Commit 828ea634 by edetmt

add sqli rule

1 parent 8eeb53cd
Showing with 7 additions and 2 deletions
......@@ -7,7 +7,7 @@ sleep\((\s*)(\d*)(\s*)\)
group\s+by.+\(
(?:from\W+information_schema\W)
(?:(?:current_)user|database|version|schema|connection_id)\s*\(
\s*or\s+.*=.*
;{0,1}'{0,1}\){0,1}(\+| )*\b(and|or)\b(\+| )+.*(=|<|>).*
order\s+by\s+.*--$
benchmark\((.*)\,(.*)\)
base64_decode\(
......
......@@ -4,7 +4,12 @@ sleep\((\s*)(\d*)(\s*)\)
group\s+by.+\(
(?:from\W+information_schema\W)
(?:(?:current_)user|database|version|schema|connection_id)\s*\(
\s*or\s+.*=.*
;{0,1}'{0,1}\){0,1}(\+| )*\b(and|or)\b(\+| )+.*(=|<|>).*
\b(create|drop|backup)\b(\+| )+\bdatabase\b(\+| )+\w*
b(drop|truncate|create)\b(\+| )+\btable\b(\+| )+\w*
\bdelete\b(\+| )+\bfrom\b(\+| )+.*
\binsert\b(\+| )+(\binto\b){0,1}(\+| )+.*\bvalues\b.*
\bupdate\b(\+| )+.*(\+| )+\bset\b(\+| )+.*=.*
order\s+by\s+.*--$
benchmark\((.*)\,(.*)\)
base64_decode\(
......
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!