STRLCPY/ticofookfook

■ ■ ■ ■ ■ ■

gf-patterns/License.md

1	+	MIT License
2	+
3	+	Copyright (c) 2020 Shiv Chouhan (1ndianl33t)
4	+
5	+	Permission is hereby granted, free of charge, to any person obtaining a copy
6	+	of this software and associated documentation files (the "Software"), to deal
7	+	in the Software without restriction, including without limitation the rights
8	+	to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9	+	copies of the Software, and to permit persons to whom the Software is
10	+	furnished to do so, subject to the following conditions:
11	+
12	+	The above copyright notice and this permission notice shall be included in all
13	+	copies or substantial portions of the Software.
14	+
15	+	THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16	+	IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17	+	FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18	+	AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19	+	LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20	+	OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21	+	SOFTWARE.
22	+

■ ■ ■ ■ ■ ■

gf-patterns/debug_logic.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+
5	+	"access=",
6	+	"admin=",
7	+	"dbg=",
8	+	"debug=",
9	+	"edit=",
10	+	"grant=",
11	+	"test=",
12	+	"alter=",
13	+	"clone=",
14	+	"create=",
15	+	"delete=",
16	+	"disable=",
17	+	"enable=",
18	+	"exec=",
19	+	"execute=",
20	+	"load=",
21	+	"make=",
22	+	"modify=",
23	+	"rename=",
24	+	"reset=",
25	+	"shell=",
26	+	"toggle=",
27	+	"adm=",
28	+	"root=",
29	+	"cfg=",
30	+	"config="
31	+	]
32	+	}
33	+

■ ■ ■ ■ ■ ■

gf-patterns/idor.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+
5	+	"id=",
6	+	"user=",
7	+	"account=",
8	+	"number=",
9	+	"order=",
10	+	"no=",
11	+	"doc=",
12	+	"key=",
13	+	"email=",
14	+	"group=",
15	+	"profile=",
16	+	"edit=",
17	+	"report="
18	+
19	+	]
20	+	}
21	+
22	+
23	+
24	+
25	+
26	+
27	+

■ ■ ■ ■ ■ ■

gf-patterns/img-traversal.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+
5	+	"=.*.jpg",
6	+	"=.*.jpeg",
7	+	"=.*.gif",
8	+	"=.*.png"
9	+	]
10	+	}
11	+

■ ■ ■ ■ ■ ■

gf-patterns/interestingEXT.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+
5	+	"\\.action",
6	+	"\\.adr",
7	+	"\\.ascx",
8	+	"\\.asmx",
9	+	"\\.axd",
10	+	"\\.backup",
11	+	"\\.bak",
12	+	"\\.bkf",
13	+	"\\.bkp",
14	+	"\\.bok",
15	+	"\\.achee",
16	+	"\\.cfg",
17	+	"\\.cfm",
18	+	"\\.cgi",
19	+	"\\.cnf",
20	+	"\\.conf",
21	+	"\\.config",
22	+	"\\.crt",
23	+	"\\.csr",
24	+	"\\.csv",
25	+	"\\.dat",
26	+	"\\.doc",
27	+	"\\.docx",
28	+	"\\.eml",
29	+	"\\.env",
30	+	"\\.exe",
31	+	"\\.gz",
32	+	"\\.ica",
33	+	"\\.inf",
34	+	"\\.ini",
35	+	"\\.java",
36	+	"\\.json",
37	+	"\\.key",
38	+	"\\.log",
39	+	"\\.lst",
40	+	"\\.mai",
41	+	"\\.mbox",
42	+	"\\.mbx",
43	+	"\\.md",
44	+	"\\.mdb",
45	+	"\\.nsf",
46	+	"\\.old",
47	+	"\\.ora",
48	+	"\\.pac",
49	+	"\\.passwd",
50	+	"\\.pcf",
51	+	"\\.pdf",
52	+	"\\.pem",
53	+	"\\.pgp",
54	+	"\\.pl",
55	+	" plist",
56	+	"\\.pwd",
57	+	"\\.rdp",
58	+	"\\.reg",
59	+	"\\.rtf",
60	+	"\\.skr",
61	+	"\\.sql",
62	+	"\\.swf",
63	+	"\\.tpl",
64	+	"\\.txt",
65	+	"\\.url",
66	+	"\\.wml",
67	+	"\\.xls",
68	+	"\\.xlsx",
69	+	"\\.xml",
70	+	"\\.xsd",
71	+	"\\.yml"
72	+	]
73	+	}
74	+

