'/frontend.tgz','/ftp.tar','/full.rar','/full.sql','/full_backup.rar','/full_backup.tar','/full_backup.tar.xz','/full_backup.tgz','/fullbackup.tar','/gitlab-ci.yml','/group_vars/all.yml','/group_vars/production.yml','/gunicorn.conf.py','/hacsfiles/../../configuration.yaml','/helm/sendgrid-values.yaml','/helm/values-sendgrid.yaml','/helmfile.yaml','/heroku.yml','/home.rar','/home.tar','/host_vars/localhost.yml','/html.rar','/html.tar','/html.tar.xz','/html.tgz','/httpdocs.rar','/httpdocs.tar','/httpdocs.tar.xz','/httpdocs.tgz','/httpsdocs.tar.xz','/huawei.yml','/huaweicloud.yml','/images.tar.xz','/img.tar.xz','/import.sql','/import.tar.xz','/imports.tar.xz','/inc/data/database.sdb','/insomnia.yaml','/install/froxlor.sql','/inventory/production.yml','/inventory/production/hosts.yml','/istio.yaml','/k8s-config.yml','/k8s.yaml','/k8s.yml','/k8s/sendgrid-secret.yaml','/keys.tar.xz','/kibana.yml','/kong.yml','/kubeconfig.yaml','/kubectl.yaml','/kubernetes.yaml','/kubernetes.yml','/kubernetes/sendgrid-configmap.yaml','/kubernetes/sendgrid-secret.yaml','/kubesec.yml','/kustomization.yaml','/kustomization.yml','/latest.sql','/litellm_config.yaml','/local.py','/local.tar.xz','/localhost.sql','/mail.tar','/mail.yaml','/mail.yml','/mailgun.yml','/media.tar.xz','/microservice.tar.xz','/mongo_dump.tar.xz','/mongodb.tar.xz','/mongodump.tar.xz','/mysql.initial.sql','/mysql.sql','/mysql_backup.sql','/mysqldump.sql','/mysqldump.tar.xz','/new.rar','/ngrok.yml','/obs.yml','/oidc-config.yaml','/old.rar','/old.sql','/old.tar','/old.tar.xz','/old.tgz','/oss.yaml','/oss.yml','/package.rar','/package.sql','/package.tar','/package.tar.xz','/package.tgz','/pantheon.upstream.yml','/pg_dump.sql','/pg_dump.tar.xz','/phinx.yaml','/phinx.yml','/php.tar','/php.tgz','/playbook.yml','/postgres.sql','/postgres.tar.xz','/postmark.yml','/private.tar.xz','/prod.sql','/prod.tar.xz','/prod_settings.py','/production.rar','/production.sql','/project.rar','/project.sql','/project.tar','/project.tar.xz','/project.tgz','/prometheus.yaml','/prometheus.yml','/proxy_config.yaml','/public.tar','/public.tar.xz','/public.tgz','/Pulumi.dev.yaml','/Pulumi.prod.yaml','/Pulumi.yaml','/qcloud.yaml','/qcloud.yml','/recovery.rar','/recovery.sql','/recovery.tar','/recovery.tar.xz','/recovery.tgz','/redis.tar.xz','/release.rar','/release.sql','/release.tar','/release.tar.xz','/release.tgz','/releases.rar','/releases.sql','/releases.tar','/releases.tar.xz','/releases.tgz','/render.yaml','/repo.rar','/repo.sql','/repo.tar','/repo.tar.xz','/repo.tgz','/restore.rar','/restore.sql','/restore.tar','/restore.tar.xz','/restore.tgz','/root.rar','/ROOT.tar','/s3.yaml','/s3config.yml','/sam-template.yaml','/sam.yaml','/sam.yml','/schema.sql','/secret.tar.xz','/secret.yaml','/secret.yml','/secret_key.py','/secrets.env.production','/secrets.py','/secrets.tar.xz','/secrets.yaml','/secrets/aws-keys-backup.yaml','/secrets/aws-keys-backup.yml','/secrets/aws_keys_backup.yaml','/secrets/aws_keys_backup.yml','/secrets/aws_smtp_config.yaml','/secrets/aws_smtp_config.yml','/secure/tokenization.yaml','/security.yml','/sendgrid-api.yml','/sendgrid-config.yml','/sendgrid-credentials.yml','/sendgrid-keys.yml','/sendgrid.py','/sendgrid.yaml','/sendgrid_api.yml','/sendgrid_config.py','/sendgrid_config.yml','/sendgrid_credentials.yml','/sendgrid_helper.py','/sendgrid_keys.yml','/sendgrid_secrets.yml','/sendgrid_settings.yml','/sensitive.tar.xz','/server.rar','/server.sql','/server.tar','/server.tar.xz','/server.tgz','/serverless.prod.yml','/service.rar','/service.tar.xz','/service.tgz','/service/email_service.py','/services.tar.xz','/services.tgz','/settings.local.py','/settings.tar.xz','/settings.yaml','/settings/base.py','/settings/dev.py','/settings/production.py','/settings/staging.py','/settings_local.py','/settings_production.py','/sftp-config-alt.json.save','/sftp.yaml','/site_backup.rar','/site_backup.sql','/site_backup.tar','/site_backup.tgz','/sites.rar','/sites.tar','/sites.tar.xz','/sites.tgz','/sites/default/services.yml','/skaffold.yaml','/smtp/aws-credentials.yaml','/smtp/aws-credentials.yml','/snapshot.rar','/snapshot.sql','/snapshot.tar','/snapshot.tar.xz','/snapshot.tgz','/source.rar','/source.sql','/source.tar','/source.tar.xz','/source.tgz','/sources.rar','/sources.sql','/sources.tar','/sources.tar.xz','/sources.tgz','/sql_backup.tar.xz','/src.rar','/src.sql','/src.tar','/src.tar.xz','/src.tgz','/src/main/resources/appsettings.yml','/ss_database_backup.sql','/staging.sql','/staging.tar','/staging.tar.xz','/static.tar.xz','/static/../flask_app.py','/storage.tar.xz','/storage.yml','/store.tar','/store.tar.xz','/stripe.yaml','/svelte.tar.xz','/tekton.yaml','/temp.rar','/temp.sql','/temp.tar','/tencent.yaml','/tencent.yml','/terraform.tfstate.save','/terraform.tfstate.swp','/test.rar','/test.tar','/test.tar.xz','/test.tgz','/testing.tar.xz','/tokens.tar.xz','/traefik.yml','/translate.sql','/upload.rar','/upload.tar','/upload.tar.xz','/uploads.rar','/uploads.tar','/user.rar','/user_secrets.yml','/users.sql','/values-prod.yaml','/values-production.yaml','/values-staging.yaml','/values.yml','/var/task/amplify.yaml','/vault.yaml','/vault.yml','/vendor.rar','