1ndianl33t / Gf-Patterns

GF Paterns For (ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic, interesting Subs) parameters grep
MIT License
1.19k stars 279 forks source link

change interesting Extensions to interpret "." instead of wildcard #6

Closed Rdago closed 4 years ago

Rdago commented 4 years ago

with grep -E the expression is interpreted as regular expressions and will therefore interpret the Point character as wildcard. I escaped it with a slash in order to really get the Point character

image

interestingEXT.json should look like:

{
    "flags": "-iE",
     "patterns": [

"\.action",
"\.adr",
"\.ascx",
"\.asmx",
"\.axd",
"\.backup",
"\.bak",
"\.bkf",
"\.bkp",
"\.bok",
"\.achee",
"\.cfg",
"\.cfm",
"\.cgi",
"\.cnf",
"\.conf",
"\.config",
"\.crt",
"\.csr",
"\.csv",
"\.dat",
"\.doc",
"\.docx",
"\.eml",
"\.env",
"\.exe",
"\.gz",
"\.ica",
"\.inf",
"\.ini",
"\.java",
"\.json",
"\.key",
"\.log",
"\.lst",
"\.mai",
"\.mbox",
"\.mbx",
"\.md",
"\.mdb",
"\.nsf",
"\.old",
"\.ora",
"\.pac",
"\.passwd",
"\.pcf",
"\.pdf",
"\.pem",
"\.pgp",
"\.pl",
" plist",
"\.pwd",
"\.rdp",
"\.reg",
"\.rtf",
"\.skr",
"\.sql",
"\.swf",
"\.tpl",
"\.txt",
"\.url",
"\.wml",
"\.xls",
"\.xlsx",
"\.xml",
"\.xsd",
"\.yml"
 ]
}