■ ■ ■ ■ ■ ■

gf-patterns/interestingparams.json

1	+
2	+	{
3	+	"flags": "-iE",
4	+	"patterns": [
5	+
6	+	"template=",
7	+	"preview=",
8	+	"id=",
9	+	"view=",
10	+	"activity=",
11	+	"name=",
12	+	"content=",
13	+	"redirect=",
14	+	"(&\|[?])access(&\|=)",
15	+	"(&\|[?])admin(&\|=)",
16	+	"(&\|[?])dbg(&\|=)",
17	+	"(&\|[?])debug(&\|=)",
18	+	"(&\|[?])edit(&\|=)",
19	+	"(&\|[?])grant(&\|=)",
20	+	"(&\|[?])test(&\|=)",
21	+	"(&\|[?])alter(&\|=)",
22	+	"(&\|[?])clone(&\|=)",
23	+	"(&\|[?])create(&\|=)",
24	+	"(&\|[?])delete(&\|=)",
25	+	"(&\|[?])disable(&\|=)",
26	+	"(&\|[?])enable(&\|=)",
27	+	"(&\|[?])exec(&\|=)",
28	+	"(&\|[?])execute(&\|=)",
29	+	"(&\|[?])load(&\|=)",
30	+	"(&\|[?])make(&\|=)",
31	+	"(&\|[?])modify(&\|=)",
32	+	"(&\|[?])rename(&\|=)",
33	+	"(&\|[?])reset(&\|=)",
34	+	"(&\|[?])shell(&\|=)",
35	+	"(&\|[?])toggle(&\|=)",
36	+	"(&\|[?])adm(&\|=)",
37	+	"(&\|[?])root(&\|=)",
38	+	"(&\|[?])cfg(&\|=)",
39	+	"(&\|[?])dest(&\|=)",
40	+	"(&\|[?])redirect(&\|=)",
41	+	"(&\|[?])uri(&\|=)",
42	+	"(&\|[?])path(&\|=)",
43	+	"(&\|[?])continue(&\|=)",
44	+	"(&\|[?])url(&\|=)",
45	+	"(&\|[?])window(&\|=)",
46	+	"(&\|[?])next(&\|=)",
47	+	"(&\|[?])data(&\|=)",
48	+	"(&\|[?])reference(&\|=)",
49	+	"(&\|[?])site(&\|=)",
50	+	"(&\|[?])html(&\|=)",
51	+	"(&\|[?])val(&\|=)",
52	+	"(&\|[?])validate(&\|=)",
53	+	"(&\|[?])domain(&\|=)",
54	+	"(&\|[?])callback(&\|=)",
55	+	"(&\|[?])return(&\|=)",
56	+	"(&\|[?])feed(&\|=)",
57	+	"(&\|[?])host(&\|=)",
58	+	"(&\|[?])port(&\|=)",
59	+	"(&\|[?])to(&\|=)",
60	+	"(&\|[?])out(&\|=)",
61	+	"(&\|[?])view(&\|=)",
62	+	"(&\|[?])dir(&\|=)",
63	+	"(&\|[?])show(&\|=)",
64	+	"(&\|[?])navigation(&\|=)",
65	+	"(&\|[?])open(&\|=)",
66	+	"(&\|[?])file(&\|=)",
67	+	"(&\|[?])document(&\|=)",
68	+	"(&\|[?])folder(&\|=)",
69	+	"(&\|[?])pg(&\|=)",
70	+	"(&\|[?])php_path(&\|=)",
71	+	"(&\|[?])style(&\|=)",
72	+	"(&\|[?])doc(&\|=)",
73	+	"(&\|[?])img(&\|=)",
74	+	"(&\|[?])filename(&\|=)",
75	+	"id=",
76	+	"select=",
77	+	"report=",
78	+	"role=",
79	+	"update=",
80	+	"query=",
81	+	"user=",
82	+	"name=",
83	+	"sort=",
84	+	"where=",
85	+	"search=",
86	+	"params=",
87	+	"process=",
88	+	"row=",
89	+	"view=",
90	+	"table=",
91	+	"from=",
92	+	"sel=",
93	+	"results=",
94	+	"sleep=",
95	+	"fetch=",
96	+	"order=",
97	+	"keyword=",
98	+	"column=",
99	+	"field=",
100	+	"delete=",
101	+	"string=",
102	+	"number=",
103	+	"filter=",
104	+	"(&\|[?])callback=",
105	+	"(&\|[?])cgi-bin/redirect.cgi",
