71>\\/spywall(?!\\w))",
"(?P<sqli_medium_acuracy_4>\\'or(?!\\w))",
"(?P<os_commands_0>(?<!\\w)winnt(?!\\w))",
"(?P<os_cmd_sep_medium_acuracy_0>\\|\\/)",
"(?P<os_commands_20>(?<!\\w)bash(?!\\w))",
"(?P<os_commands_15>(?<!\\w)wget(?!\\w))",
"(?P<sqli_generic_8>(?<!\\w)into(?!\\w))",
"(?P<os_cmd_sep_medium_acuracy_4>\\|\\|)",
"(?P<os_commands_23>(?<!\\w)less(?!\\w))",
"(?P<url_scanning_2>\\s*\\.\\s*tgz(?!\\w))",
"(?P<url_scanning_6>\\s*\\.\\s*zip(?!\\w))",
"(?P<sqli_generic_65>(?<!\\w)and(?!\\w))",
"(?P<os_commands_4>(?<!\\w)uname(?!\\w))",
"(?P<os_commands_24>(?<!\\w)curl(?!\\w))",
"(?P<os_commands_1>(?<!\\w)passwd(?!\\w))",
"(?P<sqli_detection_evasion_0>\\/\\*\\*\\/)",
"(?P<url_scanning_15>\\s*\\.\\s*bck(?!\\w))",
"(?P<os_commands_9>(?<!\\w)export(?!\\w))",
"(?P<medium_acuracy_1>(?<!\\w)and(?!\\w))",
"(?P<xss_html_special_63>\\$query(?!\\w))",
"(?P<sqli_medium_acuracy_2>(?<!\\w)or\\')",
"(?P<vuln_web_dirs_428>\\/srchadm(?!\\w))",
"(?P<sqli_generic_37>(?<!\\w)from(?!\\w))",
"(?P<sqli_generic_11>(?<!\\w)dual(?!\\w))",
"(?P<vuln_os_files_4>\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_os_files_2>\\s*\\.\\s*dll(?!\\w))",
"(?P<xss_html_special_17>(?<!\\w)self\\[)",
"(?P<os_commands_13>(?<!\\w)whoami(?!\\w))",
"(?P<os_cmd_sep_medium_acuracy_7>\\)\\;\\/)",
"(?P<vuln_web_dirs_74>\\/iisadmpwd(?!\\w))",
"(?P<os_cmd_sep_medium_acuracy_1>\\)\\|\\/)",
"(?P<sqli_generic_60>(?<!\\w)dbo\\s*\\.\\s*)",
"(?P<vuln_web_dirs_280>\\/netbasic(?!\\w))",
"(?P<sqli_generic_18>(?<!\\w)limit(?!\\w))",
"(?P<vuln_web_files_1129>\\/dwssap(?!\\w))",
"(?P<xss_html_special_33>\\@import(?!\\w))",
"(?P<sqli_generic_59>(?<!\\w)where(?!\\w))",
"(?P<vuln_web_dirs_665>\\/htpasswd(?!\\w))",
"(?P<os_cmd_sep_medium_acuracy_6>\\;\\|\\/)",
"(?P<ssti_fast_reg_3>({\\s*/\\s*foreach}))",
"(?P<sqli_generic_33>(?<!\\w)sys\\s*\\.\\s*)",
"(?P<vuln_web_files_380>\\/sam\\s*\\.\\s*\\_)",
"(?P<vuln_web_dirs_600>\\/passwords(?!\\w))",
"(?P<os_commands_8>(?<!\\w)ipconfig(?!\\w))",
"(?P<os_commands_21>(?<!\\w)openssl(?!\\w))",
"(?P<sqli_generic_10>(?<!\\w)offset(?!\\w))",
"(?P<code_execution_fast_reg_3>(cat\\s*<))",
"(?P<sqli_generic_50>(?<!\\w)having(?!\\w))",
"(?P<sqli_generic_16>(?<!\\w)rownum(?!\\w))",
"(?P<path_traversal_1>\\/\\s*\\.\\s*\\s*\\.\\s*)",
"(?P<xss_html_special_37>(?<!\\w)window\\[)",
"(?P<xss_html_special_51>(?<!\\w)parent\\[)",
"(?P<os_commands_3>(?<!\\w)ifconfig(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_9>\\;id\\|)",
"(?P<os_commands_14>(?<!\\w)netstat(?!\\w))",
"(?P<mail_attacks_3>(?<!\\w)to\\s*\\:\\s*\\s*)",
"(?P<os_commands_27>(?<!\\w)hostname(?!\\w))",
"(?P<xss_html_special_0>(?<!\\w)location\\[)",
"(?P<vuln_web_dirs_729>\\/passwdfile(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_20>\\;id\\;)",
"(?P<sqli_generic_5>(?<!\\w)master\\s*\\.\\s*)",
"(?P<vuln_web_dirs_77>\\/netdetector(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_6>\\$env\\{)",
"(?P<vuln_web_dirs_483>\\/etc\\/passwd(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_0>\\)\\|id\\;)",
"(?P<ssti_2>(?<!\\w)class\\s*\\.\\s*base(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_13>\\`dir\\`)",
"(?P<comment_ev_fast_reg_0>(\\/\\/.*[\\n\\r]+))",
"(?P<sqli_generic_41>(?<!\\w)distinct(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_4>\\)\\;id\\|)",
"(?P<os_cmd_exec_medium_acuracy_11>\\|dir\\|)",
"(?P<xss_html_special_4>(?<!\\w)top\\s*\\.\\s*)",
"(?P<xss_html_special_64>\\<\\!attlist(?!\\w))",
"(?P<mail_attacks_2>(?<!\\w)from\\s*\\:\\s*\\s*)",
"(?P<os_cmd_sep_medium_acuracy_2>\\\\n(?!\\w))",
"(?P<path_traversal_0>\\/\\%c0\\%ae\\%c0\\%ae\\/)",
"(?P<vuln_os_files_3>\\/win\\s*\\.\\s*ini(?!\\w))",
"(?P<xss_html_special_18>(?<!\\w)style(?!\\w))",
"(?P<os_commands_17>(?<!\\w)net\\s*view(?!\\w))",
"(?P<os_commands_11>(?<!\\w)localgroup(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_18>\\)\\;id\\;)",
"(?P<vuln_web_dirs_689>\\/e\\d+vtmxqnwv(?!\\w))",
"(?P<vuln_web_dirs_170>\\/sample\\/site3w4646)",
"(?P<os_commands_10>(?<!\\w)allcfgconv(?!\\w))",
"(?P<xss_html_special_6>(?<!\\w)data\\s*\\:\\s*)",
"(?P<xss_html_special_40>\\s*\\.\\s*hash(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_10>\\<\\!\\-\\-)",
"(?P<sqli_generic_4>(?<!\\w)group\\s*by(?!\\w))",
"(?P<vuln_web_dirs_185>\\/yokhehviqwnn(?!\\w))",
"(?P<vuln_web_files_629>\\/e7uo7v7d\\s*\\.\\s*2)",
"(?P<ssti_18>(?<!\\w)self\\s*\\.\\s*env\\s*\\.\\s*)",
"(?P<vuln_web_files_1111>\\/motd\\s*\\.\\s*php3)",
"(?P<os_commands_26>(?<!\\w)net\\s*user(?!\\w))",
"(?P<vuln_os_files_0>\\\\win\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files_163>\\/id\\s*\\.\\s*pm(?!\\w))",
"(?P<ssti_5>(?<!\\w)request\\s*\\.\\s*args(?!\\w))",
"(?P<sqli_generic_27>(?<!\\w)sysobjects(?!\\w))",
"(?P<xss_html_special_45>(?<!\\w)components\\[)",
"(?P<xss_html_special_41>(?<!\\w)dynsrc(?!\\w))",
"(?P<mail_attacks_4>(?<!\\w)rcpt\\s*to\\s*\\:\\s*)",
"(?P<xss_html_special_20>(?<!\\w)body\\s*\\.\\s*)",
"(?P<xss_html_special_22>(?<!\\w)lowsrc(?!\\w))",
"(?P<vuln_web_files_968>\\/e7uo7v7d\\s*\\.\\s*\\_)",
"(?P<xss_html_special_26>(?<!\\w)srcdoc(?!\\w))",
"(?P<os_cmd_sep_medium_acuracy_3>(?<!\\w)id\\;)",
"(?P<sqli_generic_14>(?<!\\w)dba\\_users(?!\\w))",
"(?P<vuln_web_files_53>\\/e7uo7v7d\\s*\\.\\s*\\d+)",
"(?P<vuln_web_files_237>\\/db\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_590>\\/junk999\\s*\\.\\s*php3)",
"(?P<vuln_web_files_99>\\/ban\\s*\\.\\s*log(?!\\w))",
"(?P<xss_html_special_55>(?<!\\w)xlink\\s*\\:\\s*)",
"(?P<sqli_generic_42>(?<!\\w)table\\_name(?!\\w))",
"(?P<vuln_web_files_560>\\/md\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_dirs_712>\\/reports\\/ndrqm(?!\\w))",
"(?P<vuln_web_files_61>\\/dsn\\s*\\.\\s*asp(?!\\w))",
"(?P<xss_html_special_15>(?<!\\w)valueof(?!\\w))",
"(?P<vuln_web_files_1187>\\/passwd\\s*\\.\\s*php3)",
"(?P<mail_attacks_1>(?<!\\w)subject\\s*\\:\\s*\\s*)",
"(?P<vuln_web_files_75>\\/msg\\s*\\.\\s*txt(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_12>\\|id(?!\\w))",
"(?P<vuln_web_dirs_307>\\/perl\\/printenv(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_2>(?<!\\w)id\\|)",
"(?P<vuln_web_files_40>\\/e7uo7v7d\\s*\\.\\s*utf8)",
"(?P<code_execution_fast_reg_2>(\\(\\$\\w+\\s*\\.))",
"(?P<vuln_web_files_958>\\/env\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_817>\\/basilix\\s*\\.\\s*php3)",
"(?P<vuln_web_files_108>\\/da\\s*\\.\\s*nsf(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_1>\\;dir(?!\\w))",
"(?P<vuln_web_files_212>\\/id\\s*\\.\\s*xbb(?!\\w))",
"(?P<vuln_web_files_250>\\/rd\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_52>\\/lcon\\s*\\.\\s*nsf(?!\\w))",
"(?P<sqli_generic_25>(?<!\\w)sysdatabases(?!\\w))",
"(?P<sqli_generic_22>(?<!\\w)column\\_name(?!\\w))",
"(?P<vuln_web_files_997>\\/ism\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_198>\\/nul\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_313>\\/ren\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_726>\\/rtm\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_505>\\/ban\\s*\\.\\s*dat(?!\\w))",
"(?P<xss_html_special_61>(?<!\\w)parent\\s*\\.\\s*)",
"(?P<vuln_web_files_291>\\/env\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_7>\\/today\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_833>\\/sam\\s*\\.\\s*bin(?!\\w))",
"(?P<vuln_web_files_333>\\/yabb\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_950>\\/e7uo7v7d\\s*\\.\\s*php3)",
"(?P<xss_html_special_1>(?<!\\w)valueof\\s*\\:\\s*)",
"(?P<vuln_web_files_270>\\/rpc\\s*\\.\\s*php(?!\\w))",
"(?P<sqli_generic_63>\\s*\\.\\s*sysmessages(?!\\w))",
"(?P<mail_attacks_0>(?<!\\w)mail\\s*from\\s*\\:\\s*)",
"(?P<vuln_web_files_949>\\/e7uo7v7d\\s*\\.\\s*php4)",
"(?P<vuln_web_files_649>\\/url\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_843>\\/mab\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_36>\\/oder\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_1023>\\/ss\\s*\\.\\s*cfg(?!\\w))",
"(?P<vuln_web_files_286>\\/ext\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_690>\\/bots\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_255>\\/eipc\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_444>\\/smtp\\s*\\.\\s*box(?!\\w))",
"(?P<vuln_web_files_760>\\/site\\s*\\.\\s*csc(?!\\w))",
