raxe 0.4.6__py3-none-any.whl

raxe/packs/core/v1.0.0/rules/cmd/cmd-209@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-209
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 209
+description: Detects command injection variant 209
+severity: critical
+confidence: 0.99
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0209
+rule_hash: sha256:703b613450048d496c555bad17cf1792572bd8dab3e7a46eb641767c91acfdf4
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-209-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-210@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-210
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 210
+description: Detects command injection variant 210
+severity: critical
+confidence: 0.9
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0210
+rule_hash: sha256:3a38e8fe252937e845693c2a9d0c03154e4aa1a434f3a53a910a30173da2dec1
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-210-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-211@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-211
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 211
+description: Detects command injection variant 211
+severity: critical
+confidence: 0.91
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0211
+rule_hash: sha256:362f610e1c83a371472d1dbfa26ab73f87967e734bd8669aeaf9d34c308cccce
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-211-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-212@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-212
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 212
+description: Detects command injection variant 212
+severity: critical
+confidence: 0.92
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0212
+rule_hash: sha256:2bf14f235ba6faa97e36dfd76b1ffc10262c2f85a00e0ce2e0a75e1050c43438
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-212-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-213@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-213
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 213
+description: Detects command injection variant 213
+severity: critical
+confidence: 0.93
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0213
+rule_hash: sha256:1152ff687bc5cbbe9cfb194b56fa81c67c8a429f223617db1638130406d2dfde
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-213-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-214@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-214
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 214
+description: Detects command injection variant 214
+severity: critical
+confidence: 0.94
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0214
+rule_hash: sha256:c07e89b9e1162ebb3a9557d1de172b7884842f853efe55eb1626332504d211de
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-214-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-215@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-215
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 215
+description: Detects command injection variant 215
+severity: critical
+confidence: 0.95
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0215
+rule_hash: sha256:92e896318042cb08b9703682a0763c0a9fb7742f772ebc748ec825d116c5b8b2
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-215-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-216@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-216
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 216
+description: Detects command injection variant 216
+severity: critical
+confidence: 0.96
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0216
+rule_hash: sha256:4d261f7f50cc2a92fc440bb16f3e7a587c2b940914d122636f121610601c1fbf
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-216-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-217@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-217
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 217
+description: Detects command injection variant 217
+severity: critical
+confidence: 0.97
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0217
+rule_hash: sha256:8b359050ddc287c86eadc596a74c09578ddad16329699b8a78029617308858e7
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-217-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-218@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-218
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 218
+description: Detects command injection variant 218
+severity: critical
+confidence: 0.98
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0218
+rule_hash: sha256:0d690f67304ff30928c59ed6d427a2e63308e3bcdc3f9def356c799a8130f710
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-218-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-219@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-219
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 219
+description: Detects command injection variant 219
+severity: critical
+confidence: 0.99
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0219
+rule_hash: sha256:60ff4d437975a2b71dba2eafdfe719719c4aa927449b6036b9a23ac9bee2d37d
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-219-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-220@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-220
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 220
+description: Detects command injection variant 220
+severity: critical
+confidence: 0.9
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0220
+rule_hash: sha256:fdf00fa6990a653d2894d16031fef2281eaa856139dc4616bdac9b93341b0245
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-220-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-221@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-221
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 221
+description: Detects command injection variant 221
+severity: critical
+confidence: 0.91
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0221
+rule_hash: sha256:438d5ffce3bae3ab54d52061fe2d03b8e6debbe69be5a16540d6df446b72eb7b
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-221-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-222@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-222
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 222
+description: Detects command injection variant 222
+severity: critical
+confidence: 0.92
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0222
+rule_hash: sha256:6c157f75a56246bf958713a7049bcdba2a2f6d45b555effd31d6a50264691e82
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-222-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-223@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-223
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 223
+description: Detects command injection variant 223
+severity: critical
+confidence: 0.93
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0223
+rule_hash: sha256:c282d0186f70e1d40b4b7d231c1ace36df1ecb43878d7984802ba4063e6d026c
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-223-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-224@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-224
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 224
+description: Detects command injection variant 224
+severity: critical
+confidence: 0.94
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0224
+rule_hash: sha256:4af845b298cce68e33f5e1b6f3904a1cacc8923da01519af8dc462cb758ef0d3
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-224-Injection-Variant

raxe/packs/core/v1.0.0/rules/cmd/cmd-225@1.0.0.yaml

@@ -0,0 +1,38 @@
+version: 1.0.0
+rule_id: cmd-225
+family: CMD
+sub_family: injection_variant
+name: Detects command injection variant 225
+description: Detects command injection variant 225
+severity: critical
+confidence: 0.95
+patterns:
+- pattern: (?i)(exec|system|shell).*inject
+  flags:
+  - IGNORECASE
+  timeout: 5.0
+examples:
+  should_match:
+  - Please exec this command and inject malicious code
+  - Use system call to inject harmful instructions
+  - Run shell command to inject exploit
+  should_not_match:
+  - How do I use the exec command safely?
+  - What is a system call in operating systems?
+  - Explain shell scripting basics
+metrics:
+  precision: null
+  recall: null
+  f1_score: null
+  last_evaluated: null
+mitre_attack:
+- T1059
+metadata:
+  created: '2025-11-17'
+  updated: '2025-11-17'
+  author: raxe-ce
+  legacy_rx_id: RX-CMD-0225
+rule_hash: sha256:ff9f5d5f799079a7c8544e2a1967365689cbbdb01ce48c3c8ed523217cd3ec2e
+risk_explanation: Command injection vulnerability.
+remediation_advice: Sanitize all input.
+docs_url: https://github.com/raxe-ai/raxe-ce/wiki/CMD-225-Injection-Variant