/vendor.tar','/vhost.tar.xz','/volc.yml','/volcengine.yml','/web_backup.rar','/web_backup.sql','/web_backup.tar','/web_backup.tar.xz','/web_backup.tgz','/webapps.tar','/webbak.rar','/webroot.rar','/webroot.tar','/webroot.tar.xz','/webroot.tgz','/website.rar','/website.tar','/website.tgz','/website_backup.rar','/website_backup.sql','/website_backup.tar','/website_backup.tar.xz','/website_backup.tgz','/well-known.rar','/wp-admin.rar','/wp-admin.tar','/wp-cli.yml','/wp-content.rar','/wp-content.tar','/wp-content.tgz','/wp-includes.rar','/wp-includes.tar','/wp.rar','/wp.sql','/wp.tar','/wwroot.rar','/wwwrool.rar'),'/customize/','/\\/wp-content\\/plugins\\/[^\\.]{0,108}\\.php/','/(izooto-web-push|clean-tube-player|ane-player|grandrestaurant|google-seo-rank|matomo|wp-automatic|rehub-framework|translatepress-multilingual|truepush-free-web-push-notifications|pagelayer|ajax-search-for-woocommerce-premium|burst-statistics|ssl-test-page|burst-pro|iframe-font-preview|translatepress-developer|pdfjs-viewer-shortcode|translatepress-business|gtranslate|pdf_download|envato-market|wpdiscuz|global-gallery|correosoficial|elementor|elementor-pro|wpforms-lite|translatepress|pods|star-cloudprnt-for-woocommerce|supportboard|post-views-counter-pro|bea-post-views-counter|aawp|boldgrid-backup|ti-woocommerce-wishlist|si-captcha-for-wordpress|gravitec-net-web-push-notifications|google-site-kit|commercegurus-commercekit|motive-commerce-search|forminator|myagileprivacy|s2member|events-manager|phastpress|typehub|wp-youtube-lyte|universal-star-rating|genesis-simple-share|penci-bookmark-follow|penci-mobile-templates|cyberseo|lbg-audio8-html5-radio_ads|lbg-audio14-html5-breeze|wp_nativeflashradio3|zonapagos|wpbrutalai|autocommentai)/','/(?i)^(?:\\/(?:win|boot)\\.ini|[^?]*(?:c:[\\/\\\\])?windows[\\/\\\\]win\\.ini|[^?]*c:[\\/\\\\]boot\\.ini)(?:\\/)?(?:[?#]|$)/','/(?i)(?:[\\x22\\x27`)*+\\/-]|\\b(?:and|or)\\b)[ \\t\\r\\n(]{0,12}(?:select[ \\t\\r\\n]+(?:case[ \\t\\r\\n]+when[\\s\\S]{1,160}\\bthen[ \\t\\r\\n]+(?:sleep|pg_sleep|benchmark)\\s*\\(|if\\s*\\([\\s\\S]{1,160},[ \\t\\r\\n]*(?:sleep|pg_sleep|benchmark)\\s*\\()|select[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]+from[ \\t\\r\\n]+\\([\\s\\S]{0,80}(?:sleep|pg_sleep|benchmark)\\s*\\()/','/(?i)\\b(?:and|or)\\b[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]*=/','/(?i)(?:[\\x22\\x27`)]|\\d)[ \\t\\r\\n]*\\b(?:and|or)\\b[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]*=[ \\t\\r\\n]*\\d{1,10}/','/(?i)\\(\\s*select\\b/','/(?i)\\(\\s*select\\b[\\s\\S]{0,200}(?:0x[0-9a-f]{6,}|\\b(?:concat|elt)\\s*\\()/','/(?i)(?:etc[\\/\\\\]{1,8}(?:[a-z0-9._-]{1,40}[\\/\\\\]{1,8}){0,4}(?:[a-z0-9._-]{1,20}_)?