"(?P<vuln_web_files_87>\\/notes\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_189>\\/copy\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_996>\\/alog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_474>\\/site\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files_320>\\/send\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_1082>\\/cpa\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_693>\\/args\\s*\\.\\s*bat(?!\\w))",
"(?P<vuln_web_files_433>\\/type\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_627>\\/stat\\s*\\.\\s*htm(?!\\w))",
"(?P<xss_html_special_56>(?<!\\w)innerhtml(?!\\w))",
"(?P<vuln_web_files_207>\\/ldap\\s*\\.\\s*nsf(?!\\w))",
"(?P<xss_html_special_59>(?<!\\w)reflect\\s*\\.\\s*)",
"(?P<vuln_web_files_901>\\/code\\s*\\.\\s*asp(?!\\w))",
"(?P<vuln_os_files_5>\\/desktop\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files_414>\\/dba4\\s*\\.\\s*nsf(?!\\w))",
"(?P<xss_html_special_28>(?<!\\w)history\\s*\\.\\s*)",
"(?P<vuln_web_files_1118>\\/nul\\s*\\.\\s*dbm(?!\\w))",
"(?P<vuln_web_files_472>\\/smtp\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_679>\\/link\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_735>\\/lang\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_90>\\/lancgi\\s*\\.\\s*pl(?!\\w))",
"(?P<sqli_generic_28>(?<!\\w)table\\_schema(?!\\w))",
"(?P<vuln_web_files_570>\\/news\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_402>\\/bdir\\s*\\.\\s*htr(?!\\w))",
"(?P<vuln_web_files_1099>\\/e7uo7v7d\\s*\\.\\s*big5)",
"(?P<vuln_web_files_390>\\/oem\\s*\\.\\s*conf(?!\\w))",
"(?P<vuln_web_files_643>\\/junk\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_786>\\/dclf\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_13>\\/probe\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_206>\\/shop\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_1027>\\/set\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_547>\\/ctss\\s*\\.\\s*idc(?!\\w))",
"(?P<vuln_web_files_1128>\\/ban\\s*\\.\\s*bak(?!\\w))",
"(?P<vuln_web_files_893>\\/4iv9\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_54>\\/shtml\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_462>\\/lpt9\\s*\\.\\s*xtp(?!\\w))",
"(?P<xss_html_special_31>(?<!\\w)ownerdocument\\[)",
"(?P<vuln_web_files_15>\\/cphost\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_11>\\/manage\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_dirs_207>\\/reports\\/yumjnuzv(?!\\w))",
"(?P<vuln_web_files_524>\\/aexp2\\s*\\.\\s*htr(?!\\w))",
"(?P<vuln_web_files_415>\\/5ytus\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_1123>\\/e7uo7v7d\\s*\\.\\s*cp866)",
"(?P<vuln_web_files_59>\\/ofscan\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files_603>\\/3tvars\\s*\\.\\s*pm(?!\\w))",
"(?P<vuln_web_files_39>\\/sqlnet\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_419>\\/stats\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_323>\\/buddy\\s*\\.\\s*blt(?!\\w))",
"(?P<vuln_web_files_96>\\/domlog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1095>\\/fdir\\s*\\.\\s*bas(?!\\w))",
"(?P<url_scanning_13>\\s*\\.\\s*tar\\s*\\.\\s*gz(?!\\w))",
"(?P<vuln_web_files_988>\\/forum\\s*\\.\\s*ghp(?!\\w))",
"(?P<vuln_web_files_63>\\/adovbs\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_dirs_380>\\/dpnepolicyservice(?!\\w))",
"(?P<vuln_web_files_519>\\/nikto\\s*\\.\\s*ida(?!\\w))",
"(?P<vuln_web_files_393>\\/blahb\\s*\\.\\s*ida(?!\\w))",
"(?P<vuln_web_files_451>\\/print\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_362>\\/names\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_dirs_40>\\/session\\/admnlogin(?!\\w))",
"(?P<vuln_web_files_178>\\/mbox\\-list\\s*\\.\\s*php3)",
"(?P<vuln_web_files_878>\\/svacl\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_139>\\/5vkmc\\s*\\.\\s*htw(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_22>\\|\\s*ls(?!\\w))",
"(?P<vuln_web_files_336>\\/glist\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_145>\\/dspug\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_685>\\/lccon\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_912>\\/trace\\s*\\.\\s*axd(?!\\w))",
"(?P<url_scanning_9>(?<!\\w)dump\\s*\\.\\s*tar(?!\\w))",
"(?P<vuln_web_files_799>\\/intersl\\s*\\.\\s*c(?!\\w))",
"(?P<vuln_web_files_436>\\/snoop\\s*\\.\\s*jsp(?!\\w))",
"(?P<ssti_fast_reg_2>({.*\\w+\\s*(\\.:\\|)\\s*\\w+.+}))",
"(?P<vuln_web_files_776>\\/\\d+23\\s*\\.\\s*gif(?!\\w))",
"(?P<vuln_web_files_57>\\/javapg\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1155>\\/hits\\s*\\.\\s*txt(?!\\w))",
"(?P<xss_html_special_19>(?<!\\w)vbscript\\s*\\:\\s*)",
"(?P<vuln_web_files_72>\\/query\\s*\\.\\s*xsql(?!\\w))",
"(?P<vuln_web_files_739>\\/blahb\\s*\\.\\s*idq(?!\\w))",
"(?P<vuln_web_files_761>\\/bc4j\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_431>\\/tqmm8\\s*\\.\\s*csp(?!\\w))",
"(?P<vuln_web_files_2>\\/billing\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_881>\\/lsxlc\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_767>\\/event\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1101>\\/null\\s*\\.\\s*htw(?!\\w))",
"(?P<vuln_web_files_337>\\/stlog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1018>\\/main\\s*\\.\\s*nsf(?!\\w))",
"(?P<url_scanning_7>(?<!\\w)dump\\s*\\.\\s*sql(?!\\w))",
"(?P<vuln_web_files_892>\\/certa\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_104>\\/funhist\\s*\\.\\s*c(?!\\w))",
"(?P<vuln_web_files_341>\\/htp\\s*\\.\\s*print(?!\\w))",
"(?P<os_commands_6>(?<!\\w)netsh\\s*firewall(?!\\w))",
"(?P<path_traversal_2>\\%25c0\\%25ae\\%25c0\\%25ae\\/)",
"(?P<vuln_web_files_316>\\/group\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_811>\\/streg\\s*\\.\\s*nsf(?!\\w))",
"(?P<url_scanning_5>\\s*\\.\\s*php\\s*\\.\\s*old(?!\\w))",
"(?P<vuln_web_files_101>\\/books\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_321>\\/smmsg\\s*\\.\\s*nsf(?!\\w))",
"(?P<url_scanning_8>\\s*\\.\\s*sql\\s*\\.\\s*tar(?!\\w))",
"(?P<vuln_web_dirs_377>\\/cgi\\-sys\\/cgiecho(?!\\w))",
"(?P<vuln_web_files_217>\\/mchat\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_866>\\/order\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_589>\\/apzufu\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_668>\\/access\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_493>\\/stconf\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_281>\\/com\\d+\\s*\\.\\s*htm(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_16>\\|\\s*vol(?!\\w))",
"(?P<vuln_web_files_238>\\/pqjgjw\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_188>\\/smhelp\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_838>\\/smency\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_847>\\/author\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_247>\\/cfgwiz\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_862>\\/perweb\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_864>\\/leilog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_183>\\/clbusy\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_71>\\/e7uo7v7d\\s*\\.\\s*dk(?!\\w))",
"(?P<vuln_web_files_9>\\/e7uo7v7d\\s*\\.\\s*bat(?!\\w))",
"(?P<vuln_web_files_809>\\/srvnam\\s*\\.\\s*htm(?!\\w))",
"(?P<url_scanning_14>\\s*\\.\\s*php\\s*\\.\\s*bak(?!\\w))",
"(?P<vuln_web_files_990>\\/trends\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_804>\\/db2000\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_508>\\/dan\\_o\\s*\\.\\s*dat(?!\\w))",
"(?P<vuln_web_files_1014>\\/slist\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_1025>\\/apage\\s*\\.\\s*cgi(?!\\w))",
"(?P<url_scanning_12>\\s*\\.\\s*php\\s*\\.\\s*bck(?!\\w))",
"(?P<vuln_web_files_815>\\/jotter\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_77>\\/buffer4\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_447>\\/delete\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_1063>\\/carbo\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_825>\\/public\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_20>\\/passgen\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_14>\\/cgimail\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_64>\\/\\d+bu3m\\s*\\.\\s*xml(?!\\w))",
