p-automatic|rehub-framework|translatepress-multilingual|truepush-free-web-push-notifications|pagelayer|ajax-search-for-woocommerce-premium|burst-statistics|ssl-test-page|burst-pro|iframe-font-preview|translatepress-developer|pdfjs-viewer-shortcode|translatepress-business|gtranslate|pdf_download|envato-market|translatepress-business|wpdiscuz|global-gallery|correosoficial|bridge\\/(?:css\\/style_dynamic|js\\/default_dynamic)|listingpro\\/assets\\/css\\/dynamic-css|photocrati-pro\\/styles\\/dynamic-style|wpresidence\\/ajax_handler|escortwp\\/ajax\\/get-cities|eatery\\/nav\\.php|twentytwenty\\/404\\.php|twentytwentythree\\/patterns\\/hidden-404\\.php|twentytwentyfour\\/patterns\\/posts-images-only-3-col\\.php|sketch\\/404\\.php|total\\/inc\\/customizer\\/custom-controls\\/selector-control\\.php|wp-content\\/themes\\/index\\.php)/','/(?i)\\/wp-admin\\/(?:theme-editor|admin-ajax)\\.php/','/wp/v2/templates/',10000,'wordpress',array('json','jpg','jpeg','png','gif','bmp','tiff','ico','webp','pdf','svg','ico','webp','csv'),'com_installer','install','/marketplace\\/installer\\/(?:install|unzip|xml|remove|move)/',array('/.aider.model.settings.yml','/.appveyor.yml','/.aws/.secrets.yaml','/.azure-pipelines.yml','/.build.sh','/.buildkite/pipeline.yml','/.circleci/configs/development.yml','/.codeship.yaml','/.codeship.yml','/.config/aws-keys.yaml','/.config/aws_config.yaml','/.config/aws_config.yml','/.config/gh/hosts.yml','/.coveralls.yml','/.dbt/profiles.yml','/.dev.vars.production','/.directus.yml','/.drone.yaml','/.drone.yml','/.gitlab-ci.yaml','/.gitlab-ci/variables.yml','/.htaccess.save','/.jenkins.sh','/.kube/.sops.yaml','/.kube/argo-cd.yaml','/.kube/argocd-cm.yaml','/.kube/bootstrap.yaml','/.kube/flux-system.yaml','/.kube/helmfile.yml','/.kube/repositories.yaml','/.kube/sops.yaml','/.kubernetes/.sops.yaml','/.kubernetes/argo-cd.yaml','/.kubernetes/argocd-cm.yaml','/.kubernetes/bootstrap.yaml','/.kubernetes/flux-system.yaml','/.kubernetes/helmfile.yml','/.kubernetes/sops.yaml','/.production','/.remote','/.semaphore/semaphore.yml','/.svn','/.tmb','/.travis.sh','/.travis.yml','/.well-known.rar','/.well-known.tar','/.well-known.tar.xz','/.woodpecker.yml','/.yarnrc.yml','/0.tgz','/1.rar','/1.sql','/1.tar','/1.tgz','/123.rar','/123.tar','/123.tgz','/2.rar','/2.sql','/2019.rar','/2019.sql','/2020.rar','/2020.sql','/2021.rar','/2021.sql','/2022.rar','/2022.sql','/2022.tar','/2022.tgz','/2023.rar','/2023.sql','/2023.tar','/2023.tgz','/2024.rar','/2024.sql','/2024.tar','/2025.rar','/2025.sql','/2025.tar','/2026.rar','/2026.tar','/_profiler/open','/_vti_pvt/service.pwd','/a.rar','/a.tar','/admin.rar','/admin.sql','/admin.tar','/admin.tgz','/alicloud.yaml','/alicloud.yml','/aliyun.yaml','/aliyun.yml','/aliyun_config.yaml','/aliyun_config.yml','/amplify.yml','/ansible/vars.yml','/api.rar','/api.sql','/api.tar','/api.tar.xz','/api.tgz','/app.rar','/app.sql','/app.tar','