(?:passwd|shadow)\\b|file:\\/\\/\\/)/','/proc/self/','/(?i)(union[\\s\\/*()]+(all[\\s\\/*()]+)?select|\\binsert\\s+into\\b|\\bdrop\\s+(table|database)\\b|\\bdelete\\s+from\\b|\\b(sleep|benchmark|pg_sleep|extractvalue|updatexml|load_file|group_concat|elt)\\s*\\(|\\bwaitfor\\s+delay\\b|\\bexec(ute)?\\s+(immediate|sp_|xp_)|\\bcreate\\s+user\\b|\\bgrant\\s+(all|select|connect|resource|usage|execute)\\b|\\bdeclare\\s+@\\w+\\s+(n?varchar|n?char|int|table|cursor)|\\bhaving\\s+\\d+\\s*=\\s*\\d+|\\bgroup\\s+by\\s+[\\w.]+\\s+having\\b|\\bprocedure\\s+analyse\\b|information_schema|@@(version|hostname|datadir|basedir|global)|\\bxp_cmdshell\\b|utl_http\\.request|utl_inaddr|into\\s+(outfile|dumpfile))/','/(?i)([\\x22\\x27`]\\s*(--\\s|--$|#\\s|#$)|[\\w)][\\x22\\x27`]\\s*\\/\\*|\\/\\*![0-9]*|;\\s*(select|insert|update|delete|drop|exec|declare|union|alter|create|truncate)\\b|\\bselect\\b[\\s\\S]{0,60}?\\bfrom\\b|[\\s,(=]0x[0-9a-f]{8,}(?!\\))|\\border\\s+by\\s+\\d+\\s*(--|#)|\\bsql(vuln|map|attempt))/','/<(?:script|%3Cscript|%73%63%72%69%70%74|\\bscr\\x00ipt)\\b[^>]*?(?:>|%3E)/','/(?i)drop\\s+table\\s*/','/(?i)(?:^|[\\/=])(archive|backups?|db|database|dump|sqldump|master|sql|site|web|www|wwwroot|public_?html|htdocs|wordpress|joomla|magento)\\.(zip|gz|tgz|tar|rar|7z|sql|bak|bz2)\\b/','/(?:ActiveXObject|XMLHttpRequest|xhr\\s*=|r\\s*=\\s*new\\s*XMLHttpRequest)/','/(?i)\\b\\(?[\\"\']*(?:assert(?:_options)?|c(?:hr|reate_function)|e(?:val|x(?:ec|p))|file(?:group)?|glob|i(?:mage(?:gif|(?:jpe|pn)g|wbmp|xbm)|s_a)|md5|o(?:pendir|rd)|p(?:assthru|open|rev)|(?:read|tmp)file|un(?:pac|lin)k|s(?:tat|ubstr|ystem))(?:\\/(?:\\*.*\\*\\/|\\/.*)|#.*|[\\s\\x0b\\"])*[\\"\']*\\)?[\\s\\x0b]*\\(.*\\)/','/(?i)[\\s\\x0b\\(\\)]case[\\s\\x0b]+when.*?then|\\)[\\s\\x0b]*?like[\\s\\x0b]*?\\(|select.*?having[\\s\\x0b]*?[^\\s\\x0b]+[\\s\\x0b]*?[^\\s\\x0b0-9A-Z_a-z]|if[\\s\\x0b]?\\([0-9A-Z_a-z]+[\\s\\x0b]*?[<->~]/','/(?i)(\\{\\{.*?\\}\\}|\\{\\{\\{.*?\\}\\}\\}|#\\{.*?\\}|\\$\\{.*?\\}|<%=\\s*.*?%>|\\{\\{=.*?\\}\\}|\\{\\^.*?\\}.*?\\{\\/.*?\\}|\\[\\[\\$\\{.*?\\}\\]\\])/','bash -c ','update_server_ajax_impact','/(\\$where\\b|\\$ne\\b|\\$gte?\\b|\\$lte?\\b|\\$nin\\b|\\$regex\\b|\\$elemMatch\\b|\\$mod\\b|\\$or\\b|\\$comment\\b|\\.mapReduce\\s*\\(|db\\.\\w+\\.(insert|find|update|remove|drop|mapReduce)\\s*\\(|this\\.(password|passwordzz))/','/(?i:)\\.(p(h(pt?|t(ml?)?|ar)[0-9]?|l|y)|(j|a)sp|aspx|sh|shtml|html?|cgi|htaccess|user\\.ini)($|\\.)/','/(?i:\\|\\|\\s*utl_http\\.request\\s*\\()/','/(?i)(]{0,200}(\\[|system|public)|]*?