"(?P<vuln_web_files_482>\\/attrib\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_173>\\/smconf\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_766>\\/events\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_446>\\/smtime\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1076>\\/gwweb\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_128>\\/forms5\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_698>\\/smbcfg\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_618>\\/ftayrbj\\s*\\.\\s*do(?!\\w))",
"(?P<vuln_web_files_26>\\/events4\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_395>\\/author\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_637>\\/domcfg\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_548>\\/access\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_873>\\/smquar\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_676>\\/attach\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_727>\\/import\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_312>\\/author\\s*\\.\\s*idq(?!\\w))",
"(?P<vuln_web_files_1021>\\/stsrc\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_924>\\/csnews\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_902>\\/awstats\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_301>\\/license\\s*\\.\\s*smail893)",
"(?P<vuln_web_files_979>\\/groups\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_663>\\/chkvol\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_95>\\/stauths\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_115>\\/w3tvars\\s*\\.\\s*pm(?!\\w))",
"(?P<vuln_web_files_1132>\\/help4\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_722>\\/svcacl\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_839>\\/newdsn\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_854>\\/simple\\s*\\.\\s*idq(?!\\w))",
"(?P<vuln_web_files_576>\\/dvwssr\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_564>\\/hidden\\s*\\.\\s*nsf(?!\\w))",
"(?P<code_execution_fast_reg_0>(\\.\\s*\\$?\\w+\\s*\\)))",
"(?P<vuln_web_files_520>\\/fcring\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_549>\\/leivlt\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_226>\\/detail\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_1162>\\/aexp4\\s*\\.\\s*htr(?!\\w))",
"(?P<vuln_os_files_1>(?<!\\w)boot\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files_1156>\\/junk\\s*\\.\\s*aspx(?!\\w))",
"(?P<vuln_web_files_595>\\/orders\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_1094>\\/aexp3\\s*\\.\\s*htr(?!\\w))",
"(?P<vuln_web_files_157>\\/sitemap\\s*\\.\\s*gz(?!\\w))",
"(?P<vuln_web_files_852>\\/gozila\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_787>\\/newpro\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_859>\\/aexp4b\\s*\\.\\s*htr(?!\\w))",
"(?P<vuln_web_files_481>\\/msdwda\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_73>\\/mtstore\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_16>\\/e7uo7v7d\\s*\\.\\s*nn(?!\\w))",
"(?P<vuln_web_files_289>\\/orders\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_351>\\/pfzozrh\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_998>\\/session\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_1028>\\/cersvr\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_97>\\/e7uo7v7d\\s*\\.\\s*inc(?!\\w))",
"(?P<xss_html_special_46>\\s*\\.\\s*appendchild(?!\\w))",
"(?P<vuln_web_files_103>\\/cldbdir\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1060>\\/mime\\s*\\.\\s*types(?!\\w))",
"(?P<vuln_web_files_448>\\/fp30reg\\s*\\.\\s*dll(?!\\w))",
"(?P<xss_html_special_21>(?<!\\w)components\\s*\\.\\s*)",
"(?P<vuln_web_files_192>\\/vfolder\\s*\\.\\s*ghp(?!\\w))",
"(?P<vuln_web_files_201>\\/e7uo7v7d\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_563>\\/ezadmin\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_631>\\/getwhen\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_136>\\/service\\s*\\.\\s*pwd(?!\\w))",
"(?P<vuln_web_files_23>\\/queryhit\\s*\\.\\s*idq(?!\\w))",
"(?P<vuln_web_files_287>\\/carello\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_550>\\/wksinst\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_557>\\/events5\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_995>\\/ovlogin\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_1045>\\/volscgi\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_749>\\/account\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_692>\\/counter\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_94>\\/e7uo7v7d\\s*\\.\\s*fhp(?!\\w))",
"(?P<vuln_web_files_515>\\/decsadm\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_193>\\/npn\\_rn\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_840>\\/e7uo7v7d\\s*\\.\\s*it(?!\\w))",
"(?P<vuln_web_files_784>\\/wwforum\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_943>\\/migrate\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_615>\\/e7uo7v7d\\s*\\.\\s*fr(?!\\w))",
"(?P<vuln_web_files_645>\\/welcome\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_521>\\/junk999\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_38>\\/e7uo7v7d\\s*\\.\\s*apw(?!\\w))",
"(?P<vuln_web_files_276>\\/billing\\s*\\.\\s*apw(?!\\w))",
"(?P<vuln_web_files_522>\\/usebean\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_259>\\/cfcache\\s*\\.\\s*map(?!\\w))",
"(?P<vuln_web_files_65>\\/qfullhit\\s*\\.\\s*htw(?!\\w))",
"(?P<vuln_web_files_502>\\/stautht\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_853>\\/e7uo7v7d\\s*\\.\\s*pm(?!\\w))",
"(?P<vuln_web_files_432>\\/details\\s*\\.\\s*idc(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_14>(?<!\\w)vol\\s*\\|)",
"(?P<vuln_web_files_135>\\/convert\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_92>\\/mountain\\s*\\.\\s*cfg(?!\\w))",
"(?P<vuln_web_files_795>\\/getfile\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_703>\\/certsrv\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_30>\\/e7uo7v7d\\s*\\.\\s*lst(?!\\w))",
"(?P<vuln_web_files_254>\\/helplt4\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_737>\\/command\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_221>\\/chatlog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_503>\\/authors\\s*\\.\\s*pwd(?!\\w))",
"(?P<vuln_web_files_271>\\/e7uo7v7d\\s*\\.\\s*el(?!\\w))",
"(?P<vuln_web_files_428>\\/toolbar\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_937>\\/bigconf\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_166>\\/clusta4\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1097>\\/smvlog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_536>\\/e7uo7v7d\\s*\\.\\s*ee(?!\\w))",
"(?P<vuln_web_files_935>\\/mysql\\s*\\.\\s*class(?!\\w))",
"(?P<vuln_web_files_677>\\/e7uo7v7d\\s*\\.\\s*et(?!\\w))",
"(?P<vuln_web_files_429>\\/writeto\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_675>\\/buffer2\\s*\\.\\s*jsp(?!\\w))",
"(?P<xss_html_special_35>(?<!\\w)javascript\\s*\\:\\s*)",
"(?P<vuln_web_files_759>\\/e7uo7v7d\\s*\\.\\s*ca(?!\\w))",
"(?P<vuln_web_files_41>\\/e7uo7v7d\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_dirs_102>\\/cgi\\-sys\\/countedit(?!\\w))",
"(?P<vuln_web_files_294>\\/cnf\\_gi\\s*\\.\\s*htm(?!\\w))",
"(?P<vuln_web_files_624>\\/e7uo7v7d\\s*\\.\\s*en(?!\\w))",
"(?P<vuln_web_files_1137>\\/ndsobj\\s*\\.\\s*nlm(?!\\w))",
"(?P<vuln_web_files_1130>\\/active\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_858>\\/e7uo7v7d\\s*\\.\\s*ml(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_17>(?<!\\w)ls(?!\\w))",
"(?P<vuln_web_files_671>\\/getrend\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_350>\\/w3proxy\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_903>\\/e7uo7v7d\\s*\\.\\s*smail893)",
"(?P<vuln_web_files_303>\\/decslog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_790>\\/amprops\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_124>\\/rvbshld\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_295>\\/smsolar\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_479>\\/srvinst\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1100>\\/leiadm\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_37>\\/schema50\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_620>\\/e7uo7v7d\\s*\\.\\s*es(?!\\w))",
"(?P<vuln_web_files_331>\\/catalog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_440>\\/ezboard\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_756>\\/statrep\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_453>\\/ndslogin\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_718>\\/getvars\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_907>\\/english\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_607>\\/e7uo7v7d\\s*\\.\\s*se(?!\\w))",