/app.tar.xz','/app.tgz','/app/amplify.yaml','/app/config/config_prod.yml','/application-dev.yml','/application-local.yml','/application-prod.yml','/application-production.yml','/application-staging.yml','/application-test.yml','/application.rar','/application.sql','/application.tar','/application.tar.xz','/application.tgz','/application.yaml','/appspec.yaml','/appspec.yml','/appveyor.yml','/archives.rar','/archives.sql','/archives.tar','/archives.tar.xz','/archives.tgz','/artifact.rar','/artifact.sql','/artifact.tar','/artifact.tar.xz','/artifact.tgz','/artifacts.rar','/artifacts.sql','/artifacts.tar','/artifacts.tar.xz','/artifacts.tgz','/aspnet.tar.xz','/asset.rar','/assets.tar.xz','/attachments.tar.xz','/auth.yaml','/auth.yml','/aws.yaml','/aws/.keys.yaml','/azure-pipelines-prod.yml','/back.rar','/backend.rar','/backend.sql','/backend.tar','/backend.tar.xz','/backend.tgz','/backend/config/default.yml','/backend/config/development.yml','/backup.sh','/backup_1.tar','/backup_2.tar','/backup_3.tar','/backup_4.tar','/backup_db.tar.xz','/backup_full.rar','/backup_full.sql','/backup_full.tar','/backup_full.tgz','/backupwp.rar','/bak.rar','/bak.sql','/bak.tar','/bak.tar.xz','/bak.tgz','/bin.tar','/bitbucket-pipelines.yml','/bkp.rar','/bkp.sql','/bkp.tar','/bkp.tar.xz','/bkp.tgz','/blog.rar','/blog.tar','/bootstrap-dev.yml','/bootstrap-prod.yml','/borgmatic.yaml','/brownie-config.yaml','/build.rar','/build.sql','/build.tar','/build.tar.xz','/build.tgz','/buildspec-prod.yml','/buildspec.yml','/bundle.rar','/bundle.sql','/bundle.tar','/bundle.tar.xz','/bundle.tgz','/cdn.tar.xz','/celeryconfig.py','/cgi-bin-hax/ExportSettings.sh','/cgi-bin.tar','/cgi-bin/ExportAllSettings.sh','/cgi-bin/ExportLogs.sh','/cgi-bin/ExportSettings.sh','/circle.yml','/client.sql','/client.tar','/client.tar.xz','/client.tgz','/cloud-config.yml','/cloudbuild.yaml','/code.rar','/code.sql','/code.tar','/code.tar.xz','/code.tgz','/codebase.rar','/codebase.sql','/codebase.tar','/codebase.tar.xz','/codebase.tgz','/codefresh.yml','/codemagic.yaml','/com.rar','/com.tar','/com.tgz','/compose.yaml','/compose.yml','/conf.tar.xz','/conf.yaml','/config.rar','/config.sql','/config.tar','/config.tar.xz','/config.tgz','/config/aws-smtp-config.yaml','/config/aws-smtp-config.yml','/config/aws-smtp-keys.yaml','/config/aws-smtp-keys.yml','/config/cable.yml','/config/local.yml','/config/mailer.yaml','/config/packages/dev/web_profiler.yaml','/config/packages/mailer.yaml','/config/packages/prod/doctrine.yaml','/config/packages/prod/security.yaml','/config/packages/security.yaml','/config/packages/swiftmailer.yaml','/config/redis.yml','/config/services.yaml','/config/settings.local.yml','/config/settings/development.yml','/config/settings/production.yml','/configmap.yaml','/configs.tar.xz','/configuration.tar.xz','/configuration.yml','/constants.yml','/constraints.sql','/content.tar.xz','/core-cloud-config