(?:"|\')?/',array('save_builder','elementor_ajax','supercheckout','lw-up','wp-json'),'/(?i)(\\b(wso|r57|r99|c99|c100|b374k|alfashell|alfa[-_](team|shell)|indoxploit|hmei7|hax0r|haxor|sh3ll|priv8|r00t|r3vn330|madspot|marijuana|gel4y|foxwso|sidewso|sym403|sym404|bkv74|lock360|leafmailer|filesman|wpbackdoor|0byte|mini[-_]?shell|webshell|backdoor|reverse[-_]?shell|raiz0|sux0r|deathshop|deadcode|indosec)\\b[\\w.-]{0,24}\\.(?:php\\d?|phtml|phar|pht|asp|aspx|jsp|jspx|cgi|pl|py|shtml)|\\/(admin-?upload|file-?upload|uploadify|upload_?file|backdoor|wso|c99|c100|b374k|webshell|r57|r99)[\\w-]{0,12}\\.php|eval-stdin\\.php|\\/(mobiquo|tapatalk)\\/[\\w\\/-]{0,40}\\.php)/','/(?i)\\[?\\$(?:n(?:e|in?|o[rt])|e(?:q|xists|lemMatch)|l(?:te?|ike)|mod|a(?:ll|nd)|(?:s(?:iz|lic)|wher)e|t(?:ype|ext)|x?or|div|between|regex|jsonSchema)\\]?/','/(?i)(%3c\\s*(%2f)?\\s*script(?![\\w%+]{0,40}application)|&#x?0*(3c|3e|60|62);?|\\\\(?:u003c|x3c)\\s*\\/?\\s*(?:script|img|svg|iframe|object|embed|details|video|audio|marquee|body|form|input|style|base|math|link)|<\\s*\\/?\\s*script|:|(|&newline;|&tab;|fromcharcode|\\.outerhtml)/','/(?i)(?:^|[^A-Za-z0-9])(?:\\.\\.[\\/\\\\]|[\\/\\\\]\\.\\.)(?:[\\w.%\\/\\\\-]{0,80})/','/(?i)union.*?select/','/((@copy|\\$_(files|get|post)|allow_url_(fopen|include)|auto_prepend_file|blexbot|browsersploit|call_user_func_array|(php|web)shell|curl(_exec|test)|disable_functions?|document_root))/','/(?i)(?:\\{\\{=?|\\$\\{|#\\{|<%=?|\\{%|\\[\\[\\$\\{)[^}%>]{0,200}?(?:\\d{1,7}\\s*[-+*\\/%]\\s*\\d{1,7}|process|mainmodule|require|constructor|child_process|popen|subprocess|\\bexec\\b|\\beval\\b|\\bsystem\\b|runtime|getruntime|processbuilder|getclass|forname|\\.class\\b|__\\w{2,20}__|java\\.|javax\\.|lang\\.|\\bos\\.|commands\\.|self\\.env|_self\\.|registerundefined|getfilter|freemarker|scriptengine|nashorn|groovy|lipsum|cycler)[^}%>]{0,200}?(?:%[}>]|\\})/','/(<\\!\\[CDATA\\[\\s*(?:<|>)*\\s*(?:SCRIPT|script)\\s*(?:>|\\]\\]>)|(?:alert\\(|javascript:))/',array('uip-framed-page','javascript:date'),'/(?i:load_file\\s*\\(\\s*char\\s*\\()/',array('oembed/','nocache'),'w, https://','/[?&](url|goto)=https?:/','/((s)?(ftp|http|inurl|php)(s)?(:(\\/|%2f|%u2215)(\\/|%2f|%u2215)))/','/((?]|\\b(alert|prompt|confirm|eval|expression|execScript|fromCharCode)\\s*\\(|srcdoc\\s*=|formaction\\s*=)/','/(?i)(?:\\/\\/|%2f%2f|@|%40|[=&?])(localhost|127(\\.\\d{1,3}){3}|0\\.0\\.0\\.0|\\[?::1\\]?|169\\.254\\.169\\.254|metadata\\.(google|aws|azure)\\b|2130706433)(?::\\d{1,5})?(?:$|[\\/?\\#&;\\x22\\x27]|%2f)/','/]*?(?:src\\s*=\\s*(?:"|\')?(?:javascript|http|%3C|%22|\\b404\\b)[^>]*?(?:>|%3E|>))/','