"(?P<vuln_web_files_363>\\/buddies\\s*\\.\\s*blt(?!\\w))",
"(?P<vuln_web_files_399>\\/junk999\\s*\\.\\s*asp(?!\\w))",
"(?P<vuln_web_files_871>\\/skbvqsy\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_284>\\/j\\d+biz\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_1038>\\/aexp2b\\s*\\.\\s*htr(?!\\w))",
"(?P<vuln_web_files_848>\\/fpcount\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_1090>\\/judysort\\s*\\.\\s*c(?!\\w))",
"(?P<vuln_web_files_955>\\/people\\s*\\.\\s*list(?!\\w))",
"(?P<vuln_web_files_89>\\/e7uo7v7d\\s*\\.\\s*dbc(?!\\w))",
"(?P<vuln_web_files_682>\\/lancard\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_1007>\\/repqof\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_1050>\\/secret\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_729>\\/cpshost\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_1179>\\/ccbill\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_210>\\/e7uo7v7d\\s*\\.\\s*tw(?!\\w))",
"(?P<vuln_web_files_443>\\/qpadmin\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_209>\\/botinfs\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_793>\\/analyse\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_1062>\\/pubfld\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_642>\\/winmsdp\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_1122>\\/cfdocs\\s*\\.\\s*map(?!\\w))",
"(?P<vuln_web_files_628>\\/clients\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_389>\\/decsdoc\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_922>\\/ws\\_ftp\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files_58>\\/e7uo7v7d\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_302>\\/e7uo7v7d\\s*\\.\\s*dtd(?!\\w))",
"(?P<vuln_web_files_850>\\/e7uo7v7d\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_601>\\/e7uo7v7d\\s*\\.\\s*tcl(?!\\w))",
"(?P<vuln_web_files_736>\\/metacart\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_437>\\/e7uo7v7d\\s*\\.\\s*cmd(?!\\w))",
"(?P<vuln_web_files_486>\\/e7uo7v7d\\s*\\.\\s*xbb(?!\\w))",
"(?P<vuln_web_files_445>\\/bookmark\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_667>\\/junk988\\s*\\.\\s*aspx(?!\\w))",
"(?P<vuln_web_files_278>\\/e7uo7v7d\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files_113>\\/e7uo7v7d\\s*\\.\\s*vts(?!\\w))",
"(?P<vuln_web_files_846>\\/e7uo7v7d\\s*\\.\\s*ida(?!\\w))",
"(?P<vuln_web_files_345>\\/e7uo7v7d\\s*\\.\\s*dbf(?!\\w))",
"(?P<vuln_web_files_147>\\/e7uo7v7d\\s*\\.\\s*asa(?!\\w))",
"(?P<vuln_web_files_688>\\/e7uo7v7d\\s*\\.\\s*sys(?!\\w))",
"(?P<vuln_web_files_285>\\/e7uo7v7d\\s*\\.\\s*axd(?!\\w))",
"(?P<vuln_web_files_495>\\/smtpibwq\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_605>\\/e7uo7v7d\\s*\\.\\s*jse(?!\\w))",
"(?P<vuln_web_files_311>\\/vxvm\\_ig\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_896>\\/services\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_587>\\/language\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_407>\\/pageutil\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_67>\\/deaslog03\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_378>\\/services\\s*\\.\\s*org(?!\\w))",
"(?P<vuln_web_files_1178>\\/certlog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_782>\\/domadmin\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_779>\\/e7uo7v7d\\s*\\.\\s*bak(?!\\w))",
"(?P<vuln_web_files_1177>\\/ntsync4\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_886>\\/e7uo7v7d\\s*\\.\\s*csc(?!\\w))",
"(?P<vuln_web_files_929>\\/ovlaunch\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_1159>\\/ws\\_ftp\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_132>\\/stdnaset\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_969>\\/busytime\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_948>\\/internet\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_792>\\/e7uo7v7d\\s*\\.\\s*snp(?!\\w))",
"(?P<vuln_web_files_966>\\/e7uo7v7d\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_1184>\\/e7uo7v7d\\s*\\.\\s*gz(?!\\w))",
"(?P<vuln_web_files_887>\\/smtpobwq\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1136>\\/service\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_981>\\/qstart50\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_651>\\/e7uo7v7d\\s*\\.\\s*shm(?!\\w))",
"(?P<vuln_web_files_457>\\/reademail\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_488>\\/e7uo7v7d\\s*\\.\\s*eml(?!\\w))",
"(?P<vuln_web_files_980>\\/e7uo7v7d\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_691>\\/nntppost\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_641>\\/e7uo7v7d\\s*\\.\\s*btr(?!\\w))",
"(?P<vuln_web_files_973>\\/e7uo7v7d\\s*\\.\\s*xls(?!\\w))",
"(?P<vuln_web_files_369>\\/lcgitest\\s*\\.\\s*nlm(?!\\w))",
"(?P<vuln_web_files_260>\\/e7uo7v7d\\s*\\.\\s*box(?!\\w))",
"(?P<vuln_web_files_487>\\/qsumrhit\\s*\\.\\s*htw(?!\\w))",
"(?P<vuln_web_files_392>\\/wwsample\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1147>\\/reports\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_409>\\/stconfig\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_117>\\/sendmail\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_1039>\\/dsnform\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_261>\\/e7uo7v7d\\s*\\.\\s*prf(?!\\w))",
"(?P<vuln_web_files_51>\\/l\\_domlog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_438>\\/stdomino\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_466>\\/nd000002\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_926>\\/e7uo7v7d\\s*\\.\\s*htx(?!\\w))",
"(?P<vuln_web_files_352>\\/e7uo7v7d\\s*\\.\\s*cfc(?!\\w))",
"(?P<vuln_web_files_379>\\/fpadmcgi\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_1164>\\/mtatbls\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_121>\\/easylog\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_267>\\/sendmail\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_123>\\/e7uo7v7d\\s*\\.\\s*xml(?!\\w))",
"(?P<vuln_web_files_158>\\/fpsrvadm\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_923>\\/whereami\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_467>\\/beaninfo\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_258>\\/password\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_745>\\/e7uo7v7d\\s*\\.\\s*dbm(?!\\w))",
"(?P<vuln_web_files_993>\\/e7uo7v7d\\s*\\.\\s*ncf(?!\\w))",
"(?P<vuln_web_files_960>\\/doladmin\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_348>\\/shopper\\s*\\.\\s*conf(?!\\w))",
"(?P<vuln_web_files_662>\\/nd000000\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_895>\\/e7uo7v7d\\s*\\.\\s*htw(?!\\w))",
"(?P<vuln_web_files_404>\\/accounts\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_596>\\/vxvm\\_ag\\s*\\.\\s*pdf(?!\\w))",
"(?P<xss_html_special_34>(?<!\\w)constructor\\s*\\.\\s*)",
"(?P<vuln_web_files_588>\\/e7uo7v7d\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_857>\\/e7uo7v7d\\s*\\.\\s*tmp(?!\\w))",
"(?P<vuln_web_files_851>\\/e7uo7v7d\\s*\\.\\s*idc(?!\\w))",
"(?P<vuln_web_files_225>\\/e7uo7v7d\\s*\\.\\s*stm(?!\\w))",
"(?P<vuln_web_files_251>\\/calendar\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_686>\\/e7uo7v7d\\s*\\.\\s*tpf(?!\\w))",
"(?P<vuln_web_files_535>\\/ctguestb\\s*\\.\\s*idc(?!\\w))",
"(?P<vuln_web_files_143>\\/e7uo7v7d\\s*\\.\\s*var(?!\\w))",
"(?P<vuln_web_files_659>\\/collect4\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_154>\\/e7uo7v7d\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_803>\\/whatever\\s*\\.\\s*htr(?!\\w))",
"(?P<vuln_web_files_868>\\/anything\\s*\\.\\s*snp(?!\\w))",
"(?P<vuln_web_files_725>\\/filetime\\s*\\.\\s*idq(?!\\w))",
"(?P<vuln_web_files_222>\\/e7uo7v7d\\s*\\.\\s*csp(?!\\w))",
"(?P<vuln_web_files_307>\\/e7uo7v7d\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_483>\\/null\\s*\\.\\s*printer(?!\\w))",
"(?P<vuln_web_files_775>\\/pbserver\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_374>\\/vxvm\\_ug\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_306>\\/e7uo7v7d\\s*\\.\\s*jsa(?!\\w))",
"(?P<vuln_web_files_559>\\/midicart\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_422>\\/exprcalc\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_932>\\/e7uo7v7d\\s*\\.\\s*map(?!\\w))",
