@abtnode/router-provider 1.16.46-beta-20250703-024219-4029ee97 → 1.16.46-beta-20250703-050038-4ba2582f

package/lib/nginx/includes/security/crs4/rules/lfi-os-files.data

@@ -31,18 +31,29 @@
 .cshrc
 .cups/
 .dbus/
-.docker
+.deployment-secrets.txt
+.docker/
 .drush/
-.env
+# .env
+.envrc
 .eslintignore
 .fbcindex
 .forward
 .gem/
+.git/
 .gitattributes
 .gitconfig
-.gnonme/
+.gitignore
+.gitkeep
+.gitmodules
+.gnome/
+.gnome2/
+.gnomerc/
 .gnupg/
+.google_authenticator
 .gsutil/
+.hg/
+.hgignore
 .hplip/hplip.conf
 .htaccess
 .htdigest
@@ -64,6 +75,7 @@
 .netrc
 .node_repl_history
 .npm/
+.npmrc
 .nsconfig
 .nsr
 .nvm/
@@ -82,22 +94,33 @@
 .rediscli_history
 .rhistory
 .rhosts
+.selected_editor
 .sh_history
 .sqlite_history
+.snap/
 .ssh/
 .subversion/
+.svn/
+.svnignore
 .tconn/
 .tcshrc
+.tmux.conf
 .thunderbird/
 .tor/
+.travis.yaml
+.travis.yml
+.vagrant.d/
 .vidalia/
 .vim/
 .viminfo
 .vimrc
+.vscode
 .vmware/
 .www_acl
 .wwwacl
 .xauthority
+.yarnrc
+.zshenv
 .zhistory
 .zsh_history
 .zshrc
@@ -106,6 +129,203 @@
 /php.ini
 /tmp/
 