.yml','/cos.yml','/create.sql','/credentials.py','/credentials.tar.xz','/credentials.yaml','/creds.tar.xz','/current.rar','/current.sql','/current.tar','/current.tar.xz','/current.tgz','/data.rar','/data.sql','/data.tar','/data.tar.xz','/data.tgz','/data_export.tar.xz','/database.yaml','/database/schema/mysql-schema.sql','/database_backup.sql','/datadog.yaml','/dataset.tar.xz','/db.yaml','/db.yml','/db1.sql','/db_backup.sql','/db_backup.tar.xz','/db_dump.sql','/db_dump.tar.xz','/db_export.tar.xz','/dbdump.sql','/deploy.rar','/deploy.sql','/deploy.tar','/deploy.tar.xz','/deploy.tgz','/deployment.rar','/deployment.sql','/deployment.tar','/deployment.tar.xz','/deployment.tgz','/dev.tar','/dev.tar.xz','/develop.tar.xz','/dist.rar','/dist.sql','/dist.tar','/dist.tar.xz','/dist.tgz','/docker-cloud.yml','/docker-compose-dev.yml','/docker-compose.base.yml','/docker-compose.dev.yml','/docker-compose.local.yml','/docker-compose.override.yaml','/docker-compose.override.yml','/docker-compose.prod.yaml','/docker-compose.prod.yml','/docker-compose.production.yml','/docker-compose.staging.yml','/docker-compose.test.yml','/Dockerfile.production','/docroot.tar.xz','/docs.tar.xz','/documents.tar.xz','/doppler.yaml','/dotenv.tar.xz','/drone.yml','/drupal.tar.xz','/dump.sh','/elasticdump.tar.xz','/env.production','/env.save','/env.sh','/env.tar.xz','/environment.tar.xz','/envoy.yaml','/export.rar','/export.sql','/export.tar.xz','/exports.tar.xz','/express.tar.xz','/files.tar.xz','/flashfxp.rar','/frontend.rar','/frontend.sql','/frontend.tar','/frontend.tar.xz','/frontend.tgz','/ftp.tar','/full.rar','/full.sql','/full_backup.rar','/full_backup.tar','/full_backup.tar.xz','/full_backup.tgz','/fullbackup.tar','/gitlab-ci.yml','/group_vars/all.yml','/group_vars/production.yml','/gunicorn.conf.py','/hacsfiles/../../configuration.yaml','/helm/sendgrid-values.yaml','/helm/values-sendgrid.yaml','/helmfile.yaml','/heroku.yml','/home.rar','/home.tar','/host_vars/localhost.yml','/html.rar','/html.tar','/html.tar.xz','/html.tgz','/httpdocs.rar','/httpdocs.tar','/httpdocs.tar.xz','/httpdocs.tgz','/httpsdocs.tar.xz','/huawei.yml','/huaweicloud.yml','/images.tar.xz','/img.tar.xz','/import.sql','/import.tar.xz','/imports.tar.xz','/inc/data/database.sdb','/insomnia.yaml','/install/froxlor.sql','/inventory/production.yml','/inventory/production/hosts.yml','/istio.yaml','/k8s-config.yml','/k8s.yaml','/k8s.yml','/k8s/sendgrid-secret.yaml','/keys.tar.xz','/kibana.yml','/kong.yml','/kubeconfig.yaml','/kubectl.yaml','/kubernetes.yaml','/kubernetes.yml','/kubernetes/sendgrid-configmap.yaml','/kubernetes/sendgrid-secret.yaml','/kubesec.yml','/kustomization.yaml','/kustomization.yml','/latest.sql','/litellm_config.yaml','/local.py','/local.tar.xz','/localhost.sql','/mail.tar','/mail.yaml','/mail.yml','/mailgun.yml','/media.tar.xz','/microservice.tar.xz','/mongo_dump.tar.xz','/mongodb.tar.xz','/mongodump.tar.xz','/mysql.initial.sql','/mysql.sql','/mysql_backup.sql','/mysqldump.sql','/mysqldump.tar.xz','/new.rar','/ngrok.yml','/obs.yml','/oidc-config.yaml','/old.rar','/old.sql','/old.tar','/old.tar.xz','/old.tgz','/oss.yaml','/oss.yml','/package.rar','/package.sql','/package.tar','/package.tar.xz','/package.tgz','/pantheon.upstream.yml','/pg_dump.sql','/pg_dump.tar.xz','/phinx.yaml','/phinx.yml','/php.tar','/php.tgz','/playbook.yml','/postgres.sql','/postgres.tar.xz','/postmark.yml','/private.tar.xz','/prod.sql','/prod.tar.xz','/prod_settings.py','/production.rar','/production.sql','/project.rar','/project.sql','/project.tar','/project.tar.xz','/project.tgz','/prometheus.yaml','/prometheus.yml','/proxy_config.yaml','/public.tar','/public.tar.xz','/public.tgz','/Pulumi.dev.yaml','/Pulumi.prod.yaml','/Pulumi.yaml','/qcloud.yaml','/qcloud.yml','/recovery.rar','/recovery.sql','/recovery.tar','/recovery.tar.xz','/recovery.tgz','/redis.tar.xz','/release.rar','/release.sql','/release.tar','/release.tar.xz','/release.tgz','/releases.rar','/releases.sql','/releases.tar','/releases.tar.xz','/releases.tgz','/render.yaml','/repo.rar','/repo.sql','/repo.tar','/repo.tar.xz','/repo.tgz','/restore.rar','/restore.sql','/restore.tar','/restore.tar.xz','/restore.tgz','/root.rar','/ROOT.tar','/s3.yaml','/s3config.yml','/sam-template.yaml','/sam.yaml','/sam.yml','/schema.sql','/secret.tar.xz','/secret.yaml','/secret.yml','/secret_key.py','/secrets.env.production','/secrets.py','/secrets.tar.xz','/secrets.yaml','/secrets/aws-keys-backup.yaml','/secrets/aws-keys-backup.yml','/secrets/aws_keys_backup.yaml','/secrets/aws_keys_backup.yml','/secrets/aws_smtp_config.yaml','/secrets/aws_smtp_config.yml','/secure/tokenization.yaml','/security.yml','/sendgrid-api.yml','/sendgrid-config.yml','/sendgrid-credentials.yml','/sendgrid-keys.yml','/sendgrid.py','/sendgrid.yaml','/sendgrid_api.yml','/sendgrid_config.py','/sendgrid_config.yml','/sendgrid_credentials.yml','/sendgrid_helper.py','/sendgrid_keys.yml','/sendgrid_secrets.yml','/sendgrid_settings.yml','/sensitive.tar.xz','/server.rar','/server.sql','/server.tar','/server.tar.xz','/server.tgz','/serverless.prod.yml','/service.rar','/service.tar.xz','/service.tgz','/service/email_service.py','/services.tar.xz','/services.tgz','/settings.local.py','/settings.tar.xz','/settings.yaml','/settings/base.py','/settings/dev.py','/settings/production.py','/settings/staging.py','/settings_local.py','/settings_production.py','/sftp-config-alt.json.save','/sftp.yaml','/site_backup.rar','/site_backup.sql','/site_backup.tar','/site_backup.tgz','/sites.rar','/sites.tar','/sites.tar.xz','/sites.tgz','/sites/default/services.yml','/skaffold.yaml','/smtp/aws-credentials.yaml','/smtp/aws-credentials.yml','/snapshot.rar','/snapshot.sql','/snapshot.tar','/snapshot.tar.xz','/snapshot.tgz','/source.rar','/source.sql','/source.tar','/source