"(?P<vuln_web_files_1108>\\/e7uo7v7d\\s*\\.\\s*de(?!\\w))",
"(?P<vuln_web_files_905>\\/e7uo7v7d\\s*\\.\\s*cfg(?!\\w))",
"(?P<vuln_web_files_652>\\/cartcart\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_700>\\/deptodoc\\s*\\.\\s*btr(?!\\w))",
"(?P<vuln_web_files_396>\\/sqljdemo\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_769>\\/linkinfo\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_1143>\\/e7uo7v7d\\s*\\.\\s*pt(?!\\w))",
"(?P<vuln_web_files_338>\\/e7uo7v7d\\s*\\.\\s*bin(?!\\w))",
"(?P<vuln_web_files_1092>\\/deaslog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_593>\\/statmail\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1080>\\/sitemap\\s*\\.\\s*xml(?!\\w))",
"(?P<vuln_web_files_954>\\/helpdesk\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_917>\\/e7uo7v7d\\s*\\.\\s*zip(?!\\w))",
"(?P<vuln_web_files_277>\\/e7uo7v7d\\s*\\.\\s*sql(?!\\w))",
"(?P<vuln_web_files_34>\\/quikstore\\s*\\.\\s*cfg(?!\\w))",
"(?P<vuln_web_files_533>\\/smadmin\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_288>\\/nd000003\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_485>\\/e7uo7v7d\\s*\\.\\s*idq(?!\\w))",
"(?P<vuln_web_files_805>\\/fpremadm\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_765>\\/smtptbls\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_927>\\/e7uo7v7d\\s*\\.\\s*htr(?!\\w))",
"(?P<vuln_web_files_844>\\/e7uo7v7d\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_28>\\/e7uo7v7d\\s*\\.\\s*java(?!\\w))",
"(?P<vuln_web_files_984>\\/tstisapi\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_1170>\\/private\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_750>\\/pitc\\_ag\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_572>\\/openfile\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_542>\\/domguide\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1182>\\/ntsync45\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_964>\\/bdjra5dcb\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_68>\\/fastjsdata\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_664>\\/e7uo7v7d\\s*\\.\\s*dpgs(?!\\w))",
"(?P<vuln_web_files_1003>\\/getdrvrs\\s*\\.\\s*exe(?!\\w))",
"(?P<os_cmd_exec_susp_dir_patts_1>\\s*\\.\\s*\\s*\\.\\s*\\\\)",
"(?P<vuln_web_files_913>\\/e7uo7v7d\\s*\\.\\s*save(?!\\w))",
"(?P<vuln_web_files_1183>\\/registry\\s*\\.\\s*dat(?!\\w))",
"(?P<vuln_web_files_1052>\\/e7uo7v7d\\s*\\.\\s*pwd(?!\\w))",
"(?P<vuln_web_files_417>\\/cf\\-sinfo\\s*\\.\\s*tpf(?!\\w))",
"(?P<vuln_web_files_246>\\/deaslog05\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_29>\\/kbnv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
"(?P<os_cmd_exec_susp_dir_patts_2>\\/\\s*\\.\\s*\\s*\\.\\s*)",
"(?P<vuln_web_files_1163>\\/e7uo7v7d\\s*\\.\\s*blt(?!\\w))",
"(?P<vuln_web_files_822>\\/countdown\\s*\\.\\s*xls(?!\\w))",
"(?P<vuln_web_files_1059>\\/tradecli\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_1114>\\/e7uo7v7d\\s*\\.\\s*nlm(?!\\w))",
"(?P<vuln_web_files_1180>\\/e7uo7v7d\\s*\\.\\s*org(?!\\w))",
"(?P<vuln_web_files_1077>\\/e7uo7v7d\\s*\\.\\s*xtp(?!\\w))",
"(?P<vuln_web_files_623>\\/e7uo7v7d\\s*\\.\\s*aspx(?!\\w))",
"(?P<vuln_web_files_1171>\\/nd000004\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_279>\\/buddylist\\s*\\.\\s*blt(?!\\w))",
"(?P<xss_html_special_12>\\s*\\.\\s*createelement(?!\\w))",
"(?P<vuln_web_files_155>\\/a\\_domlog\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1135>\\/randhtml\\s*\\.\\s*cgi(?!\\w))",
"(?P<os_cmd_exec_susp_dir_patts_0>\\s*\\.\\s*\\s*\\.\\s*\\/)",
"(?P<vuln_web_files_800>\\/vxvm\\_mig\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_842>\\/npn\\_admn\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_518>\\/openview5\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_742>\\/netpanzer\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_1166>\\/evaluate\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_1138>\\/e7uo7v7d\\s*\\.\\s*gif(?!\\w))",
"(?P<vuln_web_files_543>\\/e7uo7v7d\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_1104>\\/e7uo7v7d\\s*\\.\\s*old(?!\\w))",
"(?P<vuln_web_files_1043>\\/addalink\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_425>\\/deaslog04\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1146>\\/software\\s*\\.\\s*nsf(?!\\w))",
"(?P<code_execution_fast_reg_1>(\\$\\w+\\s*=\\s*\\w+\\s*;))",
"(?P<vuln_web_files_925>\\/buffer\\d+\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_126>\\/duxqcmbiq\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_836>\\/acart2\\_0\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_282>\\/dbconnect\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_730>\\/cplogfile\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_900>\\/e7uo7v7d\\s*\\.\\s*xsql(?!\\w))",
"(?P<vuln_web_files_1005>\\/e7uo7v7d\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_1016>\\/e7uo7v7d\\s*\\.\\s*bas(?!\\w))",
"(?P<vuln_web_files_300>\\/e7uo7v7d\\s*\\.\\s*data(?!\\w))",
"(?P<vuln_web_files_240>\\/statusmap\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_582>\\/deesadmin\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_164>\\/gm\\-2\\-b2\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_780>\\/blah\\d+23\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_716>\\/e7uo7v7d\\s*\\.\\s*home(?!\\w))",
"(?P<xss_html_special_60>(?<!\\w)text\\/vbscript(?!\\w))",
"(?P<vuln_web_files_1019>\\/e7uo7v7d\\s*\\.\\s*cnf(?!\\w))",
"(?P<vuln_web_files_162>\\/e7uo7v7d\\s*\\.\\s*stat(?!\\w))",
"(?P<vuln_web_files_150>\\/quikstore\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_74>\\/codebrw\\d+\\s*\\.\\s*asp(?!\\w))",
"(?P<vuln_web_files_1152>\\/extends2\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_813>\\/e7uo7v7d\\s*\\.\\s*link(?!\\w))",
"(?P<vuln_web_files_1031>\\/helpadmin\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_480>\\/order\\_log\\s*\\.\\s*dat(?!\\w))",
"(?P<vuln_web_files_349>\\/e7uo7v7d\\s*\\.\\s*thtml(?!\\w))",
"(?P<vuln_web_files_1087>\\/nsmanager\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_489>\\/addcontent\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_806>\\/ains\\_main\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_566>\\/stat\\_what\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_1150>\\/setpasswd\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_1049>\\/deaslog02\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_986>\\/nd00000\\d+\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_916>\\/snmpviewer\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_625>\\/dols\\_help\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_235>\\/e7uo7v7d\\s*\\.\\s*phtml(?!\\w))",
"(?P<vuln_web_files_882>\\/xsqlconfig\\s*\\.\\s*xml(?!\\w))",
"(?P<vuln_web_files_50>\\/get\\_od\\_toc\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_434>\\/fck\\_link\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_757>\\/rdprocess\\s*\\.\\s*aspx(?!\\w))",
"(?P<vuln_web_files_911>\\/o\\d+2guest\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_497>\\/e7uo7v7d\\s*\\.\\s*class(?!\\w))",
"(?P<vuln_web_files_939>\\/\\d+\\d+isrb\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_630>\\/vpuserinfo\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_827>\\/extends\\d+\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_626>\\/cschatrbox\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_1>\\/release\\-msg\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_27>\\/vxvm\\_notes\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_1157>\\/sendemail\\s*\\.\\s*ghp(?!\\w))",
"(?P<vuln_web_files_55>\\/e7uo7v7d\\s*\\.\\s*passwd(?!\\w))",
"(?P<vuln_web_files_818>\\/e7uo7v7d\\s*\\.\\s*types(?!\\w))",
"(?P<vuln_web_files_1098>\\/hellouser\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_678>\\/parse\\_xml\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_831>\\/e7uo7v7d\\s*\\.\\s*notes(?!\\w))",
"(?P<vuln_web_files_122>\\/rvdhe880gl\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_824>\\/awebvisit\\s*\\.\\s*stat(?!\\w))",
"(?P<vuln_web_files_56>\\/com\\_minibb\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_530>\\/wfreassign\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_540>\\/e7uo7v7d\\s*\\.\\s*shtml(?!\\w))",
