diff --git a/crowdsec_filters/http-admin-probing/.maxfailures b/crowdsec_filters/http-admin-probing/.maxfailures deleted file mode 100644 index 0c830e2..0000000 --- a/crowdsec_filters/http-admin-probing/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=10 (overflow at 11) -11 diff --git a/crowdsec_filters/http-admin-probing/.scenario b/crowdsec_filters/http-admin-probing/.scenario deleted file mode 100644 index ea021f5..0000000 --- a/crowdsec_filters/http-admin-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-admin-probing diff --git a/crowdsec_filters/http-admin-probing/.timewindow b/crowdsec_filters/http-admin-probing/.timewindow deleted file mode 100644 index a24e4b7..0000000 --- a/crowdsec_filters/http-admin-probing/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=10, leakspeed=10s -# Time window = capacity * leakspeed ≈ 100s, rounded to 120s -120 diff --git a/crowdsec_filters/http-admin-probing/patterns.re b/crowdsec_filters/http-admin-probing/patterns.re deleted file mode 100644 index c930a95..0000000 --- a/crowdsec_filters/http-admin-probing/patterns.re +++ /dev/null @@ -1,45 +0,0 @@ -# Admin interface probing detection patterns (regex) -# Based on CrowdSec http-admin-probing scenario - -# Generic admin paths (must be at path boundary) -/(admin|administrator|administration|adminpanel)(/|$|\.) -/(panel|controlpanel|cpanel|dashboard)(/|$) -/(manager|management|console|backend|backoffice)(/|$) -/(sysadmin|webmaster)(/|$) - -# CMS admin paths -/wp-(admin|login\.php)(/|$) -/joomla/administrator(/|$) -/drupal/admin(/|$) -/typo3(/|$) - -# Database admin tools -/(phpmyadmin|pma|mysql|mysqladmin|myadmin|phpMyAdmin)(/|$) -/(phppgadmin|adminer|dbadmin|sqlmanager)(/|$|\.php) - -# Server management panels -/(webmin|plesk|whm|directadmin|ispconfig|virtualmin|usermin)(/|$) - -# Search and data platforms -/(solr|elasticsearch|kibana|grafana)(/|$) - -# Application servers -/manager/(html|status)$ -/(jmx-console|web-console)(/|$) -/(jenkins|hudson|bamboo|teamcity)(/|$) - -# Monitoring and debug endpoints -/actuator(/|$) -/server-(status|info)$ - -# Setup/install pages -/(setup|install|installer|installation)(/|$|\.php) - -# Mail admin -/(webmail|roundcube|squirrelmail|postfixadmin)(/|$) - -# File managers -/(filemanager|elfinder)(/|$) - -# API documentation -/(swagger|swagger-ui|api-docs|graphql|graphiql)(/|$|\.html) diff --git a/crowdsec_filters/http-backdoors-attempts/.maxfailures b/crowdsec_filters/http-backdoors-attempts/.maxfailures deleted file mode 100644 index 4e7d4a1..0000000 --- a/crowdsec_filters/http-backdoors-attempts/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=1 (overflow at 2) -# Very aggressive - ban quickly on backdoor access attempts -2 diff --git a/crowdsec_filters/http-backdoors-attempts/.scenario b/crowdsec_filters/http-backdoors-attempts/.scenario deleted file mode 100644 index 3f8b400..0000000 --- a/crowdsec_filters/http-backdoors-attempts/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-backdoors-attempts diff --git a/crowdsec_filters/http-backdoors-attempts/.timewindow b/crowdsec_filters/http-backdoors-attempts/.timewindow deleted file mode 100644 index a96384e..0000000 --- a/crowdsec_filters/http-backdoors-attempts/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=1, leakspeed=5s -# Time window = capacity * leakspeed = 5s -5 diff --git a/crowdsec_filters/http-backdoors-attempts/patterns.re b/crowdsec_filters/http-backdoors-attempts/patterns.re deleted file mode 100644 index ca6afe2..0000000 --- a/crowdsec_filters/http-backdoors-attempts/patterns.re +++ /dev/null @@ -1,54 +0,0 @@ -# Known web shells and backdoors -# Source: https://hub-data.crowdsec.net/web/backdoors.txt -# Patterns match filename at end of path - -# C99 shell family -/c99[^/]*\.php -/c100\.php - -# R57 shell family -/r57\.php -/r58\.php -/r00t\.php - -# Common shell names -/shell\.php -/cmd\.php -/cmd\.asp -/cmd\.jsp -/cmdexec\.aspx -/eval-stdin\.php -/simple[_-]?cmd\.php -/simple[_-]?backdoor\.php - -# File managers -/filesman\.php -/fileupload\.aspx -/filesystembrowser\.aspx -/upfile\.php -/upl0ader\.php - -# WSO shells -/wso[0-9.]*\.php - -# Alfa shells -/alfa[^/]*\.php - -# Other known shells -/b374k\.php -/weevely\.php -/phpspy\.php -/ani-shell\.php -/antichat\.php -/locus7?s?\.php -/madshell\.php -/php-backdoor\.php -/webshell\.php -/jspshell\.jsp -/jspbd\.jsp -/aspxshell\.aspx - -# Generic suspicious patterns -/[0-9]{1,4}\.php$ -/xx\.php$ -/x\.php$ diff --git a/crowdsec_filters/http-cve-2021-41773/.maxfailures b/crowdsec_filters/http-cve-2021-41773/.maxfailures deleted file mode 100644 index a1bcc68..0000000 --- a/crowdsec_filters/http-cve-2021-41773/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# Single occurrence triggers ban - this is a known exploit -1 diff --git a/crowdsec_filters/http-cve-2021-41773/.scenario b/crowdsec_filters/http-cve-2021-41773/.scenario deleted file mode 100644 index a0f1671..0000000 --- a/crowdsec_filters/http-cve-2021-41773/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2021-41773 diff --git a/crowdsec_filters/http-cve-2021-41773/patterns.re b/crowdsec_filters/http-cve-2021-41773/patterns.re deleted file mode 100644 index fbeea6c..0000000 --- a/crowdsec_filters/http-cve-2021-41773/patterns.re +++ /dev/null @@ -1,17 +0,0 @@ -# Apache Path Traversal CVE-2021-41773 -# These patterns detect URL-encoded path traversal specific to this CVE -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-41773 - -# Pattern 1: /.%2E/.%2E/ (dot encoded as %2E) -/\.%2[eE]/\.%2[eE]/ - -# Pattern 2: /%2E%2E/%2E%2E (full encoding of ../..) -/%2[eE]%2[eE]/%2[eE]%2[eE] - -# Pattern 3: Mixed case variations -/\.%2e/\.%2e/ -/%2e%2e/%2e%2e - -# Also detect with cgi-bin which is common in exploits -/cgi-bin/\.%2[eE]/ -/cgi-bin/%2[eE]%2[eE]/ diff --git a/crowdsec_filters/http-cve-2024-0012/.maxfailures b/crowdsec_filters/http-cve-2024-0012/.maxfailures deleted file mode 100644 index a1bcc68..0000000 --- a/crowdsec_filters/http-cve-2024-0012/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# Single occurrence triggers ban - this is a known exploit -1 diff --git a/crowdsec_filters/http-cve-2024-0012/.scenario b/crowdsec_filters/http-cve-2024-0012/.scenario deleted file mode 100644 index 5d922ad..0000000 --- a/crowdsec_filters/http-cve-2024-0012/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2024-0012 diff --git a/crowdsec_filters/http-cve-2024-0012/patterns.re b/crowdsec_filters/http-cve-2024-0012/patterns.re deleted file mode 100644 index 45a1851..0000000 --- a/crowdsec_filters/http-cve-2024-0012/patterns.re +++ /dev/null @@ -1,6 +0,0 @@ -# PAN-OS auth bypass CVE-2024-0012 -# Filter: request matches '/php/.*/\.js\.map' or '/index.php/.*\.js\.map' -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-0012 - -/php/.*/\.js\.map -/index\.php/.*\.js\.map diff --git a/crowdsec_filters/http-cve-2024-38475/.maxfailures b/crowdsec_filters/http-cve-2024-38475/.maxfailures deleted file mode 100644 index 0c888a7..0000000 --- a/crowdsec_filters/http-cve-2024-38475/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=3 (overflow at 4) -4 diff --git a/crowdsec_filters/http-cve-2024-38475/.scenario b/crowdsec_filters/http-cve-2024-38475/.scenario deleted file mode 100644 index 9130ddd..0000000 --- a/crowdsec_filters/http-cve-2024-38475/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2024-38475 diff --git a/crowdsec_filters/http-cve-2024-38475/.timewindow b/crowdsec_filters/http-cve-2024-38475/.timewindow deleted file mode 100644 index d04aefb..0000000 --- a/crowdsec_filters/http-cve-2024-38475/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=3, leakspeed=10s -# Time window = capacity * leakspeed = 30s -30 diff --git a/crowdsec_filters/http-cve-2024-38475/patterns.re b/crowdsec_filters/http-cve-2024-38475/patterns.re deleted file mode 100644 index a63ec2b..0000000 --- a/crowdsec_filters/http-cve-2024-38475/patterns.re +++ /dev/null @@ -1,6 +0,0 @@ -# Apache mod_rewrite bypass CVE-2024-38475 -# Filter: Lower(evt.Parsed.request) endsWith '%3f' -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-38475 - -# URI ending with URL-encoded '?' (%3f) -%3[fF]$ diff --git a/crowdsec_filters/http-cve-probing/.maxfailures b/crowdsec_filters/http-cve-probing/.maxfailures deleted file mode 100644 index 755d7ed..0000000 --- a/crowdsec_filters/http-cve-probing/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# URIs come from https://hub-data.crowdsec.net/web/trendy_cves_uris.json -1 diff --git a/crowdsec_filters/http-cve-probing/.scenario b/crowdsec_filters/http-cve-probing/.scenario deleted file mode 100644 index c94380d..0000000 --- a/crowdsec_filters/http-cve-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-probing diff --git a/crowdsec_filters/http-cve-probing/patterns.txt b/crowdsec_filters/http-cve-probing/patterns.txt deleted file mode 100644 index 742951f..0000000 --- a/crowdsec_filters/http-cve-probing/patterns.txt +++ /dev/null @@ -1,67 +0,0 @@ -# Trending CVE URIs - literal substring match -# Source: https://hub-data.crowdsec.net/web/trendy_cves_uris.json -# CrowdSec filter: http_path contains JsonExtract(#, "uri") -# Snapshot date: 2026-04-17 - -# CVE-2024-3400 Palo Alto GlobalProtect -/global-protect/login.esp -# CVE-2024-3272 D-Link NAS -/cgi-bin/nas_sharing.cgi -# CVE-2018-12031 Elber -/server/node_upgrade_srv.js -# CVE-2021-36380 Sunhillo SureLine -/cgi/networkdiag.cgi -# CVE-2021-3129 Laravel Ignition -/_ignition/execute-solution -# CVE-2020-27866 Netgear -/setup.cgi -# CVE-2024-4040 CrushFTP -/webinterface/login.html -/webinterface/ -# CVE-2024-24919 Check Point -/clients/mycrl -# CVE-2024-4577 PHP CGI -?%ad -# CVE-2024-5806 MOVEit -/guestaccess.aspx -# CVE-2024-0769 D-Link DIR-859 -/hedwig.cgi -# CVE-2019-8318 D-Link HNAP -/hnap1/ -# CVE-2024-8190 Ivanti CSA -/gsb/datetime.php -# CVE-2021-33044 Dahua -/rpc2_login -# CVE-2024-8963 Ivanti CSA path traversal -index.php%3f.php/ -# CVE-2025-0108 PAN-OS auth bypass -/unauth/%252e%252e/php/ -# CVE-2025-31324 SAP NetWeaver -/developmentserver/metadatauploader -# CVE-2024-38653 Ivanti MDM -/mdm/checkin -# CVE-2025-34509 Sitecore -/sitecore/api/ssc/auth/login -# CVE-2023-6549 Citrix NetScaler -/nf/auth/startwebview.do -# CVE-2025-5777 Citrix NetScaler "CitrixBleed 2" -/p/u/doauthentication.do -# CVE-2025-25257 Fortinet FortiWeb -/api/fabric/device/status -# CVE-2025-53770 SharePoint ToolShell -/_layouts/15/toolpane.aspx -# CVE-2023-0669 GoAnywhere MFT -/goanywhere/lic/accept -# CVE-2024-0204 GoAnywhere MFT -/goanywhere/images/.. -# CVE-2025-64446 Fortinet FortiWeb -/api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi -# CVE-2025-59718 Fortinet FortiSIEM -/remote/saml/login -# CVE-2025-40553 Ivanti Endpoint Manager -/helpdesk/WebObjects/Helpdesk.woa/ajax/9.7.43.0.0.0.4.3.7.0.7.1.1.1 -/helpdesk/WebObjects/Helpdesk.woa/ajax/2.0.7.1.1.1 -# CVE-2025-40552 Ivanti Endpoint Manager -/helpdesk/WebObjects/Helpdesk.woa/wo/ -# CVE-2026-20127 Cisco ISE -/reports/data/opt/data/containers/config/data-collection-agent/.dca diff --git a/crowdsec_filters/http-path-traversal-probing/.maxfailures b/crowdsec_filters/http-path-traversal-probing/.maxfailures deleted file mode 100644 index 0c888a7..0000000 --- a/crowdsec_filters/http-path-traversal-probing/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=3 (overflow at 4) -4 diff --git a/crowdsec_filters/http-path-traversal-probing/.scenario b/crowdsec_filters/http-path-traversal-probing/.scenario deleted file mode 100644 index 7f79ca6..0000000 --- a/crowdsec_filters/http-path-traversal-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-path-traversal-probing diff --git a/crowdsec_filters/http-path-traversal-probing/.timewindow b/crowdsec_filters/http-path-traversal-probing/.timewindow deleted file mode 100644 index d04aefb..0000000 --- a/crowdsec_filters/http-path-traversal-probing/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=3, leakspeed=10s -# Time window = capacity * leakspeed = 30s -30 diff --git a/crowdsec_filters/http-path-traversal-probing/patterns.txt b/crowdsec_filters/http-path-traversal-probing/patterns.txt deleted file mode 100644 index 01568ce..0000000 --- a/crowdsec_filters/http-path-traversal-probing/patterns.txt +++ /dev/null @@ -1,28 +0,0 @@ -# Path traversal patterns -# Source: https://hub-data.crowdsec.net/web/path_traversal.txt - -# Directory traversal sequences -../ -..\ -%2e%2e%2f -%2e%2e%5c -%252e%252e%252f - -# Unix system files -/etc/passwd -/etc/shadow -/etc/hosts -/etc/group -/proc/self/ - -# PHP/file wrappers -=file:// -=zip:// -=php:// -=expect:// -=data:// - -# Windows system files -windows/win.ini -boot.ini -%25SYSTEMROOT%25 diff --git a/crowdsec_filters/http-sensitive-files/.maxfailures b/crowdsec_filters/http-sensitive-files/.maxfailures deleted file mode 100644 index 882fbb5..0000000 --- a/crowdsec_filters/http-sensitive-files/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=4 (overflow at 5) -5 diff --git a/crowdsec_filters/http-sensitive-files/.scenario b/crowdsec_filters/http-sensitive-files/.scenario deleted file mode 100644 index 9c09f90..0000000 --- a/crowdsec_filters/http-sensitive-files/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-sensitive-files diff --git a/crowdsec_filters/http-sensitive-files/.timewindow b/crowdsec_filters/http-sensitive-files/.timewindow deleted file mode 100644 index 1b00446..0000000 --- a/crowdsec_filters/http-sensitive-files/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=4, leakspeed=5s -# Time window = capacity * leakspeed ≈ 20s, rounded to 30s -30 diff --git a/crowdsec_filters/http-sensitive-files/patterns.re b/crowdsec_filters/http-sensitive-files/patterns.re deleted file mode 100644 index 2d3da9f..0000000 --- a/crowdsec_filters/http-sensitive-files/patterns.re +++ /dev/null @@ -1,65 +0,0 @@ -# Sensitive files detection patterns (regex) -# Based on CrowdSec http-sensitive-files scenario - -# Environment files (anywhere in path) -/\.env($|[.~]|\.bak|\.backup|\.old|\.save|\.txt) - -# Git files -/\.git(/|$) -/\.gitattributes$ -/\.gitconfig$ -/\.gitignore$ -/\.gitmodules$ - -# Other VCS -/\.svn(/|$) -/\.hg($|ignore$) -/\.bzr($|/) - -# Shell history and config (in any directory) -/\.(bash_history|bash_profile|bashrc|zsh_history|zshrc|profile|sh_history)$ - -# SSH keys and config -/\.ssh/ - -# Web server files -/\.ht(passwd|group|digest)$ -/\.user\.ini(\.bak)?$ - -# Database dumps -/(database|backup|dump|db|data)\.sql(\.gz)?$ - -# Backup archives -/(backup|site|www)\.(tar\.gz|zip|rar)$ - -# Package manager files (anywhere) -/(composer|package|package-lock)\.json$ -/(composer|yarn|Gemfile|Pipfile)\.lock$ -/Gemfile$ -/requirements\.txt$ -/Pipfile$ - -# PHP config files -/wp-config\.php([.~]|\.bak|\.old|\.txt)?$ -/wp-config-sample\.php$ -/(config|configuration|settings|database|local)\.php(\.bak|\.old)?$ -/settings\.local\.php$ - -# Framework config -/(parameters|database|secrets|credentials)\.ya?ml(\.enc)?$ - -# Docker and CI -/Dockerfile$ -/docker-compose\.ya?ml$ -/\.dockerignore$ -/\.(travis|gitlab-ci)\.yml$ -/Jenkinsfile$ - -# Cloud credentials -/\.aws/(credentials|config)$ -/(credentials|service-account|firebase)\.json$ -/\.firebaserc$ - -# Debug files -/(debug|error)\.log$ -/(phpinfo|info|test)\.php$ diff --git a/crowdsec_filters/http-wordpress-scan/.maxfailures b/crowdsec_filters/http-wordpress-scan/.maxfailures deleted file mode 100644 index c6bc781..0000000 --- a/crowdsec_filters/http-wordpress-scan/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=5 (overflow at 6) -6 diff --git a/crowdsec_filters/http-wordpress-scan/.scenario b/crowdsec_filters/http-wordpress-scan/.scenario deleted file mode 100644 index dfb9872..0000000 --- a/crowdsec_filters/http-wordpress-scan/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-wordpress-scan diff --git a/crowdsec_filters/http-wordpress-scan/.timewindow b/crowdsec_filters/http-wordpress-scan/.timewindow deleted file mode 100644 index a0e9aeb..0000000 --- a/crowdsec_filters/http-wordpress-scan/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=5, leakspeed=10s -# Time window = capacity * leakspeed ≈ 50s, rounded to 60s -60 diff --git a/crowdsec_filters/http-wordpress-scan/patterns.re b/crowdsec_filters/http-wordpress-scan/patterns.re deleted file mode 100644 index 3111972..0000000 --- a/crowdsec_filters/http-wordpress-scan/patterns.re +++ /dev/null @@ -1,32 +0,0 @@ -# WordPress scan detection patterns (regex) -# Based on CrowdSec http-wordpress-scan scenario - -# WordPress API user enumeration -/wp-json/wp/v2/users -/wp-json/oembed - -# Plugin and theme enumeration -/wp-content/(plugins|themes|uploads?)(/|$) -/wp-includes(/|$) - -# Common vulnerable plugins probing -/wp-content/plugins/(revslider|gravityforms|contact-form-7)(/|$) -/wp-content/plugins/(nextgen-gallery|jetpack|woocommerce)(/|$) -/wp-content/plugins/(yoast-seo|all-in-one-seo-pack)(/|$) -/wp-content/plugins/(wp-file-manager|duplicator|wordfence)(/|$) - -# Readme and changelog enumeration (version disclosure) -/wp-content/(plugins|themes)/[^/]+/(readme|changelog)\.txt$ -/(readme\.html|license\.txt)$ - -# WordPress XML-RPC (brute force vector) -/xmlrpc\.php$ - -# WordPress config backup files -/wp-config\.(php[.~]|php\.(bak|old|txt|save)|old|bak|txt)$ - -# Debug log exposure -/wp-content/debug\.log$ - -# WordPress installation/upgrade files -/wp-admin/(install|setup-config|upgrade)\.php$ diff --git a/crowdsec_filters/url_collected/url.re b/crowdsec_filters/url_collected/url.re deleted file mode 100644 index 4ae8eb4..0000000 --- a/crowdsec_filters/url_collected/url.re +++ /dev/null @@ -1,136 +0,0 @@ -\.axd$ -\.backup$ -\.bak$ -\.log$ -\.old\d*$ -\.orig$ -\.rej$ -\.sql$ -\.zip$ -^/\+ -^/account -^/admin -^/admin/ -^/api$ -^/api/aws -^/api/session/properties -^/api/.*about$ -^/api/.*version$ -^/app -^/app/ -^/assets/ -^/backend$ -^/backend/ -^/backup -^/backup/ -^/base -^/blog -^/bower_components/ -^/build/ -^/cache/ -^/cf_scripts/ -^/cfide -^/cgi-bin/ -^/cgi-mod/ -^/cluster -^/cms -^/conf/ -^/config/ -^/configs/ -^/container -^/core/ -^/cpanel -^/crm -^/dana/ -^/dashboard/ -^/data/ -^/db/ -^/demo -^/deploy/ -^/deployments/ -^/dev/ -^/dist/ -^/downloads/ -^/dniapi/ -^/env$ -^/env/ -^/environment/ -^/evox/ -^/etc/ -^/files/ -^/fog/ -^/geoserver/ -^/helpdesk/ -^/hnap1 -^/hello.world -^/horizon -^/human\.aspx -^/i/ -^/identity$ -^/includes/ -^/index\.js -^/info$ -^/ini/ -^/internal_forms_authentication -^/ise/ -^/jasperserver-pro/ -^/jasperserverTest/ -^/json/ -^/lib/ -^/license.txt -^/log/ -^/login\.php -^/logs/ -^/magento_version -^/main\.asp -^/main\.js -^/main\.shtml -^/manage/ -^/nmap -^/owa/ -^/owncloud/ -^/panel -^/partymgr/ -^/php/ -^/phpunit -^/pma/ -^/private/ -^/prod/ -^/public -^/public/ -^/release/ -^/releases/ -^/rest/applinks/ -^/scripts/ -^/sdk$ -^/setting/ -^/settings/ -^/sh/ -^/shell/ -^/sql/ -^/src/ -^/staging/ -^/status\.php -^/sugar_version.json -^/system/ -^/telescope -^/temp/ -^/test -^/tmp/ -^/toml/ -^/uploads/ -^/user$ -^/var/ -^/vendor -^/vendor/ -^/webmail -^/webui$ -^/workspace -^/ws -^/www -^/xml/ -^/xmldata -^/yaml/ -^/yii -^/yml/ -^/zend diff --git a/crowdsec_filters/url_collected/url.txt b/crowdsec_filters/url_collected/url.txt deleted file mode 100644 index 247c403..0000000 --- a/crowdsec_filters/url_collected/url.txt +++ /dev/null @@ -1,131 +0,0 @@ -/%c0 -/*.map -/.aws/credentials -/.elasticbeanstalk/ -/.env -/.env.backup -/.env.bak -/.env.ci -/.env.config -/.env.default -/.env.dev -/.env.dev.local -/.env.development.local -/.env.dist -/.env.live -/.env.local -/.env.preprod -/.env.prod -/.env.prod.local -/.env.production -/.env.production.local -/.env.qa -/.env.sandbox -/.env.save -/.env.secret -/.env.stage -/.env.staging.local -/.env.template -/.env.test -/.env.testing -/.env.testing.local -/.env.uat -/.env_sample -/.envrc -/.git/ -/.gitlab-ci.yml -/.hg/ -/.idea/ -/.next/ -/.sql.gz -/.svn/ -/.tar.gz -/.travis.yml -/.vscode/ -/Booking/Default.aspx -/Capfile -/Gemfile -/Jenkinsfile -/Procfile -/_logs/ -/_profiler/ -/access.log -/api/config -/api/credentials -/api/docs -/api/info -/api/keys -/api/login -/api/settings.json -/api/users -/app.js -/app.log -/app.yaml -/application.properties -/application.yml -/appsettings.json -/aws-credentials.txt -/bundle.js -/circle.yml -/config.ini -/config.json -/config.old.php -/config.php -/config.yaml -/config/default.json -/config/dev.json -/credentials.txt -/database_old.json -/debug.php -/error.log -/geoserver/web/ -/graphql -/helm/ -/index.php -/info.php -/internal/config -/js/NewWindow_2_all.js -/logs/ -/mail/.env -/node_modules/ -/nohup.out -/package.json -/php-version.php -/php.php -/phpinf.php -/phpmyadmin/ -/phpv.php -/pi.php -/pinfo.php -/pom.xml -/requirements.txt -/resque/ -/secrets.txt -/secure-config.json -/sendgrid.env -/serverinfo.php -/serverless.yml -/settings.json -/settings.py -/settings.yaml -/showLogin.cc -/sidekiq/ -/sitecore/shell/sitecore.version.xml -/src/main/resources/application.yml -/swagger-ui.html -/swagger.json -/sysinfo.php -/temp/ -/template.yaml -/terraform.tfstate -/test.php -/tmp/ -/users.csv -/web.config -/webui/ -/wp-config.php -/wp-content/debug -/yarn.lock -Dockerfile -docker-compose -phpinfo diff --git a/crowdsec_filters/url_crowdsec/backdoors.txt b/crowdsec_filters/url_crowdsec/backdoors.txt deleted file mode 100644 index 26c2268..0000000 --- a/crowdsec_filters/url_crowdsec/backdoors.txt +++ /dev/null @@ -1,193 +0,0 @@ -c99.php -c99shell.php -r57.php -r58.php -dra.php -r00t.php -root.php -mma.php -filesman.php -Locus7s.php -c99-Ultimate.php -c100.php -Ekin0x.php -hacker.php -safe0ver.php -sniper.php -spyshell.php -CWShellDumper.php -angel.php -dq.php -cmd.php -liz0zim.php -simattacker.php -tryag.php -150.php -Ani-Shell.php -Crystal.php -Dx.php -FaTaLisTiCz_Fx.php -G5.php -NCC-Shell.php -NetworkFileManagerPHP.php -PHANTASMA.php -PHPJackal.php -PHPRemoteView.php -PHPSPY.php -Php_Backdoor.txt.php -Private-i3lue.php -SnIpEr_SA Shell.php -upl0ader.php -acid.php -antichat.php -shell.php -udp.php -ddos.php -b37.php -backupsql.php -bdotw44shell.php -bug.php -c37.php -c66.php -c99-shadows-mod.php -c99_PSych0.php -c99_locus7s.php -c99_madnet.php -c99_w4cking.php -c99madshell.php -c99ud.php -c99unlimited.php -c99v2.php -cbfphpsh.php -cihshell_fix.php -co.php -connect-back.php -cpg_143_incl_xpl.php -ctt_sh.php -cybershell.php -egy.php -erne.php -ex0shell.php -g00nv13.php -hkrkoz.php -ironshell.php -isko.php -iskorpitx.php -itsecteam_shell.php -locus.php -log.php -simple_cmd.php -zacosmall.php -weevely.php -AK-74.php -Ajax_PHP_Command_Shell.php -Antichat_Shell.php -Ayyildiz_Tim.php -CasuS-1.5.php -CrystalShell.php -DTool_Pro.php -Dive_Shell.php -GRP_WebShell.php -Gamma_Web_Shell.php -JspWebshell_1.2.php -KA_uShell_0.1.6.php -Loaderz_WEB_Shell.php -Mackers_Private_Shell.php -Moroccan_Spamers.php -MyShell.php -NGH.php -NTDaddy_v1.9.php -Non-alphanumeric.php -PHP_Shell.php -PHVayv.php -PhpSpy.php -Predator.php -Rootshell.v.1.0.php -STNC_WebShell_v0.8.php -Safe0ver_Shell.php -Safe_Mode_Bypass.php -SimShell.php -Simple_PHP_backdoor.php -Sincap_1.0.php -Small_Web_Shell.php -WinX_Shell.php -Worse_Linux_Shell.php -ZyklonShell.php -aZRaiLPhp_v1.0.php -alfa3.php -andela.php -aspydrv.php -bloodsecv4.php -cgitelnet.php -configkillerionkros.php -dC3_Security.php -g00nshell-v1.3.php -jspshell.jsp -kral.php -lifkaS.php -lolipop.php -lostDC.php -matamu.php -megabor.php -obfuscated-punknopass.php -pHpINJ.php -php-backdoor.php -punk-nopass.php -punkholic.php -pws.php -qsd-backdoor.php -ru24_post_sh.php -s72_Shell.php -simple-backdoor.php -smevk.php -soldierofallah.php -sosyete.php -spygrup.php -stres.php -wso2.8.5.php -zehir4.php -cgitelnet.pl -cmd.pl -dc.pl -list.pl -up.pl -wewo.pl -irc.pl -pws.pl -PerlWebShellbyRST-GHC.pl -JspWebshell 1.2.jsp -browser.jsp -cmd.jsp -cmd_win32.jsp -jspShell.jsp -jspbd.jsp -list.jsp -up.jsp -up_win32.jsp -3fexe.asp -ASpy.asp -EFSO.asp -RemExp.asp -aspxSH.asp -aspxshell.aspx -aspydrv.asp -cmd.asp -cmd.aspx -cmdexec.aspx -elmaliseker.asp -filesystembrowser.aspx -fileupload.aspx -ntdaddy.asp -spexec.aspx -sql.aspx -tool.asp -toolaspshell.asp -up.asp -zehir.asp -zehir.aspx -zehir4.asp -zehir4.aspx -xleet.php -xleet-shell.php -sh3llx.php -eval-stdin.php diff --git a/crowdsec_filters/url_crowdsec/jira_cve_2021-26086.txt b/crowdsec_filters/url_crowdsec/jira_cve_2021-26086.txt deleted file mode 100644 index 226526b..0000000 --- a/crowdsec_filters/url_crowdsec/jira_cve_2021-26086.txt +++ /dev/null @@ -1,14 +0,0 @@ -/_/;/WEB-INF/web.xml -/_/;/WEB-INF/decorators.xml -/_/;/WEB-INF/classes/seraph-config.xml -/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.xml -/_/;/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml -/_/;/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.properties -/_/%3B/WEB-INF/web.xml -/_/%3B/WEB-INF/decorators.xml -/_/%3B/WEB-INF/classes/seraph-config.xml -/_/%3B/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -/_/%3B/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.xml -/_/%3B/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml -/_/%3B/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.properties \ No newline at end of file diff --git a/crowdsec_filters/url_crowdsec/log4j2_cve_2021_44228.txt b/crowdsec_filters/url_crowdsec/log4j2_cve_2021_44228.txt deleted file mode 100644 index 6f58500..0000000 --- a/crowdsec_filters/url_crowdsec/log4j2_cve_2021_44228.txt +++ /dev/null @@ -1,35 +0,0 @@ -${jndi: -${${::-j}${::-n}${::-d}${::-i}: -${${::-j}ndi -${${lower:jndi}: -${${lower:${lower:jndi}}: -${${lower:j}${lower:n}${lower:d}i: -${${lower:j}${upper:n}${lower:d}${upper:i}: -${${upper:j}${upper:n}${upper:d}${upper:i}: -${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di: -${${date:'j'}${date:'n'}${date:'d'}${date:'i'}: -${jnd${sys:SYS_NAME:-i}: -$%7Bjndi: -$%7B$%7B:-j%7D$%7B:-n%7D$%7B:-d%7D$%7B:-i%7D: -$%7B$%7B::-j%7D$%7B::-n%7D$%7B::-d%7D$%7B::-i%7D: -$%7B$%7B::-j%7Dndi -$%7B$%7Blower:jndi%7D: -$%7B$%7Blower:$%7Blower:jndi%7D%7D: -$%7B$%7Blower:j%7D$%7Blower:n%7D$%7Blower:d%7Di: -$%7B$%7Blower:j%7D$%7Bupper:n%7D$%7Blower:d%7D$%7Bupper:i%7D: -$%7B$%7Bupper:j%7D$%7Bupper:n%7D$%7Bupper:d%7D$%7Bupper:i%7D: -$%7Bj$%7B$%7B:-l%7D$%7B:-o%7D$%7B:-w%7D$%7B:-e%7D$%7B:-r%7D:n%7Ddi: -$%7B$%7Bdate:'j'%7D$%7Bdate:'n'%7D$%7Bdate:'d'%7D$%7Bdate:'i'%7D: -$%7Bjnd$%7Bsys:SYS_NAME:-i%7D: -%24%7Bjndi: -%24%7B%24%7B::-j%7D%24%7B::-n%7D%24%7B::-d%7D%24%7B::-i%7D: -%24%7B%24%7B::-j%7Dndi -%24%7B%24%7Blower:jndi%7D: -%24%7B%24%7Blower:%24%7Blower:jndi%7D%7D: -%24%7B%24%7Blower:j%7D%24%7Blower:n%7D%24%7Blower:d%7Di: -%24%7B%24%7Blower:j%7D%24%7Bupper:n%7D%24%7Blower:d%7D%24%7Bupper:i%7D: -%24%7B%24%7Bupper:j%7D%24%7Bupper:n%7D%24%7Bupper:d%7D%24%7Bupper:i%7D: -%24%7Bj%24%7B%24%7B:-l%7D%24%7B:-o%7D%24%7B:-w%7D%24%7B:-e%7D%24%7B:-r%7D:n%7Ddi: -%24%7B%24%7Bdate:'j'%7D%24%7Bdate:'n'%7D%24%7Bdate:'d'%7D%24%7Bdate:'i'%7D: -%24%7Bjnd%24%7Bsys:SYS_NAME:-i%7D: -${jnd${upper:ı}: diff --git a/crowdsec_filters/url_crowdsec/path_traversal.txt b/crowdsec_filters/url_crowdsec/path_traversal.txt deleted file mode 100644 index 54ea252..0000000 --- a/crowdsec_filters/url_crowdsec/path_traversal.txt +++ /dev/null @@ -1,33 +0,0 @@ -../ -..\ -..\/ -%2e%2e%2f -%2E%2E%2F -%252e%252e%252f -%252E%252E%252F -/etc/passwd -/etc/hosts -/etc/shadow -/etc/groups -%2fetc%2fhosts -%2fetc%2fshadow -%2fetc%2fgroups -%2fetc%2fpasswd -%2Fetc%2Fhosts -%2Fetc%2Fshadow -%2Fetc%2Fgroups -%2Fetc%2Fpasswd -=file:// -=zip:// -=php:// -=expect:// -=data:// -/proc/self/ -/var/log/ -windows/win.ini -Windows/win.ini -%25SYSTEMROOT%25%5Cwin.ini -C:/inetpub/wwwroot/global.asa -C:\inetpub\wwwroot\global.asa -C:/boot.ini -C:\boot.ini diff --git a/crowdsec_filters/url_crowdsec/picked-from-scenarios.re b/crowdsec_filters/url_crowdsec/picked-from-scenarios.re deleted file mode 100644 index 21934d2..0000000 --- a/crowdsec_filters/url_crowdsec/picked-from-scenarios.re +++ /dev/null @@ -1,8 +0,0 @@ -^[^\?]*/apps/login -^[^\?]*/c99\.php -^[^\?]*/wp-login\.php -^[^\?]*/xmlrpc\.php -^[^\?]*\.exe$ -^[^\?]*\.exe\? -^[^\?]*\.dll$ -^[^\?]*\.dll\? diff --git a/crowdsec_filters/url_crowdsec/sensitive_data.txt b/crowdsec_filters/url_crowdsec/sensitive_data.txt deleted file mode 100644 index 429dda6..0000000 --- a/crowdsec_filters/url_crowdsec/sensitive_data.txt +++ /dev/null @@ -1,90 +0,0 @@ -.sql -.sql.gz -.sql.tar -.sql.bzip2 -.sql.bz2 -.sql.zip -.sql.rar -.sql.7z -.bash_history -.bashrc -.cache -.config -.cvs -.cvsignore -.env -.env.backup -env.bak -env.backup -.env.dev -.env.development.local -.env.dist -.env.docker.dev -.env.local -.env.php -.env.prod -.env.production.local -.env.sample.php -.env.save -.env.stage -.env.test -.environment -.envrc -.envs -.env~ -env.production.js -env.test.js -env.dev.js -test-env.json -env.json -.forward -.jupyter/jupyter_notebook_config.json -.git/HEAD -.git/config -.git -.gitlab-ci/.env -.history -.hta -.htaccess -.htpasswd -.lanproxy/config.json -.listing -.listings -.msmtprc -.mysql_history -.passwd -.pwd -.perf -.profile -.rhosts -.sh_history -.ssh -.subversion -.svn -.svn/entries -.s3cfg -.bak -.exe -.bat -.dll -.printer -.pac -.aws -.aws/config -.awscfg -aws-key.yml -config/aws.yml -secrets.yml -secrets.json -aws/credentials -.config/gatsby/config.json -.deployment-config.json -.docker/config.json -.docker/.env -.docker/daemon.json -.cordova/config.json -.vscode/sftp.json -_wpeprivate/config.json -composer.json -composer.lock -debug.log diff --git a/crowdsec_filters/url_crowdsec/sqli_probe_patterns.txt b/crowdsec_filters/url_crowdsec/sqli_probe_patterns.txt deleted file mode 100644 index 98c64ef..0000000 --- a/crowdsec_filters/url_crowdsec/sqli_probe_patterns.txt +++ /dev/null @@ -1,18 +0,0 @@ -%40%40version -..xp_cmdshell -information_schema.tables -%20union%20all%20select%20 -%20union%20select%20 -%2cnull%2cnull -benchmark%28 -load_file%28 -substr%28 -substring%28 -selectchar%28 -%7c%7cchr%28 -distinct%28 -pg_sleep%28 -sleep%28 -upper%28 -hex%28 -md5%28 diff --git a/crowdsec_filters/url_crowdsec/thinkphp_cve_2018-20062.txt b/crowdsec_filters/url_crowdsec/thinkphp_cve_2018-20062.txt deleted file mode 100644 index 8e1116a..0000000 --- a/crowdsec_filters/url_crowdsec/thinkphp_cve_2018-20062.txt +++ /dev/null @@ -1,13 +0,0 @@ -index/\\think\\app/invokefunction&function=call_user_func_array&vars -index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars -index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars -index/\\\\think\\\\app/invokefunction&function=call_user_func_array&vars -index/\\think\\view\\driver\\Php/display&content=<\?php -index/\\x5Cthink\\x5Cview\\x5Cdriver\\x5CPhp/display&content=<\?php -index/\\\\x5Cthink\\\\x5Cview\\\\x5Cdriver\\\\x5CPhp/display&content=<\?php -index/%5Cthink%5Cview%5Cdriver%5CPhp/display&content=%3C\?php -index/\\think\\Container/invokefunction&function=call_user_func_array&vars -index/%5Cthink%5CContainer/invokefunction&function=call_user_func_array&vars -index/\\x5Cthink\\x5CContainer/invokefunction&function=call_user_func_array&vars -index/\\\\think\\\\Container/invokefunction&function=call_user_func_array&vars -index/\\x09hink\\x07pp/invokefunction&function=call_user_func_array&vars diff --git a/crowdsec_filters/url_crowdsec/xss_probe_patterns.txt b/crowdsec_filters/url_crowdsec/xss_probe_patterns.txt deleted file mode 100644 index c03a93d..0000000 --- a/crowdsec_filters/url_crowdsec/xss_probe_patterns.txt +++ /dev/null @@ -1,36 +0,0 @@ -foo\ -^/\?Mode=debug -^/\?controller=auth\&action=login -^/\?controller=user\&action=login -^/\?page=login -^/\?page=login\&action=about -^/\?page=shop/cart\&func=cartAdd\&product_id=\' -^/\?q=0\&l=0 -^/\?view=home -^/\?wicket\:bookmarkablePage=\:com\.videoiq\.fusion\.camerawebapi\.ui\.pages\.LoginPage -^/AChecker/checker/index\.php -^/AContent/home/index\.php -^/AM/index\.php -^/ANT/Lisez\%20moi\.txt -^/ANT/Readme\.txt -^/ANT/news/admin/index\.php -^/APG/info/about -^/ATutor/login\.php -^/About\.html -^/Account/LogIn -^/AdminWeb/ -^/Admin_files/ -^/Administration/ -^/AdvWebAdmin/ -^/Agent/ -^/Agents/ -^/Album/ -^/AlbumArt_/ -^/AnimaGallery/index\.php -^/Ant/Lisez\%20moi\.txt -^/Ant/Readme\.txt -^/Ant/news/admin/index\.php -^/ApplicationEngine/ -^/Applications/dellUI/Strings/EN_about_hlp\.htm -^/ArticleSetup/upload/index\.php -^/Auth\.action -^/Autodiscover -^/Autodiscover/Autodiscover\.xml -^/Backburner/ -^/BigTree/admin/login/ -^/BigTree/site/index\.php/admin/login/ -^/BizTalkServerDocs/ -^/BizTalkServerRepository/ -^/BizTalkTracking/ -^/Boutiques/ -^/CCC/login\.html -^/CFIDE/administrator/index\.cfm -^/CFIDE/probe\.cfm -^/CGI/Java/Serviceability\?adapter=device\.statistics\.device -^/CHANGELOG -^/CHANGES -^/CHANGES\.md -^/CMR/web/login -^/CRM/index\.php -^/CS/ -^/CVS/ -^/CVS/Entries -^/ChangeLog -^/ClearBudget/db/budget\.sqlite -^/ClipBucket/admin_area/login\.php -^/ConsoleHelp/default\.jsp -^/ControlManager/default\.htm -^/Corporate/ -^/Count\.cgi\?align=topcenter -^/CruxCMS/login\.php -^/CruxCMS300/manager/login\.php -^/CruxPA200/Manager/login\.php -^/CruxPA200/login\.php -^/CultBooking/login -^/DB4Web/ -^/DMC/titleBar\.php -^/DMR/ -^/DPI11F/index\.php -^/DVWA/ -^/DeepSleep\.js -^/Default\.aspx -^/DevMgmt/ProductConfigDyn\.xml -^/Device/Device\.html -^/DeviceInfo -^/Device_Information\.htm -^/DigitalScribe/login\.php -^/DigitalScribe/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/DocuColor/ -^/Documentation/misc/about\.jsp -^/Dotproject/index\.php -^/DroboAccess/ -^/DroboPix/ -^/ECP -^/EWS -^/EWS/Exchange\.asmx -^/EWS/Services\.wsdl -^/English\.js -^/EspoCRM/index\.php -^/Esprit/public/Login\.jsp -^/Exchange -^/ExoPHPDesk/index\.php -^/F3Site/SYSTEM/index\.php -^/F3Site/index\.php -^/FCKeditor/_whatsnew\.html -^/FCKeditor/fckeditor\.js -^/FCMS/index\.php -^/FPWS/index\.php -^/FileSharing/index\.php -^/FinderView\-master/index\.html -^/FinderView/index\.html -^/FlashChat/index\.php -^/FreeDirectory/index\.php -^/GW5/GWWEB\.EXE\?GET\-CONTEXT\&HTMLVER=AAA -^/GW5/GWWEB\.EXE\?HELP=bad\-request -^/GWWEB\.EXE\?GET\-CONTEXT\&HTMLVER=AAA -^/GWWEB\.EXE\?HELP=bad\-request -^/GXApp/ -^/Gallery/index\.php -^/GetSimple/index\.php -^/Gigs/index\.php -^/Gnat\-TGP/gnat/admin/index\.php -^/HB/ -^/HBTemplates/ -^/HNAP1 -^/HNAP1/ -^/HTMLEditor/_whatsnew\.html -^/HTMLEditor/fckeditor\.js -^/Hastymail2/index\.php -^/IBMWebAS/ -^/IEM/admin/index\.php -^/ILIAS/setup/setup\.php -^/INDEX\.HTM -^/INVOHOST/site\.php -^/IlohaMail/index\.php -^/IlohaMail/source/index\.php -^/Index2\.php -^/Info\.live\.htm -^/Install -^/Install/ -^/Install/InstallWizard\.aspx -^/IntraMaps/ApplicationEngine/ -^/IntraMaps/applicationengine/ -^/IntraMaps70/ApplicationEngine/ -^/IntraMaps70/applicationengine/ -^/Istatus\.htm -^/JAG/guestbook\.php -^/JBookIt/ -^/JSPWiki/ -^/JaxCMS/index\.php -^/Kaltura/start/index\.php -^/LCGI -^/Lang/en\-US/common\.js -^/Liferay/ -^/Liferay/web/guest -^/LightNEasy\.php\?do=login -^/Lisez\%20moi\.txt -^/LiveTime/WebObjects/LiveTime\.woa -^/LiveZilla/index\.php -^/Log/ -^/Login -^/Login\.aspx -^/Login\.do -^/Login\.htm -^/Login\.jsp -^/Login\.php -^/Login\?omacmd=getlogin\&page=Login\&managedws=true -^/LoginPage\.do -^/MCshoutBox/shoutbox\.php -^/MNU_access_login_top\.htm -^/Mail/ -^/Main/WebHome -^/ManagerSystem/login\.php -^/MessagingManager/ -^/Microsoft\-Server\-ActiveSync -^/Microsoft\-Server\-ActiveSync/default\.css -^/Microsoft\-Server\-ActiveSync/default\.eas -^/Moin/SystemInfo -^/Monsta\-FTP\-master/ -^/Msword/ -^/MyBB/index\.php -^/MySQLDumper/index\.php -^/NSearch/ -^/Nagios/login\.php -^/Nakid/index\.php -^/NetDynamic/ -^/NetDynamics/ -^/News/ -^/Nextcloud/status\.php -^/NmConsole/ -^/NmConsole/User/LogIn\?AspxAutoDetectCookieSupport=1 -^/NodeBB/ -^/NonExistent1369180409/ -^/NoticeBoardPro/index\.php -^/OAB -^/OPAC\-kpwinSQL/index\.php -^/OPAC/index\.php -^/OPT127MAX/opt/index\.php\?OPT_Session=VT_Req -^/OTRS/index\.pl -^/OTRS/installer\.pl -^/OTRS/public\.pl -^/OWA -^/Odoo/web/login -^/Open\-Xchange/ox\.html -^/OpenVASVT445166832\.html -^/Openmairie_Annuaire/index\.php -^/Openmairie_Annuaire/login\.php -^/Openmairie_Catalogue/doc/catalogue\.html -^/Openmairie_Cimetiere/index\.php -^/Openmairie_Cimetiere/login\.php -^/Openmairie_Cominterne/index\.php -^/Openmairie_Cominterne/login\.php -^/Openmairie_Courrier/index\.php -^/Openmairie_Courrier/login\.php -^/Openmairie_Foncier/index\.php -^/Openmairie_Foncier/login\.php -^/Openmairie_Planning/index\.php -^/Openmairie_Planning/login\.php -^/Openmairie_Presse/index\.php -^/Openmairie_Presse/login\.php -^/Openmairie_RegistreCIL/index\.php -^/Openmairie_RegistreCIL/login\.php -^/OperaLogin/Welcome\.do -^/Orbis/admin/login\.php -^/Overview\.html -^/OwnCloud/status\.php -^/PDG_Cart/ -^/PHPBazar/index\.php -^/PHPMailer\-master/README -^/PHPMailer\-master/README\.md -^/PHPMailer\-master/composer\.json -^/PHPMailer\-master/extras -^/PHPMailer\-master/lib/composer\.json -^/PHPMailer/README -^/PHPMailer/README\.md -^/PHPMailer/composer\.json -^/PHPMailer/extras -^/PHPMailer/lib/composer\.json -^/PHPMyAdmin/ -^/PHPMyAdmin/index\.php -^/PHPSurveyor/index\.php -^/PHPmongoDB/index\.php -^/PRESENTATION/ADVANCED/FORCE_PASSWORD/TOP\?accsessmethod=0 -^/PRESENTATION/HTML/TOP/INDEX\.HTML -^/PassTrixMain\.cc -^/PhPmyAdMin/index\.php -^/Phpunity_Newsmanager/tmpl/news_main\.htm -^/PivotX/index\.php -^/Piwigo/index\.php -^/Plone/ -^/Portal/Portal\.mwsl\?PriNav=Ident -^/Portal0000\.htm -^/PostNuke/ -^/PostNuke/docs/distribution/tour_page1\.htm -^/PostNuke/index\.php -^/PowerShell -^/ProjectSend/index\.php -^/Public/index\.php -^/PulseCMS/ -^/PulseCMS/admin/index\.php -^/PulseCMS/index\.php -^/QConvergeConsole/ -^/RCS/ -^/README -^/README\.md -^/README\.php -^/README\.txt -^/README/ -^/RELEASE\-NOTES\.txt -^/RELEASE_NOTES\.txt -^/ROADS/ -^/RSAarcher/Default\.aspx -^/Readme\.txt -^/Readme/ -^/ReleaseNotes\.txt -^/Remote/ -^/Rpc -^/SMS/index\.php -^/SOGo/ -^/SOPlanning/www/ -^/SPF/shop\.cgi -^/SQLiteManager/main\.php -^/SStc/index\.html -^/Samsara/modules/news/index\.php -^/SecretServer/Login\.aspx -^/Security/login -^/SeoPanel/ -^/ServerAdmin/UserLogin\.jsp -^/ShoreWareDirector/ -^/ShowCenter/SettingsBase\.php\?Skin=\foo\ -^/Siestta/ -^/SilverStream -^/SilverStream/ -^/SilverStream/Meta/Tables/\?access\-mode=text -^/SimpNews/news\.php -^/SimpleID/index\.php -^/SimpleID/www/index\.php -^/Site/Pages/login\.aspx -^/SiteEngine/index\.php -^/SiteScope/htdocs/SiteScope\.html -^/Spheric/admin/index\.php -^/Spheric/index\.php -^/Stats/ -^/StoreDB/ -^/Subscribe/index\.php -^/SugarCRM/ -^/SugarCRM/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/SuiteCRM/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/SwiftMailer/ -^/SwiftMailer/CHANGES -^/SwiftMailer/README -^/SwiftMailer/composer\.json -^/SwiftMailer/lib/ -^/SwiftMailer/lib/CHANGES -^/SwiftMailer/lib/README -^/SwiftMailer/lib/composer\.json -^/SystemInfo -^/TCExam/public/code/index\.php -^/Taskfreak/login -^/Taskfreak/login\.php -^/TeamPass/index\.php -^/Templates/ -^/ToDo/ -^/TomatoCart/index\.php -^/TopAccess/Device/Device\.htm -^/TrackIT/Account/LogIn -^/TrackIt/Account/LogIn -^/TrackItWeb/Account/LogIn -^/Tribisur/scripts\.php -^/Truc/login\.php -^/UI/ -^/UI/Login\.jsp -^/UI/login -^/UseBB/index\.php -^/Vanilla113rc1/index\.php -^/Vanilla117/index\.php -^/Vanilla118/index\.php -^/WEB\-INF/web\.xml -^/WEB\-INf\./web\.xml -^/WS_FTP\.INI -^/WS_FTP\.ini -^/WSsamples/ -^/WW/cwiki\.apache\.org/WW/guides\.html -^/WW/cwiki\.apache\.org/WW/home\.html -^/WackoWiki -^/WeBid/index\.php -^/Web/\? -^/WebBank/ -^/WebCalendar/ -^/WebCalendar/login\.php -^/WebConfig/ -^/WebConsole/Login\.jsp -^/WebDB/ -^/WebServiceImpl/axis2\-admin/ -^/WebServiceImpl/axis2\-web/index\.jsp -^/WebServiceImpl/index\.jsp -^/WebServiceImpl/services/Version/getVersion -^/WebServiceImpl/services/Version\?method=getVersion -^/WebServiceImpl/services/non\-existent -^/WebShop/ -^/WebSiteAdmin/index\.php -^/WebTrend/ -^/Web_store/ -^/Welcome\.do -^/WideImage\-master/composer\.json -^/WideImage\-master/doc/index\.html -^/WideImage\-master/index\.php -^/WikiHome -^/Wiky/index\.php -^/WinSCP\.ini -^/XSL/ -^/ZeusCMS/index\.php -^/Zeuscart/index\.php -^/Zikula_Core/ -^/Zikula_Core/docs/distribution/tour_page1\.htm -^/Zikula_Core/index\.php -^/_ScriptLibrary/ -^/_backup/ -^/_derived/ -^/_errors/ -^/_fpclass/ -^/_mem_bin/ -^/_notes/ -^/_objects/ -^/_old/ -^/_pages/ -^/_passwords/ -^/_private/ -^/_profiler/latest -^/_scripts/ -^/_sharedtemplates/ -^/_tests/ -^/_themes/ -^/_top\.html -^/_whatsnew\.html -^/a/ -^/a2billing/Public/index\.php -^/a2billing/admin/Public/index\.php -^/a2billing/index\.php -^/aardvarktopsites/index\.php -^/about -^/about\-show\.do -^/about\.html -^/about\.php -^/about/ -^/abtpportal/includes/esqueletos/skel_null\.php -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/acceso/ -^/access/ -^/accessset\.html -^/accesswatch/ -^/acciones/ -^/account/ -^/account/index\.php -^/account/login -^/account/login\.php -^/account/login/ -^/accounting/ -^/accounting/control/main -^/accounting/control/main/ -^/accounts/inc/include\.php\?language=0\&lang_settings\[0\]\[1\]=http\://xxxxxxxxxxxxxxx/openvasvt/ -^/accounts/login/ -^/achievo/index\.php -^/acp/index\.php -^/activex/ -^/activities/control/main -^/actuator/gateway/routes -^/adaptbb/index\.php -^/adaptcms/sitemap\.xml -^/addrbook/index\.php -^/address/index\.php -^/addressbook/index\.php -^/adm/ -^/adm/wizard\.asp -^/admcgi/ -^/admentor/ -^/admin -^/admin\#/mode -^/admin\-bak/ -^/admin\-ng/ -^/admin\-ng/login\.html -^/admin\-old/ -^/admin\.back/ -^/admin\.php -^/admin/ -^/admin/Public/index\.php -^/admin/ckeditor/CHANGES\.md -^/admin/ckeditor/ckeditor\.js -^/admin/config\.php -^/admin/doc/README\.txt -^/admin/fckeditor/_whatsnew\.html -^/admin/fckeditor/fckeditor\.js -^/admin/htmleditor/_whatsnew\.html -^/admin/htmleditor/fckeditor\.js -^/admin/index\.html\?Language=0 -^/admin/index\.jsp -^/admin/index\.php -^/admin/index\.php\?login -^/admin/install -^/admin/install\.php -^/admin/lib/gradient/gradient\.php -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/admin/lists/admin/\?page=about -^/admin/login\-default\.do -^/admin/login\.action -^/admin/login\.html -^/admin/login\.jsp -^/admin/login\.php -^/admin/login/ -^/admin/moderation\.php -^/admin/password_check_token\.php\?f_email=1\&token=\%22\%3E\%3Cscript\%3Ealert\%28/xss\-test/\%29\;\%3C/script\%3E -^/admin/public/index\.html -^/admin/setup\.php -^/admin_/ -^/admin_area/login\.php -^/admin_login\.html -^/admin_panel/index\.php -^/adminer\.php -^/adminer/ -^/adminer/adminer\.php -^/adminer/editor\.php -^/administration/ -^/administration/profiles\.php -^/administrator/ -^/adminuser/ -^/adminweb/ -^/admisapi/ -^/ads/admin/index\.php -^/ads/www/admin/index\.php -^/adserver/admin/index\.php -^/adserver/www/admin/index\.php -^/aeNovo1\.mdb -^/aeromail/index\.php -^/af\.cgi\?_browser_out=\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2Fetc\%2Fpasswd -^/afdrukken\.php -^/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/aflog/Readme\.txt -^/afterlogic/ -^/ag\.cgi -^/ag\.exe -^/ag/ang/index\.php -^/ag/index\.php -^/agentes/ -^/aihs/index\.php -^/ajaxplorer/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/ajaxportal/index\.php -^/album/index\.php -^/alerts\.php -^/algosec/suite/login\.html -^/alienform\.cgi\?_browser_out=\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2Fetc\%2Fpasswd -^/am/index\.php -^/amazon/control/main -^/amserver/UI/Login\.jsp -^/analog/ -^/analytics/ -^/analytics/index\.php -^/analytics/index\.php\?owa_do=base\.loginForm -^/ang/ang/index\.php -^/ang/index\.php -^/anguestbook/ang/index\.php -^/anguestbook/index\.php -^/anima/index\.php -^/ans\.pl\?p=\.\./\.\./\.\./\.\./\.\./usr/bin/id\|\&blah -^/ans/ans\.pl\?p=\.\./\.\./\.\./\.\./\.\./usr/bin/id\|\&blah -^/ant/Lisez\%20moi\.txt -^/ant/Readme\.txt -^/ant/news/admin/index\.php -^/anthill/ -^/ap/control/main -^/ap/control/main/ -^/apache\-wicket/index\.html -^/apache/ -^/apache/openmeetings/signin -^/apachesolr/ -^/apage/lcgi\-bin -^/apc\.php -^/apc/apc\.php -^/apc/apcinfo\.php -^/apc/apcu\.php -^/apc/index\.php -^/apcinfo\.php -^/apcu\.php -^/aphpkb/index\.php -^/api/ -^/api/appconfiguration -^/api/config/v1/version/image -^/api/index\.html -^/api/v1\.0/ -^/api/v1/ -^/api/v1/appconfiguration -^/api/v1/overview -^/api/v2\.0/ -^/api/v2/ -^/api/v2/appconfiguration -^/api/v3\.0/ -^/api/v3/ -^/api/v3/appconfiguration -^/api/v4\.0/ -^/api/v4/ -^/api/v5\.0/ -^/api/v5/ -^/api/version -^/apiclient/ember/Login\.jsp -^/apidocs/index\.html -^/apoll/admin/login\.php -^/app -^/app\.php -^/app/ -^/app/kibana -^/app/kibana/ -^/app/ui/ -^/app/ui/login\.jsp -^/appconfiguration -^/applets/ -^/appletvid\.html -^/appliance/ -^/application/ -^/application/login/login\.html -^/applicationengine/ -^/applications/ -^/apps/ -^/appsuite/apps/io\.ox/help/style\.less -^/aproxengine/engine/inc/version\.info -^/aps/Login\.do -^/ar/ -^/ar/control/main -^/ar/control/main/ -^/arcgis/rest/services/ -^/archiva/index\.action -^/archive/ -^/archives/ -^/arsc/base/index\.php -^/arsys/shared/login\.jsp -^/artifactory/webapp/home\.html\?0 -^/artmedic_links5/index\.php\?id=index\.php -^/asbru/index\.jsp -^/asp/ -^/aspnet_client -^/aspx/ -^/assetmaint/control/main -^/assetmaint/control/main/ -^/asterisk/control/main -^/atc/ -^/aterm_httpif\.cgi -^/atmail/index\.php -^/atmail/index\.php/admin -^/atsphp/index\.php -^/atutor/login\.php -^/audistat/index\.php -^/aurora/ -^/auth -^/auth/ -^/auth/login -^/auth/login\?redirect=/ -^/auth\?next=\%2F -^/authadmin/ -^/authenticate/login -^/authenticate/login\.php -^/authentication/ -^/authentication/login -^/authentication_index\.php\?PGV_BASE_DIRECTORY=http\://xxxxxxx/ -^/avarcade/index\.php -^/avarcade/upload/index\.php -^/aw/ -^/awstats\-cgi/ -^/awstats\-cgi/awstats\.pl\?framename=mainright -^/awstats\.pl\?framename=mainright -^/awstats/ -^/awstats/awstats\.pl\?framename=mainright -^/awstats/cgi\-bin/ -^/awstats/cgi\-bin/awstats\.pl\?framename=mainright -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/axis\-cgi/prod_brand_info/getbrand\.cgi -^/axis/admin/index\.php -^/axis/index\.jsp -^/axis/services/Version\?method=getVersion -^/axis/services/non\-existent -^/axis2\-admin/ -^/axis2\-web/index\.jsp -^/axis2/axis2\-admin/ -^/axis2/axis2\-web/index\.jsp -^/axis2/services/Version/getVersion -^/ayuda/ -^/b/ -^/b2\-include/ -^/b2epms/index\.php -^/b2evolution/admin\.php -^/b2evolution/blogs/admin\.php -^/b2evolution/evoadm\.php -^/b2evolution/index\.php -^/b2evolution/login\.php -^/back/ -^/backend/ -^/backend/plugin/Registration/index\.php -^/backend/plugin/Registration/index\.php\?confirm=\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/backend/start/index\.php -^/backup/ -^/backups/ -^/bacula\-web/ -^/bak/ -^/bamboo/userlogin\!default\.action -^/bamboo/userlogin\!doDefault\.action -^/banca/ -^/banco/ -^/bands/index\.php -^/bank/ -^/banner/ -^/banner01/ -^/banners/ -^/base/ -^/base/index\.php -^/basic_status -^/basicset\.html -^/basilix\.php\?is_ssl=1 -^/basilix/basilix\.php\?is_ssl=1 -^/batavi/admin/index\.php\?login -^/batch/ -^/bb\-dnbd/ -^/bblog/index\.php -^/bbv/ -^/bca\-networks/main/displayTop\.do -^/bdata/ -^/bdatos/ -^/bds/Login\.do -^/berta/engine/login\.php -^/berta/login\.php -^/beta/ -^/betsy/ress\.php -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/bi/control/main -^/bi/control/main/ -^/bid/index\.php -^/bigtree/admin/login/ -^/bigtree/site/index\.php/admin/login/ -^/bill/index\.php -^/billpay/ -^/bin/ -^/bin/view/TWiki/WebHome -^/bin/view/foswiki/WebHome -^/birt/control/main -^/birt/control/main/ -^/bitbucket/login -^/bitweaver/users/login\.php -^/bitweaver/wiki/index\.php -^/blackcat/backend/start/index\.php -^/blackcatcms/backend/start/index\.php -^/blob\.php -^/blob/blob\.php -^/blog/ -^/blog/admin/moderation\.php -^/blog/blob\.php -^/blog/blogengine/ -^/blog/database\.sql -^/blog/feed/ -^/blog/index\.php -^/blog/installer\-backup\.php -^/blog/installer\.php -^/blog/login\.php -^/blog/readme\.html -^/blog/wp\-links\-opml\.php -^/blog/wp\-login\.php -^/blogengine/ -^/blogs/admin\.php -^/boadmin/ -^/board/ -^/board/admin\.php -^/board/db/users\.dat -^/board/index\.php -^/board/upload/index\.php -^/board/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/boards/ -^/boards/index\.php -^/bolt/field/index\.php -^/bolt/index\.php -^/boltwire/field/index\.php -^/boltwire/index\.php -^/bonita/login\.jsp -^/booked/Web/\? -^/boot/ -^/box/shoutbox\.php -^/brainkeeper/index\.php -^/brainkeeper_enterprise_wiki/index\.php -^/breakcal/calendar\.cgi -^/brightmail/viewLogin\.do -^/browser/ -^/browser/dist/ -^/browser/dist/admin/ -^/btauxdir/ -^/bug/ -^/bugport/php/index\.php -^/bugs/ -^/bugs/index\.cgi -^/bugs/index\.php -^/bugs/login_page\.php -^/bugtracker/index\.php -^/bugtracker/login_page\.php -^/bugzilla/ -^/bugzilla/index\.cgi -^/buildbot/about -^/business/ -^/buy/ -^/buynow/ -^/bw/users/login\.php -^/bw/wiki/index\.php -^/c/ -^/cPassMan/index\.php -^/cPcreator/index\.php -^/cache\-stats/ -^/cache/apc\.php -^/cache/apcinfo\.php -^/cache/apcu\.php -^/cache/index\.php -^/cacti/ -^/cacti/index\.php -^/caja/ -^/calendar\.php -^/calendar\.php\?year=2004\&month=\foo\\&day=01 -^/calendar/index\.php -^/calendar/login\.php -^/calendarix/calendar\.php -^/campsite/admin/login\.php -^/campsite/implementation/site/admin/login\.php -^/campsite/implementation/site/index\.php -^/campsite/index\.php -^/campsite/src/admin/login\.php -^/campsite/src/index\.php -^/candid/htdocs/index\.php -^/candid/index\.php -^/carbon/product/about\.html -^/card/ -^/cards/ -^/cart\.php -^/cart/ -^/cart/admin/login\.php -^/cart/index\.php -^/cas\-server\-webapp/login -^/cas/login -^/cash/ -^/caspsamp/ -^/catalog\.php\?action=category_show\&id=\' -^/catalog/ -^/catalog/control/main -^/catalog/control/main/ -^/catalog/index\.php -^/catalog/ssl_check\.php -^/caucho\-status -^/cb/db/budget\.sqlite -^/cb/login -^/cb_install/ -^/cbag/ag\.cgi -^/cbag/ag\.exe -^/cbdb/db\.exe -^/cbgrn/grn\.exe -^/cbi\-bin/ -^/cbmw/mw\.exe -^/ccard/ -^/ccards/ -^/ccmadmin/showHome\.do -^/ccms/afdrukken\.php -^/ccms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/ccmuser/showHome\.do -^/cd\-cgi/ -^/cd/ -^/cdn\-cgi/trace -^/cdrom/ -^/ce_html/ -^/cedm/index\.php -^/centreon/index\.php -^/centreon/install/setup\.php -^/cert/ -^/certificado/ -^/certificate/ -^/cfappman/ -^/cfdocs/ -^/cfide/ -^/cgi\-auth/ -^/cgi\-bim/ -^/cgi\-bin/ -^/cgi\-bin/MANGA/index\.cgi -^/cgi\-bin/authLogin\.cgi -^/cgi\-bin/cbag/ag\.cgi -^/cgi\-bin/cbag/ag\.exe -^/cgi\-bin/cgi\?req=twz -^/cgi\-bin/chklogin\.cgi -^/cgi\-bin/chksession\.cgi -^/cgi\-bin/config\.cgi -^/cgi\-bin/dada/mail\.cgi -^/cgi\-bin/dna/password\.cgi -^/cgi\-bin/getServerValue\.cgi\?id=2 -^/cgi\-bin/get_status\.cgi -^/cgi\-bin/home\.ha -^/cgi\-bin/html/login\.html -^/cgi\-bin/koha/opac\-search\.pl -^/cgi\-bin/login -^/cgi\-bin/login\.cgi -^/cgi\-bin/login\.cgi\?lang=en\&src=AwLoginDownload\.html -^/cgi\-bin/login\.html -^/cgi\-bin/luci -^/cgi\-bin/mapserv\.exe\?map= -^/cgi\-bin/mapserv\?map= -^/cgi\-bin/mt/mt\.cgi -^/cgi\-bin/openwebmail/openwebmail\.pl -^/cgi\-bin/pki/pub/pki\?cmd=serverInfo -^/cgi\-bin/pub/pki\?cmd=serverInfo -^/cgi\-bin/run\-cvstrac/index -^/cgi\-bin/status\.xml -^/cgi\-bin/top\.cgi -^/cgi\-bin/view/TWiki/WebHome -^/cgi\-bin/vmtadmin\.cgi\?callType=ACTION\&actionType=VERSIONS -^/cgi\-bin/web_index\.cgi\?lang=en\&src=AwWelcome\.html -^/cgi\-bin/webproc -^/cgi\-bin2/ -^/cgi\-csc/ -^/cgi\-isapi/ -^/cgi\-lib/ -^/cgi\-local/ -^/cgi\-mod/index\.cgi -^/cgi\-nmis4/nmiscgi\.pl -^/cgi\-nmis8/nmiscgi\.pl -^/cgi\-scripts/ -^/cgi\-shl/ -^/cgi\-shop/ -^/cgi\-sys/ -^/cgi\-weddico/ -^/cgi\-win/ -^/cgi/ -^/cgi/about -^/cgi/lang/en/login\.xsl -^/cgibin/ -^/cgicso\?query=AAA -^/cgilib/ -^/cgis/ -^/cgiscripts/ -^/cgit/ -^/cgiwin/ -^/chamilo/index\.php -^/changelog -^/changelog\.txt -^/chassis/config/GeneralChassisConfig\.html -^/chat/ -^/chat/base/index\.php -^/chat/chat/setup\.php3\?next=1 -^/chat/index\.php -^/chat/setup\.php3\?next=1 -^/check_mk/login\.py -^/checker/index\.php -^/chillyCMS/index\.php -^/chipmunk/index\.php -^/chklogin\.cgi -^/chksession\.cgi -^/chora/README -^/chora/cvs\.php -^/chora/horde/services/help/\?module=chora\&show=about -^/ckeditor\.js -^/ckeditor/CHANGES\.md -^/ckeditor/ckeditor\.js -^/claroline/claroline/install/index\.php -^/class/ -^/classes/ -^/classifieds/Site_Admin/admin\.php\ -^/clearsite/about\.php -^/clicknet/index\.php -^/clicknetcms/index\.php -^/client/ -^/cliente/ -^/clientes/ -^/clientscript/ckeditor/CHANGES\.md -^/clientscript/ckeditor/ckeditor\.js -^/clientscript/fckeditor/_whatsnew\.html -^/clientscript/fckeditor/fckeditor\.js -^/clipbucket/admin_area/login\.php -^/cloud/status\.php -^/cluster/cluster -^/clustercontrol/users/login -^/clwarn\.cgi -^/cm/ -^/cmf/login -^/cmk/check_mk/login\.py -^/cmp/ -^/cmplatform/showHome\.do -^/cms/ -^/cms/\.htaccess -^/cms/\?view=home -^/cms/ChangeLog -^/cms/README -^/cms/README\.php -^/cms/admin/ -^/cms/admin/index\.php -^/cms/admin/login\.php -^/cms/admin/login/ -^/cms/admin/moderation\.php -^/cms/afdrukken\.php -^/cms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/cms/backend/start/index\.php -^/cms/cms/website\.php\?id=/de/index\.htm\&admin=login -^/cms/complete\-modules/modules/forcedownload/force_download\.php -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/boot\.ini -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/etc/passwd -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/windows/win\.ini -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/winnt/win\.ini -^/cms/data/nanoadmin\.php -^/cms/e107_admin/admin\.php -^/cms/engine/inc/version\.info -^/cms/htaccess\.txt -^/cms/includes/js/mambojavascript\.js -^/cms/indeks\.php\?db=frontpage -^/cms/index\.html -^/cms/index\.php -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/cms/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/cms/index\.php\?controller=login\&action=showlogin -^/cms/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/cms/index\.php\?mode=administration -^/cms/index\.php\?module=users\&action=user\&command=login_page -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/login\.php -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/news\.php -^/cms/nonexistent\.php -^/cms/ress\.php -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/ru/ -^/cms/site/index\.php/admin/login/ -^/cms/sitemap\.xml -^/cms/symphony/ -^/cms/system/login\.php -^/cms/templates/system/css/editor\.css -^/cms/typo3/index\.php -^/cms/typo3/sysext/opendocs/composer\.json -^/cms/typo3/sysext/recordlist/composer\.json -^/cms/typo3/sysext/sys_note/composer\.json -^/cms/typo3/sysext/t3editor/composer\.json -^/cms/typo3_src/ChangeLog -^/cms/update\.php -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/cms/website\.php\?id=/de/index\.htm\&admin=login -^/cmsample/ -^/cmscout/index\.php -^/cmsmadesimple/index\.php -^/cmssite/control/main -^/cmssite/control/main/ -^/cncms/index\.php -^/cobalt\-images/ -^/cobbler_web -^/code/ -^/codoforum/index\.php -^/coldusr/index\.cfm -^/collabtive/index\.php -^/command/inquiry\.cgi\?inqjs=sysinfo -^/comments/ -^/common/ -^/commoncgi/servlet/CCGIServlet\?ApHost=PDT_InterScan_NT\&CGIAlias=PDT_InterScan_NT\&File=logout\.htm -^/communicator/ -^/community/ -^/community/index\.php -^/community/login -^/community/upload/index\.php -^/compactcms/afdrukken\.php -^/compactcms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/company/ -^/complete\-modules/modules/forcedownload/force_download\.php -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/boot\.ini -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/etc/passwd -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/windows/win\.ini -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/winnt/win\.ini -^/composer\.json -^/composer\.json\-dist -^/composer\.json\.dist -^/composer\.lock -^/compra/ -^/compras/ -^/compressed/ -^/conecta/ -^/conf/ -^/conference/roschedule\.php -^/config\-browser/index -^/config\-browser/index\.action -^/config/ -^/config/NonExistent\.html -^/config/help\.cgi -^/configurations\.do -^/confluence/login\.action -^/connect/ -^/console/ -^/console/faces/jsp/login/BeginLogin\.jsp -^/console/login/LoginForm\.jsp -^/console/logon\.jsp -^/contao/install -^/contao/install\.php -^/content\.html -^/content\.php -^/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/content/ -^/content/control/main -^/content/control/main/ -^/content/nonexistant1331069233814248391545649413\.mp3 -^/content/smarthome\.php -^/continuum/about\.action -^/control/main -^/control/main/ -^/controllerinjectex/control/main -^/controlpanel/ -^/cookbook/index\.php -^/cool/ -^/cool/adminws/ -^/coppermine/login\.php -^/copyright/info\.js -^/core/ -^/core/orionSplashScreen\.do -^/coregui/login -^/corp/ -^/corporate/webpages/login\.jsp -^/correo/ -^/counter/ -^/counter/index\.php -^/courier/ -^/cp/index\.php -^/cpassman/index\.php -^/cpqlogin\.htm -^/cps/Login -^/cqweb/login -^/crawler/html/infoen\.htm -^/crawltrack/html/infoen\.htm -^/cre\-loaded/index\.php -^/cre/index\.php -^/credit/ -^/crm/index\.php -^/crmsfa/control/main -^/crmsfa/control/main/ -^/cron/ -^/crons/ -^/crowd/console/login\.action -^/crucible/ -^/crypt/cryptographp\.inc\.php\?cfg=verifier\.php\&sn=PHPSESSID\& -^/crypto/ -^/cs\-cart/ -^/cs/ -^/cs/login/login\.htm -^/cscart/ -^/csr/ -^/css/ -^/csvn/login/auth -^/cubecart/index\.php -^/cucm/showHome\.do -^/cuenta/ -^/cuentas/ -^/cultbooking/login -^/currency/ -^/custom_lang/English\.txt -^/customers/ -^/customviews/image/login_bg/ -^/cutenews/index\.php -^/cvs\.php -^/cvstrac/index -^/cvsweb\.cgi/ -^/cvsweb/ -^/cybercash/ -^/d/ -^/d/users/sign_in -^/dana\-cached/ -^/dana\-cached/sc/ -^/dana\-cached/setup/ -^/dana\-na/ -^/dana\-na/auth/ -^/dana\-na/download/ -^/dana\-na/meeting/ -^/dana/ -^/dana/fb/ -^/dana/fb/smb/ -^/darkportal/ -^/dashboard\.html -^/dashboard/ -^/dat/ -^/data/ -^/data/adminusers\.csv -^/data/nanoadmin\.php -^/database\.sql -^/database/ -^/database/_sessions/ -^/databases/ -^/datafiles/ -^/dataimport/control/main -^/dato/ -^/datos/ -^/dav/ -^/db\.exe -^/db/ -^/db/budget\.sqlite -^/db/users\.dat -^/dbase/ -^/dbase/aeNovo1\.mdb -^/dce/rest/settings/version -^/dcforum/ -^/ddem/login/ -^/ddreport/ -^/ddrint/ -^/de/index\.html -^/default\.cfm\?Mode=debug -^/default\.cfml\?Mode=debug -^/default\.html -^/deluxebb/index\.php -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/demo/ -^/demo/demo/phpThumb\.demo\.demo\.php -^/demo/index\.php -^/demoauct/ -^/demomall/ -^/demos/ -^/deployment\-config\.json -^/deploymentmanager/index\.jsp -^/design/ -^/desknow/index\.html -^/desktop\.php -^/desktop/container/ -^/dev/ -^/devel/ -^/development/ -^/deviceinfo\.htm -^/dezie/db\.exe -^/dfshealth\.html -^/dfshealth\.jsp -^/dialup/ -^/dialup/content\.html -^/dialup_admin/ -^/didiwiki/WikiHome -^/dienstplan/\?page=login\&action=about -^/digitalscribe/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/diglib/ -^/dir/ -^/directory/ -^/directory/index\.php -^/directorymanager/ -^/discloser/login\.php -^/discoverer/viewer -^/discuz/index\.php -^/dist/ -^/dist/admin/ -^/diycms/diy/index\.php -^/dl/ -^/dll/ -^/dm\-filemanager/login\.php -^/dm/ -^/dm/index\.php -^/dmanager/php/login\.php -^/dmf/login\.php -^/dms/ -^/dms/index\.php -^/dms0/ -^/dmsdump/ -^/dns/index\.php -^/do/view/TWiki/WebHome -^/doc\-html/ -^/doc/ -^/doc/catalogue\.html -^/doc/index\.html -^/doc/script/config/system/channelDigital\.js -^/doc/xml/en/Login\.xml -^/doc/xml/en/Preview\.xml -^/doc1/ -^/docman/admin\.php -^/docman/index\.php -^/docs/ -^/docs/RELEASE\-NOTES\.txt -^/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/docs/WW/cwiki\.apache\.org/WW/home\.html -^/docs/changelog\.html -^/docs/distribution/tour_page1\.htm -^/docs/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/docs/docs/WW/cwiki\.apache\.org/WW/home\.html -^/docs/docs/index\.html -^/docs/docs/struts2\-core\-apidocs/help\-doc\.html -^/docs/docs/struts2\-core\-apidocs/index\-all\.html -^/docs/docs/struts2\-core\-apidocs/overview\-summary\.html -^/docs/index\.html -^/docs/index\.php -^/docs/readme\.txt -^/docs/struts2\-core\-apidocs/help\-doc\.html -^/docs/struts2\-core\-apidocs/index\-all\.html -^/docs/struts2\-core\-apidocs/overview\-summary\.html -^/docs1/ -^/document/ -^/documentation\.html -^/documents/ -^/docushare/dsweb/HomePage -^/doesnt_exist/ -^/dokeos/ -^/dokeos/index\.php -^/doku\.php -^/dokuwiki/doku\.php -^/dokuwiki/feed\.php -^/dolibarr/htdocs/index\.php -^/dolibarr/index\.php -^/dolph/administration/profiles\.php -^/dolph/index\.php -^/dolphin/administration/profiles\.php -^/dolphin/index\.php -^/domainmod/CHANGELOG -^/domainmod/index\.php -^/domcfg\.nsf -^/dorg/admin_panel/index\.php -^/dotAdmin/api/appconfiguration -^/dotAdmin/api/v1/appconfiguration -^/dotAdmin/api/v2/appconfiguration -^/dotAdmin/api/v3/appconfiguration -^/dotAdmin/appconfiguration -^/dotAdmin/application/login/login\.html -^/dotAdmin/html/portal/login\.jsp -^/dotCMS/api/appconfiguration -^/dotCMS/api/v1/appconfiguration -^/dotCMS/api/v2/appconfiguration -^/dotCMS/api/v3/appconfiguration -^/dotCMS/appconfiguration -^/dotCMS/application/login/login\.html -^/dotCMS/html/portal/login\.jsp -^/dotProject/index\.php -^/dotclear/index\.php -^/dotcms/api/appconfiguration -^/dotcms/api/v1/appconfiguration -^/dotcms/api/v2/appconfiguration -^/dotcms/api/v3/appconfiguration -^/dotcms/appconfiguration -^/dotcms/application/login/login\.html -^/dotcms/html/portal/login\.jsp -^/dotproject/index\.php -^/down/ -^/download/ -^/download_manager/index\.php -^/downloader/ -^/downloads/ -^/dp/login\.xml -^/dpi/index\.php -^/dpi11f/index\.php -^/dragon/login\.jsp -^/drupal/ -^/drupal/update\.php -^/drupal6/ -^/drupal6/update\.php -^/drupal7/ -^/drupal7/update\.php -^/dsc/ -^/dspam/ -^/dsweb/HomePage -^/dswsbobje/axis2\-admin/ -^/dswsbobje/axis2\-web/index\.jsp -^/dswsbobje/index\.jsp -^/dswsbobje/services/Version/getVersion -^/dswsbobje/services/Version\?method=getVersion -^/dswsbobje/services/non\-existent -^/dtlt/home\.html -^/dump/ -^/durep/ -^/dvwa/ -^/dwa/welcome/welcome\.jsp -^/e/ -^/e107/e107_admin/admin\.php -^/e107/login\.php -^/e107/news\.php -^/e107_admin/admin\.php -^/eFront/index\.php -^/eFront/www/index\.php -^/eGroupware/egroupware/login\.php -^/eManager/ -^/eTicket/license\.txt -^/eXtplorer/extplorer\.xml -^/easylog/ -^/ebay/control/main -^/ebay/control/main/ -^/ebaystore/control/main -^/ebaystore/control/main/ -^/ecms/\?view=home -^/ecommerce/admin/login\.php -^/ecommerce/control/main -^/ecommerce/control/main/ -^/ecomseo -^/ecomseo/ -^/ecp -^/editor\.php -^/editor/ -^/editor/CHANGES\.md -^/editor/_whatsnew\.html -^/editor/ckeditor\.js -^/editor/editor\.php -^/editor/fckeditor\.js -^/eforum/ -^/efront/index\.php -^/efront/www/index\.php -^/egroupware/ -^/egroupware/login\.php -^/egw/login\.php -^/ejemplo/ -^/ejemplos/ -^/elFinder/elfinder\.html -^/elastix/index\.php -^/elfinder\.html -^/elfinder/elfinder\.html -^/elite/admin/login\.php -^/em/console/logon/logon -^/email/ -^/email/index\.php -^/emailclass/ -^/employees/ -^/empoyees/ -^/empris/ -^/en\-US/ -^/en\-US/account/login -^/en/ -^/en/index\.html -^/en/neoclassic/login/login -^/eng/js/lang_en_us\.js -^/eng/start/about\.htm -^/eng/status/statprn\.htm -^/eng/status/statprn1\.htm -^/engine/inc/version\.info -^/engine/login\.php -^/enter\.cfm -^/envia/ -^/enviamail/ -^/epesi/index\.php -^/error -^/error/ -^/error500\.html -^/errors/ -^/es/ -^/eshop/admin/ -^/esrs/html/about\.html -^/ess\.do -^/estmt/ -^/etc/ -^/euq\-login -^/evalsmsi\.php -^/evalsmsi/evalsmsi\.php -^/event/index3\.do -^/eventh/index\.php -^/eventhorizon/index\.php -^/evoadm\.php -^/evolution/manager/index\.php -^/example/ -^/example/HelloWorld\.action -^/example/control/main -^/example/control/main/ -^/exampleext/control/main -^/exampleext/control/main/ -^/examples/ -^/exc/ -^/excel/ -^/exchange/ -^/exchange/Home\.do -^/exchange/logon\.asp -^/exe/ -^/exec/ -^/exhibitor/v1/ui/index\.html -^/explorer/index\.php\?action=login -^/exponent/index\.php -^/exponent/index\.php\?controller=login\&action=showlogin -^/exponent/login\.php -^/export/ -^/express/ -^/extensions/FCKeditor/_whatsnew\.html -^/extensions/FCKeditor/fckeditor\.js -^/extensions/FCKeditor/fckeditor/_whatsnew\.html -^/extensions/FCKeditor/fckeditor/fckeditor\.js -^/external/ -^/extplorer\.xml -^/extplorer/extplorer\.xml -^/extras -^/eyeOS/desktop\.php -^/eyeos/desktop\.php -^/f/ -^/facility/control/main -^/facility/control/main/ -^/faq/ -^/faq/index\.php -^/farcry/core/webtop/install/index\.cfm -^/favicon\.ico -^/fbsd/ -^/fcgi\-bin/ -^/fckeditor\.js -^/fckeditor/_whatsnew\.html -^/fckeditor/fckeditor\.js -^/fcms/index\.php -^/feed -^/feed\.php -^/feed/ -^/feng/index\.php\?c=access\&a=login -^/feng_community/index\.php\?c=access\&a=login -^/fengoffice/index\.php\?c=access\&a=login -^/fhm/admin/login\.php -^/fibaro/en/home/login\.html -^/field/index\.php -^/file/ -^/fileexplorer/index\.php\?action=login -^/filemanager/ -^/filemanager/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/filemanager/index\.php -^/files/ -^/fileserver/index\.php -^/filestore/Login\.do -^/filr/\#/login -^/filter\.php\?dbtable=Accounts\&dbfield=Password -^/financials/control/main -^/financials/control/main/ -^/firestats/tools\.php\?file_id=reset_password -^/fisheye/ -^/fisheye/admin/login\-default\.do -^/fiyo/login\.php -^/fiyocms/login\.php -^/flash/README\.txt -^/flashlight/README\.txt -^/flatchat/index\.php -^/flatpress/index\.php -^/flexcube\@/ -^/flexcubeat/ -^/fm/Login\.do -^/fm/index\.php -^/fms/index\.php -^/fog/management/index\.php -^/foldergallery/index\.php -^/foldoc/ -^/foo\.cfm\?param=\foo\ -^/foo\.cfm\?param=\foo\\.cfm -^/foo\.jsp\?param=\foo\ -^/foo\.jsp\?param=\foo\\.jsp -^/foo\.php\?param=\foo\ -^/foo\.php\?param=\foo\\.php -^/foo\.shtml\?param=\foo\ -^/foo\.shtml\?param=\foo\\.shtml -^/foo\.thtml\?param=\foo\ -^/foo\.thtml\?param=\foo\\.thtml -^/form\-totaller/ -^/form/ -^/formalms/ -^/forms/ -^/forms/login\.fcc -^/formsmgr/ -^/forum\.php -^/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/forum/ -^/forum/admin\.php -^/forum/chat/setup\.php3\?next=1 -^/forum/content\.php -^/forum/index\.php -^/forum/login -^/forum/login\.php -^/forum/setup\.php3\?next=1 -^/forum/upload/index\.php -^/forum/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/forums/ -^/forums/index\.php -^/forums/login -^/foswiki/Main/WebHome -^/foswiki/bin/view/foswiki/WebHome -^/foto/ -^/fotos/ -^/fotoware/fotoweb/views/login -^/fotoweb/views/login -^/fpadmin/ -^/fpdb/ -^/fpsample/ -^/fpws/index\.php -^/fr/ -^/fr/index\.html -^/frameset/ -^/framesets/ -^/framework/ -^/framework/docs/distribution/tour_page1\.htm -^/framework/index\.php -^/freehostingmanager/admin/login\.php -^/freepbx/admin/config\.php -^/freewebshop/index\.php -^/frontaccount/index\.php -^/frontend/frontend\.nocache\.js -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00\&file=frontend\.js\&language=en -^/frontend/nagvis\-js/index\.php -^/froxlor/index\.php -^/fsm/login\.jsp -^/ftp/ -^/ftp/admin_login\.html -^/ftp/help\.html -^/ftp/index\.php -^/ftproot/ -^/ftpserver/admin_login\.html -^/fusion/login\.php -^/fuzzylime/_cms303/docs/readme\.txt -^/fuzzylime/index\.php -^/fw\.login\.php -^/g/ -^/gallery/ -^/gallery/admin/index\.php -^/gallery/index\.php -^/gallery/login\.php -^/gang/index\.php -^/ganglia/ -^/ganglia/index\.php -^/garoon/grn\.exe -^/gc/flash\.php -^/gdl/ -^/geccBB/index\.php -^/geccBBlite/index\.php -^/geeklog/admin/moderation\.php -^/geneald/Index2\.php -^/genealogie/Index2\.php -^/genealogie_sql/Index2\.php -^/general/information\.html\?kind=item -^/geoserver/web/\?wicket\:bookmarkablePage=\:org\.geoserver\.web\.AboutGeoServerPage -^/geoserver/welcome\.do -^/get_status\.cgi -^/getsimple/index\.php -^/gfx/ -^/gimtel/html/affich\.php\?base=http\://xxx\.xxxxxx\./ -^/git/ -^/gitea/user/login -^/glFusion/index\.php -^/glfusion/public_html/index\.php -^/global/ -^/glpi/ -^/gm\.cgi -^/gmp/ -^/gnat\-tgp/gnat/admin/index\.php -^/gnat/admin/index\.php -^/go/about\.php -^/gogs/user/login -^/gollem/index\.php -^/googlebase/control/main -^/googlebase/control/main/ -^/gosa/ -^/grades/index\.php -^/grafana/login -^/gravity/index\.php -^/greymatter/gm\.cgi -^/grn\.exe -^/grn/grn\.exe -^/grocery/ -^/group\-office/about\.php -^/groupoffice/about\.php -^/groupware/about\.php -^/groupware/login\.php -^/guacamole/ -^/guest/ -^/guestbook\.php -^/guestbook/ -^/guestbook/ang/index\.php -^/guestbook/guestbook\.php -^/guestbook/index\.php -^/guests/ -^/gui/gui_outer_frame\.shtml -^/gwadmin\-console/login\.jsp -^/gweb/index\.php -^/hastymail/index\.php -^/hastymail2/index\.php -^/hdjobq\.htm -^/hdstat\.htm -^/header\.php -^/help\.html -^/help\.php -^/help/ -^/help/contents\.htm -^/help/copyright\.html -^/help/index\.php -^/helpdesk/ -^/helpdesk/index\.php -^/helpdesk/signin\.php -^/hero/index\.php -^/hero_os/index\.php -^/hesk/index\.php -^/hhfacility/control/main -^/hhfacility/control/main/ -^/hidden/ -^/hide/ -^/hit_tracker/ -^/hitmatic/ -^/hlstats/ -^/hm2/index\.php -^/home\.cfm\?Mode=debug -^/home\.cfml\?Mode=debug -^/home\.html -^/home\.php -^/home/ -^/home/index\.php -^/home/monitoring\.cgi -^/home/msg/message_en\-US\.json -^/horde/ -^/horde/chora/README -^/horde/chora/cvs\.php -^/horde/chora/horde/services/help/\?module=chora\&show=about -^/horde/gollem/index\.php -^/horde/imp/ -^/horde/services/help/\?module=chora\&show=about -^/horizonqcms/index\.php -^/hosting/ -^/hosting/capabilities/ -^/hosting/discovery -^/hosting/discovery/ -^/hostingcontroller/ -^/howto/ -^/hp/device/ -^/hp/device/InternalPages/Index\?id=ConfigurationPage -^/hp/device/SignIn/Index -^/hp/jetdirect/index\.html -^/hpmpa/home/ -^/hpsm/ess\.do -^/hpsm/index\.do -^/hqcms/index\.php -^/hr/ -^/hrm/ -^/ht/ -^/htaccess\.txt -^/htbin/ -^/htdocs/ -^/htdocs/admin/index\.php -^/htdocs/index\.php -^/htdocs/login\.php -^/html/ -^/html/admin\.php -^/html/affich\.php\?base=http\://xxx\.xxxxxx\./ -^/html/en/index\.html -^/html/index\.php -^/html/infoen\.htm -^/html/portal/login\.jsp -^/hudson/ -^/hui/index\.html -^/humanres/control/main -^/humanres/control/main/ -^/hyperstat/ -^/i\-doit/ -^/i\.php -^/iPrinterHome\.cgi -^/ibank/ -^/ibill/ -^/icfb/ -^/icinga\-web/index\.php -^/icinga/ -^/icinga/authentication/ -^/icinga/authentication/login -^/icinga/cgi\-bin/config\.cgi -^/icinga/index\.php -^/icinga/lib/ -^/icinga/lib/icinga/ -^/icinga/main\.html -^/icinga/static/ -^/icingaweb2/ -^/icingaweb2/authentication/ -^/icingaweb2/authentication/login -^/icingaweb2/lib/ -^/icingaweb2/lib/icinga/ -^/icingaweb2/static/ -^/icons/ -^/idashboards/ -^/idb/index\.php -^/idea/ -^/ideas/ -^/identity/login/shell/sitecoreidentityserver -^/iem/admin/index\.php -^/iisadmin/ -^/iisprotect/ -^/iissamples/ -^/ikiwiki/ -^/ilias/setup/setup\.php -^/ilohamail/index\.php -^/ilohamail/source/index\.php -^/image/ -^/image/index\.php -^/imagenes/ -^/imagery/ -^/images -^/images/ -^/images/login_top\.gif -^/images/logo\.gif -^/images/logo\.png -^/images/logon_merge\.gif -^/imageset\.html -^/imcws/axis2\-admin/ -^/imcws/axis2\-web/index\.jsp -^/imcws/index\.jsp -^/imcws/services/Version/getVersion -^/imcws/services/Version\?method=getVersion -^/imcws/services/non\-existent -^/img/ -^/imp/ -^/import/ -^/impreso/ -^/inc/ -^/inc/fckeditor/_whatsnew\.html -^/inc/fckeditor/fckeditor\.js -^/include/ -^/include/fckeditor/_whatsnew\.html -^/include/fckeditor/fckeditor\.js -^/includes/ -^/includes/esqueletos/skel_null\.php -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/includes/fckeditor/_whatsnew\.html -^/includes/fckeditor/fckeditor\.js -^/includes/js/mambojavascript\.js -^/incoming/ -^/indeks\.php\?db=frontpage -^/index -^/index\.action -^/index\.asp -^/index\.aspx -^/index\.cfm -^/index\.cfm\?Mode=debug -^/index\.cfml\?Mode=debug -^/index\.cgi -^/index\.cmd\?user=Admin -^/index\.do -^/index\.hsp\?login= -^/index\.htm -^/index\.htm\. -^/index\.htm\?cat=info\&page=printerInfo -^/index\.html -^/index\.js\%70 -^/index\.jsp -^/index\.nginx\-debian\.html -^/index\.php -^/index\.php\.backup -^/index\.php\.bak -^/index\.php\.bkp -^/index\.php\.copy -^/index\.php\.old -^/index\.php\.orig -^/index\.php\.save -^/index\.php\.swp -^/index\.php\.temp -^/index\.php\.tmp -^/index\.php/Special\:Version -^/index\.php/admin -^/index\.php/index/install -^/index\.php/install/ -^/index\.php/login -^/index\.php/s/login -^/index\.php/sessions/login -^/index\.php/wp\-json/ -^/index\.php5 -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/index\.php\?OPT_Session=VT_Req -^/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/index\.php\?act=login -^/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/index\.php\?action=login -^/index\.php\?action=login\.index\&host=0 -^/index\.php\?c=access\&a=login -^/index\.php\?controller=login\&action=showlogin -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/index\.php\?get_action=get_boot_conf -^/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/index\.php\?mod=home\&act=about -^/index\.php\?mode=administration -^/index\.php\?module=Users\&parent=Settings\&view=SystemSetup -^/index\.php\?module=site\&show=home -^/index\.php\?module=users\&action=user\&command=login_page -^/index\.php\?n=guest\&c=0\&m=search\&s=forum\&wert=\-1\%25\%22\%20UNION\%20ALL\%20SELECT\%201\,2\,3\,4\,CONCAT\(nick\,\%200x3a\,\%20pwd\)\,6\%20FROM\%20com_users\%23 -^/index\.php\?owa_do=base\.loginForm -^/index\.php\?page=http\://xxxxxxxxxxxxx/vt\-test -^/index\.php\?page=master\&menu1=Help\&menu2=\&menu3=\&menu4= -^/index\.php\?page=start -^/index\.php\?section=\alert\(document\.cookie\)\\&action=login -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/index\.php~ -^/index\.pl -^/index\.psgi/non\-existent\-1730364226 -^/index\.py -^/index\.rb -^/index_airmedia\.html -^/index_en\.htm -^/index_top\.htm -^/info\.php -^/info/ -^/info_deviceStatus\.html -^/info_deviceStatus\.html\? -^/info_deviceStatus\.html\?tab=Status -^/information/ -^/ingresa/ -^/ingreso/ -^/initial\.do -^/install\.php -^/install/ -^/install/index\.php -^/install/make\-config\.php -^/install/system\-compatibility -^/installation/default\.asp -^/installation/index\.php -^/installer\-backup\.php -^/installer\.php -^/installer\.pl -^/interface/login/login\.php -^/interface/logon\.do -^/interleave/index\.php -^/internal/ -^/intl/ -^/intramaps75/ApplicationEngine/ -^/intramaps75/applicationengine/ -^/intranet/ -^/intro\.php -^/intruvert/jsp/admin/Login\.jsp -^/intruvert/jsp/module/Login\.jsp -^/inventory/ -^/invitado/ -^/invohost/site\.php -^/invoiceplane/sessions/login -^/invoker/EJBInvokerServlet -^/invoker/JMXInvokerServlet -^/io/newfile\.txt -^/ipa/ui/ -^/ipb/index\.php -^/ipb/upload/index\.php -^/ipecs\-cm/admin/ -^/irokez/ru/ -^/isapi/ -^/isgw/Welcome\.do\?method=setupStartPage -^/ispcp/index\.php -^/itim/self/jsp/logon/login\.jsp -^/iwiccle/index\.php -^/iwiccle/index\.php\?module=site\&show=home -^/jag/guestbook\.php -^/jamon/menu\.jsp -^/japidoc/ -^/jasperreports/login\.html -^/jasperserver\-pro/login\.html -^/jasperserver/login\.html -^/java/ -^/javascripts/app\.js -^/javasdk/ -^/javatest/ -^/jave/ -^/jaws/index\.php -^/jaxcms/index\.php -^/jdbc/ -^/jenkins/ -^/jenkins/login -^/jetspeed/ -^/jetspeed/portal/ -^/jira/login\.jsp -^/job/ -^/joomla/\.htaccess -^/joomla/includes/js/mambojavascript\.js -^/joomla/index\.php -^/joomla/templates/system/css/editor\.css -^/jpgraph/docportal/index\.html -^/jpgraph/docs/index\.html -^/jpgraph/index\.html -^/jrun/ -^/js/ -^/js/jssrc/model/dvcinfo/dvcconfig/DvcConfig_Config\.model\.htm\?arg1=0 -^/js/jssrc/model/startwlm/Start_Wlm\.model\.htm\?arg1=\&arg2=\&arg3=\&arg4=\&arg5=\&arg6=\&arg8=\&arg9=\&arg10=0\&arg11= -^/js/language_webviewer\.js -^/js/login\.js -^/js/main\.js -^/jserv/ -^/jslib/ -^/jsonrpc\.php -^/jsp/ -^/jsp/fw/internal/Login\.jsp -^/junk/ -^/kallithea/ -^/kanboard/\?controller=auth\&action=login -^/kanboard/\?controller=user\&action=login -^/kanboard/jsonrpc\.php -^/kb/index\.php -^/kb/index\.php\?page=http\://xxxxxxxxxxxxx/vt\-test -^/keyserver/ -^/kibana/ -^/kibana/app/kibana -^/kiva/ -^/kos2/changelog\.txt -^/koschtit/changelog\.txt -^/koschtit2/changelog\.txt -^/kpwinSQL/index\.php -^/ksmg/en\-US/ -^/kvd/start/index\.php -^/labs/ -^/lam/ -^/laravel/ -^/laravel/public/telescope -^/laravel/telescope -^/laravel/telescope/requests -^/lasernet/index\.php -^/lasernet/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/lcgi -^/lcgi\-bin -^/lcgi/ -^/lcms/index\.php -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/ldap/ -^/ldap/control/main -^/ldap/control/main/ -^/ldap/index\.php -^/ldapadmin/ -^/ldapadmin/htdocs/ -^/ldapadmin/htdocs/index\.php -^/ldapadmin/index\.php -^/leap/ -^/ledger/login\.pl -^/legacy/account/login/ -^/legal/ -^/lg/ENU\.xml -^/lib/ -^/lib/CHANGES -^/lib/README -^/lib/browsefiles\.php\?dir=/etc -^/lib/browsefolders\.php\?dir=/etc -^/lib/composer\.json -^/lib/icinga/ -^/libraries/ -^/library/ -^/libro/ -^/libs/granite/core/content/login\.html\? -^/license\.php -^/license\.txt -^/license/records -^/lightneasy/LightNEasy\.php\?do=login -^/lightneasy/index\.php -^/limesurvey/index\.php -^/limny/index\.php -^/limny/upload/index\.php -^/linkSpheric/admin/index\.php -^/linkSpheric/index\.php -^/links/ -^/linpha/index\.php -^/linux/ -^/list/ -^/list/lists/admin/\?page=about -^/listinfo -^/listinfo\.cgi -^/listinfo\.py -^/listing\.php -^/lists/admin/\?page=about -^/liveview -^/livezilla/index\.php -^/lne/LightNEasy\.php\?do=login -^/lne/index\.php -^/loader/ -^/localclassifieds/classifieds/Site_Admin/admin\.php\ -^/locales/ -^/log\-in -^/log/ -^/loganalyzer/login\.php -^/logeye/security/auth/login\.jsp -^/logfile/ -^/logfiles/ -^/logg/ -^/logger/ -^/logging/ -^/logicaldoc/frontend/frontend\.nocache\.js -^/logicaldoc/login/login\.nocache\.js -^/login -^/login\.action -^/login\.asp -^/login\.aspx -^/login\.cgi -^/login\.htm -^/login\.html -^/login\.jsf -^/login\.jsp -^/login\.php -^/login\.pl -^/login\.rol -^/login\.rsp -^/login\.xhtml -^/login/ -^/login/auth -^/login/index\.php -^/login/login\.html -^/login/login\.nocache\.js -^/login\?redirects=20 -^/login_new\.asp -^/login_page\.php -^/login_up\.php3 -^/logon\.htm -^/logon\.jsp -^/logon\.php -^/logon\.php\?redirect=index\.php\&nouser=1 -^/logon/ -^/logs/ -^/logs/awstats\.pl\?framename=mainright -^/loleaflet/ -^/loleaflet/dist/ -^/loleaflet/dist/admin/ -^/lool/ -^/lool/adminws/ -^/lost\+found/ -^/lua/about\.lua -^/lua/login\.lua\?referer=/ -^/lua/onlinehelp/LUHelp0002\.html -^/lucee/admin/server\.cfm -^/lucee/doc/index\.cfm -^/lucee/templates/error/error\.cfm -^/lucence/control/main -^/lucence/control/main/ -^/m/ -^/machform/index\.php -^/machinei\.asp\?Lang=en\-us -^/magento/ -^/magento/RELEASE_NOTES\.txt -^/magento/admin/ -^/magento/downloader/ -^/magmi\-importer/ReleaseNotes\.txt -^/magmi\-importer/web/magmi\.php -^/magmi/ReleaseNotes\.txt -^/magmi/web/magmi\.php -^/mahara/admin/index\.php -^/mahara/htdocs/admin/index\.php -^/mahara/htdocs/index\.php -^/mahara/index\.php -^/mail\.cgi -^/mail/ -^/mail/accounts/inc/include\.php\?language=0\&lang_settings\[0\]\[1\]=http\://xxxxxxxxxxxxxxx/openvasvt/ -^/mail/index\.php -^/mail/index\.php/admin -^/mail/lists/admin/\?page=about -^/mail/login\.php -^/mail/source/index\.php -^/mail/src/login\.php -^/mail_log_files/ -^/mailman/ -^/mailman/listinfo -^/mailman/listinfo\.cgi -^/mailman/listinfo\.py -^/mailpop/database/_sessions/ -^/mailroot/ -^/mailwise/mw\.exe -^/main\.html -^/main\.js -^/main\.mwp\?op=2 -^/main\.php -^/main/login\.php\?action=login -^/main/web/status/ -^/mainui/ -^/makefile/ -^/mall/shop\.cgi -^/mall_log_files/ -^/mambo/README\.php -^/mambo/htaccess\.txt -^/mambo/includes/js/mambojavascript\.js -^/mambo/index\.php -^/manage/ -^/manageengine/index\.do -^/management/ -^/management/index\.php -^/manager/index\.php -^/manifest\.json -^/mantis/login_page\.php -^/mantisbt/login_page\.php -^/manual/ -^/manual/ag/contents\.htm -^/manual/en/index\.html -^/manufacturing/control/main -^/manufacturing/control/main/ -^/marketing/ -^/marketing/control/main -^/marketing/control/main/ -^/matomo/ -^/matomo/index\.php -^/mattermost/ -^/mautic/index\.php/s/login -^/md/index\.php -^/mdb\-database/aeNovo1\.mdb -^/mdpro/index\.php -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/mediawiki/index\.php/Special\:Version -^/member/ -^/member/admin/login\.php -^/members/ -^/membership/admin/login\.php -^/menu\.jsp -^/merchant\-sdk\-php/composer\.json -^/mercuryboard/ -^/mercuryboard/index\.php -^/message/ -^/messaging/ -^/metacart/ -^/minicms/index\.php -^/misc/ -^/mkstats/ -^/mod_pagespeed_global_statistics -^/mod_pagespeed_message -^/mod_pagespeed_statistics -^/module\.php/core/frontpage_welcome\.php -^/module\.php\?link=http\://xxxx\./index\.php -^/modules\.php\?name=gallery\&files=foobar -^/modules/Submit/index\.php\?op=pre\&title=\window\.alert\(document\.cookie\)\;\ -^/modules/fckeditor/_whatsnew\.html -^/modules/fckeditor/fckeditor\.js -^/modules/module_db\.php\?pivot_path=http\://xxxxxxxxxx/ -^/modules/news/index\.php -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/modx/manager/index\.php -^/moin/SystemInfo -^/mollify/backend/plugin/Registration/index\.php -^/mollify/backend/plugin/Registration/index\.php\?confirm=\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/mongo/index\.php\?action=login\.index\&host=0 -^/monitor/check_mk/login\.py -^/monitor/menu\.jsp -^/monitoring/index\.php -^/monitoring/main\.html -^/monitoring/main\.php -^/monstra/ -^/moodle/index\.php -^/moosocial/ -^/movimientos/ -^/moziloCMS/index\.php -^/mp3/ -^/mp3s/ -^/mqseries/ -^/mrbs/help\.php -^/mrbs/web/help\.php -^/mrbs1261/help\.php -^/mrbs1261/web/help\.php -^/msd/index\.php -^/msd1\.24\.4/index\.php -^/mseui/ -^/msggateway/control/main -^/msggateway/control/main/ -^/msql/ -^/mt\.cgi -^/mt/mt\.cgi -^/multiflex/control/main -^/multiflex/control/main/ -^/mutillidae/ -^/mve/help/en/inventory/am_about\.html -^/mw\.exe -^/myaccount/ -^/mybb/index\.php -^/mymsg/Login\.php -^/myportal/control/main -^/myportal/control/main/ -^/myserver/index\.html -^/mysql/ -^/mysql_admin/ -^/mysqldumper/index\.php -^/mywebsql -^/nagios/index\.php/login -^/nagios/login -^/nagios/login\.php -^/nagios/main\.html -^/nagios/main\.php -^/nagiosfusion/login\.php -^/nagioslogserver/login -^/nagiosna/index\.php/login -^/nagiosxi/login\.php -^/nagvis/frontend/nagvis\-js/index\.php -^/nakid/index\.php -^/nanocms/data/nanoadmin\.php -^/nbmember\.cgi\?cmd=test -^/nc/status\.php -^/ncadmin/ -^/nchelp/ -^/ncsample/ -^/nds/ -^/nedi/ -^/nep/status/index/ -^/net2ftp/help\.html -^/net2ftp/index\.php -^/netbasic/ -^/netburner\-logo\.gif -^/netcat/ -^/netconf\.html -^/netmagstats/ -^/netpet/index\.php -^/netrisk/index\.php -^/netscape/ -^/netshare/ -^/nettracker/ -^/new/ -^/newfile\.txt -^/news\.php -^/news/\?group_id=\&limit=50\&offset=50\;select\+1\+as\+id\,unix_pw\+as\+forum_id\,\+user_name\|\|unix_pw\+as\+summary\+from\+users -^/news/admin\.php -^/news/admin/index\.php -^/news/index\.php -^/newscoop/admin/password_check_token\.php\?f_email=1\&token=\%22\%3E\%3Cscript\%3Ealert\%28/xss\-test/\%29\;\%3C/script\%3E -^/nextcloud/status\.php -^/nextgeneration/ -^/nexus/\#browse/welcome -^/nexus/\#welcome -^/nginx\-status -^/nginx_status -^/ngx_pagespeed_global_statistics -^/ngx_pagespeed_message -^/ngx_pagespeed_statistics -^/niKa9MGnMKDw\.html -^/nidp/app -^/nl/ -^/nmiscgi\.pl -^/nnm/main -^/nodatabase/LightNEasy\.php\?do=login -^/nodatabase/index\.php -^/nodebb/ -^/non\-existent\-1159966931\.shtm -^/non\-existent\-1187858196\.php5 -^/non\-existent\-1263513827\. -^/non\-existent\-1546426698\.htm -^/non\-existent\-1868527253\.jsp -^/non\-existent\-2079473927\.html -^/non\-existent\-460935845\.php3 -^/non\-existent\-48606353/ -^/non\-existent\-608677879\.cfm -^/non\-existent\-763206966\.shtml -^/non\-existent\-834414960\.php7 -^/non\-existent\-924165093\.php4 -^/non\-existent\-941666255\.php -^/non\-existent483826565/ -^/nonexistent\.nsf -^/nonexistent\.php -^/noredirect\.html -^/nosuchfile\-10303\-10310\.php3 -^/notftp/index\.php -^/noticeboardpro/index\.php -^/noticias/ -^/novaboard/index\.php -^/novell\-service\-desk/LiveTime/WebObjects/LiveTime\.woa -^/novell/LiveTime/WebObjects/LiveTime\.woa -^/novell/welcome/index\.html -^/novelllogmanager/views/logon\.html -^/nps/servlet/webacc\?taskId=dev\.Empty\&merge=fw\.About -^/ntop\-bin/dashboard\.cgi -^/nuke/admin\.php -^/nuke/html/admin\.php -^/nuke/html/index\.php -^/nuke/index\.php -^/nullam/index\.php -^/nuxeo/ -^/nuxeo/login\.jsp -^/obj/ -^/objects/ -^/oc/status\.php -^/ocm\-provider/ -^/ocs\-provider/ -^/ocsreports/index\.php -^/odbc/ -^/odoo_cmr/web/login -^/odoo_cms/web/login -^/ofbizsetup/control/main -^/ofbizsetup/control/main/ -^/offers/ -^/office/ag\.cgi -^/office/ag\.exe -^/office/index\.php\?c=access\&a=login -^/officescan/console/html/help/webhelp/Preface\.html -^/offiria/index\.php -^/oi/index\.php -^/ojs/ -^/old/ -^/old_files/ -^/oldfiles/ -^/olt/Login\.do -^/omk/oae/login -^/omp/ -^/onlinegrades/index\.php -^/oo/ -^/open\.php -^/openadmin/index\.php\?act=help\&do=aboutOAT -^/opencart/index\.php -^/opendb/login\.php -^/opendocman/admin\.php -^/opendocman/index\.php -^/openemr/interface/login/login\.php -^/openengine/cms/website\.php\?id=/de/index\.htm\&admin=login -^/openforum/index\.php -^/openmairie_annuaire/index\.php -^/openmairie_annuaire/login\.php -^/openmairie_catalogue/doc/catalogue\.html -^/openmairie_cimetiere/index\.php -^/openmairie_cimetiere/login\.php -^/openmairie_cominterne/index\.php -^/openmairie_cominterne/login\.php -^/openmairie_courrier/index\.php -^/openmairie_courrier/login\.php -^/openmairie_foncier/index\.php -^/openmairie_foncier/login\.php -^/openmairie_planning/index\.php -^/openmairie_planning/login\.php -^/openmairie_presse/index\.php -^/openmairie_presse/login\.php -^/openmairie_registreCIL/index\.php -^/openmairie_registreCIL/login\.php -^/openmeetings/signin -^/openmrs/index\.htm -^/openmrs/login\.htm -^/opennms/login\.jsp -^/openpro/login\.php -^/opensso/UI/Login\.jsp -^/opentaps/control/main -^/openurgence_vaccin/index\.php -^/openurgencevaccin/index\.php -^/openwebmail\-cgi/openwebmail\.pl -^/openwebmail\.pl -^/openx/www/admin/index\.php -^/opnfrm/index\.php -^/oprocmgr\-service/ -^/oprocmgr\-status/ -^/opt/index\.php\?OPT_Session=VT_Req -^/oracle/ -^/oradata/ -^/orangehrm/ -^/orangehrm/login\.php -^/orangehrm/symfony/web/index\.php/auth/login -^/orbis/admin/login\.php -^/order/ -^/ordermgr/control/main -^/ordermgr/control/main/ -^/orders/ -^/orion/login -^/ortro/index\.php -^/ortro/www/index\.php -^/os/index\.php -^/os/upload/index\.php -^/osCSS/index\.php -^/osTicket/open\.php -^/osc/index\.php -^/osc/ssl_check\.php -^/osclass/index\.php -^/oscmax/admin/login\.php -^/oscmax/catalog/admin/login\.php -^/oscommerce/index\.php -^/oscommerce/ssl_check\.php -^/oss5/lib/browsefiles\.php\?dir=/etc -^/oss5/lib/browsefolders\.php\?dir=/etc -^/oss6/lib/browsefiles\.php\?dir=/etc -^/oss6/lib/browsefolders\.php\?dir=/etc -^/oss7/lib/browsefiles\.php\?dir=/etc -^/oss7/lib/browsefolders\.php\?dir=/etc -^/ossec\-wui/index\.php -^/ossec/index\.php -^/ossim/session/login\.php -^/osticket/open\.php -^/otrs\-web/ -^/otrs/ -^/otrs/index\.pl -^/otrs/installer\.pl -^/otrs/public\.pl -^/ou/index\.php -^/outgoing/ -^/overlook/src/login\.php -^/overview\.shtm -^/owa/auth/logon\.aspx -^/owa/index\.php\?owa_do=base\.loginForm -^/owls/glossaries/index\.php\?file=/boot\.ini -^/owls/glossaries/index\.php\?file=/etc/passwd -^/owls/glossaries/index\.php\?file=/windows/win\.ini -^/owls/glossaries/index\.php\?file=/winnt/win\.ini -^/ownCloud/status\.php -^/owncloud/ -^/owncloud/status\.php -^/owners/ -^/ox\.html -^/ox6/ox\.html -^/oxid\-eshop/admin/ -^/oxid/admin/ -^/pHpmyADmiN/index\.php -^/pacs/login\.php -^/pacsone/login\.php -^/page\.php\?xPage=\alert\(document\.cookie\)\ -^/page/login/login\.html -^/pages/ -^/pagespeed_admin/ -^/pagespeed_console -^/pagespeed_global_admin/ -^/pandora_console/index\.php -^/panel/ -^/papoo/ -^/parser/parser\.php\?file=\foo\ -^/partymgr/control/main -^/partymgr/control/main/ -^/passman/index\.php -^/passport/ -^/passport/control/main -^/passport/control/main/ -^/password/ -^/passwords/ -^/payment/ -^/payments/ -^/paypal/composer\.json -^/pb/index\.php -^/pbx/gate\?bean=pbxadmin\.web\.PbxLogin -^/pccsmysqladm/ -^/pecio\-cms/index\.php -^/pecio/index\.php -^/pecio_cms/index\.php -^/pem/login/pages/login\.jsf -^/pentaho\-di/Login -^/pentaho\-solutions/Login -^/pentaho/Login -^/perl\-status -^/perl\-status/ -^/perl/ -^/perl5/ -^/personal/ -^/personal_pages/ -^/petition/signing_system\-admin/index\.php -^/pforum/ -^/pgadmin/intro\.php -^/phPmYaDmiN/index\.php -^/phorum/ -^/phorum/admin\.php -^/photo/ -^/photo/index\.php -^/photopost/index\.php -^/photos/ -^/photos/index\.php -^/php\-belt/index\.php -^/php\-calendar/index\.php -^/php\-fusion/home\.php -^/php\-fusion/news\.php -^/php\-nuke/admin\.php -^/php\-nuke/html/admin\.php -^/php\-nuke/html/index\.php -^/php\-nuke/index\.php -^/php\-utility\-belt\-master/index\.php -^/php\-vms/index\.php -^/php/ -^/php/login\.php -^/php/mytutos\.php -^/phpBB/ -^/phpBB/index\.php -^/phpBB2/index\.php -^/phpBB3/index\.php -^/phpBB31/index\.php -^/phpBazar/index\.php -^/phpCoin165/license\.php -^/phpMyAdmin/ -^/phpMyAdmin/index\.php -^/phpMyadMiN/index\.php -^/phpNagios/index\.php -^/phpPgAdmin/intro\.php -^/phpPhotoAlbum/ -^/phpSecurePages/ -^/phpThumb\.demo\.demo\.php -^/phpThumb/demo/phpThumb\.demo\.demo\.php -^/php_classes/ -^/php_info\.php -^/phpaaCMS/index\.php -^/phpbb/index\.php -^/phpbt/index\.php -^/phpclassifieds/ -^/phpcoin/license\.php -^/phpcom/index\.php\?n=guest\&c=0\&m=search\&s=forum\&wert=\-1\%25\%22\%20UNION\%20ALL\%20SELECT\%201\,2\,3\,4\,CONCAT\(nick\,\%200x3a\,\%20pwd\)\,6\%20FROM\%20com_users\%23 -^/phpfinance/index\.php -^/phpfootball/filter\.php\?dbtable=Accounts\&dbfield=Password -^/phpforum/index\.php -^/phpfusion/home\.php -^/phpfusion/news\.php -^/phpgroupware/login\.php -^/phpgw/login\.php -^/phpicalendar/print\.php -^/phpimageview/ -^/phpinfo\.php -^/phpip/ -^/phpip/login\.php -^/phpipam/\?page=login -^/phpldapadmin/ -^/phpldapadmin/htdocs/ -^/phpldapadmin/htdocs/index\.php -^/phpldapadmin/index\.php -^/phplite/ -^/phplite/index\.php -^/phplite/phpliteadmin\.php -^/phpliteadmin\.php -^/phpliteadmin/ -^/phpliteadmin/index\.php -^/phpliteadmin/phpliteadmin\.php -^/phplive/index\.php -^/phpmailer/README -^/phpmailer/README\.md -^/phpmailer/composer\.json -^/phpmailer/extras -^/phpmailer/lib/composer\.json -^/phpmongodb/index\.php -^/phpmv2/index\.php -^/phpmyadmin/ -^/phpmyadmin/index\.php -^/phpmyfaq/index\.php -^/phpmyvisites/index\.php -^/phpnagios/index\.php -^/phpnuke/ -^/phpnuke/admin\.php -^/phpnuke/html/admin\.php -^/phpnuke/html/index\.php -^/phpnuke/index\.php -^/phportfolio/index\.php -^/phppgadmin/ -^/phppgadmin/intro\.php -^/phpprojekt/ -^/phpqa/index\.php -^/phpqa/phpqa/index\.php -^/phprainchecks/settings\.php -^/phpservermon/index\.php -^/phpshop/index\.php -^/phpsurveyor/index\.php -^/phpticket/index\.php -^/phptt/index\.php -^/phpunit/ -^/phpunity\.newsmanager/tmpl/news_main\.htm -^/phpvidz/index\.php -^/phpvidz_0\.9\.5/index\.php -^/phpvms/index\.php -^/phpwebsite/index\.php\?module=users\&action=user\&command=login_page -^/phpwebthings/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/phpwebthings/index\.php -^/phpwiki/index\.php -^/phpwt/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/phpx/index\.php -^/phreeBooks/index\.php -^/phreebooks/index\.php -^/phreedom/index\.php -^/phux/index\.php -^/piranha/ -^/pivot/index\.php -^/pivot/modules/module_db\.php\?pivot_path=http\://xxxxxxxxxx/ -^/pivot/pivot/index\.php -^/pivotx/index\.php -^/piwigo/index\.php -^/piwik/ -^/piwik/index\.php -^/pki/pub/pki\?cmd=serverInfo -^/pligg/index\.php -^/plone/ -^/pls/ -^/plugin\-management/html/homepage\:main\.int\.html -^/plugins/fckeditor/_whatsnew\.html -^/plugins/fckeditor/fckeditor\.js -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/pma/ -^/pma/index\.php -^/pmwiki\.php -^/pmwiki/pmwiki\.php -^/podcast/index\.php -^/poll/ -^/poll/admin/login\.php -^/polls/ -^/pootle/about/ -^/portal\.css -^/portal/ -^/portal/includes/esqueletos/skel_null\.php -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/portal/index\.php -^/portal/login -^/postfixadmin/login\.php -^/postgres/ -^/postnuke/ -^/postnuke/docs/distribution/tour_page1\.htm -^/postnuke/index\.php -^/pp/ -^/pphlogger/index\.php -^/ppim/Readme\.txt -^/ppim/upload\.php -^/pppblog/index\.php -^/ppwb/ -^/prado/ -^/prelogin -^/prestashop/error500\.html -^/pricat/control/main -^/pricat/control/main/ -^/prime\-home/login/ -^/print\.php -^/printers/ -^/priv/ -^/privado/ -^/private/ -^/prochatrooms/help/index\.php -^/prod -^/prod/ -^/profil\.php\?id=1\%20\foo\ -^/profile -^/project/index\.php -^/projectmgr/control/main -^/projectmgr/control/main/ -^/protected/ -^/prueba/ -^/pruebas/ -^/prv/ -^/psconsole/faces/common/ProductVersion\.jsp -^/pub/ -^/pub/pki\?cmd=serverInfo -^/public\.pl -^/public/ -^/public/about\.html -^/public/code/index\.php -^/public/telescope -^/publica/ -^/publicar/ -^/publico/ -^/publish/ -^/publisher/ -^/pubn/index\.php -^/pulsecms/ -^/pulsecms/admin/index\.php -^/pulsecms/index\.php -^/punbb/index\.php -^/purchase/ -^/purchases/ -^/purchasing/control/main -^/purchasing/control/main/ -^/pw/ -^/pwn\.php -^/pwngame/pwn\.php -^/pydio/index\.php\?get_action=get_boot_conf -^/qcenter/qcenter/index\.html -^/qcms/index\.php -^/query\?group=/\* -^/quickpoll/index\.php -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/quixplore/index\.php -^/quixplorer/index\.php -^/qwerty/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/radserver/admin/index\.php -^/radserver/www/admin/index\.php -^/rails/info/properties/ -^/rails/info/routes/ -^/rainchecks/settings\.php -^/rainloop/ -^/random_banner/ -^/rave/login -^/rdp/ -^/readme\.html -^/readme\.txt -^/recentservers\.xml -^/recovery/install/ -^/redaxscript/ -^/redmine/ -^/ref/ -^/refbase/index\.php -^/refdb/index\.php -^/register\.php -^/register/ -^/registered/ -^/rem/ -^/remote/ -^/report/ -^/reports/ -^/repos/kallithea/ -^/reseller/ -^/resource/images/logon\.gif -^/resource/images/logon_t\.gif -^/resources/ckeditor/CHANGES\.md -^/resources/ckeditor/ckeditor\.js -^/resources/fckeditor/_whatsnew\.html -^/resources/fckeditor/fckeditor\.js -^/ress\.php -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/restgui/locale/personality/personality_en\.json -^/restricted/ -^/retail/ -^/reviews/ -^/revive\-adserver/admin/index\.php -^/revive\-adserver/www/admin/index\.php -^/revolution/manager/index\.php -^/revsense/index\.php\?section=\alert\(document\.cookie\)\\&action=login -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/rips\-scanner\-master/index\.php -^/rips/index\.php -^/robohelp/admin/login\.jsp -^/robot\.txt -^/robots\.txt -^/rock\-mongo/index\.php\?action=login\.index\&host=0 -^/rockmongo/index\.php\?action=login\.index\&host=0 -^/roller\-ui/index\.jsp -^/roller\-ui/login\.rol -^/roller/index\.jsp -^/roller/login\.rol -^/root/ -^/roschedule\.php -^/roundcube/ -^/roundcubemail/ -^/rsrc/ -^/rt/index\.html -^/rtl/about\.lsp -^/rtm\.log -^/ru/ -^/rws/user/ -^/s/test/_/\;/WEB\-INF/web\.xml -^/s/test/_/\;/web\-inf/web\.xml -^/s/test/_/WEB\-INF/web\.xml -^/sNews/index\.php -^/sNews/readme\.html -^/sNews/readme\.txt -^/sahana/index\.php\?mod=home\&act=about -^/sales/ -^/sample/ -^/sampler/ -^/samples/ -^/sap/bc/gui/sap/its/webgui -^/sap/bc/soap/rfc -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/sapmc/sapmc\.html -^/sauruscms/admin/ -^/save/ -^/sc/ess\.do -^/sc/index\.do -^/schedule/roschedule\.php -^/scm/viewvc\.cgi/ -^/scm/viewvc/ -^/scr/index\.php -^/scr/login\.php -^/scribe/login\.php -^/script/ -^/script/index\.php -^/scripts\.php -^/scripts/ -^/scripts/ag\.cgi -^/scripts/ag\.exe -^/scripts/branding\.js -^/scripts/cbag/ag\.cgi -^/scripts/cbag/ag\.exe -^/scripts/cbdb/db\.exe -^/scripts/cbgrn/grn\.exe -^/scripts/cbmw/mw\.exe -^/scripts/cgi\-bin/cbag/ag\.cgi -^/scripts/cgi\-bin/cbag/ag\.exe -^/scripts/db\.exe -^/scripts/dbman/db\.cgi\?db=no\-db -^/scripts/dezie/db\.exe -^/scripts/garoon/grn\.exe -^/scripts/grn\.exe -^/scripts/grn/grn\.exe -^/scripts/lan_0_m\.xml -^/scripts/mailwise/mw\.exe -^/scripts/mw\.exe -^/scripts/office/ag\.cgi -^/scripts/office/ag\.exe -^/scrum/control/main -^/scrum/control/main/ -^/scrumworks/login -^/sdcard/cpt/app/signin\.php -^/sdn/ui/app/index -^/search\-ui/ -^/search/ -^/search/control/main -^/search/show\.pl\?url=file\:/etc/passwd -^/search97/ -^/secret/ -^/secretserver/Login\.aspx -^/secure/ -^/secured/ -^/sell/ -^/sendcard\.php\?view=1\&id=\%27openvasvt -^/sendio/ice/ui/ -^/sentinel/views/logon\.html -^/sentrifugo/index\.php -^/seopanel/ -^/seportal/index\.php -^/serendipity/index\.php -^/serve/ -^/server\-info -^/server\-info/ -^/server\-status -^/server\-status/ -^/server/properties -^/server/version -^/server_stats/ -^/server_version\.xsl -^/servers/ -^/serverstats/ -^/service/ -^/services/ -^/services/Version/getVersion -^/services/Version\?method=getVersion -^/services/api\.js -^/services/non\-existent -^/servicio/ -^/servicios/ -^/servlet/ -^/servlet/Login\?omacmd=getlogin\&page=Login\&managedws=true -^/servlet/UDataArea\?plugin=com\.dell\.oma\.webplugins\.AboutWebPlugin -^/servlet/com\.newatlanta\.servletexec\.JSP10Servlet -^/servlet/one2planet\.infolet\.InfoServlet\?page=\foo\ -^/servlet\?m=mod_listener\&p=login\&q=loginForm -^/servlets/ -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/servlets/FetchFile\?fileName=conf/securitydbData\.xml -^/session/ -^/session/login\.php -^/setseed\-hub/ -^/setting/prtinfo\.htm -^/settings\.php -^/setup\.php -^/setup\.php3\?next=1 -^/setup/ -^/setup/index\.php -^/setup/install\.php -^/setup/setup\.php -^/setup/unlock -^/sfa/control/main -^/sfa/control/main/ -^/sftp\-config\.json -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/share/ -^/share/dsweb/HomePage -^/shared/ -^/shell\-cgi/ -^/shell/sitecore\.version\.xml -^/shipping/ -^/shop\.cgi -^/shop/ -^/shop/RELEASE_NOTES\.txt -^/shop/admin/ -^/shop/admin/index\.php -^/shop/admin/index\.php\?login -^/shop/admin/login\.html -^/shop/admin/login\.php -^/shop/downloader/ -^/shop/index\.php -^/shop/shop\.cgi -^/shop/ssl_check\.php -^/shop/viart_shop\.xml -^/shopper/ -^/shopping/ -^/shoutbox\.php -^/shoutbox/shoutbox\.php -^/showHome\.do -^/showcase\.action -^/siestta/ -^/signin -^/signin\.php -^/signing_system\-admin/index\.php -^/simpleid/index\.php -^/simpleid/www/index\.php -^/simpnew248/news\.php -^/sine/index\.php -^/sinecms/index\.php -^/sit/index\.php -^/site\.php -^/site/ -^/site/index\.php/admin/login/ -^/site/login\.php -^/site_admin/ -^/siteadmin/ -^/sitebuildercontent/ -^/sitebuilderfiles/ -^/sitebuilderpictures/ -^/sitecore/identity/login/shell/sitecoreidentityserver -^/sitecore/login/ -^/sitecore/shell/sitecore\.version\.xml -^/sitemanager\.xml -^/sitemap\.xml -^/sitemgr/ -^/siteminder/ -^/siteminder/forms/login\.fcc -^/siteminderagent/ -^/siteminderagent/forms/login\.fcc -^/sites/ -^/sites/all/modules/ckeditor/CHANGES\.md -^/sites/all/modules/ckeditor/ckeditor\.js -^/sites/all/modules/fckeditor/_whatsnew\.html -^/sites/all/modules/fckeditor/fckeditor\.js -^/sites/all/modules/fckeditor/fckeditor/_whatsnew\.html -^/sites/all/modules/fckeditor/fckeditor/fckeditor\.js -^/siteserver/ -^/sitestats/ -^/siteupdate/ -^/skZIDtt8\.html -^/slide/ -^/sm\-webtier/ess\.do -^/sm\-webtier/index\.do -^/sm/ess\.do -^/sm/index\.do -^/sm/src/login\.php -^/sm7/ess\.do -^/sm7/index\.do -^/sm_forum/ -^/sm_forum/index\.php -^/smadmr5\.nsf -^/smconf\.nsf -^/smency\.nsf -^/smf/ -^/smf/index\.php -^/smf1/ -^/smf1/index\.php -^/smf2/ -^/smf2/index\.php -^/smftypes\.nsf -^/smhelp\.nsf -^/smmsg\.nsf -^/smquar\.nsf -^/smreports/ -^/smreportsviewer/ -^/sms/index\.php -^/smsmvlog\.nsf -^/smtime\.nsf -^/snews/index\.php -^/snews/readme\.html -^/snews/readme\.txt -^/snipegallery/index\.php -^/snipsnap/space/start -^/snort/alerts\.php -^/snort/base/ -^/snortreport\-1\.3\.1/alerts\.php -^/snortreport/alerts\.php -^/soap/ -^/soapdocs/ -^/social/ -^/social/index\.php -^/social/login -^/sofami/control/main -^/sofami/control/main/ -^/softnas/login\.php -^/software\-description\.php\?id=\-5\%20union\%20all\%20select\%201\,2\,1234567890987654321\,4\,5\,6\,7\,8\,9\,10\,11\,12\,13\,14\,15\,16\,17\,18\,19\,20\,21\,22\,23\,24\,25\,26\,27 -^/software/ -^/software/software\-description\.php\?id=\-5\%20union\%20all\%20select\%201\,2\,1234567890987654321\,4\,5\,6\,7\,8\,9\,10\,11\,12\,13\,14\,15\,16\,17\,18\,19\,20\,21\,22\,23\,24\,25\,26\,27 -^/solaris/ -^/solr/ -^/solr/control/main -^/solr/control/main/ -^/solutions/ -^/source/ -^/source/index\.php -^/space/start -^/spaces/ -^/spaces/enter/ -^/sphider/changelog -^/spip\.php -^/spip/spip\.php -^/splunk/en\-US/account/login -^/sprt\.htm -^/spywall/login\.php -^/sql\-ledger/login\.pl -^/sql/ -^/sqlite/LightNEasy\.php\?do=login -^/sqlite/index\.php -^/sqlite/main\.php -^/sqlitemanager/main\.php -^/squid/ -^/squirrel/src/login\.php -^/squirrelmail/ -^/squirrelmail/src/login\.php -^/src/ -^/src/Symfony/Component/Console/CHANGELOG\.md -^/src/apps/pom\.xml -^/src/login\.php -^/src/pom\.xml -^/src/src/site/xdoc/index\.xml -^/srchadm/ -^/ssf/a/do\?p_name=ss_forum\&p_action=1\&action=__login -^/ssgmanager/about\.jsf -^/ssi\.cgi/Login\.htm -^/ssi/ -^/ssl/ -^/ssl_check\.php -^/sslkeys/ -^/sso/UI/Login\.jsp -^/staff/ -^/stag/ -^/stage/ -^/staging/ -^/star57\.cgi\?download=\;id\| -^/star57\.cgi\?download=\;ipconfig\| -^/star57cm/star57\.cgi\?download=\;id\| -^/star57cm/star57\.cgi\?download=\;ipconfig\| -^/start -^/start\.html -^/start/about\.htm -^/start/index\.php -^/startPage -^/starter/config\-browser/index -^/starter/config\-browser/index\.action -^/startwlm/Start_Wlm\.htm -^/stash/login -^/stat/ -^/static -^/static/twake/images/favicon\.ico\\x22\ rel=\\x22icon\\x22\ type=\\x22image/x\-icon\\x22\ sizes=\\x2216x16\ 32x32\ 48x48\ 64x64\ 128x128 -^/statistic/ -^/statistics/ -^/statistics/awstats\.pl\?framename=mainright -^/statistik/ -^/statistik/cgi\-bin/ -^/statistik/cgi\-bin/awstats\.pl\?framename=mainright -^/statistiken/ -^/stats\-bin\-p/ -^/stats/ -^/stats/awstats\.pl\?framename=mainright -^/stats/index\.php -^/stats/tools\.php\?file_id=reset_password -^/stats_old/ -^/status\.php -^/status/ -^/stcenter\.nsf -^/storage/ -^/store/ -^/store/agora\.cgi\?cart_id=\alert\(document\.domain\)\\&xm=on\&product=HTML -^/store/index\.php -^/store/ssl_check\.php -^/storemgr/ -^/strings\.js -^/stronghold\-info -^/stronghold\-info/ -^/stronghold\-status -^/stronghold\-status/ -^/struts\-cookbook/Welcome\.do -^/struts\-cookbook/config\-browser/index -^/struts\-cookbook/config\-browser/index\.action -^/struts\-cookbook/example/HelloWorld\.action -^/struts\-cookbook/index\.action -^/struts\-cookbook/showcase\.action -^/struts\-examples/Welcome\.do -^/struts\-examples/config\-browser/index -^/struts\-examples/config\-browser/index\.action -^/struts\-examples/example/HelloWorld\.action -^/struts\-examples/index\.action -^/struts\-examples/showcase\.action -^/struts/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/WW/cwiki\.apache\.org/WW/home\.html -^/struts/Welcome\.do -^/struts/config\-browser/index -^/struts/config\-browser/index\.action -^/struts/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/docs/WW/cwiki\.apache\.org/WW/home\.html -^/struts/docs/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/docs/docs/WW/cwiki\.apache\.org/WW/home\.html -^/struts/docs/docs/index\.html -^/struts/docs/docs/struts2\-core\-apidocs/help\-doc\.html -^/struts/docs/docs/struts2\-core\-apidocs/index\-all\.html -^/struts/docs/docs/struts2\-core\-apidocs/overview\-summary\.html -^/struts/docs/index\.html -^/struts/docs/struts2\-core\-apidocs/help\-doc\.html -^/struts/docs/struts2\-core\-apidocs/index\-all\.html -^/struts/docs/struts2\-core\-apidocs/overview\-summary\.html -^/struts/example/HelloWorld\.action -^/struts/index\.action -^/struts/index\.html -^/struts/showcase\.action -^/struts/src/apps/pom\.xml -^/struts/src/pom\.xml -^/struts/src/src/site/xdoc/index\.xml -^/struts/struts\-cookbook/Welcome\.do -^/struts/struts\-cookbook/example/HelloWorld\.action -^/struts/struts\-cookbook/index\.action -^/struts/struts\-cookbook/showcase\.action -^/struts/struts\-examples/Welcome\.do -^/struts/struts\-examples/example/HelloWorld\.action -^/struts/struts\-examples/index\.action -^/struts/struts\-examples/showcase\.action -^/struts/struts2\-basic/Welcome\.do -^/struts/struts2\-basic/example/HelloWorld\.action -^/struts/struts2\-basic/index\.action -^/struts/struts2\-basic/showcase\.action -^/struts/struts2\-blank/example/HelloWorld\.action -^/struts/struts2\-core\-apidocs/help\-doc\.html -^/struts/struts2\-core\-apidocs/index\-all\.html -^/struts/struts2\-core\-apidocs/overview\-summary\.html -^/struts/struts2\-mailreader/Welcome\.do -^/struts/struts2\-portlet/Welcome\.do -^/struts/struts2\-portlet/example/HelloWorld\.action -^/struts/struts2\-portlet/index\.action -^/struts/struts2\-portlet/showcase\.action -^/struts/struts2\-rest\-showcase/Welcome\.do -^/struts/struts2\-rest\-showcase/example/HelloWorld\.action -^/struts/struts2\-rest\-showcase/index\.action -^/struts/struts2\-rest\-showcase/showcase\.action -^/struts/struts2\-showcase/showcase\.action -^/struts/utils\.js -^/struts2\-basic/Welcome\.do -^/struts2\-basic/config\-browser/index -^/struts2\-basic/config\-browser/index\.action -^/struts2\-basic/example/HelloWorld\.action -^/struts2\-basic/index\.action -^/struts2\-basic/showcase\.action -^/struts2\-blank/config\-browser/index -^/struts2\-blank/config\-browser/index\.action -^/struts2\-blank/example/HelloWorld\.action -^/struts2\-core\-apidocs/help\-doc\.html -^/struts2\-core\-apidocs/index\-all\.html -^/struts2\-core\-apidocs/overview\-summary\.html -^/struts2\-mailreader/Welcome\.do -^/struts2\-mailreader/config\-browser/index -^/struts2\-mailreader/config\-browser/index\.action -^/struts2\-portlet/Welcome\.do -^/struts2\-portlet/config\-browser/index -^/struts2\-portlet/config\-browser/index\.action -^/struts2\-portlet/example/HelloWorld\.action -^/struts2\-portlet/index\.action -^/struts2\-portlet/showcase\.action -^/struts2\-rest\-showcase/Welcome\.do -^/struts2\-rest\-showcase/config\-browser/index -^/struts2\-rest\-showcase/config\-browser/index\.action -^/struts2\-rest\-showcase/example/HelloWorld\.action -^/struts2\-rest\-showcase/index\.action -^/struts2\-rest\-showcase/showcase\.action -^/struts2\-showcase/config\-browser/index -^/struts2\-showcase/config\-browser/index\.action -^/struts2\-showcase/showcase\.action -^/stuff/ -^/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/style/ -^/styles/ -^/stylesheet/ -^/stylesheets/ -^/subir/ -^/subrion/index\.php -^/subscribe/index\.php -^/sugar/ -^/sugar/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/sugarcrm/ -^/sugarcrm/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/suite/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/suitecrm/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/sun/ -^/super_stats/ -^/support/ -^/support/esupport/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/support/index\.php -^/support/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/support/index\.pl -^/support/installer\.pl -^/support/public\.pl -^/supporter/ -^/surgeweb -^/survey/index\.php -^/svn/ -^/svn/listing\.php -^/svn/viewvc\.cgi/ -^/svn/viewvc/ -^/swdesk/signin\.php -^/swhelpdesk/signin\.php -^/swiftmailer/ -^/swiftmailer/CHANGES -^/swiftmailer/README -^/swiftmailer/composer\.json -^/swiftmailer/lib/ -^/swiftmailer/lib/CHANGES -^/swiftmailer/lib/README -^/swiftmailer/lib/composer\.json -^/sws/index\.sws -^/swvm/ConsoleContainer\.jsp -^/symfony/app\.php -^/symfony/login -^/symfony/src/Symfony/Component/Console/CHANGELOG\.md -^/symfony/web/app_dev\.php/_configurator/step/0 -^/symfony/web/index\.php/auth/login -^/sympa/ -^/symphony/ -^/symphony/index\.php\?mode=administration -^/symphony/symphony/ -^/sys/ -^/sys/en/neoclassic/login/login -^/sysadmin/ -^/sysaid/Login\.jsp -^/sysbackup/ -^/sysmgr/SysMgr\.html -^/system\.xml -^/system/ -^/system/cluster/node -^/system/login -^/system/login\.php -^/system_report/ -^/sysworkflow/en/neoclassic/login/login -^/t_welcom\.cgi\?page=Language_name\&lang=1 -^/tangocms/README -^/tao/install/ -^/tar/ -^/tarantella/ -^/tarjetas/ -^/task/login -^/task/login\.php -^/taskfreak/login -^/taskfreak/login\.php -^/tcexam/public/code/index\.php -^/tcpbx/ -^/tcpdb/main\.php -^/tdbin/ -^/tdiary/index\.rb -^/te_html/ -^/teampass/index\.php -^/tech/ -^/technote/ -^/telaen/index\.php -^/teleparkwiki/index\.php -^/telescope -^/telescope/requests -^/telpho/login\.php -^/tematres/index\.php -^/temp/ -^/template/ -^/templates/ -^/templates/system/css/editor\.css -^/temporal/ -^/tenant\-app\-api/ -^/test\-cgi/ -^/test\.php -^/test\.php\?mode=phpinfo -^/test/ -^/testing/ -^/testlink/login\.php -^/tests/ -^/testweb/ -^/theme1/images/logo\.gif -^/this_page_should_not_exist\.htm -^/tibbr/web/login -^/ticket/ -^/ticket/index\.php -^/tickets/ -^/tickets/index\.php -^/tiki\-index\.php -^/tiki\-install\.php -^/tiki/ -^/tiki/tiki\-index\.php -^/tikiwiki/ -^/tikiwiki/tiki\-index\.php -^/tiles/apidocs/index\.html -^/timesheet/about\-show\.do -^/tinywebgallery/admin/index\.php -^/titleBar\.php -^/tiweb/Account/LogIn -^/tkset/login\.html -^/tmp/ -^/tmpl/news_main\.htm -^/tmui/login\.jsp -^/tmui/tmui/login/welcome\.jsp -^/todoyu/index\.php -^/tomatocart/index\.php -^/tomcat\-docs/changelog\.html -^/tools\.php\?file_id=reset_password -^/tools/ -^/tools/webinterface/index\.php -^/toplist/ -^/topology/home -^/topsites/index\.php -^/torrent/index\.php -^/torrent/site/login\.php -^/torrent/upload/account\-login\.php -^/torrenttrader/index\.php -^/torrenttrader/upload/account\-login\.php -^/torrentvolve/site/login\.php -^/tos/index\.php\?user/login -^/tpv/ -^/trabajo/ -^/trac/ -^/trac/query\?group=/\* -^/track/ -^/tracker/index\.html -^/tracker/index\.php -^/tracker/upload/account\-login\.php -^/tracking/ -^/trackit/Account/LogIn -^/trade\.php -^/transito/ -^/translate/about/ -^/transpolar/ -^/trc/ -^/tree/ -^/trees/ -^/tribisur/scripts\.php -^/triton/login/pages/loginPage\.jsf -^/truc/login\.php -^/ttc/index\.php -^/ttc/upload/account\-login\.php -^/ttwm/tt/index\.php -^/tunnel\"\ 200\ 139121\ \"\-\"\ \"\-\"\ rt=0\.448\ ut=0\.038 -^/tutos/ChangeLog -^/tutos/php/mytutos\.php -^/tvs/Start\.do -^/twg/admin/index\.php -^/twiki/ -^/twiki/bin/view/TWiki/WebHome -^/twiki/cgi\-bin/view/TWiki/WebHome -^/twiki/do/view/TWiki/WebHome -^/twiki/index\.php -^/twiki/view/TWiki/WebHome -^/typo/ -^/typo/ChangeLog -^/typo/typo3/index\.php -^/typo/typo3/sysext/opendocs/composer\.json -^/typo/typo3/sysext/recordlist/composer\.json -^/typo/typo3/sysext/sys_note/composer\.json -^/typo/typo3/sysext/t3editor/composer\.json -^/typo/typo3_src/ChangeLog -^/typo3/ -^/typo3/ChangeLog -^/typo3/index\.php -^/typo3/sysext/opendocs/composer\.json -^/typo3/sysext/recordlist/composer\.json -^/typo3/sysext/sys_note/composer\.json -^/typo3/sysext/t3editor/composer\.json -^/typo3/typo3/index\.php -^/typo3/typo3/sysext/opendocs/composer\.json -^/typo3/typo3/sysext/recordlist/composer\.json -^/typo3/typo3/sysext/sys_note/composer\.json -^/typo3/typo3/sysext/t3editor/composer\.json -^/typo3/typo3_src/ChangeLog -^/typo3_src/ChangeLog -^/uapi\-cgi/ -^/uapi\-cgi/admin/ -^/ucmdb\-ui/login_page\.jsp -^/ucs\-overview/ -^/uebimiau/index\.php -^/ui/ -^/ui/faces/Login\.xhtml -^/ui/images/logo\.png -^/ui/login -^/ui/login/ -^/ui/main\.js -^/ui/modules/login/ -^/uimhome/ -^/um/ -^/umotion/modules/system/externalframe\.php\?context=runtime -^/univention\-management\-console/ -^/upb/db/users\.dat -^/update\.php -^/updater/ -^/updates/ -^/upload\.php -^/upload/ -^/upload/account\-login\.php -^/upload/index\.php -^/uploads/ -^/urchin/ -^/urchin3/ -^/urchin5/ -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/us/ -^/usage/ -^/usebb/index\.php -^/user\.php -^/user/ -^/user/index\.php -^/user/login -^/user_lang\.js -^/userdb/ -^/userlogin\!default\.action -^/userlogin\!doDefault\.action -^/userportal/webpages/myaccount/login\.jsp -^/users/ -^/users/login -^/users/login\.php -^/users/sign_in -^/usr/ -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/ustats/ -^/usuario/ -^/usuarios/ -^/usvn/login/index\.php -^/usvn/public/login/index\.php -^/utf\-8/index\.php -^/util/ -^/utils\.js -^/utils/ -^/v\-webmail/htdocs/login\.php -^/v1/agent/self -^/v1/settings/first\-login -^/v3/settings/first\-login -^/v4/ -^/vPetEngine/index\.php -^/vbulletin/content\.php -^/vbulletin/forum/content\.php -^/vbulletin/forum/index\.php -^/vbulletin/index\.php -^/vco/ -^/vegadns/index\.php -^/vendor/ -^/vendor/plugins/fckeditor/public/javascripts/_whatsnew\.html -^/vendor/plugins/fckeditor/public/javascripts/fckeditor\.js -^/version -^/vfs/ -^/viart/viart_shop\.xml -^/viart_cms/viart_shop\.xml -^/viart_shop\.xml -^/viart_shop/viart_shop\.xml -^/vicidial/welcome\.php -^/view/TWiki/WebHome -^/view/login\.html -^/view/loginPro\.html -^/viewcvs\.cgi/\?cvsroot=\foo\ -^/viewer -^/views/login -^/viewvc\.cgi/ -^/viewvc/ -^/vimbadmin/auth/login -^/visionweb/index2\.html -^/voip/sipserver/login/ -^/volve/site/login\.php -^/vpet/index\.php -^/vpn/ -^/vpn/index\.html -^/vpn/js/ -^/vpn/tmindex\.html -^/vpns/ -^/vpns/cfg/ -^/vpns/portal/ -^/vpns/portal/scripts/ -^/vsmc\.html -^/vsom/ -^/vt\-test\-non\-existent\.html -^/vt\-test/vt\-test\-non\-existent\.html -^/vtigercrm/index\.php -^/vttest\-345678\.html -^/w\-agora/ -^/w\-agora/index\.php -^/w3perl/ -^/warehouse/control/main -^/warehouse/control/main/ -^/wavemaster\.internal/ -^/way\-board/ -^/wbb/acp/index\.php -^/wbb/index\.php -^/wbb/upload/index\.php -^/wbm/index\.php -^/wbm/state\.php -^/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/wcm/index\.jsp -^/web/ -^/web/\?wicket\:bookmarkablePage=\:org\.geoserver\.web\.AboutGeoServerPage -^/web/ACS\.html -^/web/app_dev\.php/_configurator/step/0 -^/web/guest -^/web/guest/en/websys/status/configuration\.cgi -^/web/help\.php -^/web/index\.html -^/web/index\.php -^/web/login -^/web/magmi\.php -^/web/signin -^/web800fo/ -^/webERP/index\.php -^/webEdition/index\.php -^/webMathematica/ -^/web_caps/webCapsConfig -^/web_usage/ -^/webaccess/ -^/webacs/pages/common/login\.jsp -^/webadmin/ -^/webadmin/start/index\.php -^/webalizer/ -^/webapp -^/webapp/ -^/webapp/home\.html\?0 -^/webappng/sites/meetings/dashboard/home -^/webapps/ -^/webboard/ -^/webcalendar/login\.php -^/webcart\-lite/ -^/webcart/ -^/webconsole/webpages/login\.jsp -^/webcookbook/index\.php -^/webdata/ -^/webdav/ -^/webdb/ -^/webedition/index\.php -^/weberp/index\.php -^/webftp/help\.html -^/webftp/index\.php -^/webgrind/index\.php -^/webid/index\.php -^/webimages/ -^/webimages2/ -^/weblate/about/ -^/webline/html/admin/wcs/LoginPage\.jhtml\?oper=login\&dest=\%2Fadmin\%2FCiscoAdmin\.jhtml -^/weblog/ -^/weblogger/index\.php -^/weblogin\.htm -^/weblogs/ -^/webmail/ -^/webmail/\?interface=basic -^/webmail/database/_sessions/ -^/webmail/htdocs/login\.php -^/webmail/index\.php -^/webmail/index\.php/admin -^/webmail/login\.php -^/webmail/source/index\.php -^/webmail/src/login\.php -^/webmailpro/ -^/webman/index\.cgi -^/webmaster/ -^/webmaster_logs/ -^/webmatic/index\.php -^/webplus\.exe\?about -^/webplus\?about -^/webpos/control/main -^/webpos/control/main/ -^/webpub\-ui/ -^/webpub/ -^/webreports/ -^/webreps/ -^/webserv/index\.ssi -^/webshare/ -^/website/ -^/websiteadmin/index\.php -^/webstat/ -^/webstats/ -^/webstore/control/main -^/websvn/ -^/websvn/listing\.php -^/webthings/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/webtier/ess\.do -^/webtier/index\.do -^/webtools/control/main -^/webtools/control/main/ -^/webtrace/ -^/webtrends/ -^/webui/index\.php -^/welcome\.do -^/welcome/index\.html -^/whizzy/index\.php -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/whmcs/index\.php -^/wicket\-examples/index\.html -^/wicket/wicket\-examples/index\.html -^/wideimage/composer\.json -^/wideimage/doc/index\.html -^/wideimage/index\.php -^/wiki/ -^/wiki/Main/WebHome -^/wiki/SystemInfo -^/wiki/WikiHome -^/wiki/bin/view/TWiki/WebHome -^/wiki/bin/view/foswiki/WebHome -^/wiki/cgi\-bin/view/TWiki/WebHome -^/wiki/do/view/TWiki/WebHome -^/wiki/doku\.php -^/wiki/feed\.php -^/wiki/index\.php -^/wiki/index\.php/Special\:Version -^/wiki/login\.action -^/wiki/pmwiki\.php -^/wiki/tiki\-index\.php -^/wiki/view/TWiki/WebHome -^/wikihelp/index\.php -^/windows/ -^/wing/admin_login\.html -^/wingftp/admin_login\.html -^/winscp\.ini -^/wmail/login\.php -^/wme/index\.php\?action=login -^/wondercms/nonexistent\.php -^/word/ -^/wordpress\-mu/ -^/wordpress\-mu/feed/ -^/wordpress\-mu/index\.php -^/wordpress\-mu/readme\.html -^/wordpress\-mu/wp\-links\-opml\.php -^/wordpress\-mu/wp\-login\.php -^/wordpress/ -^/wordpress/database\.sql -^/wordpress/feed/ -^/wordpress/index\.php -^/wordpress/installer\-backup\.php -^/wordpress/installer\.php -^/wordpress/readme\.html -^/wordpress/wp\-admin/ -^/wordpress/wp\-content/ -^/wordpress/wp\-content/gallery/ -^/wordpress/wp\-content/languages/ -^/wordpress/wp\-content/plugins/ -^/wordpress/wp\-content/themes/ -^/wordpress/wp\-content/upgrade/ -^/wordpress/wp\-links\-opml\.php -^/wordpress/wp\-login\.php -^/work/ -^/workeffort/control/main -^/workeffort/control/main/ -^/workspace/ -^/wp\-admin/ -^/wp\-admin/install\.php -^/wp\-admin/setup\-config\.php -^/wp\-config\.php\.backup -^/wp\-config\.php\.bak -^/wp\-config\.php\.bkp -^/wp\-config\.php\.copy -^/wp\-config\.php\.old -^/wp\-config\.php\.orig -^/wp\-config\.php\.temp -^/wp\-config\.php\.tmp -^/wp\-content/ -^/wp\-content/gallery/ -^/wp\-content/languages/ -^/wp\-content/plugins/ -^/wp\-content/plugins/ckeditor\-for\-wordpress/ckeditor/CHANGES\.md -^/wp\-content/plugins/ckeditor\-for\-wordpress/ckeditor/ckeditor\.js -^/wp\-content/plugins/fckeditor\-for\-wordpress/fckeditor/_whatsnew\.html -^/wp\-content/plugins/fckeditor\-for\-wordpress/fckeditor/fckeditor\.js -^/wp\-content/themes/ -^/wp\-content/upgrade/ -^/wp\-content/uploads/ -^/wp\-includes/ -^/wp\-json/ -^/wp\-links\-opml\.php -^/wp\-login\.php -^/wp/database\.sql -^/wp/installer\-backup\.php -^/wp/installer\.php -^/wpad\.dat -^/wps/portal/Home/Welcome/ -^/wrm/index\.php -^/ws/ -^/ws/auth/ -^/ws/axis2\-admin/ -^/ws/axis2\-web/index\.jsp -^/ws/debug/ -^/ws/index\.jsp -^/ws/pairing/ -^/ws/services/Version/getVersion -^/ws/services/Version\?method=getVersion -^/ws/services/non\-existent -^/ws_ftp\.ini -^/wsdocs/ -^/wstats/ -^/wt2parser\.cgi\?home_en -^/wt4/home -^/wusage/ -^/wwb/index\.php -^/wwb/index\.php\?module=site\&show=home -^/wwh/index\.php -^/wws/ -^/wwsympa/ -^/www\-sql/ -^/www/ -^/www/admin/index\.php -^/www/index\.php -^/www/start\.html -^/wwwboard\.html -^/wwwjoin/ -^/wwwlog/ -^/wwwstat/ -^/wwwstats/ -^/xGB/ -^/x_news\.php -^/xampp/ -^/xampp/index\.php -^/xampp/start\.php -^/xaraya/index\.php -^/xcart/cart\.php -^/xcart_ecommerce/cart\.php -^/xenforo/ -^/xenforo/index\.php -^/xf/ -^/xf/index\.php -^/xml/ -^/xmldata\?item=All -^/xmlpserver/login\.jsp -^/xoops/index\.php -^/xoops/user\.php -^/xoopscelepar/index\.php -^/xplorer/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/xtemp/ -^/xwiki/bin/login/XWiki/XWikiLogin -^/xwiki/bin/view/Main/WebHome -^/xymon\.html -^/xymon/xymon\.html -^/yapig/ -^/zTree/demo/en/index\.html -^/zTree/en/index\.html -^/zabbix/ -^/zabbix/index\.php -^/zb41/ -^/zdm/login_xdm_uc\.jsp -^/zeeways/admin/index\.php -^/zen\-cart/admin/login\.php -^/zen\-cart/index\.php -^/zen/admin/login\.php -^/zenbership\-master/admin/login\.php -^/zenbership/admin/login\.php -^/zenworks/jsp/fw/internal/Login\.jsp -^/zeuscart/index\.php -^/zeuscms/index\.php -^/zikula/ -^/zikula/docs/distribution/tour_page1\.htm -^/zikula/index\.php -^/zimbraAdmin/ -^/zipfiles/ -^/zm/index\.php -^/zml\.cgi\?file=(\.\./)+etc/passwd\%00 -^/zoneminder/index\.php -^/zpanel/index\.php -^/zport/acl_users/cookieAuthHelper/login_form -^/~1/ -^/~admin/ -^/~log/ -^/~root/ -^/~stats/ -^/~webstats/ -^/~wsdocs/ diff --git a/crowdsec_filters/urlskip_icons/icons.re b/crowdsec_filters/urlskip_icons/icons.re deleted file mode 100644 index 43b15d6..0000000 --- a/crowdsec_filters/urlskip_icons/icons.re +++ /dev/null @@ -1,8 +0,0 @@ -^/favicon\.ico$ -^/apple-touch-icon.*\.png$ -^/robots\.txt$ -^/sitemap\.xml$ -^/browserconfig\.xml$ -^/site\.webmanifest$ -^/manifest\.json$ -^/\.well-known/ diff --git a/crowdsec_filters/urlskip_robots/robots.re b/crowdsec_filters/urlskip_robots/robots.re deleted file mode 100644 index 94adcdc..0000000 --- a/crowdsec_filters/urlskip_robots/robots.re +++ /dev/null @@ -1,3 +0,0 @@ -^/robots\.txt$ -^/sitemap\.xml$ -^/\.well-known/ diff --git a/install_files b/install_files deleted file mode 100755 index 81eba5c..0000000 --- a/install_files +++ /dev/null @@ -1,8 +0,0 @@ -#!/bin/bash - -rm -rf {portal,uwsgi-portal}/install/var/lib/lemonldap-ng/crowdsec-filters/* -mkdir -p {portal,uwsgi-portal}/install/var/lib/lemonldap-ng/crowdsec-filters - -for i in {portal,uwsgi-portal}/install/var/lib/lemonldap-ng/crowdsec-filters; do - cp -a crowdsec_filters/* $i -done diff --git a/portal/Dockerfile b/portal/Dockerfile index 64a6abb..4252e6c 100644 --- a/portal/Dockerfile +++ b/portal/Dockerfile @@ -30,6 +30,7 @@ RUN echo "# Install nginx and portal libs" && \ libhttp-browserdetect-perl libnet-dns-perl \ libfcgi-engine-perl libfcgi-procmanager-maxrequests-perl \ openssh-client \ + linagora-llng-crowdsec-filters \ linagora-lemonldap-ng-plugin-matrix-token-exchange \ linagora-lemonldap-ng-plugin-json-file \ linagora-lemonldap-ng-plugin-oidc-device-authorization \ diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures deleted file mode 100644 index 0c830e2..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=10 (overflow at 11) -11 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario deleted file mode 100644 index ea021f5..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-admin-probing diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow deleted file mode 100644 index a24e4b7..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=10, leakspeed=10s -# Time window = capacity * leakspeed ≈ 100s, rounded to 120s -120 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re deleted file mode 100644 index c930a95..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re +++ /dev/null @@ -1,45 +0,0 @@ -# Admin interface probing detection patterns (regex) -# Based on CrowdSec http-admin-probing scenario - -# Generic admin paths (must be at path boundary) -/(admin|administrator|administration|adminpanel)(/|$|\.) -/(panel|controlpanel|cpanel|dashboard)(/|$) -/(manager|management|console|backend|backoffice)(/|$) -/(sysadmin|webmaster)(/|$) - -# CMS admin paths -/wp-(admin|login\.php)(/|$) -/joomla/administrator(/|$) -/drupal/admin(/|$) -/typo3(/|$) - -# Database admin tools -/(phpmyadmin|pma|mysql|mysqladmin|myadmin|phpMyAdmin)(/|$) -/(phppgadmin|adminer|dbadmin|sqlmanager)(/|$|\.php) - -# Server management panels -/(webmin|plesk|whm|directadmin|ispconfig|virtualmin|usermin)(/|$) - -# Search and data platforms -/(solr|elasticsearch|kibana|grafana)(/|$) - -# Application servers -/manager/(html|status)$ -/(jmx-console|web-console)(/|$) -/(jenkins|hudson|bamboo|teamcity)(/|$) - -# Monitoring and debug endpoints -/actuator(/|$) -/server-(status|info)$ - -# Setup/install pages -/(setup|install|installer|installation)(/|$|\.php) - -# Mail admin -/(webmail|roundcube|squirrelmail|postfixadmin)(/|$) - -# File managers -/(filemanager|elfinder)(/|$) - -# API documentation -/(swagger|swagger-ui|api-docs|graphql|graphiql)(/|$|\.html) diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures deleted file mode 100644 index 4e7d4a1..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=1 (overflow at 2) -# Very aggressive - ban quickly on backdoor access attempts -2 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario deleted file mode 100644 index 3f8b400..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-backdoors-attempts diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow deleted file mode 100644 index a96384e..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=1, leakspeed=5s -# Time window = capacity * leakspeed = 5s -5 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re deleted file mode 100644 index ca6afe2..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re +++ /dev/null @@ -1,54 +0,0 @@ -# Known web shells and backdoors -# Source: https://hub-data.crowdsec.net/web/backdoors.txt -# Patterns match filename at end of path - -# C99 shell family -/c99[^/]*\.php -/c100\.php - -# R57 shell family -/r57\.php -/r58\.php -/r00t\.php - -# Common shell names -/shell\.php -/cmd\.php -/cmd\.asp -/cmd\.jsp -/cmdexec\.aspx -/eval-stdin\.php -/simple[_-]?cmd\.php -/simple[_-]?backdoor\.php - -# File managers -/filesman\.php -/fileupload\.aspx -/filesystembrowser\.aspx -/upfile\.php -/upl0ader\.php - -# WSO shells -/wso[0-9.]*\.php - -# Alfa shells -/alfa[^/]*\.php - -# Other known shells -/b374k\.php -/weevely\.php -/phpspy\.php -/ani-shell\.php -/antichat\.php -/locus7?s?\.php -/madshell\.php -/php-backdoor\.php -/webshell\.php -/jspshell\.jsp -/jspbd\.jsp -/aspxshell\.aspx - -# Generic suspicious patterns -/[0-9]{1,4}\.php$ -/xx\.php$ -/x\.php$ diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures deleted file mode 100644 index a1bcc68..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# Single occurrence triggers ban - this is a known exploit -1 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario deleted file mode 100644 index a0f1671..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2021-41773 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re deleted file mode 100644 index fbeea6c..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re +++ /dev/null @@ -1,17 +0,0 @@ -# Apache Path Traversal CVE-2021-41773 -# These patterns detect URL-encoded path traversal specific to this CVE -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-41773 - -# Pattern 1: /.%2E/.%2E/ (dot encoded as %2E) -/\.%2[eE]/\.%2[eE]/ - -# Pattern 2: /%2E%2E/%2E%2E (full encoding of ../..) -/%2[eE]%2[eE]/%2[eE]%2[eE] - -# Pattern 3: Mixed case variations -/\.%2e/\.%2e/ -/%2e%2e/%2e%2e - -# Also detect with cgi-bin which is common in exploits -/cgi-bin/\.%2[eE]/ -/cgi-bin/%2[eE]%2[eE]/ diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures deleted file mode 100644 index a1bcc68..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# Single occurrence triggers ban - this is a known exploit -1 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario deleted file mode 100644 index 5d922ad..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2024-0012 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re deleted file mode 100644 index 45a1851..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re +++ /dev/null @@ -1,6 +0,0 @@ -# PAN-OS auth bypass CVE-2024-0012 -# Filter: request matches '/php/.*/\.js\.map' or '/index.php/.*\.js\.map' -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-0012 - -/php/.*/\.js\.map -/index\.php/.*\.js\.map diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures deleted file mode 100644 index 0c888a7..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=3 (overflow at 4) -4 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario deleted file mode 100644 index 9130ddd..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2024-38475 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow deleted file mode 100644 index d04aefb..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=3, leakspeed=10s -# Time window = capacity * leakspeed = 30s -30 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re deleted file mode 100644 index a63ec2b..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re +++ /dev/null @@ -1,6 +0,0 @@ -# Apache mod_rewrite bypass CVE-2024-38475 -# Filter: Lower(evt.Parsed.request) endsWith '%3f' -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-38475 - -# URI ending with URL-encoded '?' (%3f) -%3[fF]$ diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures deleted file mode 100644 index 755d7ed..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# URIs come from https://hub-data.crowdsec.net/web/trendy_cves_uris.json -1 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario deleted file mode 100644 index c94380d..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-probing diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt deleted file mode 100644 index 742951f..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt +++ /dev/null @@ -1,67 +0,0 @@ -# Trending CVE URIs - literal substring match -# Source: https://hub-data.crowdsec.net/web/trendy_cves_uris.json -# CrowdSec filter: http_path contains JsonExtract(#, "uri") -# Snapshot date: 2026-04-17 - -# CVE-2024-3400 Palo Alto GlobalProtect -/global-protect/login.esp -# CVE-2024-3272 D-Link NAS -/cgi-bin/nas_sharing.cgi -# CVE-2018-12031 Elber -/server/node_upgrade_srv.js -# CVE-2021-36380 Sunhillo SureLine -/cgi/networkdiag.cgi -# CVE-2021-3129 Laravel Ignition -/_ignition/execute-solution -# CVE-2020-27866 Netgear -/setup.cgi -# CVE-2024-4040 CrushFTP -/webinterface/login.html -/webinterface/ -# CVE-2024-24919 Check Point -/clients/mycrl -# CVE-2024-4577 PHP CGI -?%ad -# CVE-2024-5806 MOVEit -/guestaccess.aspx -# CVE-2024-0769 D-Link DIR-859 -/hedwig.cgi -# CVE-2019-8318 D-Link HNAP -/hnap1/ -# CVE-2024-8190 Ivanti CSA -/gsb/datetime.php -# CVE-2021-33044 Dahua -/rpc2_login -# CVE-2024-8963 Ivanti CSA path traversal -index.php%3f.php/ -# CVE-2025-0108 PAN-OS auth bypass -/unauth/%252e%252e/php/ -# CVE-2025-31324 SAP NetWeaver -/developmentserver/metadatauploader -# CVE-2024-38653 Ivanti MDM -/mdm/checkin -# CVE-2025-34509 Sitecore -/sitecore/api/ssc/auth/login -# CVE-2023-6549 Citrix NetScaler -/nf/auth/startwebview.do -# CVE-2025-5777 Citrix NetScaler "CitrixBleed 2" -/p/u/doauthentication.do -# CVE-2025-25257 Fortinet FortiWeb -/api/fabric/device/status -# CVE-2025-53770 SharePoint ToolShell -/_layouts/15/toolpane.aspx -# CVE-2023-0669 GoAnywhere MFT -/goanywhere/lic/accept -# CVE-2024-0204 GoAnywhere MFT -/goanywhere/images/.. -# CVE-2025-64446 Fortinet FortiWeb -/api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi -# CVE-2025-59718 Fortinet FortiSIEM -/remote/saml/login -# CVE-2025-40553 Ivanti Endpoint Manager -/helpdesk/WebObjects/Helpdesk.woa/ajax/9.7.43.0.0.0.4.3.7.0.7.1.1.1 -/helpdesk/WebObjects/Helpdesk.woa/ajax/2.0.7.1.1.1 -# CVE-2025-40552 Ivanti Endpoint Manager -/helpdesk/WebObjects/Helpdesk.woa/wo/ -# CVE-2026-20127 Cisco ISE -/reports/data/opt/data/containers/config/data-collection-agent/.dca diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures deleted file mode 100644 index 0c888a7..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=3 (overflow at 4) -4 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario deleted file mode 100644 index 7f79ca6..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-path-traversal-probing diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow deleted file mode 100644 index d04aefb..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=3, leakspeed=10s -# Time window = capacity * leakspeed = 30s -30 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt deleted file mode 100644 index 01568ce..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt +++ /dev/null @@ -1,28 +0,0 @@ -# Path traversal patterns -# Source: https://hub-data.crowdsec.net/web/path_traversal.txt - -# Directory traversal sequences -../ -..\ -%2e%2e%2f -%2e%2e%5c -%252e%252e%252f - -# Unix system files -/etc/passwd -/etc/shadow -/etc/hosts -/etc/group -/proc/self/ - -# PHP/file wrappers -=file:// -=zip:// -=php:// -=expect:// -=data:// - -# Windows system files -windows/win.ini -boot.ini -%25SYSTEMROOT%25 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures deleted file mode 100644 index 882fbb5..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=4 (overflow at 5) -5 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario deleted file mode 100644 index 9c09f90..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-sensitive-files diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow deleted file mode 100644 index 1b00446..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=4, leakspeed=5s -# Time window = capacity * leakspeed ≈ 20s, rounded to 30s -30 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re deleted file mode 100644 index 2d3da9f..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re +++ /dev/null @@ -1,65 +0,0 @@ -# Sensitive files detection patterns (regex) -# Based on CrowdSec http-sensitive-files scenario - -# Environment files (anywhere in path) -/\.env($|[.~]|\.bak|\.backup|\.old|\.save|\.txt) - -# Git files -/\.git(/|$) -/\.gitattributes$ -/\.gitconfig$ -/\.gitignore$ -/\.gitmodules$ - -# Other VCS -/\.svn(/|$) -/\.hg($|ignore$) -/\.bzr($|/) - -# Shell history and config (in any directory) -/\.(bash_history|bash_profile|bashrc|zsh_history|zshrc|profile|sh_history)$ - -# SSH keys and config -/\.ssh/ - -# Web server files -/\.ht(passwd|group|digest)$ -/\.user\.ini(\.bak)?$ - -# Database dumps -/(database|backup|dump|db|data)\.sql(\.gz)?$ - -# Backup archives -/(backup|site|www)\.(tar\.gz|zip|rar)$ - -# Package manager files (anywhere) -/(composer|package|package-lock)\.json$ -/(composer|yarn|Gemfile|Pipfile)\.lock$ -/Gemfile$ -/requirements\.txt$ -/Pipfile$ - -# PHP config files -/wp-config\.php([.~]|\.bak|\.old|\.txt)?$ -/wp-config-sample\.php$ -/(config|configuration|settings|database|local)\.php(\.bak|\.old)?$ -/settings\.local\.php$ - -# Framework config -/(parameters|database|secrets|credentials)\.ya?ml(\.enc)?$ - -# Docker and CI -/Dockerfile$ -/docker-compose\.ya?ml$ -/\.dockerignore$ -/\.(travis|gitlab-ci)\.yml$ -/Jenkinsfile$ - -# Cloud credentials -/\.aws/(credentials|config)$ -/(credentials|service-account|firebase)\.json$ -/\.firebaserc$ - -# Debug files -/(debug|error)\.log$ -/(phpinfo|info|test)\.php$ diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures deleted file mode 100644 index c6bc781..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=5 (overflow at 6) -6 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario deleted file mode 100644 index dfb9872..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-wordpress-scan diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow deleted file mode 100644 index a0e9aeb..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=5, leakspeed=10s -# Time window = capacity * leakspeed ≈ 50s, rounded to 60s -60 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re deleted file mode 100644 index 3111972..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re +++ /dev/null @@ -1,32 +0,0 @@ -# WordPress scan detection patterns (regex) -# Based on CrowdSec http-wordpress-scan scenario - -# WordPress API user enumeration -/wp-json/wp/v2/users -/wp-json/oembed - -# Plugin and theme enumeration -/wp-content/(plugins|themes|uploads?)(/|$) -/wp-includes(/|$) - -# Common vulnerable plugins probing -/wp-content/plugins/(revslider|gravityforms|contact-form-7)(/|$) -/wp-content/plugins/(nextgen-gallery|jetpack|woocommerce)(/|$) -/wp-content/plugins/(yoast-seo|all-in-one-seo-pack)(/|$) -/wp-content/plugins/(wp-file-manager|duplicator|wordfence)(/|$) - -# Readme and changelog enumeration (version disclosure) -/wp-content/(plugins|themes)/[^/]+/(readme|changelog)\.txt$ -/(readme\.html|license\.txt)$ - -# WordPress XML-RPC (brute force vector) -/xmlrpc\.php$ - -# WordPress config backup files -/wp-config\.(php[.~]|php\.(bak|old|txt|save)|old|bak|txt)$ - -# Debug log exposure -/wp-content/debug\.log$ - -# WordPress installation/upgrade files -/wp-admin/(install|setup-config|upgrade)\.php$ diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re deleted file mode 100644 index 4ae8eb4..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re +++ /dev/null @@ -1,136 +0,0 @@ -\.axd$ -\.backup$ -\.bak$ -\.log$ -\.old\d*$ -\.orig$ -\.rej$ -\.sql$ -\.zip$ -^/\+ -^/account -^/admin -^/admin/ -^/api$ -^/api/aws -^/api/session/properties -^/api/.*about$ -^/api/.*version$ -^/app -^/app/ -^/assets/ -^/backend$ -^/backend/ -^/backup -^/backup/ -^/base -^/blog -^/bower_components/ -^/build/ -^/cache/ -^/cf_scripts/ -^/cfide -^/cgi-bin/ -^/cgi-mod/ -^/cluster -^/cms -^/conf/ -^/config/ -^/configs/ -^/container -^/core/ -^/cpanel -^/crm -^/dana/ -^/dashboard/ -^/data/ -^/db/ -^/demo -^/deploy/ -^/deployments/ -^/dev/ -^/dist/ -^/downloads/ -^/dniapi/ -^/env$ -^/env/ -^/environment/ -^/evox/ -^/etc/ -^/files/ -^/fog/ -^/geoserver/ -^/helpdesk/ -^/hnap1 -^/hello.world -^/horizon -^/human\.aspx -^/i/ -^/identity$ -^/includes/ -^/index\.js -^/info$ -^/ini/ -^/internal_forms_authentication -^/ise/ -^/jasperserver-pro/ -^/jasperserverTest/ -^/json/ -^/lib/ -^/license.txt -^/log/ -^/login\.php -^/logs/ -^/magento_version -^/main\.asp -^/main\.js -^/main\.shtml -^/manage/ -^/nmap -^/owa/ -^/owncloud/ -^/panel -^/partymgr/ -^/php/ -^/phpunit -^/pma/ -^/private/ -^/prod/ -^/public -^/public/ -^/release/ -^/releases/ -^/rest/applinks/ -^/scripts/ -^/sdk$ -^/setting/ -^/settings/ -^/sh/ -^/shell/ -^/sql/ -^/src/ -^/staging/ -^/status\.php -^/sugar_version.json -^/system/ -^/telescope -^/temp/ -^/test -^/tmp/ -^/toml/ -^/uploads/ -^/user$ -^/var/ -^/vendor -^/vendor/ -^/webmail -^/webui$ -^/workspace -^/ws -^/www -^/xml/ -^/xmldata -^/yaml/ -^/yii -^/yml/ -^/zend diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt deleted file mode 100644 index 247c403..