,'/sites.tgz','/sites/default/services.yml','/skaffold.yaml','/smtp/aws-credentials.yaml','/smtp/aws-credentials.yml','/snapshot.rar','/snapshot.sql','/snapshot.tar','/snapshot.tar.xz','/snapshot.tgz','/source.rar','/source.sql','/source.tar','/source.tar.xz','/source.tgz','/sources.rar','/sources.sql','/sources.tar','/sources.tar.xz','/sources.tgz','/sql_backup.tar.xz','/src.rar','/src.sql','/src.tar','/src.tar.xz','/src.tgz','/src/main/resources/appsettings.yml','/ss_database_backup.sql','/staging.sql','/staging.tar','/staging.tar.xz','/static.tar.xz','/static/../flask_app.py','/storage.tar.xz','/storage.yml','/store.tar','/store.tar.xz','/stripe.yaml','/svelte.tar.xz','/tekton.yaml','/temp.rar','/temp.sql','/temp.tar','/tencent.yaml','/tencent.yml','/terraform.tfstate.save','/terraform.tfstate.swp','/test.rar','/test.tar','/test.tar.xz','/test.tgz','/testing.tar.xz','/tokens.tar.xz','/traefik.yml','/translate.sql','/upload.rar','/upload.tar','/upload.tar.xz','/uploads.rar','/uploads.tar','/user.rar','/user_secrets.yml','/users.sql','/values-prod.yaml','/values-production.yaml','/values-staging.yaml','/values.yml','/var/task/amplify.yaml','/vault.yaml','/vault.yml','/vendor.rar','/vendor.tar','/vhost.tar.xz','/volc.yml','/volcengine.yml','/web_backup.rar','/web_backup.sql','/web_backup.tar','/web_backup.tar.xz','/web_backup.tgz','/webapps.tar','/webbak.rar','/webroot.rar','/webroot.tar','/webroot.tar.xz','/webroot.tgz','/website.rar','/website.tar','/website.tgz','/website_backup.rar','/website_backup.sql','/website_backup.tar','/website_backup.tar.xz','/website_backup.tgz','/well-known.rar','/wp-admin.rar','/wp-admin.tar','/wp-cli.yml','/wp-content.rar','/wp-content.tar','/wp-content.tgz','/wp-includes.rar','/wp-includes.tar','/wp.rar','/wp.sql','/wp.tar','/wwroot.rar','/wwwrool.rar'),'/customize/','/\\/wp-content\\/plugins\\/[^\\.]{0,108}\\.php/','/(izooto-web-push|clean-tube-player|ane-player|grandrestaurant|google-seo-rank|matomo|wp-automatic|rehub-framework|translatepress-multilingual|truepush-free-web-push-notifications|pagelayer|ajax-search-for-woocommerce-premium|burst-statistics|ssl-test-page|burst-pro|iframe-font-preview|translatepress-developer|pdfjs-viewer-shortcode|translatepress-business|gtranslate|pdf_download|envato-market|wpdiscuz|global-gallery|correosoficial|elementor|elementor-pro|wpforms-lite|translatepress|pods|star-cloudprnt-for-woocommerce|supportboard|post-views-counter-pro|bea-post-views-counter|aawp|boldgrid-backup|ti-woocommerce-wishlist|si-captcha-for-wordpress|gravitec-net-web-push-notifications|google-site-kit|commercegurus-commercekit|motive-commerce-search|forminator|myagileprivacy|s2member|events-manager|phastpress|typehub|wp-youtube-lyte|universal-star-rating|genesis-simple-share|penci-bookmark-follow|penci-mobile-templates|cyberseo|lbg-audio8-html5-radio_ads|lbg-audio14-html5-breeze|wp_nativeflashradio3|zonapagos|wpbrutalai|autocommentai)/','/(?i)^(?:\\/(?:win|boot)\\.ini|[^?]