"(?P<vuln_web_files_910>\\/realsignup\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_581>\\/pagedouble\\s*\\.\\s*jsp(?!\\w))",
"(?P<xss_html_special_13>(?<!\\w)ownerdocument\\s*\\.\\s*)",
"(?P<vuln_web_files_234>\\/ecxotaping\\s*\\.\\s*htm(?!\\w))",
"(?P<vuln_web_files_546>\\/mdefre8m4ml\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_1068>\\/pt\\_config\\s*\\.\\s*inc(?!\\w))",
"(?P<vuln_web_files_473>\\/e7uo7v7d\\s*\\.\\s*access(?!\\w))",
"(?P<vuln_web_files_574>\\/pageimport2\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_959>\\/ntp\\_primer\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_744>\\/e7uo7v7d\\s*\\.\\s*cobalt(?!\\w))",
"(?P<vuln_web_files_1085>\\/fileexists\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_915>\\/jdkrqnotify\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_171>\\/viewexample\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_1120>\\/musicqueue\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_119>\\/shopping300\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_229>\\/shopping400\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_746>\\/a\\_security\\s*\\.\\s*htm(?!\\w))",
"(?P<vuln_web_files_855>\\/i8ya5llb0qb\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_297>\\/master\\s*\\.\\s*password(?!\\w))",
"(?P<vuln_web_files_492>\\/agentrunner\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_496>\\/fck\\_flash\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_dirs_593>\\/lygmasbkidzlu\\/cgi\\-bin(?!\\w))",
"(?P<vuln_web_files_494>\\/member\\_log\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_962>\\/chetcpasswd\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_772>\\/fck\\_image\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_1110>\\/learn\\-msg\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_945>\\/deaslog0\\d+\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_421>\\/haffzeqgulj\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_1144>\\/getservers\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_1175>\\/dadentries\\s*\\.\\s*htm(?!\\w))",
"(?P<vuln_web_files_215>\\/kbccv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_152>\\/setsecurity\\s*\\.\\s*shm(?!\\w))",
"(?P<vuln_web_files_262>\\/csguestbook\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_1071>\\/soapconfig\\s*\\.\\s*xml(?!\\w))",
"(?P<vuln_web_files_1096>\\/turwwwwhhm\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_1148>\\/e7uo7v7d\\s*\\.\\s*wwwacl(?!\\w))",
"(?P<vuln_web_files_203>\\/e7uo7v7d\\s*\\.\\s*printer(?!\\w))",
"(?P<vuln_web_files_728>\\/aedating4cms\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_18>\\/e7uo7v7d\\s*\\.\\s*nsconfig(?!\\w))",
"(?P<vuln_web_files_1070>\\/e7uo7v7d\\s*\\.\\s*config(?!\\w))",
"(?P<vuln_web_dirs_389>\\/okjdkewqqdobah\\/cgi\\-bin(?!\\w))",
"(?P<vuln_web_files_102>\\/diag\\_dbtest\\s*\\.\\s*asp(?!\\w))",
"(?P<vuln_web_files_920>\\/clusterframe\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_982>\\/ldhpsaoeanyd\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_194>(?<!\\w)console\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_897>\\/krkiuwjugrom\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_1126>\\/aedatingcms\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_898>(?<!\\w)xsstest\\s*\\.\\s*xml(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_8>(?<!\\w)cd\\s*etc(?!\\w))",
"(?P<vuln_web_files_644>\\/kbssvv\\d+\\d+\\s*\\.\\s*nsf(?!\\w))",
"(?P<sqli_generic_38>(?<!\\w)information\\_schema\\s*\\.\\s*)",
"(?P<vuln_web_files_619>\\/customerdata\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_1075>\\/cfcexplorer\\s*\\.\\s*cfc(?!\\w))",
"(?P<vuln_web_files_989>\\/vxvm\\_tshoot\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_230>(?<!\\w)rbsserv\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_227>\\/uurfnmhfhvtn\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_538>\\/mainframeset\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_190>\\/imadminlogon\\s*\\.\\s*asp(?!\\w))",
"(?P<vuln_web_files_403>\\/onrequestend\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_810>\\/realhelpdesk\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_91>\\/no\\-such\\-file\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_985>\\/deasappdesign\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_814>\\/icoduserguide\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_879>\\/form\\_results\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_377>\\/entropybanner\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_1037>\\/dpnecentral\\s*\\.\\s*asmx(?!\\w))",
"(?P<vuln_web_files_484>\\/wg\\_user\\-info\\s*\\.\\s*ml(?!\\w))",
"(?P<vuln_web_files_310>\\/cslivesupport\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_269>\\/e7uo7v7d\\s*\\.\\s*htpasswd(?!\\w))",
"(?P<vuln_web_files_708>\\/smg\\_smxcfg30\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_719>\\/vxvm\\_hwnotes\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_598>\\/\\d+\\d+\\s*\\.\\s*00relnotes(?!\\w))",
"(?P<vuln_web_files_1160>\\/e7uo7v7d\\s*\\.\\s*adjunct(?!\\w))",
"(?P<vuln_web_files_1181>\\/help5\\_admin\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_789>\\/dbprod2\\_prod\\s*\\.\\s*dbc(?!\\w))",
"(?P<vuln_web_files_308>\\/xagogktctnspa\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_165>\\/help5\\_client\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_869>\\/e7uo7v7d\\s*\\.\\s*password(?!\\w))",
"(?P<vuln_web_files_701>\\/whateverwrzb\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_372>\\/e7uo7v7d\\s*\\.\\s*www\\_acl(?!\\w))",
"(?P<vuln_web_files_427>\\/entropysearch\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_648>\\/hywsrkdlyfhyrb\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_967>\\/site\\_searcher\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_941>\\/e7uo7v7d\\s*\\.\\s*signature(?!\\w))",
"(?P<vuln_web_files_1151>\\/e7uo7v7d\\s*\\.\\s*htaccess(?!\\w))",
"(?P<vuln_web_files_181>\\/jluwpkdfrgvwfs\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_412>\\/rsso\\d+45a0mzr\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_292>\\/e7uo7v7d\\s*\\.\\s*ssifilter(?!\\w))",
"(?P<vuln_web_files_511>\\/rhhvengt26x6rh\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_175>\\/vwchqjxorzitbm\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_1173>\\/hnvyuzwaqq\\s*\\.\\s*action(?!\\w))",
"(?P<sqli_fast_reg_3>(\\(\\s*(select|insert|update|delete)))",
"(?P<vuln_web_files_304>\\/rtoy23\\d+3mduh\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_84>\\/owa\\_util\\s*\\.\\s*signature(?!\\w))",
"(?P<vuln_web_files_322>\\/blah\\-whatever\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_17>\\/e7uo7v7d\\s*\\.\\s*cellsprint(?!\\w))",
"(?P<vuln_web_files_360>\\/e7uo7v7d\\s*\\.\\s*listprint(?!\\w))",
"(?P<vuln_web_files_885>\\/kywndbrexogmih\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_616>\\/architext\\_query\\s*\\.\\s*pl(?!\\w))",
"(?P<vuln_web_files_821>\\/cfmlsyntaxcheck\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_510>\\/e7uo7v7d\\s*\\.\\s*properties(?!\\w))",
"(?P<vuln_web_files_514>\\/access\\-options\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_829>\\/formmail\\-clone\\s*\\.\\s*cgi(?!\\w))",
"(?P<vuln_web_files_233>\\/uygv2i3lv6ij\\s*\\.\\s*cshtml(?!\\w))",
"(?P<vuln_web_files_324>\\/pageiserrorpage\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_441>\\/\\d+\\d+irelnotes\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_186>\\/zskwhg8jniabcd\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_655>\\/sscd\\_suncourier\\s*\\.\\s*pl(?!\\w))",
"(?P<xss_html_special_38>(?<!\\w)location\\s*\\.\\s*href(?!\\w))",
"(?P<vuln_web_files_656>\\/cgichkmasterpwd\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_918>\\/e7uo7v7d\\s*\\.\\s*00relnotes(?!\\w))",
"(?P<path_traversal_3>\\\\\\s*\\.\\s*\\s*\\.\\s*\\/\\s*\\.\\s*\\s*\\.\\s*)",
"(?P<vuln_web_files_834>\\/help5\\_designer\\s*\\.\\s*nsf(?!\\w))",
"(?P<vuln_web_files_586>\\/pqbopmnkhoxsisdh\\s*\\.\\s*php(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_15>(?<!\\w)cat\\s*hosts(?!\\w))",
"(?P<vuln_web_files_252>\\/gettempdirectory\\s*\\.\\s*cfm(?!\\w))",
"(?P<vuln_web_files_356>\\/auth\\_user\\_file\\s*\\.\\s*txt(?!\\w))",