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt +++ /dev/null @@ -1,131 +0,0 @@ -/%c0 -/*.map -/.aws/credentials -/.elasticbeanstalk/ -/.env -/.env.backup -/.env.bak -/.env.ci -/.env.config -/.env.default -/.env.dev -/.env.dev.local -/.env.development.local -/.env.dist -/.env.live -/.env.local -/.env.preprod -/.env.prod -/.env.prod.local -/.env.production -/.env.production.local -/.env.qa -/.env.sandbox -/.env.save -/.env.secret -/.env.stage -/.env.staging.local -/.env.template -/.env.test -/.env.testing -/.env.testing.local -/.env.uat -/.env_sample -/.envrc -/.git/ -/.gitlab-ci.yml -/.hg/ -/.idea/ -/.next/ -/.sql.gz -/.svn/ -/.tar.gz -/.travis.yml -/.vscode/ -/Booking/Default.aspx -/Capfile -/Gemfile -/Jenkinsfile -/Procfile -/_logs/ -/_profiler/ -/access.log -/api/config -/api/credentials -/api/docs -/api/info -/api/keys -/api/login -/api/settings.json -/api/users -/app.js -/app.log -/app.yaml -/application.properties -/application.yml -/appsettings.json -/aws-credentials.txt -/bundle.js -/circle.yml -/config.ini -/config.json -/config.old.php -/config.php -/config.yaml -/config/default.json -/config/dev.json -/credentials.txt -/database_old.json -/debug.php -/error.log -/geoserver/web/ -/graphql -/helm/ -/index.php -/info.php -/internal/config -/js/NewWindow_2_all.js -/logs/ -/mail/.env -/node_modules/ -/nohup.out -/package.json -/php-version.php -/php.php -/phpinf.php -/phpmyadmin/ -/phpv.php -/pi.php -/pinfo.php -/pom.xml -/requirements.txt -/resque/ -/secrets.txt -/secure-config.json -/sendgrid.env -/serverinfo.php -/serverless.yml -/settings.json -/settings.py -/settings.yaml -/showLogin.cc -/sidekiq/ -/sitecore/shell/sitecore.version.xml -/src/main/resources/application.yml -/swagger-ui.html -/swagger.json -/sysinfo.php -/temp/ -/template.yaml -/terraform.tfstate -/test.php -/tmp/ -/users.csv -/web.config -/webui/ -/wp-config.php -/wp-content/debug -/yarn.lock -Dockerfile -docker-compose -phpinfo diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt deleted file mode 100644 index 26c2268..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt +++ /dev/null @@ -1,193 +0,0 @@ -c99.php -c99shell.php -r57.php -r58.php -dra.php -r00t.php -root.php -mma.php -filesman.php -Locus7s.php -c99-Ultimate.php -c100.php -Ekin0x.php -hacker.php -safe0ver.php -sniper.php -spyshell.php -CWShellDumper.php -angel.php -dq.php -cmd.php -liz0zim.php -simattacker.php -tryag.php -150.php -Ani-Shell.php -Crystal.php -Dx.php -FaTaLisTiCz_Fx.php -G5.php -NCC-Shell.php -NetworkFileManagerPHP.php -PHANTASMA.php -PHPJackal.php -PHPRemoteView.php -PHPSPY.php -Php_Backdoor.txt.php -Private-i3lue.php -SnIpEr_SA Shell.php -upl0ader.php -acid.php -antichat.php -shell.php -udp.php -ddos.php -b37.php -backupsql.php -bdotw44shell.php -bug.php -c37.php -c66.php -c99-shadows-mod.php -c99_PSych0.php -c99_locus7s.php -c99_madnet.php -c99_w4cking.php -c99madshell.php -c99ud.php -c99unlimited.php -c99v2.php -cbfphpsh.php -cihshell_fix.php -co.php -connect-back.php -cpg_143_incl_xpl.php -ctt_sh.php -cybershell.php -egy.php -erne.php -ex0shell.php -g00nv13.php -hkrkoz.php -ironshell.php -isko.php -iskorpitx.php -itsecteam_shell.php -locus.php -log.php -simple_cmd.php -zacosmall.php -weevely.php -AK-74.php -Ajax_PHP_Command_Shell.php -Antichat_Shell.php -Ayyildiz_Tim.php -CasuS-1.5.php -CrystalShell.php -DTool_Pro.php -Dive_Shell.php -GRP_WebShell.php -Gamma_Web_Shell.php -JspWebshell_1.2.php -KA_uShell_0.1.6.php -Loaderz_WEB_Shell.php -Mackers_Private_Shell.php -Moroccan_Spamers.php -MyShell.php -NGH.php -NTDaddy_v1.9.php -Non-alphanumeric.php -PHP_Shell.php -PHVayv.php -PhpSpy.php -Predator.php -Rootshell.v.1.0.php -STNC_WebShell_v0.8.php -Safe0ver_Shell.php -Safe_Mode_Bypass.php -SimShell.php -Simple_PHP_backdoor.php -Sincap_1.0.php -Small_Web_Shell.php -WinX_Shell.php -Worse_Linux_Shell.php -ZyklonShell.php -aZRaiLPhp_v1.0.php -alfa3.php -andela.php -aspydrv.php -bloodsecv4.php -cgitelnet.php -configkillerionkros.php -dC3_Security.php -g00nshell-v1.3.php -jspshell.jsp -kral.php -lifkaS.php -lolipop.php -lostDC.php -matamu.php -megabor.php -obfuscated-punknopass.php -pHpINJ.php -php-backdoor.php -punk-nopass.php -punkholic.php -pws.php -qsd-backdoor.php -ru24_post_sh.php -s72_Shell.php -simple-backdoor.php -smevk.php -soldierofallah.php -sosyete.php -spygrup.php -stres.php -wso2.8.5.php -zehir4.php -cgitelnet.pl -cmd.pl -dc.pl -list.pl -up.pl -wewo.pl -irc.pl -pws.pl -PerlWebShellbyRST-GHC.pl -JspWebshell 1.2.jsp -browser.jsp -cmd.jsp -cmd_win32.jsp -jspShell.jsp -jspbd.jsp -list.jsp -up.jsp -up_win32.jsp -3fexe.asp -ASpy.asp -EFSO.asp -RemExp.asp -aspxSH.asp -aspxshell.aspx -aspydrv.asp -cmd.asp -cmd.aspx -cmdexec.aspx -elmaliseker.asp -filesystembrowser.aspx -fileupload.aspx -ntdaddy.asp -spexec.aspx -sql.aspx -tool.asp -toolaspshell.asp -up.asp -zehir.asp -zehir.aspx -zehir4.asp -zehir4.aspx -xleet.php -xleet-shell.php -sh3llx.php -eval-stdin.php diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt deleted file mode 100644 index 226526b..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt +++ /dev/null @@ -1,14 +0,0 @@ -/_/;/WEB-INF/web.xml -/_/;/WEB-INF/decorators.xml -/_/;/WEB-INF/classes/seraph-config.xml -/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.xml -/_/;/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml -/_/;/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.properties -/_/%3B/WEB-INF/web.xml -/_/%3B/WEB-INF/decorators.xml -/_/%3B/WEB-INF/classes/seraph-config.xml -/_/%3B/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -/_/%3B/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.xml -/_/%3B/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml -/_/%3B/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.properties \ No newline at end of file diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt deleted file mode 100644 index 6f58500..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt +++ /dev/null @@ -1,35 +0,0 @@ -${jndi: -${${::-j}${::-n}${::-d}${::-i}: -${${::-j}ndi -${${lower:jndi}: -${${lower:${lower:jndi}}: -${${lower:j}${lower:n}${lower:d}i: -${${lower:j}${upper:n}${lower:d}${upper:i}: -${${upper:j}${upper:n}${upper:d}${upper:i}: -${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di: -${${date:'j'}${date:'n'}${date:'d'}${date:'i'}: -${jnd${sys:SYS_NAME:-i}: -$%7Bjndi: -$%7B$%7B:-j%7D$%7B:-n%7D$%7B:-d%7D$%7B:-i%7D: -$%7B$%7B::-j%7D$%7B::-n%7D$%7B::-d%7D$%7B::-i%7D: -$%7B$%7B::-j%7Dndi -$%7B$%7Blower:jndi%7D: -$%7B$%7Blower:$%7Blower:jndi%7D%7D: -$%7B$%7Blower:j%7D$%7Blower:n%7D$%7Blower:d%7Di: -$%7B$%7Blower:j%7D$%7Bupper:n%7D$%7Blower:d%7D$%7Bupper:i%7D: -$%7B$%7Bupper:j%7D$%7Bupper:n%7D$%7Bupper:d%7D$%7Bupper:i%7D: -$%7Bj$%7B$%7B:-l%7D$%7B:-o%7D$%7B:-w%7D$%7B:-e%7D$%7B:-r%7D:n%7Ddi: -$%7B$%7Bdate:'j'%7D$%7Bdate:'n'%7D$%7Bdate:'d'%7D$%7Bdate:'i'%7D: -$%7Bjnd$%7Bsys:SYS_NAME:-i%7D: -%24%7Bjndi: -%24%7B%24%7B::-j%7D%24%7B::-n%7D%24%7B::-d%7D%24%7B::-i%7D: -%24%7B%24%7B::-j%7Dndi -%24%7B%24%7Blower:jndi%7D: -%24%7B%24%7Blower:%24%7Blower:jndi%7D%7D: -%24%7B%24%7Blower:j%7D%24%7Blower:n%7D%24%7Blower:d%7Di: -%24%7B%24%7Blower:j%7D%24%7Bupper:n%7D%24%7Blower:d%7D%24%7Bupper:i%7D: -%24%7B%24%7Bupper:j%7D%24%7Bupper:n%7D%24%7Bupper:d%7D%24%7Bupper:i%7D: -%24%7Bj%24%7B%24%7B:-l%7D%24%7B:-o%7D%24%7B:-w%7D%24%7B:-e%7D%24%7B:-r%7D:n%7Ddi: -%24%7B%24%7Bdate:'j'%7D%24%7Bdate:'n'%7D%24%7Bdate:'d'%7D%24%7Bdate:'i'%7D: -%24%7Bjnd%24%7Bsys:SYS_NAME:-i%7D: -${jnd${upper:ı}: diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt deleted file mode 100644 index 54ea252..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt +++ /dev/null @@ -1,33 +0,0 @@ -../ -..\ -..\/ -%2e%2e%2f -%2E%2E%2F -%252e%252e%252f -%252E%252E%252F -/etc/passwd -/etc/hosts -/etc/shadow -/etc/groups -%2fetc%2fhosts -%2fetc%2fshadow -%2fetc%2fgroups -%2fetc%2fpasswd -%2Fetc%2Fhosts -%2Fetc%2Fshadow -%2Fetc%2Fgroups -%2Fetc%2Fpasswd -=file:// -=zip:// -=php:// -=expect:// -=data:// -/proc/self/ -/var/log/ -windows/win.ini -Windows/win.ini -%25SYSTEMROOT%25%5Cwin.ini -C:/inetpub/wwwroot/global.asa -C:\inetpub\wwwroot\global.asa -C:/boot.ini -C:\boot.ini diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re deleted file mode 100644 index 21934d2..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re +++ /dev/null @@ -1,8 +0,0 @@ -^[^\?]*/apps/login -^[^\?]*/c99\.php -^[^\?]*/wp-login\.php -^[^\?]*/xmlrpc\.php -^[^\?]*\.exe$ -^[^\?]*\.exe\? -^[^\?]*\.dll$ -^[^\?]*\.dll\? diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt deleted file mode 100644 index 429dda6..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt +++ /dev/null @@ -1,90 +0,0 @@ -.sql -.sql.gz -.sql.tar -.sql.bzip2 -.sql.bz2 -.sql.zip -.sql.rar -.sql.7z -.bash_history -.bashrc -.cache -.config -.cvs -.cvsignore -.env -.env.backup -env.bak -env.backup -.env.dev -.env.development.local -.env.dist -.env.docker.dev -.env.local -.env.php -.env.prod -.env.production.local -.env.sample.php -.env.save -.env.stage -.env.test -.environment -.envrc -.envs -.env~ -env.production.js -env.test.js -env.dev.js -test-env.json -env.json -.forward -.jupyter/jupyter_notebook_config.json -.git/HEAD -.git/config -.git -.gitlab-ci/.env -.history -.hta -.htaccess -.htpasswd -.lanproxy/config.json -.listing -.listings -.msmtprc -.mysql_history -.passwd -.pwd -.perf -.profile -.rhosts -.sh_history -.ssh -.subversion -.svn -.svn/entries -.s3cfg -.bak -.exe -.bat -.dll -.printer -.pac -.aws -.aws/config -.awscfg -aws-key.yml -config/aws.yml -secrets.yml -secrets.json -aws/credentials -.config/gatsby/config.json -.deployment-config.json -.docker/config.json -.docker/.env -.docker/daemon.json -.cordova/config.json -.vscode/sftp.json -_wpeprivate/config.json -composer.json -composer.lock -debug.log diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt deleted file mode 100644 index 98c64ef..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt +++ /dev/null @@ -1,18 +0,0 @@ -%40%40version -..xp_cmdshell -information_schema.tables -%20union%20all%20select%20 -%20union%20select%20 -%2cnull%2cnull -benchmark%28 -load_file%28 -substr%28 -substring%28 -selectchar%28 -%7c%7cchr%28 -distinct%28 -pg_sleep%28 -sleep%28 -upper%28 -hex%28 -md5%28 diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt deleted file mode 100644 index 8e1116a..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt +++ /dev/null @@ -1,13 +0,0 @@ -index/\\think\\app/invokefunction&function=call_user_func_array&vars -index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars -index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars -index/\\\\think\\\\app/invokefunction&function=call_user_func_array&vars -index/\\think\\view\\driver\\Php/display&content=<\?php -index/\\x5Cthink\\x5Cview\\x5Cdriver\\x5CPhp/display&content=<\?php -index/\\\\x5Cthink\\\\x5Cview\\\\x5Cdriver\\\\x5CPhp/display&content=<\?php -index/%5Cthink%5Cview%5Cdriver%5CPhp/display&content=%3C\?php -index/\\think\\Container/invokefunction&function=call_user_func_array&vars -index/%5Cthink%5CContainer/invokefunction&function=call_user_func_array&vars -index/\\x5Cthink\\x5CContainer/invokefunction&function=call_user_func_array&vars -index/\\\\think\\\\Container/invokefunction&function=call_user_func_array&vars -index/\\x09hink\\x07pp/invokefunction&function=call_user_func_array&vars diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt deleted file mode 100644 index c03a93d..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt +++ /dev/null @@ -1,36 +0,0 @@ -foo\ -^/\?Mode=debug -^/\?controller=auth\&action=login -^/\?controller=user\&action=login -^/\?page=login -^/\?page=login\&action=about -^/\?page=shop/cart\&func=cartAdd\&product_id=\' -^/\?q=0\&l=0 -^/\?view=home -^/\?wicket\:bookmarkablePage=\:com\.videoiq\.fusion\.camerawebapi\.ui\.pages\.LoginPage -^/AChecker/checker/index\.php -^/AContent/home/index\.php -^/AM/index\.php -^/ANT/Lisez\%20moi\.txt -^/ANT/Readme\.txt -^/ANT/news/admin/index\.php -^/APG/info/about -^/ATutor/login\.php -^/About\.html -^/Account/LogIn -^/AdminWeb/ -^/Admin_files/ -^/Administration/ -^/AdvWebAdmin/ -^/Agent/ -^/Agents/ -^/Album/ -^/AlbumArt_/ -^/AnimaGallery/index\.php -^/Ant/Lisez\%20moi\.txt -^/Ant/Readme\.txt -^/Ant/news/admin/index\.php -^/ApplicationEngine/ -^/Applications/dellUI/Strings/EN_about_hlp\.htm -^/ArticleSetup/upload/index\.php -^/Auth\.action -^/Autodiscover -^/Autodiscover/Autodiscover\.xml -^/Backburner/ -^/BigTree/admin/login/ -^/BigTree/site/index\.php/admin/login/ -^/BizTalkServerDocs/ -^/BizTalkServerRepository/ -^/BizTalkTracking/ -^/Boutiques/ -^/CCC/login\.html -^/CFIDE/administrator/index\.cfm -^/CFIDE/probe\.cfm -^/CGI/Java/Serviceability\?adapter=device\.statistics\.device -^/CHANGELOG -^/CHANGES -^/CHANGES\.md -^/CMR/web/login -^/CRM/index\.php -^/CS/ -^/CVS/ -^/CVS/Entries -^/ChangeLog -^/ClearBudget/db/budget\.sqlite -^/ClipBucket/admin_area/login\.php -^/ConsoleHelp/default\.jsp -^/ControlManager/default\.htm -^/Corporate/ -^/Count\.cgi\?align=topcenter -^/CruxCMS/login\.php -^/CruxCMS300/manager/login\.php -^/CruxPA200/Manager/login\.php -^/CruxPA200/login\.php -^/CultBooking/login -^/DB4Web/ -^/DMC/titleBar\.php -^/DMR/ -^/DPI11F/index\.php -^/DVWA/ -^/DeepSleep\.js -^/Default\.aspx -^/DevMgmt/ProductConfigDyn\.xml -^/Device/Device\.html -^/DeviceInfo -^/Device_Information\.htm -^/DigitalScribe/login\.php -^/DigitalScribe/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/DocuColor/ -^/Documentation/misc/about\.jsp -^/Dotproject/index\.php -^/DroboAccess/ -^/DroboPix/ -^/ECP -^/EWS -^/EWS/Exchange\.asmx -^/EWS/Services\.wsdl -^/English\.js -^/EspoCRM/index\.php -^/Esprit/public/Login\.jsp -^/Exchange -^/ExoPHPDesk/index\.php -^/F3Site/SYSTEM/index\.php -^/F3Site/index\.php -^/FCKeditor/_whatsnew\.html -^/FCKeditor/fckeditor\.js -^/FCMS/index\.php -^/FPWS/index\.php -^/FileSharing/index\.php -^/FinderView\-master/index\.html -^/FinderView/index\.html -^/FlashChat/index\.php -^/FreeDirectory/index\.php -^/GW5/GWWEB\.EXE\?GET\-CONTEXT\&HTMLVER=AAA -^/GW5/GWWEB\.EXE\?HELP=bad\-request -^/GWWEB\.EXE\?GET\-CONTEXT\&HTMLVER=AAA -^/GWWEB\.EXE\?HELP=bad\-request -^/GXApp/ -^/Gallery/index\.php -^/GetSimple/index\.php -^/Gigs/index\.php -^/Gnat\-TGP/gnat/admin/index\.php -^/HB/ -^/HBTemplates/ -^/HNAP1 -^/HNAP1/ -^/HTMLEditor/_whatsnew\.html -^/HTMLEditor/fckeditor\.js -^/Hastymail2/index\.php -^/IBMWebAS/ -^/IEM/admin/index\.php -^/ILIAS/setup/setup\.php -^/INDEX\.HTM -^/INVOHOST/site\.php -^/IlohaMail/index\.php -^/IlohaMail/source/index\.php -^/Index2\.php -^/Info\.live\.htm -^/Install -^/Install/ -^/Install/InstallWizard\.aspx -^/IntraMaps/ApplicationEngine/ -^/IntraMaps/applicationengine/ -^/IntraMaps70/ApplicationEngine/ -^/IntraMaps70/applicationengine/ -^/Istatus\.htm -^/JAG/guestbook\.php -^/JBookIt/ -^/JSPWiki/ -^/JaxCMS/index\.php -^/Kaltura/start/index\.php -^/LCGI -^/Lang/en\-US/common\.js -^/Liferay/ -^/Liferay/web/guest -^/LightNEasy\.php\?do=login -^/Lisez\%20moi\.txt -^/LiveTime/WebObjects/LiveTime\.woa -^/LiveZilla/index\.php -^/Log/ -^/Login -^/Login\.aspx -^/Login\.do -^/Login\.htm -^/Login\.jsp -^/Login\.php -^/Login\?omacmd=getlogin\&page=Login\&managedws=true -^/LoginPage\.do -^/MCshoutBox/shoutbox\.php -^/MNU_access_login_top\.htm -^/Mail/ -^/Main/WebHome -^/ManagerSystem/login\.php -^/MessagingManager/ -^/Microsoft\-Server\-ActiveSync -^/Microsoft\-Server\-ActiveSync/default\.css -^/Microsoft\-Server\-ActiveSync/default\.eas -^/Moin/SystemInfo -^/Monsta\-FTP\-master/ -^/Msword/ -^/MyBB/index\.php -^/MySQLDumper/index\.php -^/NSearch/ -^/Nagios/login\.php -^/Nakid/index\.php -^/NetDynamic/ -^/NetDynamics/ -^/News/ -^/Nextcloud/status\.php -^/NmConsole/ -^/NmConsole/User/LogIn\?AspxAutoDetectCookieSupport=1 -^/NodeBB/ -^/NonExistent1369180409/ -^/NoticeBoardPro/index\.php -^/OAB -^/OPAC\-kpwinSQL/index\.php -^/OPAC/index\.php -^/OPT127MAX/opt/index\.php\?OPT_Session=VT_Req -^/OTRS/index\.pl -^/OTRS/installer\.pl -^/OTRS/public\.pl -^/OWA -^/Odoo/web/login -^/Open\-Xchange/ox\.html -^/OpenVASVT445166832\.html -^/Openmairie_Annuaire/index\.php -^/Openmairie_Annuaire/login\.php -^/Openmairie_Catalogue/doc/catalogue\.html -^/Openmairie_Cimetiere/index\.php -^/Openmairie_Cimetiere/login\.php -^/Openmairie_Cominterne/index\.php -^/Openmairie_Cominterne/login\.php -^/Openmairie_Courrier/index\.php -^/Openmairie_Courrier/login\.php -^/Openmairie_Foncier/index\.php -^/Openmairie_Foncier/login\.php -^/Openmairie_Planning/index\.php -^/Openmairie_Planning/login\.php -^/Openmairie_Presse/index\.php -^/Openmairie_Presse/login\.php -^/Openmairie_RegistreCIL/index\.php -^/Openmairie_RegistreCIL/login\.php -^/OperaLogin/Welcome\.do -^/Orbis/admin/login\.php -^/Overview\.html -^/OwnCloud/status\.php -^/PDG_Cart/ -^/PHPBazar/index\.php -^/PHPMailer\-master/README -^/PHPMailer\-master/README\.md -^/PHPMailer\-master/composer\.json -^/PHPMailer\-master/extras -^/PHPMailer\-master/lib/composer\.json -^/PHPMailer/README -^/PHPMailer/README\.md -^/PHPMailer/composer\.json -^/PHPMailer/extras -^/PHPMailer/lib/composer\.json -^/PHPMyAdmin/ -^/PHPMyAdmin/index\.php -^/PHPSurveyor/index\.php -^/PHPmongoDB/index\.php -^/PRESENTATION/ADVANCED/FORCE_PASSWORD/TOP\?accsessmethod=0 -^/PRESENTATION/HTML/TOP/INDEX\.HTML -^/PassTrixMain\.cc -^/PhPmyAdMin/index\.php -^/Phpunity_Newsmanager/tmpl/news_main\.htm -^/PivotX/index\.php -^/Piwigo/index\.php -^/Plone/ -^/Portal/Portal\.mwsl\?PriNav=Ident -^/Portal0000\.htm -^/PostNuke/ -^/PostNuke/docs/distribution/tour_page1\.htm -^/PostNuke/index\.php -^/PowerShell -^/ProjectSend/index\.php -^/Public/index\.php -^/PulseCMS/ -^/PulseCMS/admin/index\.php -^/PulseCMS/index\.php -^/QConvergeConsole/ -^/RCS/ -^/README -^/README\.md -^/README\.php -^/README\.txt -^/README/ -^/RELEASE\-NOTES\.txt -^/RELEASE_NOTES\.txt -^/ROADS/ -^/RSAarcher/Default\.aspx -^/Readme\.txt -^/Readme/ -^/ReleaseNotes\.txt -^/Remote/ -^/Rpc -^/SMS/index\.php -^/SOGo/ -^/SOPlanning/www/ -^/SPF/shop\.cgi -^/SQLiteManager/main\.php -^/SStc/index\.html -^/Samsara/modules/news/index\.php -^/SecretServer/Login\.aspx -^/Security/login -^/SeoPanel/ -^/ServerAdmin/UserLogin\.jsp -^/ShoreWareDirector/ -^/ShowCenter/SettingsBase\.php\?Skin=\foo\ -^/Siestta/ -^/SilverStream -^/SilverStream/ -^/SilverStream/Meta/Tables/\?access\-mode=text -^/SimpNews/news\.php -^/SimpleID/index\.php -^/SimpleID/www/index\.php -^/Site/Pages/login\.aspx -^/SiteEngine/index\.php -^/SiteScope/htdocs/SiteScope\.html -^/Spheric/admin/index\.php -^/Spheric/index\.php -^/Stats/ -^/StoreDB/ -^/Subscribe/index\.php -^/SugarCRM/ -^/SugarCRM/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/SuiteCRM/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/SwiftMailer/ -^/SwiftMailer/CHANGES -^/SwiftMailer/README -^/SwiftMailer/composer\.json -^/SwiftMailer/lib/ -^/SwiftMailer/lib/CHANGES -^/SwiftMailer/lib/README -^/SwiftMailer/lib/composer\.json -^/SystemInfo -^/TCExam/public/code/index\.php -^/Taskfreak/login -^/Taskfreak/login\.php -^/TeamPass/index\.php -^/Templates/ -^/ToDo/ -^/TomatoCart/index\.php -^/TopAccess/Device/Device\.htm -^/TrackIT/Account/LogIn -^/TrackIt/Account/LogIn -^/TrackItWeb/Account/LogIn -^/Tribisur/scripts\.php -^/Truc/login\.php -^/UI/ -^/UI/Login\.jsp -^/UI/login -^/UseBB/index\.php -^/Vanilla113rc1/index\.php -^/Vanilla117/index\.php -^/Vanilla118/index\.php -^/WEB\-INF/web\.xml -^/WEB\-INf\./web\.xml -^/WS_FTP\.INI -^/WS_FTP\.ini -^/WSsamples/ -^/WW/cwiki\.apache\.org/WW/guides\.html -^/WW/cwiki\.apache\.org/WW/home\.html -^/WackoWiki -^/WeBid/index\.php -^/Web/\? -^/WebBank/ -^/WebCalendar/ -^/WebCalendar/login\.php -^/WebConfig/ -^/WebConsole/Login\.jsp -^/WebDB/ -^/WebServiceImpl/axis2\-admin/ -^/WebServiceImpl/axis2\-web/index\.jsp -^/WebServiceImpl/index\.jsp -^/WebServiceImpl/services/Version/getVersion -^/WebServiceImpl/services/Version\?method=getVersion -^/WebServiceImpl/services/non\-existent -^/WebShop/ -^/WebSiteAdmin/index\.php -^/WebTrend/ -^/Web_store/ -^/Welcome\.do -^/WideImage\-master/composer\.json -^/WideImage\-master/doc/index\.html -^/WideImage\-master/index\.php -^/WikiHome -^/Wiky/index\.php -^/WinSCP\.ini -^/XSL/ -^/ZeusCMS/index\.php -^/Zeuscart/index\.php -^/Zikula_Core/ -^/Zikula_Core/docs/distribution/tour_page1\.htm -^/Zikula_Core/index\.php -^/_ScriptLibrary/ -^/_backup/ -^/_derived/ -^/_errors/ -^/_fpclass/ -^/_mem_bin/ -^/_notes/ -^/_objects/ -^/_old/ -^/_pages/ -^/_passwords/ -^/_private/ -^/_profiler/latest -^/_scripts/ -^/_sharedtemplates/ -^/_tests/ -^/_themes/ -^/_top\.html -^/_whatsnew\.html -^/a/ -^/a2billing/Public/index\.php -^/a2billing/admin/Public/index\.php -^/a2billing/index\.php -^/aardvarktopsites/index\.php -^/about -^/about\-show\.do -^/about\.html -^/about\.php -^/about/ -^/abtpportal/includes/esqueletos/skel_null\.php -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/acceso/ -^/access/ -^/accessset\.html -^/accesswatch/ -^/acciones/ -^/account/ -^/account/index\.php -^/account/login -^/account/login\.php -^/account/login/ -^/accounting/ -^/accounting/control/main -^/accounting/control/main/ -^/accounts/inc/include\.php\?language=0\&lang_settings\[0\]\[1\]=http\://xxxxxxxxxxxxxxx/openvasvt/ -^/accounts/login/ -^/achievo/index\.php -^/acp/index\.php -^/activex/ -^/activities/control/main -^/actuator/gateway/routes -^/adaptbb/index\.php -^/adaptcms/sitemap\.xml -^/addrbook/index\.php -^/address/index\.php -^/addressbook/index\.php -^/adm/ -^/adm/wizard\.asp -^/admcgi/ -^/admentor/ -^/admin -^/admin\#/mode -^/admin\-bak/ -^/admin\-ng/ -^/admin\-ng/login\.html -^/admin\-old/ -^/admin\.back/ -^/admin\.php -^/admin/ -^/admin/Public/index\.php -^/admin/ckeditor/CHANGES\.md -^/admin/ckeditor/ckeditor\.js -^/admin/config\.php -^/admin/doc/README\.txt -^/admin/fckeditor/_whatsnew\.html -^/admin/fckeditor/fckeditor\.js -^/admin/htmleditor/_whatsnew\.html -^/admin/htmleditor/fckeditor\.js -^/admin/index\.html\?Language=0 -^/admin/index\.jsp -^/admin/index\.php -^/admin/index\.php\?login -^/admin/install -^/admin/install\.php -^/admin/lib/gradient/gradient\.php -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/admin/lists/admin/\?page=about -^/admin/login\-default\.do -^/admin/login\.action -^/admin/login\.html -^/admin/login\.jsp -^/admin/login\.php -^/admin/login/ -^/admin/moderation\.php -^/admin/password_check_token\.php\?f_email=1\&token=\%22\%3E\%3Cscript\%3Ealert\%28/xss\-test/\%29\;\%3C/script\%3E -^/admin/public/index\.html -^/admin/setup\.php -^/admin_/ -^/admin_area/login\.php -^/admin_login\.html -^/admin_panel/index\.php -^/adminer\.php -^/adminer/ -^/adminer/adminer\.php -^/adminer/editor\.php -^/administration/ -^/administration/profiles\.php -^/administrator/ -^/adminuser/ -^/adminweb/ -^/admisapi/ -^/ads/admin/index\.php -^/ads/www/admin/index\.php -^/adserver/admin/index\.php -^/adserver/www/admin/index\.php -^/aeNovo1\.mdb -^/aeromail/index\.php -^/af\.cgi\?_browser_out=\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2Fetc\%2Fpasswd -^/afdrukken\.php -^/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/aflog/Readme\.txt -^/afterlogic/ -^/ag\.cgi -^/ag\.exe -^/ag/ang/index\.php -^/ag/index\.php -^/agentes/ -^/aihs/index\.php -^/ajaxplorer/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/ajaxportal/index\.php -^/album/index\.php -^/alerts\.php -^/algosec/suite/login\.html -^/alienform\.cgi\?_browser_out=\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2Fetc\%2Fpasswd -^/am/index\.php -^/amazon/control/main -^/amserver/UI/Login\.jsp -^/analog/ -^/analytics/ -^/analytics/index\.php -^/analytics/index\.php\?owa_do=base\.loginForm -^/ang/ang/index\.php -^/ang/index\.php -^/anguestbook/ang/index\.php -^/anguestbook/index\.php -^/anima/index\.php -^/ans\.pl\?p=\.\./\.\./\.\./\.\./\.\./usr/bin/id\|\&blah -^/ans/ans\.pl\?p=\.\./\.\./\.\./\.\./\.\./usr/bin/id\|\&blah -^/ant/Lisez\%20moi\.txt -^/ant/Readme\.txt -^/ant/news/admin/index\.php -^/anthill/ -^/ap/control/main -^/ap/control/main/ -^/apache\-wicket/index\.html -^/apache/ -^/apache/openmeetings/signin -^/apachesolr/ -^/apage/lcgi\-bin -^/apc\.php -^/apc/apc\.php -^/apc/apcinfo\.php -^/apc/apcu\.php -^/apc/index\.php -^/apcinfo\.php -^/apcu\.php -^/aphpkb/index\.php -^/api/ -^/api/appconfiguration -^/api/config/v1/version/image -^/api/index\.html -^/api/v1\.0/ -^/api/v1/ -^/api/v1/appconfiguration -^/api/v1/overview -^/api/v2\.0/ -^/api/v2/ -^/api/v2/appconfiguration -^/api/v3\.0/ -^/api/v3/ -^/api/v3/appconfiguration -^/api/v4\.0/ -^/api/v4/ -^/api/v5\.0/ -^/api/v5/ -^/api/version -^/apiclient/ember/Login\.jsp -^/apidocs/index\.html -^/apoll/admin/login\.php -^/app -^/app\.php -^/app/ -^/app/kibana -^/app/kibana/ -^/app/ui/ -^/app/ui/login\.jsp -^/appconfiguration -^/applets/ -^/appletvid\.html -^/appliance/ -^/application/ -^/application/login/login\.html -^/applicationengine/ -^/applications/ -^/apps/ -^/appsuite/apps/io\.ox/help/style\.less -^/aproxengine/engine/inc/version\.info -^/aps/Login\.do -^/ar/ -^/ar/control/main -^/ar/control/main/ -^/arcgis/rest/services/ -^/archiva/index\.action -^/archive/ -^/archives/ -^/arsc/base/index\.php -^/arsys/shared/login\.jsp -^/artifactory/webapp/home\.html\?0 -^/artmedic_links5/index\.php\?id=index\.php -^/asbru/index\.jsp -^/asp/ -^/aspnet_client -^/aspx/ -^/assetmaint/control/main -^/assetmaint/control/main/ -^/asterisk/control/main -^/atc/ -^/aterm_httpif\.cgi -^/atmail/index\.php -^/atmail/index\.php/admin -^/atsphp/index\.php -^/atutor/login\.php -^/audistat/index\.php -^/aurora/ -^/auth -^/auth/ -^/auth/login -^/auth/login\?redirect=/ -^/auth\?next=\%2F -^/authadmin/ -^/authenticate/login -^/authenticate/login\.php -^/authentication/ -^/authentication/login -^/authentication_index\.php\?PGV_BASE_DIRECTORY=http\://xxxxxxx/ -^/avarcade/index\.php -^/avarcade/upload/index\.php -^/aw/ -^/awstats\-cgi/ -^/awstats\-cgi/awstats\.pl\?framename=mainright -^/awstats\.pl\?framename=mainright -^/awstats/ -^/awstats/awstats\.pl\?framename=mainright -^/awstats/cgi\-bin/ -^/awstats/cgi\-bin/awstats\.pl\?framename=mainright -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/axis\-cgi/prod_brand_info/getbrand\.cgi -^/axis/admin/index\.php -^/axis/index\.jsp -^/axis/services/Version\?method=getVersion -^/axis/services/non\-existent -^/axis2\-admin/ -^/axis2\-web/index\.jsp -^/axis2/axis2\-admin/ -^/axis2/axis2\-web/index\.jsp -^/axis2/services/Version/getVersion -^/ayuda/ -^/b/ -^/b2\-include/ -^/b2epms/index\.php -^/b2evolution/admin\.php -^/b2evolution/blogs/admin\.php -^/b2evolution/evoadm\.php -^/b2evolution/index\.php -^/b2evolution/login\.php -^/back/ -^/backend/ -^/backend/plugin/Registration/index\.php -^/backend/plugin/Registration/index\.php\?confirm=\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/backend/start/index\.php -^/backup/ -^/backups/ -^/bacula\-web/ -^/bak/ -^/bamboo/userlogin\!default\.action -^/bamboo/userlogin\!doDefault\.action -^/banca/ -^/banco/ -^/bands/index\.php -^/bank/ -^/banner/ -^/banner01/ -^/banners/ -^/base/ -^/base/index\.php -^/basic_status -^/basicset\.html -^/basilix\.php\?is_ssl=1 -^/basilix/basilix\.php\?is_ssl=1 -^/batavi/admin/index\.php\?login -^/batch/ -^/bb\-dnbd/ -^/bblog/index\.php -^/bbv/ -^/bca\-networks/main/displayTop\.do -^/bdata/ -^/bdatos/ -^/bds/Login\.do -^/berta/engine/login\.php -^/berta/login\.php -^/beta/ -^/betsy/ress\.php -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/bi/control/main -^/bi/control/main/ -^/bid/index\.php -^/bigtree/admin/login/ -^/bigtree/site/index\.php/admin/login/ -^/bill/index\.php -^/billpay/ -^/bin/ -^/bin/view/TWiki/WebHome -^/bin/view/foswiki/WebHome -^/birt/control/main -^/birt/control/main/ -^/bitbucket/login -^/bitweaver/users/login\.php -^/bitweaver/wiki/index\.php -^/blackcat/backend/start/index\.php -^/blackcatcms/backend/start/index\.php -^/blob\.php -^/blob/blob\.php -^/blog/ -^/blog/admin/moderation\.php -^/blog/blob\.php -^/blog/blogengine/ -^/blog/database\.sql -^/blog/feed/ -^/blog/index\.php -^/blog/installer\-backup\.php -^/blog/installer\.php -^/blog/login\.php -^/blog/readme\.html -^/blog/wp\-links\-opml\.php -^/blog/wp\-login\.php -^/blogengine/ -^/blogs/admin\.php -^/boadmin/ -^/board/ -^/board/admin\.php -^/board/db/users\.dat -^/board/index\.php -^/board/upload/index\.php -^/board/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/boards/ -^/boards/index\.php -^/bolt/field/index\.php -^/bolt/index\.php -^/boltwire/field/index\.php -^/boltwire/index\.php -^/bonita/login\.jsp -^/booked/Web/\? -^/boot/ -^/box/shoutbox\.php -^/brainkeeper/index\.php -^/brainkeeper_enterprise_wiki/index\.php -^/breakcal/calendar\.cgi -^/brightmail/viewLogin\.do -^/browser/ -^/browser/dist/ -^/browser/dist/admin/ -^/btauxdir/ -^/bug/ -^/bugport/php/index\.php -^/bugs/ -^/bugs/index\.cgi -^/bugs/index\.php -^/bugs/login_page\.php -^/bugtracker/index\.php -^/bugtracker/login_page\.php -^/bugzilla/ -^/bugzilla/index\.cgi -^/buildbot/about -^/business/ -^/buy/ -^/buynow/ -^/bw/users/login\.php -^/bw/wiki/index\.php -^/c/ -^/cPassMan/index\.php -^/cPcreator/index\.php -^/cache\-stats/ -^/cache/apc\.php -^/cache/apcinfo\.php -^/cache/apcu\.php -^/cache/index\.php -^/cacti/ -^/cacti/index\.php -^/caja/ -^/calendar\.php -^/calendar\.php\?year=2004\&month=\foo\\&day=01 -^/calendar/index\.php -^/calendar/login\.php -^/calendarix/calendar\.php -^/campsite/admin/login\.php -^/campsite/implementation/site/admin/login\.php -^/campsite/implementation/site/index\.php -^/campsite/index\.php -^/campsite/src/admin/login\.php -^/campsite/src/index\.php -^/candid/htdocs/index\.php -^/candid/index\.php -^/carbon/product/about\.html -^/card/ -^/cards/ -^/cart\.php -^/cart/ -^/cart/admin/login\.php -^/cart/index\.php -^/cas\-server\-webapp/login -^/cas/login -^/cash/ -^/caspsamp/ -^/catalog\.php\?action=category_show\&id=\' -^/catalog/ -^/catalog/control/main -^/catalog/control/main/ -^/catalog/index\.php -^/catalog/ssl_check\.php -^/caucho\-status -^/cb/db/budget\.sqlite -^/cb/login -^/cb_install/ -^/cbag/ag\.cgi -^/cbag/ag\.exe -^/cbdb/db\.exe -^/cbgrn/grn\.exe -^/cbi\-bin/ -^/cbmw/mw\.exe -^/ccard/ -^/ccards/ -^/ccmadmin/showHome\.do -^/ccms/afdrukken\.php -^/ccms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/ccmuser/showHome\.do -^/cd\-cgi/ -^/cd/ -^/cdn\-cgi/trace -^/cdrom/ -^/ce_html/ -^/cedm/index\.php -^/centreon/index\.php -^/centreon/install/setup\.php -^/cert/ -^/certificado/ -^/certificate/ -^/cfappman/ -^/cfdocs/ -^/cfide/ -^/cgi\-auth/ -^/cgi\-bim/ -^/cgi\-bin/ -^/cgi\-bin/MANGA/index\.cgi -^/cgi\-bin/authLogin\.cgi -^/cgi\-bin/cbag/ag\.cgi -^/cgi\-bin/cbag/ag\.exe -^/cgi\-bin/cgi\?req=twz -^/cgi\-bin/chklogin\.cgi -^/cgi\-bin/chksession\.cgi -^/cgi\-bin/config\.cgi -^/cgi\-bin/dada/mail\.cgi -^/cgi\-bin/dna/password\.cgi -^/cgi\-bin/getServerValue\.cgi\?id=2 -^/cgi\-bin/get_status\.cgi -^/cgi\-bin/home\.ha -^/cgi\-bin/html/login\.html -^/cgi\-bin/koha/opac\-search\.pl -^/cgi\-bin/login -^/cgi\-bin/login\.cgi -^/cgi\-bin/login\.cgi\?lang=en\&src=AwLoginDownload\.html -^/cgi\-bin/login\.html -^/cgi\-bin/luci -^/cgi\-bin/mapserv\.exe\?map= -^/cgi\-bin/mapserv\?map= -^/cgi\-bin/mt/mt\.cgi -^/cgi\-bin/openwebmail/openwebmail\.pl -^/cgi\-bin/pki/pub/pki\?cmd=serverInfo -^/cgi\-bin/pub/pki\?cmd=serverInfo -^/cgi\-bin/run\-cvstrac/index -^/cgi\-bin/status\.xml -^/cgi\-bin/top\.cgi -^/cgi\-bin/view/TWiki/WebHome -^/cgi\-bin/vmtadmin\.cgi\?callType=ACTION\&actionType=VERSIONS -^/cgi\-bin/web_index\.cgi\?lang=en\&src=AwWelcome\.html -^/cgi\-bin/webproc -^/cgi\-bin2/ -^/cgi\-csc/ -^/cgi\-isapi/ -^/cgi\-lib/ -^/cgi\-local/ -^/cgi\-mod/index\.cgi -^/cgi\-nmis4/nmiscgi\.pl -^/cgi\-nmis8/nmiscgi\.pl -^/cgi\-scripts/ -^/cgi\-shl/ -^/cgi\-shop/ -^/cgi\-sys/ -^/cgi\-weddico/ -^/cgi\-win/ -^/cgi/ -^/cgi/about -^/cgi/lang/en/login\.xsl -^/cgibin/ -^/cgicso\?query=AAA -^/cgilib/ -^/cgis/ -^/cgiscripts/ -^/cgit/ -^/cgiwin/ -^/chamilo/index\.php -^/changelog -^/changelog\.txt -^/chassis/config/GeneralChassisConfig\.html -^/chat/ -^/chat/base/index\.php -^/chat/chat/setup\.php3\?next=1 -^/chat/index\.php -^/chat/setup\.php3\?next=1 -^/check_mk/login\.py -^/checker/index\.php -^/chillyCMS/index\.php -^/chipmunk/index\.php -^/chklogin\.cgi -^/chksession\.cgi -^/chora/README -^/chora/cvs\.php -^/chora/horde/services/help/\?module=chora\&show=about -^/ckeditor\.js -^/ckeditor/CHANGES\.md -^/ckeditor/ckeditor\.js -^/claroline/claroline/install/index\.php -^/class/ -^/classes/ -^/classifieds/Site_Admin/admin\.php\ -^/clearsite/about\.php -^/clicknet/index\.php -^/clicknetcms/index\.php -^/client/ -^/cliente/ -^/clientes/ -^/clientscript/ckeditor/CHANGES\.md -^/clientscript/ckeditor/ckeditor\.js -^/clientscript/fckeditor/_whatsnew\.html -^/clientscript/fckeditor/fckeditor\.js -^/clipbucket/admin_area/login\.php -^/cloud/status\.php -^/cluster/cluster -^/clustercontrol/users/login -^/clwarn\.cgi -^/cm/ -^/cmf/login -^/cmk/check_mk/login\.py -^/cmp/ -^/cmplatform/showHome\.do -^/cms/ -^/cms/\.htaccess -^/cms/\?view=home -^/cms/ChangeLog -^/cms/README -^/cms/README\.php -^/cms/admin/ -^/cms/admin/index\.php -^/cms/admin/login\.php -^/cms/admin/login/ -^/cms/admin/moderation\.php -^/cms/afdrukken\.php -^/cms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/cms/backend/start/index\.php -^/cms/cms/website\.php\?id=/de/index\.htm\&admin=login -^/cms/complete\-modules/modules/forcedownload/force_download\.php -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/boot\.ini -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/etc/passwd -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/windows/win\.ini -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/winnt/win\.ini -^/cms/data/nanoadmin\.php -^/cms/e107_admin/admin\.php -^/cms/engine/inc/version\.info -^/cms/htaccess\.txt -^/cms/includes/js/mambojavascript\.js -^/cms/indeks\.php\?db=frontpage -^/cms/index\.html -^/cms/index\.php -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/cms/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/cms/index\.php\?controller=login\&action=showlogin -^/cms/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/cms/index\.php\?mode=administration -^/cms/index\.php\?module=users\&action=user\&command=login_page -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/login\.php -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/news\.php -^/cms/nonexistent\.php -^/cms/ress\.php -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/ru/ -^/cms/site/index\.php/admin/login/ -^/cms/sitemap\.xml -^/cms/symphony/ -^/cms/system/login\.php -^/cms/templates/system/css/editor\.css -^/cms/typo3/index\.php -^/cms/typo3/sysext/opendocs/composer\.json -^/cms/typo3/sysext/recordlist/composer\.json -^/cms/typo3/sysext/sys_note/composer\.json -^/cms/typo3/sysext/t3editor/composer\.json -^/cms/typo3_src/ChangeLog -^/cms/update\.php -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/cms/website\.php\?id=/de/index\.htm\&admin=login -^/cmsample/ -^/cmscout/index\.php -^/cmsmadesimple/index\.php -^/cmssite/control/main -^/cmssite/control/main/ -^/cncms/index\.php -^/cobalt\-images/ -^/cobbler_web -^/code/ -^/codoforum/index\.php -^/coldusr/index\.cfm -^/collabtive/index\.php -^/command/inquiry\.cgi\?inqjs=sysinfo -^/comments/ -^/common/ -^/commoncgi/servlet/CCGIServlet\?ApHost=PDT_InterScan_NT\&CGIAlias=PDT_InterScan_NT\&File=logout\.htm -^/communicator/ -^/community/ -^/community/index\.php -^/community/login -^/community/upload/index\.php -^/compactcms/afdrukken\.php -^/compactcms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/company/ -^/complete\-modules/modules/forcedownload/force_download\.php -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/boot\.ini -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/etc/passwd -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/windows/win\.ini -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/winnt/win\.ini -^/composer\.json -^/composer\.json\-dist -^/composer\.json\.dist -^/composer\.lock -^/compra/ -^/compras/ -^/compressed/ -^/conecta/ -^/conf/ -^/conference/roschedule\.php -^/config\-browser/index -^/config\-browser/index\.action -^/config/ -^/config/NonExistent\.html -^/config/help\.cgi -^/configurations\.do -^/confluence/login\.action -^/connect/ -^/console/ -^/console/faces/jsp/login/BeginLogin\.jsp -^/console/login/LoginForm\.jsp -^/console/logon\.jsp -^/contao/install -^/contao/install\.php -^/content\.html -^/content\.php -^/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/content/ -^/content/control/main -^/content/control/main/ -^/content/nonexistant1331069233814248391545649413\.mp3 -^/content/smarthome\.php -^/continuum/about\.action -^/control/main -^/control/main/ -^/controllerinjectex/control/main -^/controlpanel/ -^/cookbook/index\.php -^/cool/ -^/cool/adminws/ -^/coppermine/login\.php -^/copyright/info\.js -^/core/ -^/core/orionSplashScreen\.do -^/coregui/login -^/corp/ -^/corporate/webpages/login\.jsp -^/correo/ -^/counter/ -^/counter/index\.php -^/courier/ -^/cp/index\.php -^/cpassman/index\.php -^/cpqlogin\.htm -^/cps/Login -^/cqweb/login -^/crawler/html/infoen\.htm -^/crawltrack/html/infoen\.htm -^/cre\-loaded/index\.php -^/cre/index\.php -^/credit/ -^/crm/index\.php -^/crmsfa/control/main -^/crmsfa/control/main/ -^/cron/ -^/crons/ -^/crowd/console/login\.action -^/crucible/ -^/crypt/cryptographp\.inc\.php\?cfg=verifier\.php\&sn=PHPSESSID\& -^/crypto/ -^/cs\-cart/ -^/cs/ -^/cs/login/login\.htm -^/cscart/ -^/csr/ -^/css/ -^/csvn/login/auth -^/cubecart/index\.php -^/cucm/showHome\.do -^/cuenta/ -^/cuentas/ -^/cultbooking/login -^/currency/ -^/custom_lang/English\.txt -^/customers/ -^/customviews/image/login_bg/ -^/cutenews/index\.php -^/cvs\.php -^/cvstrac/index -^/cvsweb\.cgi/ -^/cvsweb/ -^/cybercash/ -^/d/ -^/d/users/sign_in -^/dana\-cached/ -^/dana\-cached/sc/ -^/dana\-cached/setup/ -^/dana\-na/ -^/dana\-na/auth/ -^/dana\-na/download/ -^/dana\-na/meeting/ -^/dana/ -^/dana/fb/ -^/dana/fb/smb/ -^/darkportal/ -^/dashboard\.html -^/dashboard/ -^/dat/ -^/data/ -^/data/adminusers\.csv -^/data/nanoadmin\.php -^/database\.sql -^/database/ -^/database/_sessions/ -^/databases/ -^/datafiles/ -^/dataimport/control/main -^/dato/ -^/datos/ -^/dav/ -^/db\.exe -^/db/ -^/db/budget\.sqlite -^/db/users\.dat -^/dbase/ -^/dbase/aeNovo1\.mdb -^/dce/rest/settings/version -^/dcforum/ -^/ddem/login/ -^/ddreport/ -^/ddrint/ -^/de/index\.html -^/default\.cfm\?Mode=debug -^/default\.cfml\?Mode=debug -^/default\.html -^/deluxebb/index\.php -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/demo/ -^/demo/demo/phpThumb\.demo\.demo\.php -^/demo/index\.php -^/demoauct/ -^/demomall/ -^/demos/ -^/deployment\-config\.json -^/deploymentmanager/index\.jsp -^/design/ -^/desknow/index\.html -^/desktop\.php -^/desktop/container/ -^/dev/ -^/devel/ -^/development/ -^/deviceinfo\.htm -^/dezie/db\.exe -^/dfshealth\.html -^/dfshealth\.jsp -^/dialup/ -^/dialup/content\.html -^/dialup_admin/ -^/didiwiki/WikiHome -^/dienstplan/\?page=login\&action=about -^/digitalscribe/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/diglib/ -^/dir/ -^/directory/ -^/directory/index\.php -^/directorymanager/ -^/discloser/login\.php -^/discoverer/viewer -^/discuz/index\.php -^/dist/ -^/dist/admin/ -^/diycms/diy/index\.php -^/dl/ -^/dll/ -^/dm\-filemanager/login\.php -^/dm/ -^/dm/index\.php -^/dmanager/php/login\.php -^/dmf/login\.php -^/dms/ -^/dms/index\.php -^/dms0/ -^/dmsdump/ -^/dns/index\.php -^/do/view/TWiki/WebHome -^/doc\-html/ -^/doc/ -^/doc/catalogue\.html -^/doc/index\.html -^/doc/script/config/system/channelDigital\.js -^/doc/xml/en/Login\.xml -^/doc/xml/en/Preview\.xml -^/doc1/ -^/docman/admin\.php -^/docman/index\.php -^/docs/ -^/docs/RELEASE\-NOTES\.txt -^/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/docs/WW/cwiki\.apache\.org/WW/home\.html -^/docs/changelog\.html -^/docs/distribution/tour_page1\.htm -^/docs/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/docs/docs/WW/cwiki\.apache\.org/WW/home\.html -^/docs/docs/index\.html -^/docs/docs/struts2\-core\-apidocs/help\-doc\.html -^/docs/docs/struts2\-core\-apidocs/index\-all\.html -^/docs/docs/struts2\-core\-apidocs/overview\-summary\.html -^/docs/index\.html -^/docs/index\.php -^/docs/readme\.txt -^/docs/struts2\-core\-apidocs/help\-doc\.html -^/docs/struts2\-core\-apidocs/index\-all\.html -^/docs/struts2\-core\-apidocs/overview\-summary\.html -^/docs1/ -^/document/ -^/documentation\.html -^/documents/ -^/docushare/dsweb/HomePage -^/doesnt_exist/ -^/dokeos/ -^/dokeos/index\.php -^/doku\.php -^/dokuwiki/doku\.php -^/dokuwiki/feed\.php -^/dolibarr/htdocs/index\.php -^/dolibarr/index\.php -^/dolph/administration/profiles\.php -^/dolph/index\.php -^/dolphin/administration/profiles\.php -^/dolphin/index\.php -^/domainmod/CHANGELOG -^/domainmod/index\.php -^/domcfg\.nsf -^/dorg/admin_panel/index\.php -^/dotAdmin/api/appconfiguration -^/dotAdmin/api/v1/appconfiguration -^/dotAdmin/api/v2/appconfiguration -^/dotAdmin/api/v3/appconfiguration -^/dotAdmin/appconfiguration -^/dotAdmin/application/login/login\.html -^/dotAdmin/html/portal/login\.jsp -^/dotCMS/api/appconfiguration -^/dotCMS/api/v1/appconfiguration -^/dotCMS/api/v2/appconfiguration -^/dotCMS/api/v3/appconfiguration -^/dotCMS/appconfiguration -^/dotCMS/application/login/login\.html -^/dotCMS/html/portal/login\.jsp -^/dotProject/index\.php -^/dotclear/index\.php -^/dotcms/api/appconfiguration -^/dotcms/api/v1/appconfiguration -^/dotcms/api/v2/appconfiguration -^/dotcms/api/v3/appconfiguration -^/dotcms/appconfiguration -^/dotcms/application/login/login\.html -^/dotcms/html/portal/login\.jsp -^/dotproject/index\.php -^/down/ -^/download/ -^/download_manager/index\.php -^/downloader/ -^/downloads/ -^/dp/login\.xml -^/dpi/index\.php -^/dpi11f/index\.php -^/dragon/login\.jsp -^/drupal/ -^/drupal/update\.php -^/drupal6/ -^/drupal6/update\.php -^/drupal7/ -^/drupal7/update\.php -^/dsc/ -^/dspam/ -^/dsweb/HomePage -^/dswsbobje/axis2\-admin/ -^/dswsbobje/axis2\-web/index\.jsp -^/dswsbobje/index\.jsp -^/dswsbobje/services/Version/getVersion -^/dswsbobje/services/Version\?method=getVersion -^/dswsbobje/services/non\-existent -^/dtlt/home\.html -^/dump/ -^/durep/ -^/dvwa/ -^/dwa/welcome/welcome\.jsp -^/e/ -^/e107/e107_admin/admin\.php -^/e107/login\.php -^/e107/news\.php -^/e107_admin/admin\.php -^/eFront/index\.php -^/eFront/www/index\.php -^/eGroupware/egroupware/login\.php -^/eManager/ -^/eTicket/license\.txt -^/eXtplorer/extplorer\.xml -^/easylog/ -^/ebay/control/main -^/ebay/control/main/ -^/ebaystore/control/main -^/ebaystore/control/main/ -^/ecms/\?view=home -^/ecommerce/admin/login\.php -^/ecommerce/control/main -^/ecommerce/control/main/ -^/ecomseo -^/ecomseo/ -^/ecp -^/editor\.php -^/editor/ -^/editor/CHANGES\.md -^/editor/_whatsnew\.html -^/editor/ckeditor\.js -^/editor/editor\.php -^/editor/fckeditor\.js -^/eforum/ -^/efront/index\.php -^/efront/www/index\.php -^/egroupware/ -^/egroupware/login\.php -^/egw/login\.php -^/ejemplo/ -^/ejemplos/ -^/elFinder/elfinder\.html -^/elastix/index\.php -^/elfinder\.html -^/elfinder/elfinder\.html -^/elite/admin/login\.php -^/em/console/logon/logon -^/email/ -^/email/index\.php -^/emailclass/ -^/employees/ -^/empoyees/ -^/empris/ -^/en\-US/ -^/en\-US/account/login -^/en/ -^/en/index\.html -^/en/neoclassic/login/login -^/eng/js/lang_en_us\.js -^/eng/start/about\.htm -^/eng/status/statprn\.htm -^/eng/status/statprn1\.htm -^/engine/inc/version\.info -^/engine/login\.php -^/enter\.cfm -^/envia/ -^/enviamail/ -^/epesi/index\.php -^/error -^/error/ -^/error500\.html -^/errors/ -^/es/ -^/eshop/admin/ -^/esrs/html/about\.html -^/ess\.do -^/estmt/ -^/etc/ -^/euq\-login -^/evalsmsi\.php -^/evalsmsi/evalsmsi\.php -^/event/index3\.do -^/eventh/index\.php -^/eventhorizon/index\.php -^/evoadm\.php -^/evolution/manager/index\.php -^/example/ -^/example/HelloWorld\.action -^/example/control/main -^/example/control/main/ -^/exampleext/control/main -^/exampleext/control/main/ -^/examples/ -^/exc/ -^/excel/ -^/exchange/ -^/exchange/Home\.do -^/exchange/logon\.asp -^/exe/ -^/exec/ -^/exhibitor/v1/ui/index\.html -^/explorer/index\.php\?action=login -^/exponent/index\.php -^/exponent/index\.php\?controller=login\&action=showlogin -^/exponent/login\.php -^/export/ -^/express/ -^/extensions/FCKeditor/_whatsnew\.html -^/extensions/FCKeditor/fckeditor\.js -^/extensions/FCKeditor/fckeditor/_whatsnew\.html -^/extensions/FCKeditor/fckeditor/fckeditor\.js -^/external/ -^/extplorer\.xml -^/extplorer/extplorer\.xml -^/extras -^/eyeOS/desktop\.php -^/eyeos/desktop\.php -^/f/ -^/facility/control/main -^/facility/control/main/ -^/faq/ -^/faq/index\.php -^/farcry/core/webtop/install/index\.cfm -^/favicon\.ico -^/fbsd/ -^/fcgi\-bin/ -^/fckeditor\.js -^/fckeditor/_whatsnew\.html -^/fckeditor/fckeditor\.js -^/fcms/index\.php -^/feed -^/feed\.php -^/feed/ -^/feng/index\.php\?c=access\&a=login -^/feng_community/index\.php\?c=access\&a=login -^/fengoffice/index\.php\?c=access\&a=login -^/fhm/admin/login\.php -^/fibaro/en/home/login\.html -^/field/index\.php -^/file/ -^/fileexplorer/index\.php\?action=login -^/filemanager/ -^/filemanager/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/filemanager/index\.php -^/files/ -^/fileserver/index\.php -^/filestore/Login\.do -^/filr/\#/login -^/filter\.php\?dbtable=Accounts\&dbfield=Password -^/financials/control/main -^/financials/control/main/ -^/firestats/tools\.php\?file_id=reset_password -^/fisheye/ -^/fisheye/admin/login\-default\.do -^/fiyo/login\.php -^/fiyocms/login\.php -^/flash/README\.txt -^/flashlight/README\.txt -^/flatchat/index\.php -^/flatpress/index\.php -^/flexcube\@/ -^/flexcubeat/ -^/fm/Login\.do -^/fm/index\.php -^/fms/index\.php -^/fog/management/index\.php -^/foldergallery/index\.php -^/foldoc/ -^/foo\.cfm\?param=\foo\ -^/foo\.cfm\?param=\foo\\.cfm -^/foo\.jsp\?param=\foo\ -^/foo\.jsp\?param=\foo\\.jsp -^/foo\.php\?param=\foo\ -^/foo\.php\?param=\foo\\.php -^/foo\.shtml\?param=\foo\ -^/foo\.shtml\?param=\foo\\.shtml -^/foo\.thtml\?param=\foo\ -^/foo\.thtml\?param=\foo\\.thtml -^/form\-totaller/ -^/form/ -^/formalms/ -^/forms/ -^/forms/login\.fcc -^/formsmgr/ -^/forum\.php -^/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/forum/ -^/forum/admin\.php -^/forum/chat/setup\.php3\?next=1 -^/forum/content\.php -^/forum/index\.php -^/forum/login -^/forum/login\.php -^/forum/setup\.php3\?next=1 -^/forum/upload/index\.php -^/forum/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/forums/ -^/forums/index\.php -^/forums/login -^/foswiki/Main/WebHome -^/foswiki/bin/view/foswiki/WebHome -^/foto/ -^/fotos/ -^/fotoware/fotoweb/views/login -^/fotoweb/views/login -^/fpadmin/ -^/fpdb/ -^/fpsample/ -^/fpws/index\.php -^/fr/ -^/fr/index\.html -^/frameset/ -^/framesets/ -^/framework/ -^/framework/docs/distribution/tour_page1\.htm -^/framework/index\.php -^/freehostingmanager/admin/login\.php -^/freepbx/admin/config\.php -^/freewebshop/index\.php -^/frontaccount/index\.php -^/frontend/frontend\.nocache\.js -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00\&file=frontend\.js\&language=en -^/frontend/nagvis\-js/index\.php -^/froxlor/index\.php -^/fsm/login\.jsp -^/ftp/ -^/ftp/admin_login\.html -^/ftp/help\.html -^/ftp/index\.php -^/ftproot/ -^/ftpserver/admin_login\.html -^/fusion/login\.php -^/fuzzylime/_cms303/docs/readme\.txt -^/fuzzylime/index\.php -^/fw\.login\.php -^/g/ -^/gallery/ -^/gallery/admin/index\.php -^/gallery/index\.php -^/gallery/login\.php -^/gang/index\.php -^/ganglia/ -^/ganglia/index\.php -^/garoon/grn\.exe -^/gc/flash\.php -^/gdl/ -^/geccBB/index\.php -^/geccBBlite/index\.php -^/geeklog/admin/moderation\.php -^/geneald/Index2\.php -^/genealogie/Index2\.php -^/genealogie_sql/Index2\.php -^/general/information\.html\?kind=item -^/geoserver/web/\?wicket\:bookmarkablePage=\:org\.geoserver\.web\.AboutGeoServerPage -^/geoserver/welcome\.do -^/get_status\.cgi -^/getsimple/index\.php -^/gfx/ -^/gimtel/html/affich\.php\?base=http\://xxx\.xxxxxx\./ -^/git/ -^/gitea/user/login -^/glFusion/index\.php -^/glfusion/public_html/index\.php -^/global/ -^/glpi/ -^/gm\.cgi -^/gmp/ -^/gnat\-tgp/gnat/admin/index\.php -^/gnat/admin/index\.php -^/go/about\.php -^/gogs/user/login -^/gollem/index\.php -^/googlebase/control/main -^/googlebase/control/main/ -^/gosa/ -^/grades/index\.php -^/grafana/login -^/gravity/index\.php -^/greymatter/gm\.cgi -^/grn\.exe -^/grn/grn\.exe -^/grocery/ -^/group\-office/about\.php -^/groupoffice/about\.php -^/groupware/about\.php -^/groupware/login\.php -^/guacamole/ -^/guest/ -^/guestbook\.php -^/guestbook/ -^/guestbook/ang/index\.php -^/guestbook/guestbook\.php -^/guestbook/index\.php -^/guests/ -^/gui/gui_outer_frame\.shtml -^/gwadmin\-console/login\.jsp -^/gweb/index\.php -^/hastymail/index\.php -^/hastymail2/index\.php -^/hdjobq\.htm -^/hdstat\.htm -^/header\.php -^/help\.html -^/help\.php -^/help/ -^/help/contents\.htm -^/help/copyright\.html -^/help/index\.php -^/helpdesk/ -^/helpdesk/index\.php -^/helpdesk/signin\.php -^/hero/index\.php -^/hero_os/index\.php -^/hesk/index\.php -^/hhfacility/control/main -^/hhfacility/control/main/ -^/hidden/ -^/hide/ -^/hit_tracker/ -^/hitmatic/ -^/hlstats/ -^/hm2/index\.php -^/home\.cfm\?Mode=debug -^/home\.cfml\?Mode=debug -^/home\.html -^/home\.php -^/home/ -^/home/index\.php -^/home/monitoring\.cgi -^/home/msg/message_en\-US\.json -^/horde/ -^/horde/chora/README -^/horde/chora/cvs\.php -^/horde/chora/horde/services/help/\?module=chora\&show=about -^/horde/gollem/index\.php -^/horde/imp/ -^/horde/services/help/\?module=chora\&show=about -^/horizonqcms/index\.php -^/hosting/ -^/hosting/capabilities/ -^/hosting/discovery -^/hosting/discovery/ -^/hostingcontroller/ -^/howto/ -^/hp/device/ -^/hp/device/InternalPages/Index\?id=ConfigurationPage -^/hp/device/SignIn/Index -^/hp/jetdirect/index\.html -^/hpmpa/home/ -^/hpsm/ess\.do -^/hpsm/index\.do -^/hqcms/index\.php -^/hr/ -^/hrm/ -^/ht/ -^/htaccess\.txt -^/htbin/ -^/htdocs/ -^/htdocs/admin/index\.php -^/htdocs/index\.php -^/htdocs/login\.php -^/html/ -^/html/admin\.php -^/html/affich\.php\?base=http\://xxx\.xxxxxx\./ -^/html/en/index\.html -^/html/index\.php -^/html/infoen\.htm -^/html/portal/login\.jsp -^/hudson/ -^/hui/index\.html -^/humanres/control/main -^/humanres/control/main/ -^/hyperstat/ -^/i\-doit/ -^/i\.php -^/iPrinterHome\.cgi -^/ibank/ -^/ibill/ -^/icfb/ -^/icinga\-web/index\.php -^/icinga/ -^/icinga/authentication/ -^/icinga/authentication/login -^/icinga/cgi\-bin/config\.cgi -^/icinga/index\.php -^/icinga/lib/ -^/icinga/lib/icinga/ -^/icinga/main\.html -^/icinga/static/ -^/icingaweb2/ -^/icingaweb2/authentication/ -^/icingaweb2/authentication/login -^/icingaweb2/lib/ -^/icingaweb2/lib/icinga/ -^/icingaweb2/static/ -^/icons/ -^/idashboards/ -^/idb/index\.php -^/idea/ -^/ideas/ -^/identity/login/shell/sitecoreidentityserver -^/iem/admin/index\.php -^/iisadmin/ -^/iisprotect/ -^/iissamples/ -^/ikiwiki/ -^/ilias/setup/setup\.php -^/ilohamail/index\.php -^/ilohamail/source/index\.php -^/image/ -^/image/index\.php -^/imagenes/ -^/imagery/ -^/images -^/images/ -^/images/login_top\.gif -^/images/logo\.gif -^/images/logo\.png -^/images/logon_merge\.gif -^/imageset\.html -^/imcws/axis2\-admin/ -^/imcws/axis2\-web/index\.jsp -^/imcws/index\.jsp -^/imcws/services/Version/getVersion -^/imcws/services/Version\?method=getVersion -^/imcws/services/non\-existent -^/img/ -^/imp/ -^/import/ -^/impreso/ -^/inc/ -^/inc/fckeditor/_whatsnew\.html -^/inc/fckeditor/fckeditor\.js -^/include/ -^/include/fckeditor/_whatsnew\.html -^/include/fckeditor/fckeditor\.js -^/includes/ -^/includes/esqueletos/skel_null\.php -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/includes/fckeditor/_whatsnew\.html -^/includes/fckeditor/fckeditor\.js -^/includes/js/mambojavascript\.js -^/incoming/ -^/indeks\.php\?db=frontpage -^/index -^/index\.action -^/index\.asp -^/index\.aspx -^/index\.cfm -^/index\.cfm\?Mode=debug -^/index\.cfml\?Mode=debug -^/index\.cgi -^/index\.cmd\?user=Admin -^/index\.do -^/index\.hsp\?login= -^/index\.htm -^/index\.htm\. -^/index\.htm\?cat=info\&page=printerInfo -^/index\.html -^/index\.js\%70 -^/index\.jsp -^/index\.nginx\-debian\.html -^/index\.php -^/index\.php\.backup -^/index\.php\.bak -^/index\.php\.bkp -^/index\.php\.copy -^/index\.php\.old -^/index\.php\.orig -^/index\.php\.save -^/index\.php\.swp -^/index\.php\.temp -^/index\.php\.tmp -^/index\.php/Special\:Version -^/index\.php/admin -^/index\.php/index/install -^/index\.php/install/ -^/index\.php/login -^/index\.php/s/login -^/index\.php/sessions/login -^/index\.php/wp\-json/ -^/index\.php5 -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/index\.php\?OPT_Session=VT_Req -^/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/index\.php\?act=login -^/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/index\.php\?action=login -^/index\.php\?action=login\.index\&host=0 -^/index\.php\?c=access\&a=login -^/index\.php\?controller=login\&action=showlogin -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/index\.php\?get_action=get_boot_conf -^/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/index\.php\?mod=home\&act=about -^/index\.php\?mode=administration -^/index\.php\?module=Users\&parent=Settings\&view=SystemSetup -^/index\.php\?module=site\&show=home -^/index\.php\?module=users\&action=user\&command=login_page -^/index\.php\?n=guest\&c=0\&m=search\&s=forum\&wert=\-1\%25\%22\%20UNION\%20ALL\%20SELECT\%201\,2\,3\,4\,CONCAT\(nick\,\%200x3a\,\%20pwd\)\,6\%20FROM\%20com_users\%23 -^/index\.php\?owa_do=base\.loginForm -^/index\.php\?page=http\://xxxxxxxxxxxxx/vt\-test -^/index\.php\?page=master\&menu1=Help\&menu2=\&menu3=\&menu4= -^/index\.php\?page=start -^/index\.php\?section=\alert\(document\.cookie\)\\&action=login -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/index\.php~ -^/index\.pl -^/index\.psgi/non\-existent\-1730364226 -^/index\.py -^/index\.rb -^/index_airmedia\.html -^/index_en\.htm -^/index_top\.htm -^/info\.php -^/info/ -^/info_deviceStatus\.html -^/info_deviceStatus\.html\? -^/info_deviceStatus\.html\?tab=Status -^/information/ -^/ingresa/ -^/ingreso/ -^/initial\.do -^/install\.php -^/install/ -^/install/index\.php -^/install/make\-config\.php -^/install/system\-compatibility -^/installation/default\.asp -^/installation/index\.php -^/installer\-backup\.php -^/installer\.php -^/installer\.pl -^/interface/login/login\.php -^/interface/logon\.do -^/interleave/index\.php -^/internal/ -^/intl/ -^/intramaps75/ApplicationEngine/ -^/intramaps75/applicationengine/ -^/intranet/ -^/intro\.php -^/intruvert/jsp/admin/Login\.jsp -^/intruvert/jsp/module/Login\.jsp -^/inventory/ -^/invitado/ -^/invohost/site\.php -^/invoiceplane/sessions/login -^/invoker/EJBInvokerServlet -^/invoker/JMXInvokerServlet -^/io/newfile\.txt -^/ipa/ui/ -^/ipb/index\.php -^/ipb/upload/index\.php -^/ipecs\-cm/admin/ -^/irokez/ru/ -^/isapi/ -^/isgw/Welcome\.do\?method=setupStartPage -^/ispcp/index\.php -^/itim/self/jsp/logon/login\.jsp -^/iwiccle/index\.php -^/iwiccle/index\.php\?module=site\&show=home -^/jag/guestbook\.php -^/jamon/menu\.jsp -^/japidoc/ -^/jasperreports/login\.html -^/jasperserver\-pro/login\.html -^/jasperserver/login\.html -^/java/ -^/javascripts/app\.js -^/javasdk/ -^/javatest/ -^/jave/ -^/jaws/index\.php -^/jaxcms/index\.php -^/jdbc/ -^/jenkins/ -^/jenkins/login -^/jetspeed/ -^/jetspeed/portal/ -^/jira/login\.jsp -^/job/ -^/joomla/\.htaccess -^/joomla/includes/js/mambojavascript\.js -^/joomla/index\.php -^/joomla/templates/system/css/editor\.css -^/jpgraph/docportal/index\.html -^/jpgraph/docs/index\.html -^/jpgraph/index\.html -^/jrun/ -^/js/ -^/js/jssrc/model/dvcinfo/dvcconfig/DvcConfig_Config\.model\.htm\?arg1=0 -^/js/jssrc/model/startwlm/Start_Wlm\.model\.htm\?arg1=\&arg2=\&arg3=\&arg4=\&arg5=\&arg6=\&arg8=\&arg9=\&arg10=0\&arg11= -^/js/language_webviewer\.js -^/js/login\.js -^/js/main\.js -^/jserv/ -^/jslib/ -^/jsonrpc\.php -^/jsp/ -^/jsp/fw/internal/Login\.jsp -^/junk/ -^/kallithea/ -^/kanboard/\?controller=auth\&action=login -^/kanboard/\?controller=user\&action=login -^/kanboard/jsonrpc\.php -^/kb/index\.php -^/kb/index\.php\?page=http\://xxxxxxxxxxxxx/vt\-test -^/keyserver/ -^/kibana/ -^/kibana/app/kibana -^/kiva/ -^/kos2/changelog\.txt -^/koschtit/changelog\.txt -^/koschtit2/changelog\.txt -^/kpwinSQL/index\.php -^/ksmg/en\-US/ -^/kvd/start/index\.php -^/labs/ -^/lam/ -^/laravel/ -^/laravel/public/telescope -^/laravel/telescope -^/laravel/telescope/requests -^/lasernet/index\.php -^/lasernet/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/lcgi -^/lcgi\-bin -^/lcgi/ -^/lcms/index\.php -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/ldap/ -^/ldap/control/main -^/ldap/control/main/ -^/ldap/index\.php -^/ldapadmin/ -^/ldapadmin/htdocs/ -^/ldapadmin/htdocs/index\.php -^/ldapadmin/index\.php -^/leap/ -^/ledger/login\.pl -^/legacy/account/login/ -^/legal/ -^/lg/ENU\.xml -^/lib/ -^/lib/CHANGES -^/lib/README -^/lib/browsefiles\.php\?dir=/etc -^/lib/browsefolders\.php\?dir=/etc -^/lib/composer\.json -^/lib/icinga/ -^/libraries/ -^/library/ -^/libro/ -^/libs/granite/core/content/login\.html\? -^/license\.php -^/license\.txt -^/license/records -^/lightneasy/LightNEasy\.php\?do=login -^/lightneasy/index\.php -^/limesurvey/index\.php -^/limny/index\.php -^/limny/upload/index\.php -^/linkSpheric/admin/index\.php -^/linkSpheric/index\.php -^/links/ -^/linpha/index\.php -^/linux/ -^/list/ -^/list/lists/admin/\?page=about -^/listinfo -^/listinfo\.cgi -^/listinfo\.py -^/listing\.php -^/lists/admin/\?page=about -^/liveview -^/livezilla/index\.php -^/lne/LightNEasy\.php\?do=login -^/lne/index\.php -^/loader/ -^/localclassifieds/classifieds/Site_Admin/admin\.php\ -^/locales/ -^/log\-in -^/log/ -^/loganalyzer/login\.php -^/logeye/security/auth/login\.jsp -^/logfile/ -^/logfiles/ -^/logg/ -^/logger/ -^/logging/ -^/logicaldoc/frontend/frontend\.nocache\.js -^/logicaldoc/login/login\.nocache\.js -^/login -^/login\.action -^/login\.asp -^/login\.aspx -^/login\.cgi -^/login\.htm -^/login\.html -^/login\.jsf -^/login\.jsp -^/login\.php -^/login\.pl -^/login\.rol -^/login\.rsp -^/login\.xhtml -^/login/ -^/login/auth -^/login/index\.php -^/login/login\.html -^/login/login\.nocache\.js -^/login\?redirects=20 -^/login_new\.asp -^/login_page\.php -^/login_up\.php3 -^/logon\.htm -^/logon\.jsp -^/logon\.php -^/logon\.php\?redirect=index\.php\&nouser=1 -^/logon/ -^/logs/ -^/logs/awstats\.pl\?framename=mainright -^/loleaflet/ -^/loleaflet/dist/ -^/loleaflet/dist/admin/ -^/lool/ -^/lool/adminws/ -^/lost\+found/ -^/lua/about\.lua -^/lua/login\.lua\?referer=/ -^/lua/onlinehelp/LUHelp0002\.html -^/lucee/admin/server\.cfm -^/lucee/doc/index\.cfm -^/lucee/templates/error/error\.cfm -^/lucence/control/main -^/lucence/control/main/ -^/m/ -^/machform/index\.php -^/machinei\.asp\?Lang=en\-us -^/magento/ -^/magento/RELEASE_NOTES\.txt -^/magento/admin/ -^/magento/downloader/ -^/magmi\-importer/ReleaseNotes\.txt -^/magmi\-importer/web/magmi\.php -^/magmi/ReleaseNotes\.txt -^/magmi/web/magmi\.php -^/mahara/admin/index\.php -^/mahara/htdocs/admin/index\.php -^/mahara/htdocs/index\.php -^/mahara/index\.php -^/mail\.cgi -^/mail/ -^/mail/accounts/inc/include\.php\?language=0\&lang_settings\[0\]\[1\]=http\://xxxxxxxxxxxxxxx/openvasvt/ -^/mail/index\.php -^/mail/index\.php/admin -^/mail/lists/admin/\?page=about -^/mail/login\.php -^/mail/source/index\.php -^/mail/src/login\.php -^/mail_log_files/ -^/mailman/ -^/mailman/listinfo -^/mailman/listinfo\.cgi -^/mailman/listinfo\.py -^/mailpop/database/_sessions/ -^/mailroot/ -^/mailwise/mw\.exe -^/main\.html -^/main\.js -^/main\.mwp\?op=2 -^/main\.php -^/main/login\.php\?action=login -^/main/web/status/ -^/mainui/ -^/makefile/ -^/mall/shop\.cgi -^/mall_log_files/ -^/mambo/README\.php -^/mambo/htaccess\.txt -^/mambo/includes/js/mambojavascript\.js -^/mambo/index\.php -^/manage/ -^/manageengine/index\.do -^/management/ -^/management/index\.php -^/manager/index\.php -^/manifest\.json -^/mantis/login_page\.php -^/mantisbt/login_page\.php -^/manual/ -^/manual/ag/contents\.htm -^/manual/en/index\.html -^/manufacturing/control/main -^/manufacturing/control/main/ -^/marketing/ -^/marketing/control/main -^/marketing/control/main/ -^/matomo/ -^/matomo/index\.php -^/mattermost/ -^/mautic/index\.php/s/login -^/md/index\.php -^/mdb\-database/aeNovo1\.mdb -^/mdpro/index\.php -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/mediawiki/index\.php/Special\:Version -^/member/ -^/member/admin/login\.php -^/members/ -^/membership/admin/login\.php -^/menu\.jsp -^/merchant\-sdk\-php/composer\.json -^/mercuryboard/ -^/mercuryboard/index\.php -^/message/ -^/messaging/ -^/metacart/ -^/minicms/index\.php -^/misc/ -^/mkstats/ -^/mod_pagespeed_global_statistics -^/mod_pagespeed_message -^/mod_pagespeed_statistics -^/module\.php/core/frontpage_welcome\.php -^/module\.php\?link=http\://xxxx\./index\.php -^/modules\.php\?name=gallery\&files=foobar -^/modules/Submit/index\.php\?op=pre\&title=\window\.alert\(document\.cookie\)\;\ -^/modules/fckeditor/_whatsnew\.html -^/modules/fckeditor/fckeditor\.js -^/modules/module_db\.php\?pivot_path=http\://xxxxxxxxxx/ -^/modules/news/index\.php -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/modx/manager/index\.php -^/moin/SystemInfo -^/mollify/backend/plugin/Registration/index\.php -^/mollify/backend/plugin/Registration/index\.php\?confirm=\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/mongo/index\.php\?action=login\.index\&host=0 -^/monitor/check_mk/login\.py -^/monitor/menu\.jsp -^/monitoring/index\.php -^/monitoring/main\.html -^/monitoring/main\.php -^/monstra/ -^/moodle/index\.php -^/moosocial/ -^/movimientos/ -^/moziloCMS/index\.php -^/mp3/ -^/mp3s/ -^/mqseries/ -^/mrbs/help\.php -^/mrbs/web/help\.php -^/mrbs1261/help\.php -^/mrbs1261/web/help\.php -^/msd/index\.php -^/msd1\.24\.4/index\.php -^/mseui/ -^/msggateway/control/main -^/msggateway/control/main/ -^/msql/ -^/mt\.cgi -^/mt/mt\.cgi -^/multiflex/control/main -^/multiflex/control/main/ -^/mutillidae/ -^/mve/help/en/inventory/am_about\.html -^/mw\.exe -^/myaccount/ -^/mybb/index\.php -^/mymsg/Login\.php -^/myportal/control/main -^/myportal/control/main/ -^/myserver/index\.html -^/mysql/ -^/mysql_admin/ -^/mysqldumper/index\.php -^/mywebsql -^/nagios/index\.php/login -^/nagios/login -^/nagios/login\.php -^/nagios/main\.html -^/nagios/main\.php -^/nagiosfusion/login\.php -^/nagioslogserver/login -^/nagiosna/index\.php/login -^/nagiosxi/login\.php -^/nagvis/frontend/nagvis\-js/index\.php -^/nakid/index\.php -^/nanocms/data/nanoadmin\.php -^/nbmember\.cgi\?cmd=test -^/nc/status\.php -^/ncadmin/ -^/nchelp/ -^/ncsample/ -^/nds/ -^/nedi/ -^/nep/status/index/ -^/net2ftp/help\.html -^/net2ftp/index\.php -^/netbasic/ -^/netburner\-logo\.gif -^/netcat/ -^/netconf\.html -^/netmagstats/ -^/netpet/index\.php -^/netrisk/index\.php -^/netscape/ -^/netshare/ -^/nettracker/ -^/new/ -^/newfile\.txt -^/news\.php -^/news/\?group_id=\&limit=50\&offset=50\;select\+1\+as\+id\,unix_pw\+as\+forum_id\,\+user_name\|\|unix_pw\+as\+summary\+from\+users -^/news/admin\.php -^/news/admin/index\.php -^/news/index\.php -^/newscoop/admin/password_check_token\.php\?f_email=1\&token=\%22\%3E\%3Cscript\%3Ealert\%28/xss\-test/\%29\;\%3C/script\%3E -^/nextcloud/status\.php -^/nextgeneration/ -^/nexus/\#browse/welcome -^/nexus/\#welcome -^/nginx\-status -^/nginx_status -^/ngx_pagespeed_global_statistics -^/ngx_pagespeed_message -^/ngx_pagespeed_statistics -^/niKa9MGnMKDw\.html -^/nidp/app -^/nl/ -^/nmiscgi\.pl -^/nnm/main -^/nodatabase/LightNEasy\.php\?do=login -^/nodatabase/index\.php -^/nodebb/ -^/non\-existent\-1159966931\.shtm -^/non\-existent\-1187858196\.php5 -^/non\-existent\-1263513827\. -^/non\-existent\-1546426698\.htm -^/non\-existent\-1868527253\.jsp -^/non\-existent\-2079473927\.html -^/non\-existent\-460935845\.php3 -^/non\-existent\-48606353/ -^/non\-existent\-608677879\.cfm -^/non\-existent\-763206966\.shtml -^/non\-existent\-834414960\.php7 -^/non\-existent\-924165093\.php4 -^/non\-existent\-941666255\.php -^/non\-existent483826565/ -^/nonexistent\.nsf -^/nonexistent\.php -^/noredirect\.html -^/nosuchfile\-10303\-10310\.php3 -^/notftp/index\.php -^/noticeboardpro/index\.php -^/noticias/ -^/novaboard/index\.php -^/novell\-service\-desk/LiveTime/WebObjects/LiveTime\.woa -^/novell/LiveTime/WebObjects/LiveTime\.woa -^/novell/welcome/index\.html -^/novelllogmanager/views/logon\.html -^/nps/servlet/webacc\?taskId=dev\.Empty\&merge=fw\.About -^/ntop\-bin/dashboard\.cgi -^/nuke/admin\.php -^/nuke/html/admin\.php -^/nuke/html/index\.php -^/nuke/index\.php -^/nullam/index\.php -^/nuxeo/ -^/nuxeo/login\.jsp -^/obj/ -^/objects/ -^/oc/status\.php -^/ocm\-provider/ -^/ocs\-provider/ -^/ocsreports/index\.php -^/odbc/ -^/odoo_cmr/web/login -^/odoo_cms/web/login -^/ofbizsetup/control/main -^/ofbizsetup/control/main/ -^/offers/ -^/office/ag\.cgi -^/office/ag\.exe -^/office/index\.php\?c=access\&a=login -^/officescan/console/html/help/webhelp/Preface\.html -^/offiria/index\.php -^/oi/index\.php -^/ojs/ -^/old/ -^/old_files/ -^/oldfiles/ -^/olt/Login\.do -^/omk/oae/login -^/omp/ -^/onlinegrades/index\.php -^/oo/ -^/open\.php -^/openadmin/index\.php\?act=help\&do=aboutOAT -^/opencart/index\.php -^/opendb/login\.php -^/opendocman/admin\.php -^/opendocman/index\.php -^/openemr/interface/login/login\.php -^/openengine/cms/website\.php\?id=/de/index\.htm\&admin=login -^/openforum/index\.php -^/openmairie_annuaire/index\.php -^/openmairie_annuaire/login\.php -^/openmairie_catalogue/doc/catalogue\.html -^/openmairie_cimetiere/index\.php -^/openmairie_cimetiere/login\.php -^/openmairie_cominterne/index\.php -^/openmairie_cominterne/login\.php -^/openmairie_courrier/index\.php -^/openmairie_courrier/login\.php -^/openmairie_foncier/index\.php -^/openmairie_foncier/login\.php -^/openmairie_planning/index\.php -^/openmairie_planning/login\.php -^/openmairie_presse/index\.php -^/openmairie_presse/login\.php -^/openmairie_registreCIL/index\.php -^/openmairie_registreCIL/login\.php -^/openmeetings/signin -^/openmrs/index\.htm -^/openmrs/login\.htm -^/opennms/login\.jsp -^/openpro/login\.php -^/opensso/UI/Login\.jsp -^/opentaps/control/main -^/openurgence_vaccin/index\.php -^/openurgencevaccin/index\.php -^/openwebmail\-cgi/openwebmail\.pl -^/openwebmail\.pl -^/openx/www/admin/index\.php -^/opnfrm/index\.php -^/oprocmgr\-service/ -^/oprocmgr\-status/ -^/opt/index\.php\?OPT_Session=VT_Req -^/oracle/ -^/oradata/ -^/orangehrm/ -^/orangehrm/login\.php -^/orangehrm/symfony/web/index\.php/auth/login -^/orbis/admin/login\.php -^/order/ -^/ordermgr/control/main -^/ordermgr/control/main/ -^/orders/ -^/orion/login -^/ortro/index\.php -^/ortro/www/index\.php -^/os/index\.php -^/os/upload/index\.php -^/osCSS/index\.php -^/osTicket/open\.php -^/osc/index\.php -^/osc/ssl_check\.php -^/osclass/index\.php -^/oscmax/admin/login\.php -^/oscmax/catalog/admin/login\.php -^/oscommerce/index\.php -^/oscommerce/ssl_check\.php -^/oss5/lib/browsefiles\.php\?dir=/etc -^/oss5/lib/browsefolders\.php\?dir=/etc -^/oss6/lib/browsefiles\.php\?dir=/etc -^/oss6/lib/browsefolders\.php\?dir=/etc -^/oss7/lib/browsefiles\.php\?dir=/etc -^/oss7/lib/browsefolders\.php\?dir=/etc -^/ossec\-wui/index\.php -^/ossec/index\.php -^/ossim/session/login\.php -^/osticket/open\.php -^/otrs\-web/ -^/otrs/ -^/otrs/index\.pl -^/otrs/installer\.pl -^/otrs/public\.pl -^/ou/index\.php -^/outgoing/ -^/overlook/src/login\.php -^/overview\.shtm -^/owa/auth/logon\.aspx -^/owa/index\.php\?owa_do=base\.loginForm -^/owls/glossaries/index\.php\?file=/boot\.ini -^/owls/glossaries/index\.php\?file=/etc/passwd -^/owls/glossaries/index\.php\?file=/windows/win\.ini -^/owls/glossaries/index\.php\?file=/winnt/win\.ini -^/ownCloud/status\.php -^/owncloud/ -^/owncloud/status\.php -^/owners/ -^/ox\.html -^/ox6/ox\.html -^/oxid\-eshop/admin/ -^/oxid/admin/ -^/pHpmyADmiN/index\.php -^/pacs/login\.php -^/pacsone/login\.php -^/page\.php\?xPage=\alert\(document\.cookie\)\ -^/page/login/login\.html -^/pages/ -^/pagespeed_admin/ -^/pagespeed_console -^/pagespeed_global_admin/ -^/pandora_console/index\.php -^/panel/ -^/papoo/ -^/parser/parser\.php\?file=\foo\ -^/partymgr/control/main -^/partymgr/control/main/ -^/passman/index\.php -^/passport/ -^/passport/control/main -^/passport/control/main/ -^/password/ -^/passwords/ -^/payment/ -^/payments/ -^/paypal/composer\.json -^/pb/index\.php -^/pbx/gate\?bean=pbxadmin\.web\.PbxLogin -^/pccsmysqladm/ -^/pecio\-cms/index\.php -^/pecio/index\.php -^/pecio_cms/index\.php -^/pem/login/pages/login\.jsf -^/pentaho\-di/Login -^/pentaho\-solutions/Login -^/pentaho/Login -^/perl\-status -^/perl\-status/ -^/perl/ -^/perl5/ -^/personal/ -^/personal_pages/ -^/petition/signing_system\-admin/index\.php -^/pforum/ -^/pgadmin/intro\.php -^/phPmYaDmiN/index\.php -^/phorum/ -^/phorum/admin\.php -^/photo/ -^/photo/index\.php -^/photopost/index\.php -^/photos/ -^/photos/index\.php -^/php\-belt/index\.php -^/php\-calendar/index\.php -^/php\-fusion/home\.php -^/php\-fusion/news\.php -^/php\-nuke/admin\.php -^/php\-nuke/html/admin\.php -^/php\-nuke/html/index\.php -^/php\-nuke/index\.php -^/php\-utility\-belt\-master/index\.php -^/php\-vms/index\.php -^/php/ -^/php/login\.php -^/php/mytutos\.php -^/phpBB/ -^/phpBB/index\.php -^/phpBB2/index\.php -^/phpBB3/index\.php -^/phpBB31/index\.php -^/phpBazar/index\.php -^/phpCoin165/license\.php -^/phpMyAdmin/ -^/phpMyAdmin/index\.php -^/phpMyadMiN/index\.php -^/phpNagios/index\.php -^/phpPgAdmin/intro\.php -^/phpPhotoAlbum/ -^/phpSecurePages/ -^/phpThumb\.demo\.demo\.php -^/phpThumb/demo/phpThumb\.demo\.demo\.php -^/php_classes/ -^/php_info\.php -^/phpaaCMS/index\.php -^/phpbb/index\.php -^/phpbt/index\.php -^/phpclassifieds/ -^/phpcoin/license\.php -^/phpcom/index\.php\?n=guest\&c=0\&m=search\&s=forum\&wert=\-1\%25\%22\%20UNION\%20ALL\%20SELECT\%201\,2\,3\,4\,CONCAT\(nick\,\%200x3a\,\%20pwd\)\,6\%20FROM\%20com_users\%23 -^/phpfinance/index\.php -^/phpfootball/filter\.php\?dbtable=Accounts\&dbfield=Password -^/phpforum/index\.php -^/phpfusion/home\.php -^/phpfusion/news\.php -^/phpgroupware/login\.php -^/phpgw/login\.php -^/phpicalendar/print\.php -^/phpimageview/ -^/phpinfo\.php -^/phpip/ -^/phpip/login\.php -^/phpipam/\?page=login -^/phpldapadmin/ -^/phpldapadmin/htdocs/ -^/phpldapadmin/htdocs/index\.php -^/phpldapadmin/index\.php -^/phplite/ -^/phplite/index\.php -^/phplite/phpliteadmin\.php -^/phpliteadmin\.php -^/phpliteadmin/ -^/phpliteadmin/index\.php -^/phpliteadmin/phpliteadmin\.php -^/phplive/index\.php -^/phpmailer/README -^/phpmailer/README\.md -^/phpmailer/composer\.json -^/phpmailer/extras -^/phpmailer/lib/composer\.json -^/phpmongodb/index\.php -^/phpmv2/index\.php -^/phpmyadmin/ -^/phpmyadmin/index\.php -^/phpmyfaq/index\.php -^/phpmyvisites/index\.php -^/phpnagios/index\.php -^/phpnuke/ -^/phpnuke/admin\.php -^/phpnuke/html/admin\.php -^/phpnuke/html/index\.php -^/phpnuke/index\.php -^/phportfolio/index\.php -^/phppgadmin/ -^/phppgadmin/intro\.php -^/phpprojekt/ -^/phpqa/index\.php -^/phpqa/phpqa/index\.php -^/phprainchecks/settings\.php -^/phpservermon/index\.php -^/phpshop/index\.php -^/phpsurveyor/index\.php -^/phpticket/index\.php -^/phptt/index\.php -^/phpunit/ -^/phpunity\.newsmanager/tmpl/news_main\.htm -^/phpvidz/index\.php -^/phpvidz_0\.9\.5/index\.php -^/phpvms/index\.php -^/phpwebsite/index\.php\?module=users\&action=user\&command=login_page -^/phpwebthings/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/phpwebthings/index\.php -^/phpwiki/index\.php -^/phpwt/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/phpx/index\.php -^/phreeBooks/index\.php -^/phreebooks/index\.php -^/phreedom/index\.php -^/phux/index\.php -^/piranha/ -^/pivot/index\.php -^/pivot/modules/module_db\.php\?pivot_path=http\://xxxxxxxxxx/ -^/pivot/pivot/index\.php -^/pivotx/index\.php -^/piwigo/index\.php -^/piwik/ -^/piwik/index\.php -^/pki/pub/pki\?cmd=serverInfo -^/pligg/index\.php -^/plone/ -^/pls/ -^/plugin\-management/html/homepage\:main\.int\.html -^/plugins/fckeditor/_whatsnew\.html -^/plugins/fckeditor/fckeditor\.js -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/pma/ -^/pma/index\.php -^/pmwiki\.php -^/pmwiki/pmwiki\.php -^/podcast/index\.php -^/poll/ -^/poll/admin/login\.php -^/polls/ -^/pootle/about/ -^/portal\.css -^/portal/ -^/portal/includes/esqueletos/skel_null\.php -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/portal/index\.php -^/portal/login -^/postfixadmin/login\.php -^/postgres/ -^/postnuke/ -^/postnuke/docs/distribution/tour_page1\.htm -^/postnuke/index\.php -^/pp/ -^/pphlogger/index\.php -^/ppim/Readme\.txt -^/ppim/upload\.php -^/pppblog/index\.php -^/ppwb/ -^/prado/ -^/prelogin -^/prestashop/error500\.html -^/pricat/control/main -^/pricat/control/main/ -^/prime\-home/login/ -^/print\.php -^/printers/ -^/priv/ -^/privado/ -^/private/ -^/prochatrooms/help/index\.php -^/prod -^/prod/ -^/profil\.php\?id=1\%20\foo\ -^/profile -^/project/index\.php -^/projectmgr/control/main -^/projectmgr/control/main/ -^/protected/ -^/prueba/ -^/pruebas/ -^/prv/ -^/psconsole/faces/common/ProductVersion\.jsp -^/pub/ -^/pub/pki\?cmd=serverInfo -^/public\.pl -^/public/ -^/public/about\.html -^/public/code/index\.php -^/public/telescope -^/publica/ -^/publicar/ -^/publico/ -^/publish/ -^/publisher/ -^/pubn/index\.php -^/pulsecms/ -^/pulsecms/admin/index\.php -^/pulsecms/index\.php -^/punbb/index\.php -^/purchase/ -^/purchases/ -^/purchasing/control/main -^/purchasing/control/main/ -^/pw/ -^/pwn\.php -^/pwngame/pwn\.php -^/pydio/index\.php\?get_action=get_boot_conf -^/qcenter/qcenter/index\.html -^/qcms/index\.php -^/query\?group=/\* -^/quickpoll/index\.php -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/quixplore/index\.php -^/quixplorer/index\.php -^/qwerty/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/radserver/admin/index\.php -^/radserver/www/admin/index\.php -^/rails/info/properties/ -^/rails/info/routes/ -^/rainchecks/settings\.php -^/rainloop/ -^/random_banner/ -^/rave/login -^/rdp/ -^/readme\.html -^/readme\.txt -^/recentservers\.xml -^/recovery/install/ -^/redaxscript/ -^/redmine/ -^/ref/ -^/refbase/index\.php -^/refdb/index\.php -^/register\.php -^/register/ -^/registered/ -^/rem/ -^/remote/ -^/report/ -^/reports/ -^/repos/kallithea/ -^/reseller/ -^/resource/images/logon\.gif -^/resource/images/logon_t\.gif -^/resources/ckeditor/CHANGES\.md -^/resources/ckeditor/ckeditor\.js -^/resources/fckeditor/_whatsnew\.html -^/resources/fckeditor/fckeditor\.js -^/ress\.php -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/restgui/locale/personality/personality_en\.json -^/restricted/ -^/retail/ -^/reviews/ -^/revive\-adserver/admin/index\.php -^/revive\-adserver/www/admin/index\.php -^/revolution/manager/index\.php -^/revsense/index\.php\?section=\alert\(document\.cookie\)\\&action=login -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/rips\-scanner\-master/index\.php -^/rips/index\.php -^/robohelp/admin/login\.jsp -^/robot\.txt -^/robots\.txt -^/rock\-mongo/index\.php\?action=login\.index\&host=0 -^/rockmongo/index\.php\?action=login\.index\&host=0 -^/roller\-ui/index\.jsp -^/roller\-ui/login\.rol -^/roller/index\.jsp -^/roller/login\.rol -^/root/ -^/roschedule\.php -^/roundcube/ -^/roundcubemail/ -^/rsrc/ -^/rt/index\.html -^/rtl/about\.lsp -^/rtm\.log -^/ru/ -^/rws/user/ -^/s/test/_/\;/WEB\-INF/web\.xml -^/s/test/_/\;/web\-inf/web\.xml -^/s/test/_/WEB\-INF/web\.xml -^/sNews/index\.php -^/sNews/readme\.html -^/sNews/readme\.txt -^/sahana/index\.php\?mod=home\&act=about -^/sales/ -^/sample/ -^/sampler/ -^/samples/ -^/sap/bc/gui/sap/its/webgui -^/sap/bc/soap/rfc -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/sapmc/sapmc\.html -^/sauruscms/admin/ -^/save/ -^/sc/ess\.do -^/sc/index\.do -^/schedule/roschedule\.php -^/scm/viewvc\.cgi/ -^/scm/viewvc/ -^/scr/index\.php -^/scr/login\.php -^/scribe/login\.php -^/script/ -^/script/index\.php -^/scripts\.php -^/scripts/ -^/scripts/ag\.cgi -^/scripts/ag\.exe -^/scripts/branding\.js -^/scripts/cbag/ag\.cgi -^/scripts/cbag/ag\.exe -^/scripts/cbdb/db\.exe -^/scripts/cbgrn/grn\.exe -^/scripts/cbmw/mw\.exe -^/scripts/cgi\-bin/cbag/ag\.cgi -^/scripts/cgi\-bin/cbag/ag\.exe -^/scripts/db\.exe -^/scripts/dbman/db\.cgi\?db=no\-db -^/scripts/dezie/db\.exe -^/scripts/garoon/grn\.exe -^/scripts/grn\.exe -^/scripts/grn/grn\.exe -^/scripts/lan_0_m\.xml -^/scripts/mailwise/mw\.exe -^/scripts/mw\.exe -^/scripts/office/ag\.cgi -^/scripts/office/ag\.exe -^/scrum/control/main -^/scrum/control/main/ -^/scrumworks/login -^/sdcard/cpt/app/signin\.php -^/sdn/ui/app/index -^/search\-ui/ -^/search/ -^/search/control/main -^/search/show\.pl\?url=file\:/etc/passwd -^/search97/ -^/secret/ -^/secretserver/Login\.aspx -^/secure/ -^/secured/ -^/sell/ -^/sendcard\.php\?view=1\&id=\%27openvasvt -^/sendio/ice/ui/ -^/sentinel/views/logon\.html -^/sentrifugo/index\.php -^/seopanel/ -^/seportal/index\.php -^/serendipity/index\.php -^/serve/ -^/server\-info -^/server\-info/ -^/server\-status -^/server\-status/ -^/server/properties -^/server/version -^/server_stats/ -^/server_version\.xsl -^/servers/ -^/serverstats/ -^/service/ -^/services/ -^/services/Version/getVersion -^/services/Version\?method=getVersion -^/services/api\.js -^/services/non\-existent -^/servicio/ -^/servicios/ -^/servlet/ -^/servlet/Login\?omacmd=getlogin\&page=Login\&managedws=true -^/servlet/UDataArea\?plugin=com\.dell\.oma\.webplugins\.AboutWebPlugin -^/servlet/com\.newatlanta\.servletexec\.JSP10Servlet -^/servlet/one2planet\.infolet\.InfoServlet\?page=\foo\ -^/servlet\?m=mod_listener\&p=login\&q=loginForm -^/servlets/ -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/servlets/FetchFile\?fileName=conf/securitydbData\.xml -^/session/ -^/session/login\.php -^/setseed\-hub/ -^/setting/prtinfo\.htm -^/settings\.php -^/setup\.php -^/setup\.php3\?next=1 -^/setup/ -^/setup/index\.php -^/setup/install\.php -^/setup/setup\.php -^/setup/unlock -^/sfa/control/main -^/sfa/control/main/ -^/sftp\-config\.json -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/share/ -^/share/dsweb/HomePage -^/shared/ -^/shell\-cgi/ -^/shell/sitecore\.version\.xml -^/shipping/ -^/shop\.cgi -^/shop/ -^/shop/RELEASE_NOTES\.txt -^/shop/admin/ -^/shop/admin/index\.php -^/shop/admin/index\.php\?login -^/shop/admin/login\.html -^/shop/admin/login\.php -^/shop/downloader/ -^/shop/index\.php -^/shop/shop\.cgi -^/shop/ssl_check\.php -^/shop/viart_shop\.xml -^/shopper/ -^/shopping/ -^/shoutbox\.php -^/shoutbox/shoutbox\.php -^/showHome\.do -^/showcase\.action -^/siestta/ -^/signin -^/signin\.php -^/signing_system\-admin/index\.php -^/simpleid/index\.php -^/simpleid/www/index\.php -^/simpnew248/news\.php -^/sine/index\.php -^/sinecms/index\.php -^/sit/index\.php -^/site\.php -^/site/ -^/site/index\.php/admin/login/ -^/site/login\.php -^/site_admin/ -^/siteadmin/ -^/sitebuildercontent/ -^/sitebuilderfiles/ -^/sitebuilderpictures/ -^/sitecore/identity/login/shell/sitecoreidentityserver -^/sitecore/login/ -^/sitecore/shell/sitecore\.version\.xml -^/sitemanager\.xml -^/sitemap\.xml -^/sitemgr/ -^/siteminder/ -^/siteminder/forms/login\.fcc -^/siteminderagent/ -^/siteminderagent/forms/login\.fcc -^/sites/ -^/sites/all/modules/ckeditor/CHANGES\.md -^/sites/all/modules/ckeditor/ckeditor\.js -^/sites/all/modules/fckeditor/_whatsnew\.html -^/sites/all/modules/fckeditor/fckeditor\.js -^/sites/all/modules/fckeditor/fckeditor/_whatsnew\.html -^/sites/all/modules/fckeditor/fckeditor/fckeditor\.js -^/siteserver/ -^/sitestats/ -^/siteupdate/ -^/skZIDtt8\.html -^/slide/ -^/sm\-webtier/ess\.do -^/sm\-webtier/index\.do -^/sm/ess\.do -^/sm/index\.do -^/sm/src/login\.php -^/sm7/ess\.do -^/sm7/index\.do -^/sm_forum/ -^/sm_forum/index\.php -^/smadmr5\.nsf -^/smconf\.nsf -^/smency\.nsf -^/smf/ -^/smf/index\.php -^/smf1/ -^/smf1/index\.php -^/smf2/ -^/smf2/index\.php -^/smftypes\.nsf -^/smhelp\.nsf -^/smmsg\.nsf -^/smquar\.nsf -^/smreports/ -^/smreportsviewer/ -^/sms/index\.php -^/smsmvlog\.nsf -^/smtime\.nsf -^/snews/index\.php -^/snews/readme\.html -^/snews/readme\.txt -^/snipegallery/index\.php -^/snipsnap/space/start -^/snort/alerts\.php -^/snort/base/ -^/snortreport\-1\.3\.1/alerts\.php -^/snortreport/alerts\.php -^/soap/ -^/soapdocs/ -^/social/ -^/social/index\.php -^/social/login -^/sofami/control/main -^/sofami/control/main/ -^/softnas/login\.php -^/software\-description\.php\?id=\-5\%20union\%20all\%20select\%201\,2\,1234567890987654321\,4\,5\,6\,7\,8\,9\,10\,11\,12\,13\,14\,15\,16\,17\,18\,19\,20\,21\,22\,23\,24\,25\,26\,27 -^/software/ -^/software/software\-description\.php\?id=\-5\%20union\%20all\%20select\%201\,2\,1234567890987654321\,4\,5\,6\,7\,8\,9\,10\,11\,12\,13\,14\,15\,16\,17\,18\,19\,20\,21\,22\,23\,24\,25\,26\,27 -^/solaris/ -^/solr/ -^/solr/control/main -^/solr/control/main/ -^/solutions/ -^/source/ -^/source/index\.php -^/space/start -^/spaces/ -^/spaces/enter/ -^/sphider/changelog -^/spip\.php -^/spip/spip\.php -^/splunk/en\-US/account/login -^/sprt\.htm -^/spywall/login\.php -^/sql\-ledger/login\.pl -^/sql/ -^/sqlite/LightNEasy\.php\?do=login -^/sqlite/index\.php -^/sqlite/main\.php -^/sqlitemanager/main\.php -^/squid/ -^/squirrel/src/login\.php -^/squirrelmail/ -^/squirrelmail/src/login\.php -^/src/ -^/src/Symfony/Component/Console/CHANGELOG\.md -^/src/apps/pom\.xml -^/src/login\.php -^/src/pom\.xml -^/src/src/site/xdoc/index\.xml -^/srchadm/ -^/ssf/a/do\?p_name=ss_forum\&p_action=1\&action=__login -^/ssgmanager/about\.jsf -^/ssi\.cgi/Login\.htm -^/ssi/ -^/ssl/ -^/ssl_check\.php -^/sslkeys/ -^/sso/UI/Login\.jsp -^/staff/ -^/stag/ -^/stage/ -^/staging/ -^/star57\.cgi\?download=\;id\| -^/star57\.cgi\?download=\;ipconfig\| -^/star57cm/star57\.cgi\?download=\;id\| -^/star57cm/star57\.cgi\?download=\;ipconfig\| -^/start -^/start\.html -^/start/about\.htm -^/start/index\.php -^/startPage -^/starter/config\-browser/index -^/starter/config\-browser/index\.action -^/startwlm/Start_Wlm\.htm -^/stash/login -^/stat/ -^/static -^/static/twake/images/favicon\.ico\\x22\ rel=\\x22icon\\x22\ type=\\x22image/x\-icon\\x22\ sizes=\\x2216x16\ 32x32\ 48x48\ 64x64\ 128x128 -^/statistic/ -^/statistics/ -^/statistics/awstats\.pl\?framename=mainright -^/statistik/ -^/statistik/cgi\-bin/ -^/statistik/cgi\-bin/awstats\.pl\?framename=mainright -^/statistiken/ -^/stats\-bin\-p/ -^/stats/ -^/stats/awstats\.pl\?framename=mainright -^/stats/index\.php -^/stats/tools\.php\?file_id=reset_password -^/stats_old/ -^/status\.php -^/status/ -^/stcenter\.nsf -^/storage/ -^/store/ -^/store/agora\.cgi\?cart_id=\alert\(document\.domain\)\\&xm=on\&product=HTML -^/store/index\.php -^/store/ssl_check\.php -^/storemgr/ -^/strings\.js -^/stronghold\-info -^/stronghold\-info/ -^/stronghold\-status -^/stronghold\-status/ -^/struts\-cookbook/Welcome\.do -^/struts\-cookbook/config\-browser/index -^/struts\-cookbook/config\-browser/index\.action -^/struts\-cookbook/example/HelloWorld\.action -^/struts\-cookbook/index\.action -^/struts\-cookbook/showcase\.action -^/struts\-examples/Welcome\.do -^/struts\-examples/config\-browser/index -^/struts\-examples/config\-browser/index\.action -^/struts\-examples/example/HelloWorld\.action -^/struts\-examples/index\.action -^/struts\-examples/showcase\.action -^/struts/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/WW/cwiki\.apache\.org/WW/home\.html -^/struts/Welcome\.do -^/struts/config\-browser/index -^/struts/config\-browser/index\.action -^/struts/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/docs/WW/cwiki\.apache\.org/WW/home\.html -^/struts/docs/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/docs/docs/WW/cwiki\.apache\.org/WW/home\.html -^/struts/docs/docs/index\.html -^/struts/docs/docs/struts2\-core\-apidocs/help\-doc\.html -^/struts/docs/docs/struts2\-core\-apidocs/index\-all\.html -^/struts/docs/docs/struts2\-core\-apidocs/overview\-summary\.html -^/struts/docs/index\.html -^/struts/docs/struts2\-core\-apidocs/help\-doc\.html -^/struts/docs/struts2\-core\-apidocs/index\-all\.html -^/struts/docs/struts2\-core\-apidocs/overview\-summary\.html -^/struts/example/HelloWorld\.action -^/struts/index\.action -^/struts/index\.html -^/struts/showcase\.action -^/struts/src/apps/pom\.xml -^/struts/src/pom\.xml -^/struts/src/src/site/xdoc/index\.xml -^/struts/struts\-cookbook/Welcome\.do -^/struts/struts\-cookbook/example/HelloWorld\.action -^/struts/struts\-cookbook/index\.action -^/struts/struts\-cookbook/showcase\.action -^/struts/struts\-examples/Welcome\.do -^/struts/struts\-examples/example/HelloWorld\.action -^/struts/struts\-examples/index\.action -^/struts/struts\-examples/showcase\.action -^/struts/struts2\-basic/Welcome\.do -^/struts/struts2\-basic/example/HelloWorld\.action -^/struts/struts2\-basic/index\.action -^/struts/struts2\-basic/showcase\.action -^/struts/struts2\-blank/example/HelloWorld\.action -^/struts/struts2\-core\-apidocs/help\-doc\.html -^/struts/struts2\-core\-apidocs/index\-all\.html -^/struts/struts2\-core\-apidocs/overview\-summary\.html -^/struts/struts2\-mailreader/Welcome\.do -^/struts/struts2\-portlet/Welcome\.do -^/struts/struts2\-portlet/example/HelloWorld\.action -^/struts/struts2\-portlet/index\.action -^/struts/struts2\-portlet/showcase\.action -^/struts/struts2\-rest\-showcase/Welcome\.do -^/struts/struts2\-rest\-showcase/example/HelloWorld\.action -^/struts/struts2\-rest\-showcase/index\.action -^/struts/struts2\-rest\-showcase/showcase\.action -^/struts/struts2\-showcase/showcase\.action -^/struts/utils\.js -^/struts2\-basic/Welcome\.do -^/struts2\-basic/config\-browser/index -^/struts2\-basic/config\-browser/index\.action -^/struts2\-basic/example/HelloWorld\.action -^/struts2\-basic/index\.action -^/struts2\-basic/showcase\.action -^/struts2\-blank/config\-browser/index -^/struts2\-blank/config\-browser/index\.action -^/struts2\-blank/example/HelloWorld\.action -^/struts2\-core\-apidocs/help\-doc\.html -^/struts2\-core\-apidocs/index\-all\.html -^/struts2\-core\-apidocs/overview\-summary\.html -^/struts2\-mailreader/Welcome\.do -^/struts2\-mailreader/config\-browser/index -^/struts2\-mailreader/config\-browser/index\.action -^/struts2\-portlet/Welcome\.do -^/struts2\-portlet/config\-browser/index -^/struts2\-portlet/config\-browser/index\.action -^/struts2\-portlet/example/HelloWorld\.action -^/struts2\-portlet/index\.action -^/struts2\-portlet/showcase\.action -^/struts2\-rest\-showcase/Welcome\.do -^/struts2\-rest\-showcase/config\-browser/index -^/struts2\-rest\-showcase/config\-browser/index\.action -^/struts2\-rest\-showcase/example/HelloWorld\.action -^/struts2\-rest\-showcase/index\.action -^/struts2\-rest\-showcase/showcase\.action -^/struts2\-showcase/config\-browser/index -^/struts2\-showcase/config\-browser/index\.action -^/struts2\-showcase/showcase\.action -^/stuff/ -^/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/style/ -^/styles/ -^/stylesheet/ -^/stylesheets/ -^/subir/ -^/subrion/index\.php -^/subscribe/index\.php -^/sugar/ -^/sugar/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/sugarcrm/ -^/sugarcrm/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/suite/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/suitecrm/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/sun/ -^/super_stats/ -^/support/ -^/support/esupport/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/support/index\.php -^/support/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/support/index\.pl -^/support/installer\.pl -^/support/public\.pl -^/supporter/ -^/surgeweb -^/survey/index\.php -^/svn/ -^/svn/listing\.php -^/svn/viewvc\.cgi/ -^/svn/viewvc/ -^/swdesk/signin\.php -^/swhelpdesk/signin\.php -^/swiftmailer/ -^/swiftmailer/CHANGES -^/swiftmailer/README -^/swiftmailer/composer\.json -^/swiftmailer/lib/ -^/swiftmailer/lib/CHANGES -^/swiftmailer/lib/README -^/swiftmailer/lib/composer\.json -^/sws/index\.sws -^/swvm/ConsoleContainer\.jsp -^/symfony/app\.php -^/symfony/login -^/symfony/src/Symfony/Component/Console/CHANGELOG\.md -^/symfony/web/app_dev\.php/_configurator/step/0 -^/symfony/web/index\.php/auth/login -^/sympa/ -^/symphony/ -^/symphony/index\.php\?mode=administration -^/symphony/symphony/ -^/sys/ -^/sys/en/neoclassic/login/login -^/sysadmin/ -^/sysaid/Login\.jsp -^/sysbackup/ -^/sysmgr/SysMgr\.html -^/system\.xml -^/system/ -^/system/cluster/node -^/system/login -^/system/login\.php -^/system_report/ -^/sysworkflow/en/neoclassic/login/login -^/t_welcom\.cgi\?page=Language_name\&lang=1 -^/tangocms/README -^/tao/install/ -^/tar/ -^/tarantella/ -^/tarjetas/ -^/task/login -^/task/login\.php -^/taskfreak/login -^/taskfreak/login\.php -^/tcexam/public/code/index\.php -^/tcpbx/ -^/tcpdb/main\.php -^/tdbin/ -^/tdiary/index\.rb -^/te_html/ -^/teampass/index\.php -^/tech/ -^/technote/ -^/telaen/index\.php -^/teleparkwiki/index\.php -^/telescope -^/telescope/requests -^/telpho/login\.php -^/tematres/index\.php -^/temp/ -^/template/ -^/templates/ -^/templates/system/css/editor\.css -^/temporal/ -^/tenant\-app\-api/ -^/test\-cgi/ -^/test\.php -^/test\.php\?mode=phpinfo -^/test/ -^/testing/ -^/testlink/login\.php -^/tests/ -^/testweb/ -^/theme1/images/logo\.gif -^/this_page_should_not_exist\.htm -^/tibbr/web/login -^/ticket/ -^/ticket/index\.php -^/tickets/ -^/tickets/index\.php -^/tiki\-index\.php -^/tiki\-install\.php -^/tiki/ -^/tiki/tiki\-index\.php -^/tikiwiki/ -^/tikiwiki/tiki\-index\.php -^/tiles/apidocs/index\.html -^/timesheet/about\-show\.do -^/tinywebgallery/admin/index\.php -^/titleBar\.php -^/tiweb/Account/LogIn -^/tkset/login\.html -^/tmp/ -^/tmpl/news_main\.htm -^/tmui/login\.jsp -^/tmui/tmui/login/welcome\.jsp -^/todoyu/index\.php -^/tomatocart/index\.php -^/tomcat\-docs/changelog\.html -^/tools\.php\?file_id=reset_password -^/tools/ -^/tools/webinterface/index\.php -^/toplist/ -^/topology/home -^/topsites/index\.php -^/torrent/index\.php -^/torrent/site/login\.php -^/torrent/upload/account\-login\.php -^/torrenttrader/index\.php -^/torrenttrader/upload/account\-login\.php -^/torrentvolve/site/login\.php -^/tos/index\.php\?user/login -^/tpv/ -^/trabajo/ -^/trac/ -^/trac/query\?group=/\* -^/track/ -^/tracker/index\.html -^/tracker/index\.php -^/tracker/upload/account\-login\.php -^/tracking/ -^/trackit/Account/LogIn -^/trade\.php -^/transito/ -^/translate/about/ -^/transpolar/ -^/trc/ -^/tree/ -^/trees/ -^/tribisur/scripts\.php -^/triton/login/pages/loginPage\.jsf -^/truc/login\.php -^/ttc/index\.php -^/ttc/upload/account\-login\.php -^/ttwm/tt/index\.php -^/tunnel\"\ 200\ 139121\ \"\-\"\ \"\-\"\ rt=0\.448\ ut=0\.038 -^/tutos/ChangeLog -^/tutos/php/mytutos\.php -^/tvs/Start\.do -^/twg/admin/index\.php -^/twiki/ -^/twiki/bin/view/TWiki/WebHome -^/twiki/cgi\-bin/view/TWiki/WebHome -^/twiki/do/view/TWiki/WebHome -^/twiki/index\.php -^/twiki/view/TWiki/WebHome -^/typo/ -^/typo/ChangeLog -^/typo/typo3/index\.php -^/typo/typo3/sysext/opendocs/composer\.json -^/typo/typo3/sysext/recordlist/composer\.json -^/typo/typo3/sysext/sys_note/composer\.json -^/typo/typo3/sysext/t3editor/composer\.json -^/typo/typo3_src/ChangeLog -^/typo3/ -^/typo3/ChangeLog -^/typo3/index\.php -^/typo3/sysext/opendocs/composer\.json -^/typo3/sysext/recordlist/composer\.json -^/typo3/sysext/sys_note/composer\.json -^/typo3/sysext/t3editor/composer\.json -^/typo3/typo3/index\.php -^/typo3/typo3/sysext/opendocs/composer\.json -^/typo3/typo3/sysext/recordlist/composer\.json -^/typo3/typo3/sysext/sys_note/composer\.json -^/typo3/typo3/sysext/t3editor/composer\.json -^/typo3/typo3_src/ChangeLog -^/typo3_src/ChangeLog -^/uapi\-cgi/ -^/uapi\-cgi/admin/ -^/ucmdb\-ui/login_page\.jsp -^/ucs\-overview/ -^/uebimiau/index\.php -^/ui/ -^/ui/faces/Login\.xhtml -^/ui/images/logo\.png -^/ui/login -^/ui/login/ -^/ui/main\.js -^/ui/modules/login/ -^/uimhome/ -^/um/ -^/umotion/modules/system/externalframe\.php\?context=runtime -^/univention\-management\-console/ -^/upb/db/users\.dat -^/update\.php -^/updater/ -^/updates/ -^/upload\.php -^/upload/ -^/upload/account\-login\.php -^/upload/index\.php -^/uploads/ -^/urchin/ -^/urchin3/ -^/urchin5/ -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/us/ -^/usage/ -^/usebb/index\.php -^/user\.php -^/user/ -^/user/index\.php -^/user/login -^/user_lang\.js -^/userdb/ -^/userlogin\!default\.action -^/userlogin\!doDefault\.action -^/userportal/webpages/myaccount/login\.jsp -^/users/ -^/users/login -^/users/login\.php -^/users/sign_in -^/usr/ -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/ustats/ -^/usuario/ -^/usuarios/ -^/usvn/login/index\.php -^/usvn/public/login/index\.php -^/utf\-8/index\.php -^/util/ -^/utils\.js -^/utils/ -^/v\-webmail/htdocs/login\.php -^/v1/agent/self -^/v1/settings/first\-login -^/v3/settings/first\-login -^/v4/ -^/vPetEngine/index\.php -^/vbulletin/content\.php -^/vbulletin/forum/content\.php -^/vbulletin/forum/index\.php -^/vbulletin/index\.php -^/vco/ -^/vegadns/index\.php -^/vendor/ -^/vendor/plugins/fckeditor/public/javascripts/_whatsnew\.html -^/vendor/plugins/fckeditor/public/javascripts/fckeditor\.js -^/version -^/vfs/ -^/viart/viart_shop\.xml -^/viart_cms/viart_shop\.xml -^/viart_shop\.xml -^/viart_shop/viart_shop\.xml -^/vicidial/welcome\.php -^/view/TWiki/WebHome -^/view/login\.html -^/view/loginPro\.html -^/viewcvs\.cgi/\?cvsroot=\foo\ -^/viewer -^/views/login -^/viewvc\.cgi/ -^/viewvc/ -^/vimbadmin/auth/login -^/visionweb/index2\.html -^/voip/sipserver/login/ -^/volve/site/login\.php -^/vpet/index\.php -^/vpn/ -^/vpn/index\.html -^/vpn/js/ -^/vpn/tmindex\.html -^/vpns/ -^/vpns/cfg/ -^/vpns/portal/ -^/vpns/portal/scripts/ -^/vsmc\.html -^/vsom/ -^/vt\-test\-non\-existent\.html -^/vt\-test/vt\-test\-non\-existent\.html -^/vtigercrm/index\.php -^/vttest\-345678\.html -^/w\-agora/ -^/w\-agora/index\.php -^/w3perl/ -^/warehouse/control/main -^/warehouse/control/main/ -^/wavemaster\.internal/ -^/way\-board/ -^/wbb/acp/index\.php -^/wbb/index\.php -^/wbb/upload/index\.php -^/wbm/index\.php -^/wbm/state\.php -^/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/wcm/index\.jsp -^/web/ -^/web/\?wicket\:bookmarkablePage=\:org\.geoserver\.web\.AboutGeoServerPage -^/web/ACS\.html -^/web/app_dev\.php/_configurator/step/0 -^/web/guest -^/web/guest/en/websys/status/configuration\.cgi -^/web/help\.php -^/web/index\.html -^/web/index\.php -^/web/login -^/web/magmi\.php -^/web/signin -^/web800fo/ -^/webERP/index\.php -^/webEdition/index\.php -^/webMathematica/ -^/web_caps/webCapsConfig -^/web_usage/ -^/webaccess/ -^/webacs/pages/common/login\.jsp -^/webadmin/ -^/webadmin/start/index\.php -^/webalizer/ -^/webapp -^/webapp/ -^/webapp/home\.html\?0 -^/webappng/sites/meetings/dashboard/home -^/webapps/ -^/webboard/ -^/webcalendar/login\.php -^/webcart\-lite/ -^/webcart/ -^/webconsole/webpages/login\.jsp -^/webcookbook/index\.php -^/webdata/ -^/webdav/ -^/webdb/ -^/webedition/index\.php -^/weberp/index\.php -^/webftp/help\.html -^/webftp/index\.php -^/webgrind/index\.php -^/webid/index\.php -^/webimages/ -^/webimages2/ -^/weblate/about/ -^/webline/html/admin/wcs/LoginPage\.jhtml\?oper=login\&dest=\%2Fadmin\%2FCiscoAdmin\.jhtml -^/weblog/ -^/weblogger/index\.php -^/weblogin\.htm -^/weblogs/ -^/webmail/ -^/webmail/\?interface=basic -^/webmail/database/_sessions/ -^/webmail/htdocs/login\.php -^/webmail/index\.php -^/webmail/index\.php/admin -^/webmail/login\.php -^/webmail/source/index\.php -^/webmail/src/login\.php -^/webmailpro/ -^/webman/index\.cgi -^/webmaster/ -^/webmaster_logs/ -^/webmatic/index\.php -^/webplus\.exe\?about -^/webplus\?about -^/webpos/control/main -^/webpos/control/main/ -^/webpub\-ui/ -^/webpub/ -^/webreports/ -^/webreps/ -^/webserv/index\.ssi -^/webshare/ -^/website/ -^/websiteadmin/index\.php -^/webstat/ -^/webstats/ -^/webstore/control/main -^/websvn/ -^/websvn/listing\.php -^/webthings/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/webtier/ess\.do -^/webtier/index\.do -^/webtools/control/main -^/webtools/control/main/ -^/webtrace/ -^/webtrends/ -^/webui/index\.php -^/welcome\.do -^/welcome/index\.html -^/whizzy/index\.php -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/whmcs/index\.php -^/wicket\-examples/index\.html -^/wicket/wicket\-examples/index\.html -^/wideimage/composer\.json -^/wideimage/doc/index\.html -^/wideimage/index\.php -^/wiki/ -^/wiki/Main/WebHome -^/wiki/SystemInfo -^/wiki/WikiHome -^/wiki/bin/view/TWiki/WebHome -^/wiki/bin/view/foswiki/WebHome -^/wiki/cgi\-bin/view/TWiki/WebHome -^/wiki/do/view/TWiki/WebHome -^/wiki/doku\.php -^/wiki/feed\.php -^/wiki/index\.php -^/wiki/index\.php/Special\:Version -^/wiki/login\.action -^/wiki/pmwiki\.php -^/wiki/tiki\-index\.php -^/wiki/view/TWiki/WebHome -^/wikihelp/index\.php -^/windows/ -^/wing/admin_login\.html -^/wingftp/admin_login\.html -^/winscp\.ini -^/wmail/login\.php -^/wme/index\.php\?action=login -^/wondercms/nonexistent\.php -^/word/ -^/wordpress\-mu/ -^/wordpress\-mu/feed/ -^/wordpress\-mu/index\.php -^/wordpress\-mu/readme\.html -^/wordpress\-mu/wp\-links\-opml\.php -^/wordpress\-mu/wp\-login\.php -^/wordpress/ -^/wordpress/database\.sql -^/wordpress/feed/ -^/wordpress/index\.php -^/wordpress/installer\-backup\.php -^/wordpress/installer\.php -^/wordpress/readme\.html -^/wordpress/wp\-admin/ -^/wordpress/wp\-content/ -^/wordpress/wp\-content/gallery/ -^/wordpress/wp\-content/languages/ -^/wordpress/wp\-content/plugins/ -^/wordpress/wp\-content/themes/ -^/wordpress/wp\-content/upgrade/ -^/wordpress/wp\-links\-opml\.php -^/wordpress/wp\-login\.php -^/work/ -^/workeffort/control/main -^/workeffort/control/main/ -^/workspace/ -^/wp\-admin/ -^/wp\-admin/install\.php -^/wp\-admin/setup\-config\.php -^/wp\-config\.php\.backup -^/wp\-config\.php\.bak -^/wp\-config\.php\.bkp -^/wp\-config\.php\.copy -^/wp\-config\.php\.old -^/wp\-config\.php\.orig -^/wp\-config\.php\.temp -^/wp\-config\.php\.tmp -^/wp\-content/ -^/wp\-content/gallery/ -^/wp\-content/languages/ -^/wp\-content/plugins/ -^/wp\-content/plugins/ckeditor\-for\-wordpress/ckeditor/CHANGES\.md -^/wp\-content/plugins/ckeditor\-for\-wordpress/ckeditor/ckeditor\.js -^/wp\-content/plugins/fckeditor\-for\-wordpress/fckeditor/_whatsnew\.html -^/wp\-content/plugins/fckeditor\-for\-wordpress/fckeditor/fckeditor\.js -^/wp\-content/themes/ -^/wp\-content/upgrade/ -^/wp\-content/uploads/ -^/wp\-includes/ -^/wp\-json/ -^/wp\-links\-opml\.php -^/wp\-login\.php -^/wp/database\.sql -^/wp/installer\-backup\.php -^/wp/installer\.php -^/wpad\.dat -^/wps/portal/Home/Welcome/ -^/wrm/index\.php -^/ws/ -^/ws/auth/ -^/ws/axis2\-admin/ -^/ws/axis2\-web/index\.jsp -^/ws/debug/ -^/ws/index\.jsp -^/ws/pairing/ -^/ws/services/Version/getVersion -^/ws/services/Version\?method=getVersion -^/ws/services/non\-existent -^/ws_ftp\.ini -^/wsdocs/ -^/wstats/ -^/wt2parser\.cgi\?home_en -^/wt4/home -^/wusage/ -^/wwb/index\.php -^/wwb/index\.php\?module=site\&show=home -^/wwh/index\.php -^/wws/ -^/wwsympa/ -^/www\-sql/ -^/www/ -^/www/admin/index\.php -^/www/index\.php -^/www/start\.html -^/wwwboard\.html -^/wwwjoin/ -^/wwwlog/ -^/wwwstat/ -^/wwwstats/ -^/xGB/ -^/x_news\.php -^/xampp/ -^/xampp/index\.php -^/xampp/start\.php -^/xaraya/index\.php -^/xcart/cart\.php -^/xcart_ecommerce/cart\.php -^/xenforo/ -^/xenforo/index\.php -^/xf/ -^/xf/index\.php -^/xml/ -^/xmldata\?item=All -^/xmlpserver/login\.jsp -^/xoops/index\.php -^/xoops/user\.php -^/xoopscelepar/index\.php -^/xplorer/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/xtemp/ -^/xwiki/bin/login/XWiki/XWikiLogin -^/xwiki/bin/view/Main/WebHome -^/xymon\.html -^/xymon/xymon\.html -^/yapig/ -^/zTree/demo/en/index\.html -^/zTree/en/index\.html -^/zabbix/ -^/zabbix/index\.php -^/zb41/ -^/zdm/login_xdm_uc\.jsp -^/zeeways/admin/index\.php -^/zen\-cart/admin/login\.php -^/zen\-cart/index\.php -^/zen/admin/login\.php -^/zenbership\-master/admin/login\.php -^/zenbership/admin/login\.php -^/zenworks/jsp/fw/internal/Login\.jsp -^/zeuscart/index\.php -^/zeuscms/index\.php -^/zikula/ -^/zikula/docs/distribution/tour_page1\.htm -^/zikula/index\.php -^/zimbraAdmin/ -^/zipfiles/ -^/zm/index\.php -^/zml\.cgi\?file=(\.\./)+etc/passwd\%00 -^/zoneminder/index\.php -^/zpanel/index\.php -^/zport/acl_users/cookieAuthHelper/login_form -^/~1/ -^/~admin/ -^/~log/ -^/~root/ -^/~stats/ -^/~webstats/ -^/~wsdocs/ diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re deleted file mode 100644 index 43b15d6..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re +++ /dev/null @@ -1,8 +0,0 @@ -^/favicon\.ico$ -^/apple-touch-icon.*\.png$ -^/robots\.txt$ -^/sitemap\.xml$ -^/browserconfig\.xml$ -^/site\.webmanifest$ -^/manifest\.json$ -^/\.well-known/ diff --git a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re b/portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re deleted file mode 100644 index 94adcdc..0000000 --- a/portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re +++ /dev/null @@ -1,3 +0,0 @@ -^/robots\.txt$ -^/sitemap\.xml$ -^/\.well-known/ diff --git a/uwsgi-portal/Dockerfile b/uwsgi-portal/Dockerfile index f26b75e..c47f0fd 100644 --- a/uwsgi-portal/Dockerfile +++ b/uwsgi-portal/Dockerfile @@ -29,6 +29,7 @@ RUN echo "# Install nginx and portal libs" && \ libhttp-browserdetect-perl libnet-dns-perl \ uwsgi uwsgi-plugin-psgi \ openssh-client \ + linagora-llng-crowdsec-filters \ linagora-lemonldap-ng-plugin-matrix-token-exchange \ linagora-lemonldap-ng-plugin-json-file \ linagora-lemonldap-ng-plugin-oidc-device-authorization \ diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures deleted file mode 100644 index 0c830e2..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=10 (overflow at 11) -11 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario deleted file mode 100644 index ea021f5..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-admin-probing diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow deleted file mode 100644 index a24e4b7..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=10, leakspeed=10s -# Time window = capacity * leakspeed ≈ 100s, rounded to 120s -120 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re deleted file mode 100644 index c930a95..