Gf-Patterns/ssrf.json at master · Rdago/Gf-Patterns · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
{
    "flags": "-iE",
     "patterns": [

        "(&|[?])access(&|=)",
        "(&|[?])admin(&|=)",
        "(&|[?])dbg(&|=)",
        "(&|[?])debug(&|=)",
        "(&|[?])edit(&|=)",
        "(&|[?])grant(&|=)",
        "(&|[?])test(&|=)",
        "(&|[?])alter(&|=)",
        "(&|[?])clone(&|=)",
        "(&|[?])create(&|=)",
        "(&|[?])delete(&|=)",
        "(&|[?])disable(&|=)",
        "(&|[?])enable(&|=)",
        "(&|[?])exec(&|=)",
        "(&|[?])execute(&|=)",
        "(&|[?])load(&|=)",
        "(&|[?])make(&|=)",
        "(&|[?])modify(&|=)",
        "(&|[?])rename(&|=)",
        "(&|[?])reset(&|=)",
        "(&|[?])shell(&|=)",
        "(&|[?])toggle(&|=)",
        "(&|[?])adm(&|=)",
        "(&|[?])root(&|=)",
        "(&|[?])cfg(&|=)",
        "(&|[?])dest(&|=)",
        "(&|[?])redirect(&|=)",
        "(&|[?])uri(&|=)",
        "(&|[?])path(&|=)",
        "(&|[?])continue(&|=)",
        "(&|[?])url(&|=)",
        "(&|[?])window(&|=)",
        "(&|[?])next(&|=)",
        "(&|[?])data(&|=)",
        "(&|[?])reference(&|=)",
        "(&|[?])site(&|=)",
        "(&|[?])html(&|=)",
        "(&|[?])val(&|=)",
        "(&|[?])validate(&|=)",
        "(&|[?])domain(&|=)",
        "(&|[?])callback(&|=)",
        "(&|[?])return(&|=)",
        "(&|[?])feed(&|=)",
        "(&|[?])host(&|=)",
        "(&|[?])port(&|=)",
        "(&|[?])to(&|=)",
        "(&|[?])out(&|=)",
        "(&|[?])view(&|=)",
        "(&|[?])dir(&|=)",
        "(&|[?])show(&|=)",
        "(&|[?])navigation(&|=)",
        "(&|[?])open(&|=)",
        "(&|[?])file(&|=)",
        "(&|[?])document(&|=)",
        "(&|[?])folder(&|=)",
        "(&|[?])pg(&|=)",
        "(&|[?])php_path(&|=)",
        "(&|[?])style(&|=)",
        "(&|[?])doc(&|=)",
        "(&|[?])img(&|=)",
        "(&|[?])filename(&|=)"
    ]
}