Current Path : /usr/share/modsecurity-crs/util/regexp-assemble/ |
Current File : //usr/share/modsecurity-crs/util/regexp-assemble/regexp-932150.txt |
# Word list for rule 932150 (RCE Unix command injection) # To lower FP, this rule requires whitespace after a command. # # To convert to a regexp that can be pasted into the rule: # cat regexp-932150.txt | ./regexp-cmdline.py unix | ./regexp-assemble.pl # # Entries starting with ' are used verbatim. # Everything after # is a comment. # bash bsdcat bsdiff bsdtar builtin bzcat bzdiff bzegrep bzfgrep bzgrep bzless bzmore cc command coproc csh curl dash diff dmesg doas echo egrep env eval exec fetch fgrep filetest ftpstats ftpwho gcc GET grep gzcat gzip head hup irb irb1 irb18 irb19 irb20 irb21 irb22 java jobs -x lastcomm lastlog lastlogin lessecho lessfile lesspipe lftp lftpget ls ls-F lsb_release lscpu lsmod lsof lspci lsusb lwp lwp-download lynx lzcat lzcmp lzdiff lzegrep lzfgrep lzgrep lzless lzma lzmore mailq mlocate mysqladmin mysqldump mysqldumpslow mysqlhotcopy mysqlshow nc nc.openbsd nc.traditional ncat netcat netkit-ftp netstat nohup nping nstat onintr perl perl5 pftp pgrep php php5 php7 ping pkexec pkill popd printenv ptar ptardiff ptargrep python python2 python3 python3m rcp realpath rename repeat replace rmdir rmuser rnano rsync ruby ruby1 ruby18 ruby19 ruby20 ruby21 ruby22 sched scp sdiff sed sendmail setenv setsid sftp sh sh.distrib socat source ssh strings sudo svn sysctl tail tailf tar tcping tcptraceroute tcsh telnet time timeout traceroute traceroute6 uname uncompress unlzma unrar unset unxz unzip useradd userdel usermod vigr vipw w3m wget whoami xargs xz xzcat xzcmp xzdec xzdiff xzegrep xzfgrep xzgrep xzless xzmore zcat zcmp zdiff zegrep zfgrep zgrep zip zless zmore zrun zsh