106	+	"(&\|[?])checkout=",
107	+	"(&\|[?])checkout_url=",
108	+	"(&\|[?])continue=",
109	+	"(&\|[?])data=",
110	+	"(&\|[?])dest=",
111	+	"(&\|[?])destination=",
112	+	"(&\|[?])dir=",
113	+	"(&\|[?])domain=",
114	+	"(&\|[?])feed=",
115	+	"(&\|[?])file=",
116	+	"(&\|[?])file_name=",
117	+	"(&\|[?])file_url=",
118	+	"(&\|[?])folder=",
119	+	"(&\|[?])folder_url=",
120	+	"(&\|[?])forward=",
121	+	"(&\|[?])from_url=",
122	+	"(&\|[?])go=",
123	+	"(&\|[?])goto=",
124	+	"(&\|[?])host=",
125	+	"(&\|[?])html=",
126	+	"(&\|[?])image_url=",
127	+	"(&\|[?])img_url=",
128	+	"(&\|[?])load_file=",
129	+	"(&\|[?])load_url=",
130	+	"(&\|[?])login_url=",
131	+	"(&\|[?])logout=",
132	+	"(&\|[?])navigation=",
133	+	"(&\|[?])next=",
134	+	"(&\|[?])next_page=",
135	+	"(&\|[?])Open=",
136	+	"(&\|[?])out=",
137	+	"(&\|[?])page_url=",
138	+	"(&\|[?])path=",
139	+	"(&\|[?])port=",
140	+	"(&\|[?])redir=",
141	+	"(&\|[?])redirect=",
142	+	"(&\|[?])redirect_to=",
143	+	"(&\|[?])redirect_uri=",
144	+	"(&\|[?])redirect_url=",
145	+	"(&\|[?])reference=",
146	+	"(&\|[?])return=",
147	+	"(&\|[?])return_path=",
148	+	"(&\|[?])return_to=",
149	+	"(&\|[?])returnTo=",
150	+	"(&\|[?])return_url=",
151	+	"(&\|[?])rt=",
152	+	"(&\|[?])rurl=",
153	+	"(&\|[?])show=",
154	+	"(&\|[?])site=",
155	+	"(&\|[?])target=",
156	+	"(&\|[?])to=",
157	+	"(&\|[?])uri=",
158	+	"(&\|[?])url=",
159	+	"(&\|[?])val=",
160	+	"(&\|[?])validate=",
161	+	"(&\|[?])view=",
162	+	"(&\|[?])window=",
163	+	"daemon=",
164	+	"upload=",
165	+	"dir=",
166	+	"execute=",
167	+	"download=",
168	+	"log=",
169	+	"ip=",
170	+	"cli=",
171	+	"cmd=",
172	+	"file=",
173	+	"document=",
174	+	"folder=",
175	+	"root=",
176	+	"path=",
177	+	"pg=",
178	+	"style=",
179	+	"pdf=",
180	+	"template=",
181	+	"php_path=",
182	+	"doc=",
183	+	"page=",
184	+	"name=",
185	+	"id=",
186	+	"user=",
187	+	"account=",
188	+	"number=",
189	+	"order=",
190	+	"no=",
191	+	"doc=",
192	+	"key=",
193	+	"email=",
194	+	"group=",
195	+	"profile=",
196	+	"edit=",
197	+	"report=",
198	+	"access=",
199	+	"admin=",
200	+	"dbg=",
201	+	"debug=",
202	+	"edit=",
203	+	"grant=",
204	+	"test=",
205	+	"alter=",
206	+	"clone=",
207	+	"create=",
208	+	"delete=",
209	+	"disable=",
210	+	"enable=",
211	+	"exec=",
212	+	"execute=",
213	+	"load=",
214	+	"make=",
215	+	"modify=",
216	+	"rename=",
217	+	"reset=",
218	+	"shell=",
219	+	"toggle=",
220	+	"adm=",
221	+	"root=",
222	+	"cfg=",
223	+	"config="
224	+	]
225	+	}
226	+
227	+
228	+