*(?:c:[\\/\\\\])?windows[\\/\\\\]win\\.ini|[^?]*c:[\\/\\\\]boot\\.ini)(?:\\/)?(?:[?#]|$)/','/(?i)(?:[\\x22\\x27`)*+\\/-]|\\b(?:and|or)\\b)[ \\t\\r\\n(]{0,12}(?:select[ \\t\\r\\n]+(?:case[ \\t\\r\\n]+when[\\s\\S]{1,160}\\bthen[ \\t\\r\\n]+(?:sleep|pg_sleep|benchmark)\\s*\\(|if\\s*\\([\\s\\S]{1,160},[ \\t\\r\\n]*(?:sleep|pg_sleep|benchmark)\\s*\\()|select[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]+from[ \\t\\r\\n]+\\([\\s\\S]{0,80}(?:sleep|pg_sleep|benchmark)\\s*\\()/','/(?i)\\b(?:and|or)\\b[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]*=/','/(?i)(?:[\\x22\\x27`)]|\\d)[ \\t\\r\\n]*\\b(?:and|or)\\b[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]*=[ \\t\\r\\n]*\\d{1,10}/','/(?i)\\(\\s*select\\b/','/(?i)\\(\\s*select\\b[\\s\\S]{0,200}(?:0x[0-9a-f]{6,}|\\b(?:concat|elt)\\s*\\()/','/(?i)(?:etc[\\/\\\\]{1,8}(?:[a-z0-9._-]{1,40}[\\/\\\\]{1,8}){0,4}(?:[a-z0-9._-]{1,20}_)?(?:passwd|shadow)\\b|file:\\/\\/\\/)/','/proc/self/','/(?i)(union[\\s\\/*()]+(all[\\s\\/*()]+)?select|\\binsert\\s+into\\b|\\bdrop\\s+(table|database)\\b|\\bdelete\\s+from\\b|\\b(sleep|benchmark|pg_sleep|extractvalue|updatexml|load_file|group_concat|elt)\\s*\\(|\\bwaitfor\\s+delay\\b|\\bexec(ute)?\\s+(immediate|sp_|xp_)|\\bcreate\\s+user\\b|\\bgrant\\s+(all|select|connect|resource|usage|execute)\\b|\\bdeclare\\s+@\\w+\\s+(n?varchar|n?char|int|table|cursor)|\\bhaving\\s+\\d+\\s*=\\s*\\d+|\\bgroup\\s+by\\s+[\\w.]+\\s+having\\b|\\bprocedure\\s+analyse\\b|information_schema|@@(version|hostname|datadir|basedir|global)|\\bxp_cmdshell\\b|utl_http\\.request|utl_inaddr|into\\s+(outfile|dumpfile))/','/(?i)([\\x22\\x27`]\\s*(--\\s|--$|#\\s|#$)|[\\w)][\\x22\\x27`]\\s*\\/\\*|\\/\\*![0-9]*|;\\s*(select|insert|update|delete|drop|exec|declare|union|alter|create|truncate)\\b|\\bselect\\b[\\s\\S]{0,60}?\\bfrom\\b|[\\s,(=]0x[0-9a-f]{8,}(?!\\))|\\border\\s+by\\s+\\d+\\s*(--|#)|\\bsql(vuln|map|attempt))/','/<(?:script|%3Cscript|%73%63%72%69%70%74|\\bscr\\x00ipt)\\b[^>]*?(?:>|%3E)/','/(?i)drop\\s+table\\s*/','/(?i)(?:^|[\\/=])(archive|backups?|db|database|dump|sqldump|master|sql|site|web|www|wwwroot|public_?html|htdocs|wordpress|joomla|magento)\\.(zip|gz|tgz|tar|rar|7z|sql|bak|bz2)\\b/','/(?:ActiveXObject|XMLHttpRequest|xhr\\s*=|r\\s*=\\s*new\\s*XMLHttpRequest)/','/(?i)\\b\\(?[\\"\']*(?:assert(?:_options)?|c(?:hr|reate_function)|e(?:val|x(?:ec|p))|file(?:group)?|glob|i(?:mage(?:gif|(?:jpe|pn)g|wbmp|xbm)|s_a)|md5|o(?:pendir|rd)|p(?:assthru|open|rev)|(?:read|tmp)file|un(?:pac|lin)k|s(?:tat|ubstr|ystem))(?:\\/(?:\\*.*\\*\\/|\\/.*)|#.*|[\\s\\x0b\\"])*[\\"\']*\\)?[\\s\\x0b]*\\(.*\\)/','/(?i)[\\s\\x0b\\(\\)]case[\\s\\x0b]+when.*?then|\\)[\\s\\x0b]*?like[\\s\\x0b]*?\\(|select.*?having[\\s\\x0b]*?[^\\s\\x0b]+[\\s\\x0b]*?[^\\s\\x0b0-9A-Z_a-z]|if[\\s\\x0b]?\\([0-9A-Z_a-z]+[\\s\\x0b]*?[<->~]/','/(?i)(\\{\\{.*?\\}\\}|\\{\\{\\{.*?\\}\\}\\}|#\\{.*?\\}|\\$\\{.*?\\}|<%=\\s*.*?%>|\\{\\{=.*?\\}\\}|\\{\\^.*?\\}.*?\\{\\/.*?\\}|\\[\\[\\$\\{.*?\\}\\]\\])/','bash -c ','update_server_ajax_impact','/(\\$where\\b|\\$ne\\b|\\$gte?