HEX
Server: nginx/1.28.0
System: Linux w3c-2 6.8.0-78-generic #78-Ubuntu SMP PREEMPT_DYNAMIC Tue Aug 12 11:34:18 UTC 2025 x86_64
User: inpa_co_1 (1082)
PHP: 8.3.29
Disabled: NONE
Upload Files
File: //etc/modsecurity.d/owasp/regex-assembly/933210.ra
##! Please refer to the documentation at
##! https://coreruleset.org/docs/development/regex_assembly/.

##! Helpers
##!> define single_or_double_quotes ['"]
##!> define string_in_round_brackets \(.+\)

##!$ ;

##!> assemble
  ##! example payload: (system)(ls);
  {{string_in_round_brackets}}{{string_in_round_brackets}}

  ##! example payload: (sys)"tem"(ls);
  {{string_in_round_brackets}}{{single_or_double_quotes}}[a-zA-Z-_0-9]+{{single_or_double_quotes}}{{string_in_round_brackets}}

  ##! example payload: a=system&b=$_GET[0](ls);
  \[\d+\]{{string_in_round_brackets}}

  ##! example payload: {0}("ls")
  \{\d+\}{{string_in_round_brackets}}

  ##! example payload: $a("ls")
  \$[^(\),.;\x5c/]+{{string_in_round_brackets}}

  ##! example payload: "system"("ls")
  {{single_or_double_quotes}}[a-zA-Z0-9-_\x5c]+{{single_or_double_quotes}}{{string_in_round_brackets}}

  ##! example payload: (string)system("ls")
  \([^\)]*string[^\)]*\)[a-zA-Z-_0-9\"'.{}\[\]\s]+\([^\)]*\)
##!<