HEX
Server: LiteSpeed
System: Linux spg20.cloudpowerdns.com 5.14.0-611.35.1.el9_7.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Feb 25 03:46:09 EST 2026 x86_64
User: carrerup (3153)
PHP: 8.1.33
Disabled: NONE
Upload Files
File: //opt/bitninja-waf3/coreruleset/regex-assembly/933210.ra
##! Please refer to the documentation at
##! https://coreruleset.org/docs/development/regex_assembly/.

##! Helpers
##!> define single_or_double_quotes ['"]
##!> define string_in_round_brackets \(.+\)

##!$ ;

##!> assemble
  ##! example payload: (system)(ls);
  {{string_in_round_brackets}}{{string_in_round_brackets}}

  ##! example payload: (sys)"tem"(ls);
  {{string_in_round_brackets}}{{single_or_double_quotes}}[a-zA-Z-_0-9]+{{single_or_double_quotes}}{{string_in_round_brackets}}

  ##! example payload: a=system&b=$_GET[0](ls);
  \[\d+\]{{string_in_round_brackets}}

  ##! example payload: {0}("ls")
  \{\d+\}{{string_in_round_brackets}}

  ##! example payload: $a("ls")
  \$[^(\),.;\x5c/]+{{string_in_round_brackets}}

  ##! example payload: "system"("ls")
  {{single_or_double_quotes}}[a-zA-Z0-9-_\x5c]+{{single_or_double_quotes}}{{string_in_round_brackets}}

  ##! example payload: (string)system("ls")
  \([^\)]*string[^\)]*\)[a-zA-Z-_0-9\"'.{}\[\]\s]+\([^\)]*\)
##!<