+# Generic config filenames and common permutations
+config.asp
+config_dev.asp
+config-dev.asp
+config.dev.asp
+config_prod.asp
+config-prod.asp
+config.prod.asp
+config.sample.asp
+config-sample.asp
+config_sample.asp
+config_test.asp
+config-test.asp
+config.test.asp
+config.ini
+config_dev.ini
+config-dev.ini
+config.dev.ini
+config_prod.ini
+config-prod.ini
+config.prod.ini
+config.sample.ini
+config-sample.ini
+config_sample.ini
+config_test.ini
+config-test.ini
+config.test.ini
+config.json
+config_dev.json
+config-dev.json
+config.dev.json
+config_prod.json
+config-prod.json
+config.prod.json
+config.sample.json
+config-sample.json
+config_sample.json
+config_test.json
+config-test.json
+config.test.json
+config.php
+config_dev.php
+config-dev.php
+config.dev.php
+config_prod.php
+config-prod.php
+config.prod.php
+config.sample.php
+config-sample.php
+config_sample.php
+config_test.php
+config-test.php
+config.test.php
+config.pl
+config_dev.pl
+config-dev.pl
+config.dev.pl
+config_prod.pl
+config-prod.pl
+config.prod.pl
+config.sample.pl
+config-sample.pl
+config_sample.pl
+config_test.pl
+config-test.pl
+config.test.pl
+config.py
+config_dev.py
+config-dev.py
+config.dev.py
+config_prod.py
+config-prod.py
+config.prod.py
+config.sample.py
+config-sample.py
+config_sample.py
+config_test.py
+config-test.py
+config.test.py
+config.rb
+config_dev.rb
+config-dev.rb
+config.dev.rb
+config_prod.rb
+config-prod.rb
+config.prod.rb
+config.sample.rb
+config-sample.rb
+config_sample.rb
+config_test.rb
+config-test.rb
+config.test.rb
+config.toml
+config_dev.toml
+config-dev.toml
+config.dev.toml
+config_prod.toml
+config-prod.toml
+config.prod.toml
+config.sample.toml
+config-sample.toml
+config_sample.toml
+config_test.toml
+config-test.toml
+config.test.toml
+config.txt
+config_dev.txt
+config-dev.txt
+config.dev.txt
+config_prod.txt
+config-prod.txt
+config.prod.txt
+config.sample.txt
+config-sample.txt
+config_sample.txt
+config_test.txt
+config-test.txt
+config.test.txt
+config.xml
+config_dev.xml
+config-dev.xml
+config.dev.xml
+config_prod.xml
+config-prod.xml
+config.prod.xml
+config.sample.xml
+config-sample.xml
+config_sample.xml
+config_test.xml
+config-test.xml
+config.test.xml
+config.yaml
+config_dev.yaml
+config-dev.yaml
+config.dev.yaml
+config_prod.yaml
+config-prod.yaml
+config.prod.yaml
+config.sample.yaml
+config-sample.yaml
+config_sample.yaml
+config_test.yaml
+config-test.yaml
+config.test.yaml
+config.yml
+config_dev.yml
+config-dev.yml
+config.dev.yml
+config_prod.yml
+config-prod.yml
+config.prod.yml
+config.sample.yml
+config-sample.yml
+config_sample.yml
+config_test.yml
+config-test.yml
+config.test.yml
+# Compressed database dumps
+.sql.001
+.sql.7z
+.sql.bz
+.sql.ace
+.sql.arj
+.sql.cpio
+.sql.gz
+.sql.lha
+.sql.lz
+.sql.pa
+.sql.pea
+.sql.r00
+.sql.r01
+.sql.r02
+.sql.r03
+.sql.r04
+.sql.r05
+.sql.r06
+.sql.r07
+.sql.r08
+.sql.r09
+.sql.rar
+.sql.rev
+.sql.tar
+.sql.taz
+.sql.tbz
+.sql.tgz
+.sql.txz
+.sql.uha
+.sql.xz
+.sql.yz1
+.sql.z
+# CVE-2023-49103
+phpinfo.php
+# AWS cli
+aws.yaml
+aws.yml
+aws-key.yaml
+aws-key.yml
 # Apache httpd entries can be generated with the following command:
 # curl -s https://raw.githubusercontent.com/lightos/Panoptic/master/cases.xml | grep "file value" | cut -d'"' -f2 | awk -F/ '{ { if (length($NF) > 0) {v1 = NF-1; v2 = NF} else {v1 = NF-2; v2 = NF-1} print tolower($v1"/"$v2) }) }' | grep apache | sort | uniq
 apache/access.conf
@@ -141,18 +361,15 @@ app/etc/local.xml
 boot.ini
 boot/grub/grub.cfg
 boot/grub/menu.lst
-config_dev.yml
-config_prod.yml
 config.sample.php
-config_test.yml
 config.inc.php
-config.php
-config.yml
 config/app.php
 config/custom.php
 config/database.php
 configuration.php
 cpanel/logs
+database.yaml
+database.yml
 data/elasticsearch
 data/kafka
 defaults.inc.php
@@ -471,8 +688,6 @@ gruntfile.js
 home/postgres
 http/httpd.conf
 httpd/conf/httpd.conf
-inc/config.php
-includes/config.php
 includes/configure.php
 inetpub/wwwroot/global.asa
 jakarta/dist/tomcat
@@ -509,7 +724,6 @@ opt/lampp
 opt/nuxeo
 opt/tomcat
 opt/xampp
-ormconfig.json
 package-lock.json
 package.json
 parameters.yml
@@ -614,11 +828,9 @@ server/default/conf
 server/default/deploy
 server/default/log
 services.yml
-sftp-config.json
 sites/default/default.settings.php
 sites/default/settings.local.php
 sites/default/settings.php
-squirrelmail/config/config.php
 squirrelmail/www
 sys/block
 sys/bus
@@ -636,7 +848,6 @@ system32/config
 system32/inetsrv/config
 tmp/access.log
 tmp/kafka-logs
-tsconfig.json
 typo3conf/localconf.php
 usr/etc/pure-ftpd.conf
 usr/home/user/lighttpd
@@ -651,7 +862,6 @@ usr/ports/contrib/pure-ftpd
 usr/ports/ftp/pure-ftpd
 usr/sbin/mudlogd
 usr/sbin/mudpasswd
-usr/sbin/pure-config.pl
 usr/share/adduser
 usr/share/logs
 usr/share/squirrelmail
@@ -709,6 +919,8 @@ windows/wmsetup.log
 winnt/repair
 winnt/system32/logfiles
 wp-config.
+wp-config-
+wp-config_
 www/conf/httpd.conf
 www/logs
 xampp/apache/logs

package/lib/nginx/includes/security/crs4/rules/php-function-names-933150.data

@@ -41,8 +41,6 @@ fclose
 file_exists
 file_get_contents
 finfo_open
-fopen
-fputs
 fsockopen
 ftp_connect
 ftp_get
@@ -125,7 +123,6 @@ mb_eregi_replace
 mb_parse_str
 md5_file
 method_exists
-mkdir
 move_uploaded_file
 mysql_query
 number_format
@@ -171,7 +168,6 @@ preg_replace_callback
 preg_replace_callback_array
 preg_split
 print_r
-printf
 proc_close
 proc_get_status
 proc_nice
@@ -186,7 +182,6 @@ readgzfile
 register_shutdown_function
 register_tick_function
 rename_function
-rtrim
 runkit_constant_add
 runkit_constant_redefine
 runkit_function_add
@@ -225,7 +220,6 @@ sqlite_unbuffered_query
 str_replace
 stream_context_create
 stream_socket_client
-strip_tags
 stripcslashes
 stripslashes
 strlen
@@ -240,6 +234,5 @@ uksort
 unserialize
 urldecode
 urlencode
-usort
 var_dump
 zlib_decode