■ ■ ■ ■ ■ ■

gf-patterns/interestingsubs.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+	"admin",
5	+	"jenkins",
6	+	"test",
7	+	"proxy",
8	+	"stage",
9	+	"test",
10	+	"dev",
11	+	"devops",
12	+	"staff",
13	+	"db",
14	+	"qa",
15	+	"internal"
16	+	]
17	+	}
18	+

■ ■ ■ ■ ■ ■

gf-patterns/jsvar.json

1	+	{
2	+	"flags": "-HanroE",
3	+	"pattern": "var [a-z0-9_]+\\=."
4	+	}
5	+

■ ■ ■ ■ ■ ■

gf-patterns/lfi.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+
5	+	"file=",
6	+	"document=",
7	+	"folder=",
8	+	"root=",
9	+	"path=",
10	+	"pg=",
11	+	"style=",
12	+	"pdf=",
13	+	"template=",
14	+	"php_path=",
15	+	"doc=",
16	+	"page=",
17	+	"name=",
18	+	"cat=",
19	+	"dir=",
20	+	"action=",
21	+	"board=",
22	+	"date=",
23	+	"detail=",
24	+	"download=",
25	+	"prefix=",
26	+	"include=",
27	+	"inc=",
28	+	"locate=",
29	+	"show=",
30	+	"site=",
31	+	"type=",
32	+	"view=",
33	+	"content=",
34	+	"layout=",
35	+	"mod=",
36	+	"conf=",
37	+	"url="
38	+
39	+
40	+	]
41	+	}
42	+

■ ■ ■ ■ ■ ■

gf-patterns/rce.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+
5	+	"daemon=",
6	+	"upload=",
7	+	"dir=",
8	+	"download=",
9	+	"log=",
10	+	"ip=",
11	+	"cli=",
12	+	"cmd=",
13	+	"exec=",
14	+	"command=",
15	+	"execute=",
16	+	"ping=",
17	+	"query=",
18	+	"jump=",
19	+	"code=",
20	+	"reg=",
21	+	"do=",
22	+	"func=",
23	+	"arg=",
24	+	"option=",
25	+	"load=",
26	+	"process=",
27	+	"step=",
28	+	"read=",
29	+	"function",
30	+	"req=",
31	+	"feature=",
32	+	"exe=",
33	+	"module=",
34	+	"payload=",
35	+	"run=",
36	+	"print="
37	+	]
38	+	}
39	+

■ ■ ■ ■ ■ ■

gf-patterns/redirect.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+	"Lmage_url=",
5	+	"Open=",
6	+	"callback=",
7	+	"cgi-bin/redirect.cgi",
8	+	"cgi-bin/redirect.cgi?",
9	+	"checkout=",
10	+	"checkout_url=",
11	+	"continue=",
12	+	"data=",
13	+	"dest=",
14	+	"destination=",
15	+	"dir=",
16	+	"domain=",
17	+	"feed=",
18	+	"file=",
19	+	"file_name=",
20	+	"file_url=",
21	+	"folder=",
22	+	"folder_url=",
23	+	"forward=",
24	+	"from_url=",
25	+	"go=",
26	+	"goto=",
27	+	"host=",
28	+	"html=",
29	+	"image_url=",
30	+	"img_url=",
31	+	"load_file=",
32	+	"load_url=",
33	+	"login?to=",
34	+	"login_url=",
35	+	"logout=",
36	+	"navigation=",
37	+	"next=",
38	+	"next_page=",
39	+	"out=",
40	+	"page=",
41	+	"page_url=",
42	+	"path=",
43	+	"port=",
44	+	"redir=",
45	+	"redirect=",
46	+	"redirect_to=",
47	+	"redirect_uri=",
48	+	"redirect_url=",
49	+	"reference=",
50	+	"return=",
51	+	"returnTo=",
52	+	"return_path=",
53	+	"return_to=",
54	+	"return_url=",
55	+	"rt=",
56	+	"rurl=",
57	+	"show=",
58	+	"site=",
59	+	"target=",
60	+	"to=",
61	+	"uri=",
62	+	"url=",
63	+	"val=",
64	+	"validate=",
65	+	"view=",
66	+	"window="
67	+	]
68	+	}
69	+