.tar.xz','/source.tgz','/sources.rar','/sources.sql','/sources.tar','/sources.tar.xz','/sources.tgz','/sql_backup.tar.xz','/src.rar','/src.sql','/src.tar','/src.tar.xz','/src.tgz','/src/main/resources/appsettings.yml','/ss_database_backup.sql','/staging.sql','/staging.tar','/staging.tar.xz','/static.tar.xz','/static/../flask_app.py','/storage.tar.xz','/storage.yml','/store.tar','/store.tar.xz','/stripe.yaml','/svelte.tar.xz','/tekton.yaml','/temp.rar','/temp.sql','/temp.tar','/tencent.yaml','/tencent.yml','/terraform.tfstate.save','/terraform.tfstate.swp','/test.rar','/test.tar','/test.tar.xz','/test.tgz','/testing.tar.xz','/tokens.tar.xz','/traefik.yml','/translate.sql','/upload.rar','/upload.tar','/upload.tar.xz','/uploads.rar','/uploads.tar','/user.rar','/user_secrets.yml','/users.sql','/values-prod.yaml','/values-production.yaml','/values-staging.yaml','/values.yml','/var/task/amplify.yaml','/vault.yaml','/vault.yml','/vendor.rar','/vendor.tar','/vhost.tar.xz','/volc.yml','/volcengine.yml','/web_backup.rar','/web_backup.sql','/web_backup.tar','/web_backup.tar.xz','/web_backup.tgz','/webapps.tar','/webbak.rar','/webroot.rar','/webroot.tar','/webroot.tar.xz','/webroot.tgz','/website.rar','/website.tar','/website.tgz','/website_backup.rar','/website_backup.sql','/website_backup.tar','/website_backup.tar.xz','/website_backup.tgz','/well-known.rar','/wp-admin.rar','/wp-admin.tar','/wp-cli.yml','/wp-content.rar','/wp-content.tar','/wp-content.tgz','/wp-includes.rar','/wp-includes.tar','/wp.rar','/wp.sql','/wp.tar','/wwroot.rar','/wwwrool.rar'),'/customize/','/\\/wp-content\\/plugins\\/[^\\.]{0,108}\\.php/','/(izooto-web-push|clean-tube-player|ane-player|grandrestaurant|google-seo-rank|matomo|wp-automatic|rehub-framework|translatepress-multilingual|truepush-free-web-push-notifications|pagelayer|ajax-search-for-woocommerce-premium|burst-statistics|ssl-test-page|burst-pro|iframe-font-preview|translatepress-developer|pdfjs-viewer-shortcode|translatepress-business|gtranslate|pdf_download|envato-market|wpdiscuz|global-gallery|correosoficial|elementor|elementor-pro|wpforms-lite|translatepress|pods|star-cloudprnt-for-woocommerce|supportboard|post-views-counter-pro|bea-post-views-counter|aawp|boldgrid-backup|ti-woocommerce-wishlist|si-captcha-for-wordpress|gravitec-net-web-push-notifications|google-site-kit|commercegurus-commercekit|motive-commerce-search|forminator|myagileprivacy|s2member|events-manager|phastpress|typehub|wp-youtube-lyte|universal-star-rating|genesis-simple-share|penci-bookmark-follow|penci-mobile-templates|cyberseo|lbg-audio8-html5-radio_ads|lbg-audio14-html5-breeze|wp_nativeflashradio3|zonapagos|wpbrutalai|autocommentai)/','/(?i)^(?:\\/(?:win|boot)\\.ini|[^?]*(?:c:[\\/\\\\])?windows[\\/\\\\]win\\.ini|[^?]*c:[\\/\\\\]boot\\.ini)(?:\\/)?(?:[?