We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent a5075e5 commit c582463Copy full SHA for c582463
1 file changed
ql/lib/ext/config/argument_injection_sinks.yml
@@ -5,12 +5,12 @@ extensions:
5
# https://gtfobins.github.io/
6
# https://0xn3va.gitbook.io/cheat-sheets/web-application/command-injection/argument-injection
7
data:
8
- - ["(awk)(.*?)", 2, 3]
9
- - ["(curl)(.*?)", 2, 3]
10
- - ["(find)(.*?)", 2, 3]
11
- - ["(git)(.*?)", 2, 3]
12
- - ["(sed)(.*?)", 2, 3]
13
- - ["(tar)(.*?)", 2, 3]
14
- - ["(wget)(.*?)", 2, 3]
15
- - ["(zip)(.*?)", 2, 3]
+ - ["(awk)\\s(.*?)", 2, 3]
+ - ["(curl)\\s(.*?)", 2, 3]
+ - ["(find)\\s(.*?)", 2, 3]
+ - ["(git)\\s(.*?)", 2, 3]
+ - ["(sed)\\s(.*?)", 2, 3]
+ - ["(tar)\\s(.*?)", 2, 3]
+ - ["(wget)\\s(.*?)", 2, 3]
+ - ["(zip)\\s(.*?)", 2, 3]
16
0 commit comments