Commit 828ea634 by edetmt

add sqli rule

1 parent 8eeb53cd
Showing with 7 additions and 2 deletions
...@@ -7,7 +7,7 @@ sleep\((\s*)(\d*)(\s*)\) ...@@ -7,7 +7,7 @@ sleep\((\s*)(\d*)(\s*)\)
group\s+by.+\( group\s+by.+\(
(?:from\W+information_schema\W) (?:from\W+information_schema\W)
(?:(?:current_)user|database|version|schema|connection_id)\s*\( (?:(?:current_)user|database|version|schema|connection_id)\s*\(
\s*or\s+.*=.* ;{0,1}'{0,1}\){0,1}(\+| )*\b(and|or)\b(\+| )+.*(=|<|>).*
order\s+by\s+.*--$ order\s+by\s+.*--$
benchmark\((.*)\,(.*)\) benchmark\((.*)\,(.*)\)
base64_decode\( base64_decode\(
......
...@@ -4,7 +4,12 @@ sleep\((\s*)(\d*)(\s*)\) ...@@ -4,7 +4,12 @@ sleep\((\s*)(\d*)(\s*)\)
group\s+by.+\( group\s+by.+\(
(?:from\W+information_schema\W) (?:from\W+information_schema\W)
(?:(?:current_)user|database|version|schema|connection_id)\s*\( (?:(?:current_)user|database|version|schema|connection_id)\s*\(
\s*or\s+.*=.* ;{0,1}'{0,1}\){0,1}(\+| )*\b(and|or)\b(\+| )+.*(=|<|>).*
\b(create|drop|backup)\b(\+| )+\bdatabase\b(\+| )+\w*
b(drop|truncate|create)\b(\+| )+\btable\b(\+| )+\w*
\bdelete\b(\+| )+\bfrom\b(\+| )+.*
\binsert\b(\+| )+(\binto\b){0,1}(\+| )+.*\bvalues\b.*
\bupdate\b(\+| )+.*(\+| )+\bset\b(\+| )+.*=.*
order\s+by\s+.*--$ order\s+by\s+.*--$
benchmark\((.*)\,(.*)\) benchmark\((.*)\,(.*)\)
base64_decode\( base64_decode\(
......
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!