#]|$)/','/(?i)(?:[\\x22\\x27`)*+\\/-]|\\b(?:and|or)\\b)[ \\t\\r\\n(]{0,12}(?:select[ \\t\\r\\n]+(?:case[ \\t\\r\\n]+when[\\s\\S]{1,160}\\bthen[ \\t\\r\\n]+(?:sleep|pg_sleep|benchmark)\\s*\\(|if\\s*\\([\\s\\S]{1,160},[ \\t\\r\\n]*(?:sleep|pg_sleep|benchmark)\\s*\\()|select[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]+from[ \\t\\r\\n]+\\([\\s\\S]{0,80}(?:sleep|pg_sleep|benchmark)\\s*\\()/','/(?i)\\b(?:and|or)\\b[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]*=/','/(?i)(?:[\\x22\\x27`)]|\\d)[ \\t\\r\\n]*\\b(?:and|or)\\b[ \\t\\r\\n]+\\d{1,10}[ \\t\\r\\n]*=[ \\t\\r\\n]*\\d{1,10}/','/(?i)\\(\\s*select\\b/','/(?i)\\(\\s*select\\b[\\s\\S]{0,200}(?:0x[0-9a-f]{6,}|\\b(?:concat|elt)\\s*\\()/','/(?i)(?:etc[\\/\\\\]{1,8}(?:[a-z0-9._-]{1,40}[\\/\\\\]{1,8}){0,4}(?:[a-z0-9._-]{1,20}_)?(?:passwd|shadow)\\b|file:\\/\\/\\/)/','/proc/self/','/(?i)(union[\\s\\/*()]+(all[\\s\\/*()]+)?select|\\binsert\\s+into\\b|\\bdrop\\s+(table|database)\\b|\\bdelete\\s+from\\b|\\b(sleep|benchmark|pg_sleep|extractvalue|updatexml|load_file|group_concat|elt)\\s*\\(|\\bwaitfor\\s+delay\\b|\\bexec(ute)?\\s+(immediate|sp_|xp_)|\\bcreate\\s+user\\b|\\bgrant\\s+(all|select|connect|resource|usage|execute)\\b|\\bdeclare\\s+@\\w+\\s+(n?varchar|n?char|int|table|cursor)|\\bhaving\\s+\\d+\\s*=\\s*\\d+|\\bgroup\\s+by\\s+[\\w.]+\\s+having\\b|\\bprocedure\\s+analyse\\b|information_schema|@@(version|hostname|datadir|basedir|global)|\\bxp_cmdshell\\b|utl_http\\.request|utl_inaddr|into\\s+(outfile|dumpfile))/','/(?i)([\\x22\\x27`]\\s*(--\\s|--$|#\\s|#$)|[\\w)][\\x22\\x27`]\\s*\\/\\*|\\/\\*![0-9]*|;\\s*(select|insert|update|delete|drop|exec|declare|union|alter|create|truncate)\\b|\\bselect\\b[\\s\\S]{0,60}?\\bfrom\\b|[\\s,(=]0x[0-9a-f]{8,}(?!\\))|\\border\\s+by\\s+\\d+\\s*(--|#)|\\bsql(vuln|map|attempt))/','/<(?:script|%3Cscript|%73%63%72%69%70%74|\\bscr\\x00ipt)\\b[^>]*?(?:>|%3E)/','/(?i)drop\\s+table\\s*/','/(?i)(?:^|[\\/=])(archive|backups?|db|database|dump|sqldump|master|sql|site|web|www|wwwroot|public_?html|htdocs|wordpress|joomla|magento)\\.(zip|gz|tgz|tar|rar|7z|sql|bak|bz2)\\b/','/(?:ActiveXObject|XMLHttpRequest|xhr\\s*=|r\\s*=\\s*new\\s*XMLHttpRequest)/','/(?i)\\b\\(?[\\"\']*(?:assert(?:_options)?|c(?:hr|reate_function)|e(?:val|x(?:ec|p))|file(?:group)?|glob|i(?:mage(?:gif|(?:jpe|pn)g|wbmp|xbm)|s_a)|md5|o(?:pendir|rd)|p(?:assthru|open|rev)|(?:read|tmp)file|un(?:pac|lin)k|s(?:tat|ubstr|ystem))(?:\\/(?:\\*.*\\*\\/|\\/.*)|#.*|[\\s\\x0b\\"])*[\\"\']*\\)?[\\s\\x0b]*\\(.*\\)/','/(?i)[\\s\\x0b\\(\\)]case[\\s\\x0b]+when.*?then|\\)[\\s\\x0b]*?like[\\s\\x0b]*?\\(|select.*?having[\\s\\x0b]*?[^\\s\\x0b]+[\\s\\x0b]*?[^\\s\\x0b0-9A-Z_a-z]|if[\\s\\x0b]?\\([0-9A-Z_a-z]+[\\s\\x0b]*?[<->~]/','/(?i)(\\{\\{.*?\\}\\}|\\{\\{\\{.*?\\}\\}\\}|#\\{.*?\\}|\\$\\{.*?\\}|<%=\\s*.*?%>|\\{\\{=.*?\\}\\}|\\{\\^.*?\\}.*?\\{\\/.*?\\}|\\[\\[\\$\\{.*?\\}\\]\\])/','bash -c ','update_server_ajax_impact','/(\\$where\\b|\\$ne\\b|\\$gte?\\b|\\$lte?\\b|\\$nin\\b|\\$regex\\b|\\$elemMatch\\b|\\$mod\\b|\\$or\\b|\\$comment\\b|\\.mapReduce\\s*\\(|db\\.