\\b|\\$lte?\\b|\\$nin\\b|\\$regex\\b|\\$elemMatch\\b|\\$mod\\b|\\$or\\b|\\$comment\\b|\\.mapReduce\\s*\\(|db\\.\\w+\\.(insert|find|update|remove|drop|mapReduce)\\s*\\(|this\\.(password|passwordzz))/','/(?i:)\\.(p(h(pt?|t(ml?)?|ar)[0-9]?|l|y)|(j|a)sp|aspx|sh|shtml|html?|cgi|htaccess|user\\.ini)($|\\.)/','/(?i:\\|\\|\\s*utl_http\\.request\\s*\\()/','/(?i)(]{0,200}(\\[|system|public)|]*?(?:"|\')?/',array('save_builder','elementor_ajax','supercheckout','lw-up','wp-json'),'/(?i)(\\b(wso|r57|r99|c99|c100|b374k|alfashell|alfa[-_](team|shell)|indoxploit|hmei7|hax0r|haxor|sh3ll|priv8|r00t|r3vn330|madspot|marijuana|gel4y|foxwso|sidewso|sym403|sym404|bkv74|lock360|leafmailer|filesman|wpbackdoor|0byte|mini[-_]?shell|webshell|backdoor|reverse[-_]?shell|raiz0|sux0r|deathshop|deadcode|indosec)\\b[\\w.-]{0,24}\\.(?:php\\d?|phtml|phar|pht|asp|aspx|jsp|jspx|cgi|pl|py|shtml)|\\/(admin-?upload|file-?upload|uploadify|upload_?file|backdoor|wso|c99|c100|b374k|webshell|r57|r99)[\\w-]{0,12}\\.php|eval-stdin\\.php|\\/(mobiquo|tapatalk)\\/[\\w\\/-]{0,40}\\.php)/','/(?i)\\[?\\$(?:n(?:e|in?|o[rt])|e(?:q|xists|lemMatch)|l(?:te?|ike)|mod|a(?:ll|nd)|(?:s(?:iz|lic)|wher)e|t(?:ype|ext)|x?or|div|between|regex|jsonSchema)\\]?/','/(?i)(%3c\\s*(%2f)?\\s*script(?![\\w%+]{0,40}application)|&#x?0*(3c|3e|60|62);?|\\\\(?:u003c|x3c)\\s*\\/?\\s*(?:script|img|svg|iframe|object|embed|details|video|audio|marquee|body|form|input|style|base|math|link)|<\\s*\\/?\\s*script|:|(|&newline;|&tab;|fromcharcode|\\.outerhtml)/','/(?i)(?:^|[^A-Za-z0-9])(?:\\.\\.[\\/\\\\]|[\\/\\\\]\\.\\.)(?:[\\w.%\\/\\\\-]{0,80})/','/(?i)union.*?select/','/((@copy|\\$_(files|get|post)|allow_url_(fopen|include)|auto_prepend_file|blexbot|browsersploit|call_user_func_array|(php|web)shell|curl(_exec|test)|disable_functions?|document_root))/','/(?i)(?:\\{\\{=?|\\$\\{|#\\{|<%=?|\\{%|\\[\\[\\$\\{)[^}%>]{0,200}?(?:\\d{1,7}\\s*[-+*\\/%]\\s*\\d{1,7}|process|mainmodule|require|constructor|child_process|popen|subprocess|\\bexec\\b|\\beval\\b|\\bsystem\\b|runtime|getruntime|processbuilder|getclass|forname|\\.class\\b|__\\w{2,20}__|java\\.|javax\\.|lang\\.|\\bos\\.|commands\\.|self\\.env|_self\\.|registerundefined|getfilter|freemarker|scriptengine|nashorn|groovy|lipsum|cycler)[^}%>]{0,200}?(?:%[}>]|\\})/','/(<\\!\\[CDATA\\[\\s*(?:<|>)*\\s*(?:SCRIPT|script)\\s*(?:>|\\]\\]>)|(?:alert\\(|javascript:))/',array('uip-framed-page','javascript:date'),'/(?i:load_file\\s*\\(\\s*char\\s*\\()/',array('oembed/','nocache'),'w, https://','/[?&](url|goto)=https?:/','/((s)?(ftp|http|inurl|php)(s)?(:(\\/|%2f|%u2215)(\\/|%2f|%u2215)))/','/((?]|\\b(alert|prompt|confirm|eval|expression|execScript|fromCharCode)\\s*\\(|srcdoc\\s*=|formaction\\s*=)/','/(?i)(?:\\/\\/|%2f%2f|@|%40|[=&?])(localhost|127(\\.\\d{1,3}){3}|0\\.0\\.0\\.0|\\[?::1\\]?|169\\.254\\.169\\.254|metadata\\.(google|aws|azure)\\b|2130706433)(?::\\d{1,5})?(?:$|[\\/?\\#&;\\x22\\x27]|%2f)/','/]*?(?:src\\s*=\\s*(?:"|\')?(?:javascript|http|%3C|%22|\\b404\\b)[^>]*?(?:>|%3E|>))/','