■ ■ ■ ■ ■ ■

gf-patterns/sqli.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+
5	+	"id=",
6	+	"select=",
7	+	"report=",
8	+	"role=",
9	+	"update=",
10	+	"query=",
11	+	"user=",
12	+	"name=",
13	+	"sort=",
14	+	"where=",
15	+	"search=",
16	+	"params=",
17	+	"process=",
18	+	"row=",
19	+	"view=",
20	+	"table=",
21	+	"from=",
22	+	"sel=",
23	+	"results=",
24	+	"sleep=",
25	+	"fetch=",
26	+	"order=",
27	+	"keyword=",
28	+	"column=",
29	+	"field=",
30	+	"delete=",
31	+	"string=",
32	+	"number=",
33	+	"filter="
34	+	]
35	+	}
36	+

■ ■ ■ ■ ■ ■

gf-patterns/ssrf.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+
5	+	"access=",
6	+	"admin=",
7	+	"dbg=",
8	+	"debug=",
9	+	"edit=",
10	+	"grant=",
11	+	"test=",
12	+	"alter=",
13	+	"clone=",
14	+	"create=",
15	+	"delete=",
16	+	"disable=",
17	+	"enable=",
18	+	"exec=",
19	+	"execute=",
20	+	"load=",
21	+	"make=",
22	+	"modify=",
23	+	"rename=",
24	+	"reset=",
25	+	"shell=",
26	+	"toggle=",
27	+	"adm=",
28	+	"root=",
29	+	"cfg=",
30	+	"dest=",
31	+	"redirect=",
32	+	"uri=",
33	+	"path=",
34	+	"continue=",
35	+	"url=",
36	+	"window=",
37	+	"next=",
38	+	"data=",
39	+	"reference=",
40	+	"site=",
41	+	"html=",
42	+	"val=",
43	+	"validate=",
44	+	"domain=",
45	+	"callback=",
46	+	"return=",
47	+	"page=",
48	+	"feed=",
49	+	"host=",
50	+	"port=",
51	+	"to=",
52	+	"out=",
53	+	"view=",
54	+	"dir=",
55	+	"show=",
56	+	"navigation=",
57	+	"open=",
58	+	"file=",
59	+	"document=",
60	+	"folder=",
61	+	"pg=",
62	+	"php_path=",
63	+	"style=",
64	+	"doc=",
65	+	"img=",
66	+	"filename="
67	+
68	+	]
69	+	}
70	+
71	+
72	+
73	+
74	+
75	+
76	+

■ ■ ■ ■ ■ ■

gf-patterns/ssti.json

1	+
2	+	{
3	+	"flags": "-iE",
4	+	"patterns": [
5	+
6	+	"template=",
7	+	"preview=",
8	+	"id=",
9	+	"view=",
10	+	"activity=",
11	+	"name=",
12	+	"content=",
13	+	"redirect="
14	+	]
15	+	}
16	+

■ ■ ■ ■ ■ ■

gf-patterns/xss.json

1	+	{
2	+	"flags": "-iE",
3	+	"patterns": [
4	+	"q=",
5	+	"s=",
6	+	"search=",
7	+	"lang=",
8	+	"keyword=",
9	+	"query=",
10	+	"page=",
11	+	"keywords=",
12	+	"year=",
13	+	"view=",
14	+	"email=",
15	+	"type=",
16	+	"name=",
17	+	"p=",
18	+	"callback=",
19	+	"jsonp=",
20	+	"api_key=",
21	+	"api=",
22	+	"password=",
23	+	"email=",
24	+	"emailto=",
25	+	"token=",
26	+	"username=",
27	+	"csrf_token=",
28	+	"unsubscribe_token=",
29	+	"id=",
30	+	"item=",
31	+	"page_id=",
32	+	"month=",
33	+	"immagine=",
34	+	"list_type=",
35	+	"url=",
36	+	"terms=",
37	+	"categoryid=",
38	+	"key=",
39	+	"l=",
40	+	"begindate=",
41	+	"enddate="
42	+
43	+	]
44	+	}
45	+

Add files via upload