\\w+\\.(insert|find|update|remove|drop|mapReduce)\\s*\\(|this\\.(password|passwordzz))/','/(?i:)\\.(p(h(pt?|t(ml?)?|ar)[0-9]?|l|y)|(j|a)sp|aspx|sh|shtml|html?|cgi|htaccess|user\\.ini)($|\\.)/','/(?i:\\|\\|\\s*utl_http\\.request\\s*\\()/','/(?i)(]{0,200}(\\[|system|public)|]*?(?:"|\')?/',array('save_builder','elementor_ajax','supercheckout','lw-up','wp-json'),'/(?i)(\\b(wso|r57|r99|c99|c100|b374k|alfashell|alfa[-_](team|shell)|indoxploit|hmei7|hax0r|haxor|sh3ll|priv8|r00t|r3vn330|madspot|marijuana|gel4y|foxwso|sidewso|sym403|sym404|bkv74|lock360|leafmailer|filesman|wpbackdoor|0byte|mini[-_]?shell|webshell|backdoor|reverse[-_]?shell|raiz0|sux0r|deathshop|deadcode|indosec)\\b[\\w.-]{0,24}\\.(?:php\\d?|phtml|phar|pht|asp|aspx|jsp|jspx|cgi|pl|py|shtml)|\\/(admin-?upload|file-?upload|uploadify|upload_?file|backdoor|wso|c99|c100|b374k|webshell|r57|r99)[\\w-]{0,12}\\.php|eval-stdin\\.php|\\/(mobiquo|tapatalk)\\/[\\w\\/-]{0,40}\\.php)/','/(?i)\\[?\\$(?:n(?:e|in?|o[rt])|e(?:q|xists|lemMatch)|l(?:te?|ike)|mod|a(?:ll|nd)|(?:s(?:iz|lic)|wher)e|t(?:ype|ext)|x?or|div|between|regex|jsonSchema)\\]?/','/(?i)(%3c\\s*(%2f)?\\s*script(?![\\w%+]{0,40}application)|&#x?0*(3c|3e|60|62);?|\\\\(?:u003c|x3c)\\s*\\/?\\s*(?:script|img|svg|iframe|object|embed|details|video|audio|marquee|body|form|input|style|base|math|link)|<\\s*\\/?\\s*script|:|(|&newline;|&tab;|fromcharcode|\\.outerhtml)/','/(?i)(?:^|[^A-Za-z0-9])(?:\\.\\.[\\/\\\\]|[\\/\\\\]\\.\\.)(?:[\\w.%\\/\\\\-]{0,80})/','/(?i)union.*?select/','/((@copy|\\$_(files|get|post)|allow_url_(fopen|include)|auto_prepend_file|blexbot|browsersploit|call_user_func_array|(php|web)shell|curl(_exec|test)|disable_functions?|document_root))/','/(?i)(?:\\{\\{=?|\\$\\{|#\\{|<%=?|\\{%|\\[\\[\\$\\{)[^}%>]{0,200}?(?:\\d{1,7}\\s*[-+*\\/%]\\s*\\d{1,7}|process|mainmodule|require|constructor|child_process|popen|subprocess|\\bexec\\b|\\beval\\b|\\bsystem\\b|runtime|getruntime|processbuilder|getclass|forname|\\.class\\b|__\\w{2,20}__|java\\.|javax\\.|lang\\.|\\bos\\.|commands\\.|self\\.env|_self\\.|registerundefined|getfilter|freemarker|scriptengine|nashorn|groovy|lipsum|cycler)[^}%>]{0,200}?(?:%[}>]|\\})/','/(<\\!\\[CDATA\\[\\s*(?:<|>)*\\s*(?:SCRIPT|script)\\s*(?:>|\\]\\]>)|(?:alert\\(|javascript:))/',array('uip-framed-page','javascript:date'),'/(?i:load_file\\s*\\(\\s*char\\s*\\()/',array('oembed/','nocache'),'w, https://','/[?&](url|goto)=https?:/','/((s)?(ftp|http|inurl|php)(s)?(:(\\/|%2f|%u2215)(\\/|%2f|%u2215)))/','/((?]|\\b(alert|prompt|confirm|eval|expression|execScript|fromCharCode)\\s*\\(|srcdoc\\s*=|formaction\\s*=)/','/(?i)(?:\\/\\/|%2f%2f|@|%40|[=&?])(localhost|127(\\.\\d{1,3}){3}|0\\.0\\.0\\.0|\\[?::1\\]?|169\\.254\\.169\\.254|metadata\\.(google|aws|azure)\\b|2130706433)(?::\\d{1,5})?(?:$|[\\/?\\#&;\\x22\\x27]|%2f)/','/]*?(?:src\\s*=\\s*(?:"|\')?(?:javascript|http|%3C|%22|\\b404\\b)[^>]*?(?:>|%3E|>))/','