"(?P<vuln_web_files_978>\\/tovvjrbwrdrpmonx\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_401>\\/owa\\_util\\s*\\.\\s*cellsprint(?!\\w))",
"(?P<vuln_web_files_1081>\\/e7uo7v7d\\s*\\.\\s*showsource(?!\\w))",
"(?P<vuln_web_files_458>\\/owa\\_util\\s*\\.\\s*showsource(?!\\w))",
"(?P<vuln_web_files_826>\\/\\d+\\d+irelnotes\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_459>\\/ptg\\_upgrade\\_pkg\\s*\\.\\s*log(?!\\w))",
"(?P<vuln_web_files_717>\\/displayopenedfile\\s*\\.\\s*cfm(?!\\w))",
"(?P<xss_html_special_44>(?<!\\w)document\\s*\\.\\s*cookie(?!\\w))",
"(?P<vuln_web_files_934>\\/cthzrcbsobmimq\\s*\\.\\s*action(?!\\w))",
"(?P<vuln_web_files_689>\\/ixmail\\_netattach\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_807>\\/obwupzwyakykba\\s*\\.\\s*action(?!\\w))",
"(?P<vuln_web_files_168>\\/order\\_log\\_v\\d+2\\s*\\.\\s*dat(?!\\w))",
"(?P<vuln_web_files_1119>\\/judy\\_tech\\_book\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_454>\\/junk\\_nonexistant\\s*\\.\\s*exe(?!\\w))",
"(?P<vuln_web_files_1127>\\/e7uo7v7d\\s*\\.\\s*render\\_css(?!\\w))",
"(?P<vuln_web_files_951>\\/e7uo7v7d\\s*\\.\\s*lcdispatcher(?!\\w))",
"(?P<vuln_web_files_1083>\\/e7uo7v7d\\s*\\.\\s*genpopuplist(?!\\w))",
"(?P<vuln_web_files_573>\\/biztalkhttpreceive\\s*\\.\\s*dll(?!\\w))",
"(?P<vuln_web_files_721>\\/e7uo7v7d\\s*\\.\\s*bboardservlet(?!\\w))",
"(?P<vuln_web_files_120>\\/\\_showpooldetails\\s*\\.\\s*java(?!\\w))",
"(?P<vuln_web_files_711>\\/syxwptffnnuyexftov\\s*\\.\\s*php(?!\\w))",
"(?P<vuln_web_files_373>\\/e7uo7v7d\\s*\\.\\s*uploadservlet(?!\\w))",
"(?P<vuln_web_files_118>\\/middle\\_help\\_intro\\s*\\.\\s*htm(?!\\w))",
"(?P<vuln_web_files_936>\\/e7uo7v7d\\s*\\.\\s*validate\\_stmt(?!\\w))",
"(?P<vuln_web_files_387>\\/ppzcljsmvsnzwofqxug\\s*\\.\\s*php(?!\\w))",
"(?P<xss_html_special_50>(?<!\\w)document\\s*\\.\\s*location(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_19>(?<!\\w)cd\\s*\\s*\\.\\s*\\s*\\.\\s*)",
"(?P<vuln_web_files_856>\\/ip\\_password\\_result\\s*\\.\\s*htm(?!\\w))",
"(?P<vuln_web_files_344>\\/\\_showjavartdetails\\s*\\.\\s*java(?!\\w))",
"(?P<vuln_web_files_541>\\/generalchassisconfig\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_397>\\/sunexamples\\s*\\.\\s*bboardservlet(?!\\w))",
"(?P<xss_html_special_16>(?<!\\w)string\\s*\\.\\s*fromcharcode(?!\\w))",
"(?P<vuln_web_files_863>\\/mpcsoftweb\\_guestdata\\s*\\.\\s*mdb(?!\\w))",
"(?P<vuln_web_files_904>\\/nikto\\-test\\-bgl4esul\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_602>\\/nikto\\-test\\-7zpdybyd\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_551>\\/blah\\-whatever\\-badfile\\s*\\.\\s*jsp(?!\\w))",
"(?P<vuln_web_files_1133>\\/nbxovzsmbguzvznzzqpiu\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_1079>\\/nikto\\-test\\-ksa8x6xq\\s*\\.\\s*html(?!\\w))",
"(?P<sqli_fast_reg_4>(union\\s+all\\s+(select|insert|update|delete)))",
"(?P<vuln_web_files_243>\\/nikto\\-test\\-ttjw6\\d+aq\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_947>\\/payload\\_encoding\\_call4\\s*\\.\\s*xls(?!\\w))",
"(?P<vuln_web_files_957>\\/nikto\\-test\\-ons\\d+8osl\\s*\\.\\s*html(?!\\w))",
"(?P<vuln_web_files_149>\\/e7uo7v7d\\s*\\.\\s*show\\_query\\_columns(?!\\w))",
"(?P<sqli_fast_reg_1>(union\\s*(all\\s*)?(select|insert|update|delete)))",
"(?P<vuln_web_files_832>\\/file\\-that\\-is\\-not\\-real\\-2002\\s*\\.\\s*php3)",
"(?P<vuln_web_files_231>\\/owa\\_util\\s*\\.\\s*show\\_query\\_columns(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy_21>\\d+27\\s*\\.\\s*0\\s*\\.\\s*0\\s*\\.\\s*\\d+)",
"(?P<vuln_web_files_1089>\\/payload\\_encoding\\_fnstenv\\s*\\.\\s*xls(?!\\w))",
"(?P<vuln_web_files_159>\\/planning\\_superdome\\_configs\\s*\\.\\s*pdf(?!\\w))",
"(?P<vuln_web_files_819>\\/e7uo7v7d\\s*\\.\\s*render\\_warning\\_screen(?!\\w))",
"(?P<vuln_web_files_283>\\/payload\\_encoding\\_jmp\\_call\\s*\\.\\s*xls(?!\\w))",
"(?P<sqli_fast_reg_5>(^[\\.\\-\\w\\^\\']+\\s*union\\s*(select|insert|update|delete)))",
"(?P<sqli_fast_reg_2>(union[\\w\\s]+(select|insert|update|delete)[\\w\\s]+from[\\w\\s]+))",
"(?P<vuln_web_filex_fast_reg_1>(/(plugins|include\\w*|lib|upload)[^\\s]*/(\\w*upload|filemanager|admin|config|controller|.inc|[\\w\\-]*manager|temp)))",
"(?P<vuln_web_filex_fast_reg_0>(/cgi-bin/(shop|boozt|mojo|logs|rightfax|dasp|photo|webcgi|ezshopper2|wwwthreads|db4web_c|session|imagefolio|ikonboard|calendar|classifieds|orders|sbcgi|counterfiglet|gw5|horde|.cobalt|log|cutecast|data|cspassword|dcshop|blog|test|sws|include|csmailto|utm|store|stats-bin-p|stat|cbmc|replicator|texis|bulk|ms_proxy_auth_query|awl|stats|stats_old|ezshopper3|cgiwrap|gbook|guestbook|rwcgi60|admin|awstats|sgb_dir|c32web.exe|mt-static|auth_data|texis.exe|common|dbman|auctiondeluxe|ncommerce3|backup)))",
"(?P<encoding_chars108a>[\\s\\)]*(\\(|//|`)\\!\\!\\[\\])",
"(?P<encoding_charsfb50>\\+[\\s\\)]*(\\(|//|`)\\!\\!)",
"(?P<generic_keywordsce36>(?<!\\w)new[\\s\\)]*(\\(|//|`))",
"(?P<ldap_injectionf0b9>(?<!\\w)name[\\s\\)]*(\\(|//|`))",
"(?P<no_sql_fast_reg0397>(\\[\\s*\\$(gt|eq|ge|le|regex|pass|ne|exists)\\s*\\]))",
"(?P<no_sql_fast_reg7acf>(\\{\\$(gt|eq|ge|le|regex|pass|ne|exists)\\s*))",
"(?P<no_sql_fast_rega323>(^\\s*\\$(gt|eq|ge|le|regex|pass|ne|exists)\\s*$))",
"(?P<no_sql_fast_regb128>(\\$(gt|eq|ge|le|regex|pass|ne|exists)\\s*:))",
"(?P<os_cmd_ev_fast_reg642a>(\\[([a-z])(\\4)\\]))",
"(?P<os_cmd_exec_medium_acuracy065c>(?<!\\w)exit[\\s\\)]*(\\(|//|`))",
"(?P<os_cmd_exec_medium_acuracy0f71>(?<!\\w)config\\s*\\.\\s*inc(?!\\w))",
"(?P<os_cmd_exec_medium_acuracy30f1>(?<!\\w)system[\\s\\)]*(\\(|//|`))",
"(?P<os_cmd_exec_medium_acuracyb605>\\?onfig\\s*\\.\\s*inc(?!\\w))",
"(?P<os_cmd_exec_medium_acuracyd71b>(?<!\\w)echo[\\s\\)]*(\\(|//|`))",
"(?P<os_commands272f>(?<!\\w)ping6)",
"(?P<os_commands2cf4>(?<!\\w)tracert(?!\\w))",
"(?P<os_commands2ea6>(?<!\\w)awk(?!\\w))",
"(?P<os_commands8744>(?<!\\w)nslookup(?!\\w))",
"(?P<os_commandsbdd9>(?<!\\w)dash(?!\\w))",
"(?P<os_commandsdd75>(?<!\\w)sed(?!\\w))",
"(?P<os_commandsefda>(?<!\\w)traceroute6)",
"(?P<os_commandsff70>(?<!\\w)sort(?!\\w))",
"(?P<path_traversal65ba>\\s*\\.\\s*\\s*\\.\\s*2f(?!\\w))",
"(?P<path_traversal6625>\\s*\\.\\s*\\s*\\.\\s*2f\\s*\\.\\s*\\s*\\.\\s*2f\\s*\\.\\s*\\s*\\.\\s*2f(?!\\w))",
"(?P<path_traversal913d>(?<!\\w)etc2fpasswd(?!\\w))",
"(?P<php_info_parameters0669>(?<!\\w)info\\_all(?!\\w))",
"(?P<php_info_parameters3f14>(?<!\\w)info\\_credits(?!\\w))",
"(?P<php_info_parameters3fdf>(?<!\\w)info\\_configuration(?!\\w))",
"(?P<php_info_parameters41db>(?<!\\w)info\\_modules(?!\\w))",
"(?P<php_info_parameters8851>(?<!\\w)info\\_environment(?!\\w))",
"(?P<php_info_parametersc394>(?<!\\w)info\\_general(?!\\w))",
"(?P<php_info_parametersda77>(?<!\\w)info\\_variables(?!\\w))",
"(?P<php_info_parameterse68c>(?<!\\w)info\\_license(?!\\w))",
"(?P<php_proto_wrappers_fast_reg022a>(phar://\\w+))",
"(?P<php_proto_wrappers_fast_reg151a>(glob://\\w+))",
"(?P<php_proto_wrappers_fast_reg1e0f>(ssh2://\\w+))",
"(?P<php_proto_wrappers_fast_reg4f07>(rar://\\w+))",
"(?P<php_proto_wrappers_fast_reg6c96>(ogg://\\w+))",
"(?P<php_proto_wrappers_fast_reg7c51>(zip://\\w+))",
"(?P<php_proto_wrappers_fast_regba9d>(php://\\w+))",
"(?P<php_proto_wrappers_fast_regbc7e>(zlib://\\w+))",
"(?P<php_proto_wrappers_fast_reged42>(expect://\\w+))",
"(?P<quotes_ev_fast_regab4e>(\\<\\>))",
"(?P<quotes_space_ev_fast_reg9d52>(\\\"\\s*\\\"))",
"(?P<sqli_blind8a50>(?<!\\w)pg\\_sleep[\\s\\)]*(\\(|//|`))",
"(?P<sqli_blinda6e0>(?<!\\w)benchmark[\\s\\)]*(\\(|//|`))",
"(?P<sqli_fast_reg6210>(sleep\\s+\\d))",
"(?P<sqli_fast_reg7dbf>(between\\s+[^\\s]+\\s+and\\s+))",
"(?P<sqli_fast_rega9c5>([^\\w]\\d+or\\d[^\\w]))",
"(?P<sqli_generic035a>(?<!\\w)user\\_name[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic062d>(?<!\\w)user[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic0cd1>(?<!\\w)randomblob[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic0ceb>(?<!\\w)char\\@)",
"(?P<sqli_generic108f>(?<!\\w)get\\_host\\_address[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic155c>(?<!\\w)reverse[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic20ed>(?<!\\w)sha\\d+[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic2717>(?<!\\w)sum[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic2a58>(?<!\\w)lower[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic2bdb>(?<!\\w)order\\s*by(?!\\w))",
"(?P<sqli_generic2c9a>(?<!\\w)extractvalue[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic332b>(?<!\\w)hashbytes[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic3928>(?<!\\w)convert[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic39a4>(?<!\\w)hash[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic3c80>(?<!\\w)count[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic3f67>(?<!\\w)unhex[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic4271>(?<!\\w)avg[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic4c86>(?<!\\w)cast[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic4d35>(?<!\\w)iif[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic4fa4>(?<!\\w)concat[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic4ffb>(?<!\\w)like[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic502b>(?<!\\w)hex[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic506a>\\$comment(?!\\w))",
"(?P<sqli_generic559b>(?<!\\w)min[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic587a>(?<!\\w)database[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic6a8c>(?<!\\w)sleep[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic7598>(?<!\\w)elt[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic936a>(?<!\\w)case[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic95c8>(?<!\\w)name\\_const[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic9dce>(?<!\\w)md5[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generic9ef6>(?<!\\w)make\\_set[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericadd9>(?<!\\w)drop\\s*database(?!\\w))",
"(?P<sqli_genericb11c>(?<!\\w)rand[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericb28b>(?<!\\w)dshell[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericb844>(?<!\\w)system\\_user[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericb981>(?<!\\w)substring[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericba4a>(?<!\\w)drop\\s*table(?!\\w))",
"(?P<sqli_genericba83>(?<!\\w)group\\_concat[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericbb99>(?<!\\w)isnull[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericc23f>\\@select(?!\\w))",
"(?P<sqli_genericc98e>(?<!\\w)nvarchar[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericccae>(?<!\\w)upper[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericce64>(?<!\\w)match[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericd47d>(?<!\\w)gtid\\_subset[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericd497>(?<!\\w)ascii[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericdb7b>(?<!\\w)load\\_file[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericdd00>(?<!\\w)updatexml[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericdd3b>(?<!\\w)version[\\s\\)]*(\\(|//|`))",
"(?P<sqli_generice043>(?<!\\w)count[\\s\\)]*(\\(|//|`)\\*\\))",
"(?P<sqli_generice54c>(?<!\\w)varchar[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericea23>(?<!\\w)base64\\_decode[\\s\\)]*(\\(|//|`))",
"(?P<sqli_genericec02>\\$where(?!\\w))",
"(?P<ssti2553>(?<!\\w)clearconfig[\\s\\)]*(\\(|//|`))",
"(?P<ssti2c4d>\\s*\\.\\s*getclass[\\s\\)]*(\\(|//|`))",
"(?P<ssti32bf>(?<!\\w)exec[\\s\\)]*(\\(|//|`))",
"(?P<ssti3c17>(?<!\\w)loadtemplate[\\s\\)]*(\\(|//|`))",
"(?P<ssti43a8>(?<!\\w)writefile[\\s\\)]*(\\(|//|`))",
"(?P<ssti6c6e>\\s*\\.\\s*subclasses[\\s\\)]*(\\(|//|`))",
"(?P<ssti8e8b>(?<!\\w)getruntime[\\s\\)]*(\\(|//|`))",
"(?P<ssti9606>\\{\\{\\}\\})",
"(?P<ssti_fast_reg2d28>(@\\s*\\())",
"(?P<ssti_fast_regc807>(\\{\\{[\\w\\s]+}\\}))",
"(?P<ssti_fast_regdcd5>(#\\{[\\w\\s]+}))",
"(?P<sstib08a>(?<!\\w)ex[\\s\\)]*(\\(|//|`))",
"(?P<sstib9c5>\\s*\\.\\s*mro[\\s\\)]*(\\(|//|`))",
"(?P<ssticd8d>(?<!\\w)setcache[\\s\\)]*(\\(|//|`))",
"(?P<sstid1c2>(?<!\\w)getpath[\\s\\)]*(\\(|//|`))",
"(?P<sstid61d>(?<!\\w)subclasses\\_\\_[\\s\\)]*(\\(|//|`))",
"(?P<sstie907>(?<!\\w)getfilter[\\s\\)]*(\\(|//|`))",
"(?P<sstifdb4>(?<!\\w)attr[\\s\\)]*(\\(|//|`))",
"(?P<url_scanning1f1b>\\s*\\.\\s*keystore(?!\\w))",
"(?P<url_scanning4716>(?<!\\w)error\\_log(?!\\w))",
"(?P<url_scanning6bf5>\\s*\\.\\s*bash\\_history(?!\\w))",
"(?P<url_scanning6f3d>\\s*\\.\\s*bash\\_logut(?!\\w))",
"(?P<url_scanning7ce2>\\%env(?!\\w))",
"(?P<url_scanningd475>(?<!\\w)error\\s*\\.\\s*log(?!\\w))",
"(?P<url_scanningf544>\\s*\\.\\s*ssh(?!\\w))",
"(?P<url_scanningf977>\\s*\\.\\s*ksh\\_history(?!\\w))",
"(?P<vuln_os_dirs2c17>\\/bin(?!\\w))",
"(?P<vuln_os_dirs3b59>\\/share(?!\\w))",
"(?P<vuln_web_files00a6>\\\\admin\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files1a13>\\/wpconfig\\s*\\.\\s*bak(?!\\w))",
"(?P<vuln_web_files1b74>\\\\logicworks\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files2919>(?<!\\w)cart32\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_files5e7d>\\/wp\\-config\\s*\\.\\s*bak(?!\\w))",
"(?P<vuln_web_files87e1>(?<!\\w)config\\s*\\.\\s*ini(?!\\w))",
"(?P<vuln_web_filesacb6>\\\\php\\s*\\.\\s*ini(?!\\w))",
"(?P<xpath_injection671f>(?<!\\w)comment[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special0c79>(?<!\\w)window\\,frames(?!\\w))",
"(?P<xss_html_special0e69>\\s*\\.\\s*protocol[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special171d>(?<!\\w)catch[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special1720>(?<!\\w)constructor[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special27db>(?<!\\w)expression[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special31d4>(?<!\\w)reflect[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special3ba9>(?<!\\w)open[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special47b3>(?<!\\w)window\\s*\\.\\s*frames(?!\\w))",
"(?P<xss_html_special4a8e>\\s*\\.\\s*call(?!\\w))",
"(?P<xss_html_special4f36>(?<!\\w)settimeout[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special64b9>(?<!\\w)unescape\\s*\\.\\s*)",
"(?P<xss_html_special6675>(?<!\\w)call[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special6763>(?<!\\w)lookupmethod[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special6dda>(?<!\\w)url[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special7168>(?<!\\w)confirm[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special7b2e>\\s*\\.\\s*replace[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special8338>(?<!\\w)value[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special8524>\\/fine\\s*\\.\\s*\\/source(?!\\w))",
"(?P<xss_html_special883e>(?<!\\w)decodeuri[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special8893>(?<!\\w)execcommand[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special8a9f>(?<!\\w)location\\=)",
"(?P<xss_html_special91ee>(?<!\\w)javascriptval[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special94dc>(?<!\\w)navigate[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_special99fb>(?<!\\w)apply[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_speciala329>(?<!\\w)setinterval[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_speciala3af>(?<!\\w)forward[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_speciala652>(?<!\\w)alert[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_speciala9ba>(?<!\\w)document\\s*\\.\\s*domain(?!\\w))",
"(?P<xss_html_specialb0c1>(?<!\\w)redirect\\s*302)",
"(?P<xss_html_specialb902>(?<!\\w)slice[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialba96>(?<!\\w)document\\[)",
"(?P<xss_html_specialbe34>(?<!\\w)back[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialc12a>(?<!\\w)globalthis\\[)",
"(?P<xss_html_specialc3dd>(?<!\\w)set[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialc80e>(?<!\\w)writeln[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialcb24>\\s*\\.\\s*assign[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_speciald37a>(?<!\\w)eval\\s*\\.\\s*call[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_speciald85b>\\_\\_definesetter\\_\\_[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialdd4a>(?<!\\w)execscript[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialdec0>(?<!\\w)find[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialf1c4>(?<!\\w)prompt[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialfca1>(?<!\\w)msgbox[\\s\\)]*(\\(|//|`))",
"(?P<xss_html_specialfcc5>(?<!\\w)import[\\s\\)]*(\\(|//|`))"
]
}