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-admin-probing/patterns.re +++ /dev/null @@ -1,45 +0,0 @@ -# Admin interface probing detection patterns (regex) -# Based on CrowdSec http-admin-probing scenario - -# Generic admin paths (must be at path boundary) -/(admin|administrator|administration|adminpanel)(/|$|\.) -/(panel|controlpanel|cpanel|dashboard)(/|$) -/(manager|management|console|backend|backoffice)(/|$) -/(sysadmin|webmaster)(/|$) - -# CMS admin paths -/wp-(admin|login\.php)(/|$) -/joomla/administrator(/|$) -/drupal/admin(/|$) -/typo3(/|$) - -# Database admin tools -/(phpmyadmin|pma|mysql|mysqladmin|myadmin|phpMyAdmin)(/|$) -/(phppgadmin|adminer|dbadmin|sqlmanager)(/|$|\.php) - -# Server management panels -/(webmin|plesk|whm|directadmin|ispconfig|virtualmin|usermin)(/|$) - -# Search and data platforms -/(solr|elasticsearch|kibana|grafana)(/|$) - -# Application servers -/manager/(html|status)$ -/(jmx-console|web-console)(/|$) -/(jenkins|hudson|bamboo|teamcity)(/|$) - -# Monitoring and debug endpoints -/actuator(/|$) -/server-(status|info)$ - -# Setup/install pages -/(setup|install|installer|installation)(/|$|\.php) - -# Mail admin -/(webmail|roundcube|squirrelmail|postfixadmin)(/|$) - -# File managers -/(filemanager|elfinder)(/|$) - -# API documentation -/(swagger|swagger-ui|api-docs|graphql|graphiql)(/|$|\.html) diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures deleted file mode 100644 index 4e7d4a1..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=1 (overflow at 2) -# Very aggressive - ban quickly on backdoor access attempts -2 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario deleted file mode 100644 index 3f8b400..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-backdoors-attempts diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow deleted file mode 100644 index a96384e..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=1, leakspeed=5s -# Time window = capacity * leakspeed = 5s -5 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re deleted file mode 100644 index ca6afe2..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-backdoors-attempts/patterns.re +++ /dev/null @@ -1,54 +0,0 @@ -# Known web shells and backdoors -# Source: https://hub-data.crowdsec.net/web/backdoors.txt -# Patterns match filename at end of path - -# C99 shell family -/c99[^/]*\.php -/c100\.php - -# R57 shell family -/r57\.php -/r58\.php -/r00t\.php - -# Common shell names -/shell\.php -/cmd\.php -/cmd\.asp -/cmd\.jsp -/cmdexec\.aspx -/eval-stdin\.php -/simple[_-]?cmd\.php -/simple[_-]?backdoor\.php - -# File managers -/filesman\.php -/fileupload\.aspx -/filesystembrowser\.aspx -/upfile\.php -/upl0ader\.php - -# WSO shells -/wso[0-9.]*\.php - -# Alfa shells -/alfa[^/]*\.php - -# Other known shells -/b374k\.php -/weevely\.php -/phpspy\.php -/ani-shell\.php -/antichat\.php -/locus7?s?\.php -/madshell\.php -/php-backdoor\.php -/webshell\.php -/jspshell\.jsp -/jspbd\.jsp -/aspxshell\.aspx - -# Generic suspicious patterns -/[0-9]{1,4}\.php$ -/xx\.php$ -/x\.php$ diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures deleted file mode 100644 index a1bcc68..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# Single occurrence triggers ban - this is a known exploit -1 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario deleted file mode 100644 index a0f1671..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2021-41773 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re deleted file mode 100644 index fbeea6c..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2021-41773/patterns.re +++ /dev/null @@ -1,17 +0,0 @@ -# Apache Path Traversal CVE-2021-41773 -# These patterns detect URL-encoded path traversal specific to this CVE -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-41773 - -# Pattern 1: /.%2E/.%2E/ (dot encoded as %2E) -/\.%2[eE]/\.%2[eE]/ - -# Pattern 2: /%2E%2E/%2E%2E (full encoding of ../..) -/%2[eE]%2[eE]/%2[eE]%2[eE] - -# Pattern 3: Mixed case variations -/\.%2e/\.%2e/ -/%2e%2e/%2e%2e - -# Also detect with cgi-bin which is common in exploits -/cgi-bin/\.%2[eE]/ -/cgi-bin/%2[eE]%2[eE]/ diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures deleted file mode 100644 index a1bcc68..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# Single occurrence triggers ban - this is a known exploit -1 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario deleted file mode 100644 index 5d922ad..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2024-0012 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re deleted file mode 100644 index 45a1851..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-0012/patterns.re +++ /dev/null @@ -1,6 +0,0 @@ -# PAN-OS auth bypass CVE-2024-0012 -# Filter: request matches '/php/.*/\.js\.map' or '/index.php/.*\.js\.map' -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-0012 - -/php/.*/\.js\.map -/index\.php/.*\.js\.map diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures deleted file mode 100644 index 0c888a7..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=3 (overflow at 4) -4 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario deleted file mode 100644 index 9130ddd..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-2024-38475 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow deleted file mode 100644 index d04aefb..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=3, leakspeed=10s -# Time window = capacity * leakspeed = 30s -30 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re deleted file mode 100644 index a63ec2b..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-2024-38475/patterns.re +++ /dev/null @@ -1,6 +0,0 @@ -# Apache mod_rewrite bypass CVE-2024-38475 -# Filter: Lower(evt.Parsed.request) endsWith '%3f' -# Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-38475 - -# URI ending with URL-encoded '?' (%3f) -%3[fF]$ diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures deleted file mode 100644 index 755d7ed..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.maxfailures +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: type=trigger (immediate ban) -# URIs come from https://hub-data.crowdsec.net/web/trendy_cves_uris.json -1 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario deleted file mode 100644 index c94380d..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-cve-probing diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt deleted file mode 100644 index 742951f..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-cve-probing/patterns.txt +++ /dev/null @@ -1,67 +0,0 @@ -# Trending CVE URIs - literal substring match -# Source: https://hub-data.crowdsec.net/web/trendy_cves_uris.json -# CrowdSec filter: http_path contains JsonExtract(#, "uri") -# Snapshot date: 2026-04-17 - -# CVE-2024-3400 Palo Alto GlobalProtect -/global-protect/login.esp -# CVE-2024-3272 D-Link NAS -/cgi-bin/nas_sharing.cgi -# CVE-2018-12031 Elber -/server/node_upgrade_srv.js -# CVE-2021-36380 Sunhillo SureLine -/cgi/networkdiag.cgi -# CVE-2021-3129 Laravel Ignition -/_ignition/execute-solution -# CVE-2020-27866 Netgear -/setup.cgi -# CVE-2024-4040 CrushFTP -/webinterface/login.html -/webinterface/ -# CVE-2024-24919 Check Point -/clients/mycrl -# CVE-2024-4577 PHP CGI -?%ad -# CVE-2024-5806 MOVEit -/guestaccess.aspx -# CVE-2024-0769 D-Link DIR-859 -/hedwig.cgi -# CVE-2019-8318 D-Link HNAP -/hnap1/ -# CVE-2024-8190 Ivanti CSA -/gsb/datetime.php -# CVE-2021-33044 Dahua -/rpc2_login -# CVE-2024-8963 Ivanti CSA path traversal -index.php%3f.php/ -# CVE-2025-0108 PAN-OS auth bypass -/unauth/%252e%252e/php/ -# CVE-2025-31324 SAP NetWeaver -/developmentserver/metadatauploader -# CVE-2024-38653 Ivanti MDM -/mdm/checkin -# CVE-2025-34509 Sitecore -/sitecore/api/ssc/auth/login -# CVE-2023-6549 Citrix NetScaler -/nf/auth/startwebview.do -# CVE-2025-5777 Citrix NetScaler "CitrixBleed 2" -/p/u/doauthentication.do -# CVE-2025-25257 Fortinet FortiWeb -/api/fabric/device/status -# CVE-2025-53770 SharePoint ToolShell -/_layouts/15/toolpane.aspx -# CVE-2023-0669 GoAnywhere MFT -/goanywhere/lic/accept -# CVE-2024-0204 GoAnywhere MFT -/goanywhere/images/.. -# CVE-2025-64446 Fortinet FortiWeb -/api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi -# CVE-2025-59718 Fortinet FortiSIEM -/remote/saml/login -# CVE-2025-40553 Ivanti Endpoint Manager -/helpdesk/WebObjects/Helpdesk.woa/ajax/9.7.43.0.0.0.4.3.7.0.7.1.1.1 -/helpdesk/WebObjects/Helpdesk.woa/ajax/2.0.7.1.1.1 -# CVE-2025-40552 Ivanti Endpoint Manager -/helpdesk/WebObjects/Helpdesk.woa/wo/ -# CVE-2026-20127 Cisco ISE -/reports/data/opt/data/containers/config/data-collection-agent/.dca diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures deleted file mode 100644 index 0c888a7..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=3 (overflow at 4) -4 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario deleted file mode 100644 index 7f79ca6..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-path-traversal-probing diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow deleted file mode 100644 index d04aefb..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=3, leakspeed=10s -# Time window = capacity * leakspeed = 30s -30 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt deleted file mode 100644 index 01568ce..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-path-traversal-probing/patterns.txt +++ /dev/null @@ -1,28 +0,0 @@ -# Path traversal patterns -# Source: https://hub-data.crowdsec.net/web/path_traversal.txt - -# Directory traversal sequences -../ -..\ -%2e%2e%2f -%2e%2e%5c -%252e%252e%252f - -# Unix system files -/etc/passwd -/etc/shadow -/etc/hosts -/etc/group -/proc/self/ - -# PHP/file wrappers -=file:// -=zip:// -=php:// -=expect:// -=data:// - -# Windows system files -windows/win.ini -boot.ini -%25SYSTEMROOT%25 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures deleted file mode 100644 index 882fbb5..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=4 (overflow at 5) -5 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario deleted file mode 100644 index 9c09f90..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-sensitive-files diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow deleted file mode 100644 index 1b00446..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=4, leakspeed=5s -# Time window = capacity * leakspeed ≈ 20s, rounded to 30s -30 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re deleted file mode 100644 index 2d3da9f..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-sensitive-files/patterns.re +++ /dev/null @@ -1,65 +0,0 @@ -# Sensitive files detection patterns (regex) -# Based on CrowdSec http-sensitive-files scenario - -# Environment files (anywhere in path) -/\.env($|[.~]|\.bak|\.backup|\.old|\.save|\.txt) - -# Git files -/\.git(/|$) -/\.gitattributes$ -/\.gitconfig$ -/\.gitignore$ -/\.gitmodules$ - -# Other VCS -/\.svn(/|$) -/\.hg($|ignore$) -/\.bzr($|/) - -# Shell history and config (in any directory) -/\.(bash_history|bash_profile|bashrc|zsh_history|zshrc|profile|sh_history)$ - -# SSH keys and config -/\.ssh/ - -# Web server files -/\.ht(passwd|group|digest)$ -/\.user\.ini(\.bak)?$ - -# Database dumps -/(database|backup|dump|db|data)\.sql(\.gz)?$ - -# Backup archives -/(backup|site|www)\.(tar\.gz|zip|rar)$ - -# Package manager files (anywhere) -/(composer|package|package-lock)\.json$ -/(composer|yarn|Gemfile|Pipfile)\.lock$ -/Gemfile$ -/requirements\.txt$ -/Pipfile$ - -# PHP config files -/wp-config\.php([.~]|\.bak|\.old|\.txt)?$ -/wp-config-sample\.php$ -/(config|configuration|settings|database|local)\.php(\.bak|\.old)?$ -/settings\.local\.php$ - -# Framework config -/(parameters|database|secrets|credentials)\.ya?ml(\.enc)?$ - -# Docker and CI -/Dockerfile$ -/docker-compose\.ya?ml$ -/\.dockerignore$ -/\.(travis|gitlab-ci)\.yml$ -/Jenkinsfile$ - -# Cloud credentials -/\.aws/(credentials|config)$ -/(credentials|service-account|firebase)\.json$ -/\.firebaserc$ - -# Debug files -/(debug|error)\.log$ -/(phpinfo|info|test)\.php$ diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures deleted file mode 100644 index c6bc781..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.maxfailures +++ /dev/null @@ -1,2 +0,0 @@ -# CrowdSec equivalent: capacity=5 (overflow at 6) -6 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario deleted file mode 100644 index dfb9872..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.scenario +++ /dev/null @@ -1 +0,0 @@ -llng/http-wordpress-scan diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow deleted file mode 100644 index a0e9aeb..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/.timewindow +++ /dev/null @@ -1,3 +0,0 @@ -# CrowdSec equivalent: capacity=5, leakspeed=10s -# Time window = capacity * leakspeed ≈ 50s, rounded to 60s -60 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re deleted file mode 100644 index 3111972..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/http-wordpress-scan/patterns.re +++ /dev/null @@ -1,32 +0,0 @@ -# WordPress scan detection patterns (regex) -# Based on CrowdSec http-wordpress-scan scenario - -# WordPress API user enumeration -/wp-json/wp/v2/users -/wp-json/oembed - -# Plugin and theme enumeration -/wp-content/(plugins|themes|uploads?)(/|$) -/wp-includes(/|$) - -# Common vulnerable plugins probing -/wp-content/plugins/(revslider|gravityforms|contact-form-7)(/|$) -/wp-content/plugins/(nextgen-gallery|jetpack|woocommerce)(/|$) -/wp-content/plugins/(yoast-seo|all-in-one-seo-pack)(/|$) -/wp-content/plugins/(wp-file-manager|duplicator|wordfence)(/|$) - -# Readme and changelog enumeration (version disclosure) -/wp-content/(plugins|themes)/[^/]+/(readme|changelog)\.txt$ -/(readme\.html|license\.txt)$ - -# WordPress XML-RPC (brute force vector) -/xmlrpc\.php$ - -# WordPress config backup files -/wp-config\.(php[.~]|php\.(bak|old|txt|save)|old|bak|txt)$ - -# Debug log exposure -/wp-content/debug\.log$ - -# WordPress installation/upgrade files -/wp-admin/(install|setup-config|upgrade)\.php$ diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re deleted file mode 100644 index 4ae8eb4..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.re +++ /dev/null @@ -1,136 +0,0 @@ -\.axd$ -\.backup$ -\.bak$ -\.log$ -\.old\d*$ -\.orig$ -\.rej$ -\.sql$ -\.zip$ -^/\+ -^/account -^/admin -^/admin/ -^/api$ -^/api/aws -^/api/session/properties -^/api/.*about$ -^/api/.*version$ -^/app -^/app/ -^/assets/ -^/backend$ -^/backend/ -^/backup -^/backup/ -^/base -^/blog -^/bower_components/ -^/build/ -^/cache/ -^/cf_scripts/ -^/cfide -^/cgi-bin/ -^/cgi-mod/ -^/cluster -^/cms -^/conf/ -^/config/ -^/configs/ -^/container -^/core/ -^/cpanel -^/crm -^/dana/ -^/dashboard/ -^/data/ -^/db/ -^/demo -^/deploy/ -^/deployments/ -^/dev/ -^/dist/ -^/downloads/ -^/dniapi/ -^/env$ -^/env/ -^/environment/ -^/evox/ -^/etc/ -^/files/ -^/fog/ -^/geoserver/ -^/helpdesk/ -^/hnap1 -^/hello.world -^/horizon -^/human\.aspx -^/i/ -^/identity$ -^/includes/ -^/index\.js -^/info$ -^/ini/ -^/internal_forms_authentication -^/ise/ -^/jasperserver-pro/ -^/jasperserverTest/ -^/json/ -^/lib/ -^/license.txt -^/log/ -^/login\.php -^/logs/ -^/magento_version -^/main\.asp -^/main\.js -^/main\.shtml -^/manage/ -^/nmap -^/owa/ -^/owncloud/ -^/panel -^/partymgr/ -^/php/ -^/phpunit -^/pma/ -^/private/ -^/prod/ -^/public -^/public/ -^/release/ -^/releases/ -^/rest/applinks/ -^/scripts/ -^/sdk$ -^/setting/ -^/settings/ -^/sh/ -^/shell/ -^/sql/ -^/src/ -^/staging/ -^/status\.php -^/sugar_version.json -^/system/ -^/telescope -^/temp/ -^/test -^/tmp/ -^/toml/ -^/uploads/ -^/user$ -^/var/ -^/vendor -^/vendor/ -^/webmail -^/webui$ -^/workspace -^/ws -^/www -^/xml/ -^/xmldata -^/yaml/ -^/yii -^/yml/ -^/zend diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt deleted file mode 100644 index 247c403..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_collected/url.txt +++ /dev/null @@ -1,131 +0,0 @@ -/%c0 -/*.map -/.aws/credentials -/.elasticbeanstalk/ -/.env -/.env.backup -/.env.bak -/.env.ci -/.env.config -/.env.default -/.env.dev -/.env.dev.local -/.env.development.local -/.env.dist -/.env.live -/.env.local -/.env.preprod -/.env.prod -/.env.prod.local -/.env.production -/.env.production.local -/.env.qa -/.env.sandbox -/.env.save -/.env.secret -/.env.stage -/.env.staging.local -/.env.template -/.env.test -/.env.testing -/.env.testing.local -/.env.uat -/.env_sample -/.envrc -/.git/ -/.gitlab-ci.yml -/.hg/ -/.idea/ -/.next/ -/.sql.gz -/.svn/ -/.tar.gz -/.travis.yml -/.vscode/ -/Booking/Default.aspx -/Capfile -/Gemfile -/Jenkinsfile -/Procfile -/_logs/ -/_profiler/ -/access.log -/api/config -/api/credentials -/api/docs -/api/info -/api/keys -/api/login -/api/settings.json -/api/users -/app.js -/app.log -/app.yaml -/application.properties -/application.yml -/appsettings.json -/aws-credentials.txt -/bundle.js -/circle.yml -/config.ini -/config.json -/config.old.php -/config.php -/config.yaml -/config/default.json -/config/dev.json -/credentials.txt -/database_old.json -/debug.php -/error.log -/geoserver/web/ -/graphql -/helm/ -/index.php -/info.php -/internal/config -/js/NewWindow_2_all.js -/logs/ -/mail/.env -/node_modules/ -/nohup.out -/package.json -/php-version.php -/php.php -/phpinf.php -/phpmyadmin/ -/phpv.php -/pi.php -/pinfo.php -/pom.xml -/requirements.txt -/resque/ -/secrets.txt -/secure-config.json -/sendgrid.env -/serverinfo.php -/serverless.yml -/settings.json -/settings.py -/settings.yaml -/showLogin.cc -/sidekiq/ -/sitecore/shell/sitecore.version.xml -/src/main/resources/application.yml -/swagger-ui.html -/swagger.json -/sysinfo.php -/temp/ -/template.yaml -/terraform.tfstate -/test.php -/tmp/ -/users.csv -/web.config -/webui/ -/wp-config.php -/wp-content/debug -/yarn.lock -Dockerfile -docker-compose -phpinfo diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt deleted file mode 100644 index 26c2268..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/backdoors.txt +++ /dev/null @@ -1,193 +0,0 @@ -c99.php -c99shell.php -r57.php -r58.php -dra.php -r00t.php -root.php -mma.php -filesman.php -Locus7s.php -c99-Ultimate.php -c100.php -Ekin0x.php -hacker.php -safe0ver.php -sniper.php -spyshell.php -CWShellDumper.php -angel.php -dq.php -cmd.php -liz0zim.php -simattacker.php -tryag.php -150.php -Ani-Shell.php -Crystal.php -Dx.php -FaTaLisTiCz_Fx.php -G5.php -NCC-Shell.php -NetworkFileManagerPHP.php -PHANTASMA.php -PHPJackal.php -PHPRemoteView.php -PHPSPY.php -Php_Backdoor.txt.php -Private-i3lue.php -SnIpEr_SA Shell.php -upl0ader.php -acid.php -antichat.php -shell.php -udp.php -ddos.php -b37.php -backupsql.php -bdotw44shell.php -bug.php -c37.php -c66.php -c99-shadows-mod.php -c99_PSych0.php -c99_locus7s.php -c99_madnet.php -c99_w4cking.php -c99madshell.php -c99ud.php -c99unlimited.php -c99v2.php -cbfphpsh.php -cihshell_fix.php -co.php -connect-back.php -cpg_143_incl_xpl.php -ctt_sh.php -cybershell.php -egy.php -erne.php -ex0shell.php -g00nv13.php -hkrkoz.php -ironshell.php -isko.php -iskorpitx.php -itsecteam_shell.php -locus.php -log.php -simple_cmd.php -zacosmall.php -weevely.php -AK-74.php -Ajax_PHP_Command_Shell.php -Antichat_Shell.php -Ayyildiz_Tim.php -CasuS-1.5.php -CrystalShell.php -DTool_Pro.php -Dive_Shell.php -GRP_WebShell.php -Gamma_Web_Shell.php -JspWebshell_1.2.php -KA_uShell_0.1.6.php -Loaderz_WEB_Shell.php -Mackers_Private_Shell.php -Moroccan_Spamers.php -MyShell.php -NGH.php -NTDaddy_v1.9.php -Non-alphanumeric.php -PHP_Shell.php -PHVayv.php -PhpSpy.php -Predator.php -Rootshell.v.1.0.php -STNC_WebShell_v0.8.php -Safe0ver_Shell.php -Safe_Mode_Bypass.php -SimShell.php -Simple_PHP_backdoor.php -Sincap_1.0.php -Small_Web_Shell.php -WinX_Shell.php -Worse_Linux_Shell.php -ZyklonShell.php -aZRaiLPhp_v1.0.php -alfa3.php -andela.php -aspydrv.php -bloodsecv4.php -cgitelnet.php -configkillerionkros.php -dC3_Security.php -g00nshell-v1.3.php -jspshell.jsp -kral.php -lifkaS.php -lolipop.php -lostDC.php -matamu.php -megabor.php -obfuscated-punknopass.php -pHpINJ.php -php-backdoor.php -punk-nopass.php -punkholic.php -pws.php -qsd-backdoor.php -ru24_post_sh.php -s72_Shell.php -simple-backdoor.php -smevk.php -soldierofallah.php -sosyete.php -spygrup.php -stres.php -wso2.8.5.php -zehir4.php -cgitelnet.pl -cmd.pl -dc.pl -list.pl -up.pl -wewo.pl -irc.pl -pws.pl -PerlWebShellbyRST-GHC.pl -JspWebshell 1.2.jsp -browser.jsp -cmd.jsp -cmd_win32.jsp -jspShell.jsp -jspbd.jsp -list.jsp -up.jsp -up_win32.jsp -3fexe.asp -ASpy.asp -EFSO.asp -RemExp.asp -aspxSH.asp -aspxshell.aspx -aspydrv.asp -cmd.asp -cmd.aspx -cmdexec.aspx -elmaliseker.asp -filesystembrowser.aspx -fileupload.aspx -ntdaddy.asp -spexec.aspx -sql.aspx -tool.asp -toolaspshell.asp -up.asp -zehir.asp -zehir.aspx -zehir4.asp -zehir4.aspx -xleet.php -xleet-shell.php -sh3llx.php -eval-stdin.php diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt deleted file mode 100644 index 226526b..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/jira_cve_2021-26086.txt +++ /dev/null @@ -1,14 +0,0 @@ -/_/;/WEB-INF/web.xml -/_/;/WEB-INF/decorators.xml -/_/;/WEB-INF/classes/seraph-config.xml -/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.xml -/_/;/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml -/_/;/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.properties -/_/%3B/WEB-INF/web.xml -/_/%3B/WEB-INF/decorators.xml -/_/%3B/WEB-INF/classes/seraph-config.xml -/_/%3B/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties -/_/%3B/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.xml -/_/%3B/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml -/_/%3B/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.properties \ No newline at end of file diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt deleted file mode 100644 index 6f58500..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/log4j2_cve_2021_44228.txt +++ /dev/null @@ -1,35 +0,0 @@ -${jndi: -${${::-j}${::-n}${::-d}${::-i}: -${${::-j}ndi -${${lower:jndi}: -${${lower:${lower:jndi}}: -${${lower:j}${lower:n}${lower:d}i: -${${lower:j}${upper:n}${lower:d}${upper:i}: -${${upper:j}${upper:n}${upper:d}${upper:i}: -${j${${:-l}${:-o}${:-w}${:-e}${:-r}:n}di: -${${date:'j'}${date:'n'}${date:'d'}${date:'i'}: -${jnd${sys:SYS_NAME:-i}: -$%7Bjndi: -$%7B$%7B:-j%7D$%7B:-n%7D$%7B:-d%7D$%7B:-i%7D: -$%7B$%7B::-j%7D$%7B::-n%7D$%7B::-d%7D$%7B::-i%7D: -$%7B$%7B::-j%7Dndi -$%7B$%7Blower:jndi%7D: -$%7B$%7Blower:$%7Blower:jndi%7D%7D: -$%7B$%7Blower:j%7D$%7Blower:n%7D$%7Blower:d%7Di: -$%7B$%7Blower:j%7D$%7Bupper:n%7D$%7Blower:d%7D$%7Bupper:i%7D: -$%7B$%7Bupper:j%7D$%7Bupper:n%7D$%7Bupper:d%7D$%7Bupper:i%7D: -$%7Bj$%7B$%7B:-l%7D$%7B:-o%7D$%7B:-w%7D$%7B:-e%7D$%7B:-r%7D:n%7Ddi: -$%7B$%7Bdate:'j'%7D$%7Bdate:'n'%7D$%7Bdate:'d'%7D$%7Bdate:'i'%7D: -$%7Bjnd$%7Bsys:SYS_NAME:-i%7D: -%24%7Bjndi: -%24%7B%24%7B::-j%7D%24%7B::-n%7D%24%7B::-d%7D%24%7B::-i%7D: -%24%7B%24%7B::-j%7Dndi -%24%7B%24%7Blower:jndi%7D: -%24%7B%24%7Blower:%24%7Blower:jndi%7D%7D: -%24%7B%24%7Blower:j%7D%24%7Blower:n%7D%24%7Blower:d%7Di: -%24%7B%24%7Blower:j%7D%24%7Bupper:n%7D%24%7Blower:d%7D%24%7Bupper:i%7D: -%24%7B%24%7Bupper:j%7D%24%7Bupper:n%7D%24%7Bupper:d%7D%24%7Bupper:i%7D: -%24%7Bj%24%7B%24%7B:-l%7D%24%7B:-o%7D%24%7B:-w%7D%24%7B:-e%7D%24%7B:-r%7D:n%7Ddi: -%24%7B%24%7Bdate:'j'%7D%24%7Bdate:'n'%7D%24%7Bdate:'d'%7D%24%7Bdate:'i'%7D: -%24%7Bjnd%24%7Bsys:SYS_NAME:-i%7D: -${jnd${upper:ı}: diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt deleted file mode 100644 index 54ea252..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/path_traversal.txt +++ /dev/null @@ -1,33 +0,0 @@ -../ -..\ -..\/ -%2e%2e%2f -%2E%2E%2F -%252e%252e%252f -%252E%252E%252F -/etc/passwd -/etc/hosts -/etc/shadow -/etc/groups -%2fetc%2fhosts -%2fetc%2fshadow -%2fetc%2fgroups -%2fetc%2fpasswd -%2Fetc%2Fhosts -%2Fetc%2Fshadow -%2Fetc%2Fgroups -%2Fetc%2Fpasswd -=file:// -=zip:// -=php:// -=expect:// -=data:// -/proc/self/ -/var/log/ -windows/win.ini -Windows/win.ini -%25SYSTEMROOT%25%5Cwin.ini -C:/inetpub/wwwroot/global.asa -C:\inetpub\wwwroot\global.asa -C:/boot.ini -C:\boot.ini diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re deleted file mode 100644 index 21934d2..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/picked-from-scenarios.re +++ /dev/null @@ -1,8 +0,0 @@ -^[^\?]*/apps/login -^[^\?]*/c99\.php -^[^\?]*/wp-login\.php -^[^\?]*/xmlrpc\.php -^[^\?]*\.exe$ -^[^\?]*\.exe\? -^[^\?]*\.dll$ -^[^\?]*\.dll\? diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt deleted file mode 100644 index 429dda6..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sensitive_data.txt +++ /dev/null @@ -1,90 +0,0 @@ -.sql -.sql.gz -.sql.tar -.sql.bzip2 -.sql.bz2 -.sql.zip -.sql.rar -.sql.7z -.bash_history -.bashrc -.cache -.config -.cvs -.cvsignore -.env -.env.backup -env.bak -env.backup -.env.dev -.env.development.local -.env.dist -.env.docker.dev -.env.local -.env.php -.env.prod -.env.production.local -.env.sample.php -.env.save -.env.stage -.env.test -.environment -.envrc -.envs -.env~ -env.production.js -env.test.js -env.dev.js -test-env.json -env.json -.forward -.jupyter/jupyter_notebook_config.json -.git/HEAD -.git/config -.git -.gitlab-ci/.env -.history -.hta -.htaccess -.htpasswd -.lanproxy/config.json -.listing -.listings -.msmtprc -.mysql_history -.passwd -.pwd -.perf -.profile -.rhosts -.sh_history -.ssh -.subversion -.svn -.svn/entries -.s3cfg -.bak -.exe -.bat -.dll -.printer -.pac -.aws -.aws/config -.awscfg -aws-key.yml -config/aws.yml -secrets.yml -secrets.json -aws/credentials -.config/gatsby/config.json -.deployment-config.json -.docker/config.json -.docker/.env -.docker/daemon.json -.cordova/config.json -.vscode/sftp.json -_wpeprivate/config.json -composer.json -composer.lock -debug.log diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt deleted file mode 100644 index 98c64ef..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/sqli_probe_patterns.txt +++ /dev/null @@ -1,18 +0,0 @@ -%40%40version -..xp_cmdshell -information_schema.tables -%20union%20all%20select%20 -%20union%20select%20 -%2cnull%2cnull -benchmark%28 -load_file%28 -substr%28 -substring%28 -selectchar%28 -%7c%7cchr%28 -distinct%28 -pg_sleep%28 -sleep%28 -upper%28 -hex%28 -md5%28 diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt deleted file mode 100644 index 8e1116a..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/thinkphp_cve_2018-20062.txt +++ /dev/null @@ -1,13 +0,0 @@ -index/\\think\\app/invokefunction&function=call_user_func_array&vars -index/%5Cthink%5Capp/invokefunction&function=call_user_func_array&vars -index/\\x5Cthink\\x5Capp/invokefunction&function=call_user_func_array&vars -index/\\\\think\\\\app/invokefunction&function=call_user_func_array&vars -index/\\think\\view\\driver\\Php/display&content=<\?php -index/\\x5Cthink\\x5Cview\\x5Cdriver\\x5CPhp/display&content=<\?php -index/\\\\x5Cthink\\\\x5Cview\\\\x5Cdriver\\\\x5CPhp/display&content=<\?php -index/%5Cthink%5Cview%5Cdriver%5CPhp/display&content=%3C\?php -index/\\think\\Container/invokefunction&function=call_user_func_array&vars -index/%5Cthink%5CContainer/invokefunction&function=call_user_func_array&vars -index/\\x5Cthink\\x5CContainer/invokefunction&function=call_user_func_array&vars -index/\\\\think\\\\Container/invokefunction&function=call_user_func_array&vars -index/\\x09hink\\x07pp/invokefunction&function=call_user_func_array&vars diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt deleted file mode 100644 index c03a93d..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/url_crowdsec/xss_probe_patterns.txt +++ /dev/null @@ -1,36 +0,0 @@ -foo\ -^/\?Mode=debug -^/\?controller=auth\&action=login -^/\?controller=user\&action=login -^/\?page=login -^/\?page=login\&action=about -^/\?page=shop/cart\&func=cartAdd\&product_id=\' -^/\?q=0\&l=0 -^/\?view=home -^/\?wicket\:bookmarkablePage=\:com\.videoiq\.fusion\.camerawebapi\.ui\.pages\.LoginPage -^/AChecker/checker/index\.php -^/AContent/home/index\.php -^/AM/index\.php -^/ANT/Lisez\%20moi\.txt -^/ANT/Readme\.txt -^/ANT/news/admin/index\.php -^/APG/info/about -^/ATutor/login\.php -^/About\.html -^/Account/LogIn -^/AdminWeb/ -^/Admin_files/ -^/Administration/ -^/AdvWebAdmin/ -^/Agent/ -^/Agents/ -^/Album/ -^/AlbumArt_/ -^/AnimaGallery/index\.php -^/Ant/Lisez\%20moi\.txt -^/Ant/Readme\.txt -^/Ant/news/admin/index\.php -^/ApplicationEngine/ -^/Applications/dellUI/Strings/EN_about_hlp\.htm -^/ArticleSetup/upload/index\.php -^/Auth\.action -^/Autodiscover -^/Autodiscover/Autodiscover\.xml -^/Backburner/ -^/BigTree/admin/login/ -^/BigTree/site/index\.php/admin/login/ -^/BizTalkServerDocs/ -^/BizTalkServerRepository/ -^/BizTalkTracking/ -^/Boutiques/ -^/CCC/login\.html -^/CFIDE/administrator/index\.cfm -^/CFIDE/probe\.cfm -^/CGI/Java/Serviceability\?adapter=device\.statistics\.device -^/CHANGELOG -^/CHANGES -^/CHANGES\.md -^/CMR/web/login -^/CRM/index\.php -^/CS/ -^/CVS/ -^/CVS/Entries -^/ChangeLog -^/ClearBudget/db/budget\.sqlite -^/ClipBucket/admin_area/login\.php -^/ConsoleHelp/default\.jsp -^/ControlManager/default\.htm -^/Corporate/ -^/Count\.cgi\?align=topcenter -^/CruxCMS/login\.php -^/CruxCMS300/manager/login\.php -^/CruxPA200/Manager/login\.php -^/CruxPA200/login\.php -^/CultBooking/login -^/DB4Web/ -^/DMC/titleBar\.php -^/DMR/ -^/DPI11F/index\.php -^/DVWA/ -^/DeepSleep\.js -^/Default\.aspx -^/DevMgmt/ProductConfigDyn\.xml -^/Device/Device\.html -^/DeviceInfo -^/Device_Information\.htm -^/DigitalScribe/login\.php -^/DigitalScribe/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/DocuColor/ -^/Documentation/misc/about\.jsp -^/Dotproject/index\.php -^/DroboAccess/ -^/DroboPix/ -^/ECP -^/EWS -^/EWS/Exchange\.asmx -^/EWS/Services\.wsdl -^/English\.js -^/EspoCRM/index\.php -^/Esprit/public/Login\.jsp -^/Exchange -^/ExoPHPDesk/index\.php -^/F3Site/SYSTEM/index\.php -^/F3Site/index\.php -^/FCKeditor/_whatsnew\.html -^/FCKeditor/fckeditor\.js -^/FCMS/index\.php -^/FPWS/index\.php -^/FileSharing/index\.php -^/FinderView\-master/index\.html -^/FinderView/index\.html -^/FlashChat/index\.php -^/FreeDirectory/index\.php -^/GW5/GWWEB\.EXE\?GET\-CONTEXT\&HTMLVER=AAA -^/GW5/GWWEB\.EXE\?HELP=bad\-request -^/GWWEB\.EXE\?GET\-CONTEXT\&HTMLVER=AAA -^/GWWEB\.EXE\?HELP=bad\-request -^/GXApp/ -^/Gallery/index\.php -^/GetSimple/index\.php -^/Gigs/index\.php -^/Gnat\-TGP/gnat/admin/index\.php -^/HB/ -^/HBTemplates/ -^/HNAP1 -^/HNAP1/ -^/HTMLEditor/_whatsnew\.html -^/HTMLEditor/fckeditor\.js -^/Hastymail2/index\.php -^/IBMWebAS/ -^/IEM/admin/index\.php -^/ILIAS/setup/setup\.php -^/INDEX\.HTM -^/INVOHOST/site\.php -^/IlohaMail/index\.php -^/IlohaMail/source/index\.php -^/Index2\.php -^/Info\.live\.htm -^/Install -^/Install/ -^/Install/InstallWizard\.aspx -^/IntraMaps/ApplicationEngine/ -^/IntraMaps/applicationengine/ -^/IntraMaps70/ApplicationEngine/ -^/IntraMaps70/applicationengine/ -^/Istatus\.htm -^/JAG/guestbook\.php -^/JBookIt/ -^/JSPWiki/ -^/JaxCMS/index\.php -^/Kaltura/start/index\.php -^/LCGI -^/Lang/en\-US/common\.js -^/Liferay/ -^/Liferay/web/guest -^/LightNEasy\.php\?do=login -^/Lisez\%20moi\.txt -^/LiveTime/WebObjects/LiveTime\.woa -^/LiveZilla/index\.php -^/Log/ -^/Login -^/Login\.aspx -^/Login\.do -^/Login\.htm -^/Login\.jsp -^/Login\.php -^/Login\?omacmd=getlogin\&page=Login\&managedws=true -^/LoginPage\.do -^/MCshoutBox/shoutbox\.php -^/MNU_access_login_top\.htm -^/Mail/ -^/Main/WebHome -^/ManagerSystem/login\.php -^/MessagingManager/ -^/Microsoft\-Server\-ActiveSync -^/Microsoft\-Server\-ActiveSync/default\.css -^/Microsoft\-Server\-ActiveSync/default\.eas -^/Moin/SystemInfo -^/Monsta\-FTP\-master/ -^/Msword/ -^/MyBB/index\.php -^/MySQLDumper/index\.php -^/NSearch/ -^/Nagios/login\.php -^/Nakid/index\.php -^/NetDynamic/ -^/NetDynamics/ -^/News/ -^/Nextcloud/status\.php -^/NmConsole/ -^/NmConsole/User/LogIn\?AspxAutoDetectCookieSupport=1 -^/NodeBB/ -^/NonExistent1369180409/ -^/NoticeBoardPro/index\.php -^/OAB -^/OPAC\-kpwinSQL/index\.php -^/OPAC/index\.php -^/OPT127MAX/opt/index\.php\?OPT_Session=VT_Req -^/OTRS/index\.pl -^/OTRS/installer\.pl -^/OTRS/public\.pl -^/OWA -^/Odoo/web/login -^/Open\-Xchange/ox\.html -^/OpenVASVT445166832\.html -^/Openmairie_Annuaire/index\.php -^/Openmairie_Annuaire/login\.php -^/Openmairie_Catalogue/doc/catalogue\.html -^/Openmairie_Cimetiere/index\.php -^/Openmairie_Cimetiere/login\.php -^/Openmairie_Cominterne/index\.php -^/Openmairie_Cominterne/login\.php -^/Openmairie_Courrier/index\.php -^/Openmairie_Courrier/login\.php -^/Openmairie_Foncier/index\.php -^/Openmairie_Foncier/login\.php -^/Openmairie_Planning/index\.php -^/Openmairie_Planning/login\.php -^/Openmairie_Presse/index\.php -^/Openmairie_Presse/login\.php -^/Openmairie_RegistreCIL/index\.php -^/Openmairie_RegistreCIL/login\.php -^/OperaLogin/Welcome\.do -^/Orbis/admin/login\.php -^/Overview\.html -^/OwnCloud/status\.php -^/PDG_Cart/ -^/PHPBazar/index\.php -^/PHPMailer\-master/README -^/PHPMailer\-master/README\.md -^/PHPMailer\-master/composer\.json -^/PHPMailer\-master/extras -^/PHPMailer\-master/lib/composer\.json -^/PHPMailer/README -^/PHPMailer/README\.md -^/PHPMailer/composer\.json -^/PHPMailer/extras -^/PHPMailer/lib/composer\.json -^/PHPMyAdmin/ -^/PHPMyAdmin/index\.php -^/PHPSurveyor/index\.php -^/PHPmongoDB/index\.php -^/PRESENTATION/ADVANCED/FORCE_PASSWORD/TOP\?accsessmethod=0 -^/PRESENTATION/HTML/TOP/INDEX\.HTML -^/PassTrixMain\.cc -^/PhPmyAdMin/index\.php -^/Phpunity_Newsmanager/tmpl/news_main\.htm -^/PivotX/index\.php -^/Piwigo/index\.php -^/Plone/ -^/Portal/Portal\.mwsl\?PriNav=Ident -^/Portal0000\.htm -^/PostNuke/ -^/PostNuke/docs/distribution/tour_page1\.htm -^/PostNuke/index\.php -^/PowerShell -^/ProjectSend/index\.php -^/Public/index\.php -^/PulseCMS/ -^/PulseCMS/admin/index\.php -^/PulseCMS/index\.php -^/QConvergeConsole/ -^/RCS/ -^/README -^/README\.md -^/README\.php -^/README\.txt -^/README/ -^/RELEASE\-NOTES\.txt -^/RELEASE_NOTES\.txt -^/ROADS/ -^/RSAarcher/Default\.aspx -^/Readme\.txt -^/Readme/ -^/ReleaseNotes\.txt -^/Remote/ -^/Rpc -^/SMS/index\.php -^/SOGo/ -^/SOPlanning/www/ -^/SPF/shop\.cgi -^/SQLiteManager/main\.php -^/SStc/index\.html -^/Samsara/modules/news/index\.php -^/SecretServer/Login\.aspx -^/Security/login -^/SeoPanel/ -^/ServerAdmin/UserLogin\.jsp -^/ShoreWareDirector/ -^/ShowCenter/SettingsBase\.php\?Skin=\foo\ -^/Siestta/ -^/SilverStream -^/SilverStream/ -^/SilverStream/Meta/Tables/\?access\-mode=text -^/SimpNews/news\.php -^/SimpleID/index\.php -^/SimpleID/www/index\.php -^/Site/Pages/login\.aspx -^/SiteEngine/index\.php -^/SiteScope/htdocs/SiteScope\.html -^/Spheric/admin/index\.php -^/Spheric/index\.php -^/Stats/ -^/StoreDB/ -^/Subscribe/index\.php -^/SugarCRM/ -^/SugarCRM/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/SuiteCRM/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/SwiftMailer/ -^/SwiftMailer/CHANGES -^/SwiftMailer/README -^/SwiftMailer/composer\.json -^/SwiftMailer/lib/ -^/SwiftMailer/lib/CHANGES -^/SwiftMailer/lib/README -^/SwiftMailer/lib/composer\.json -^/SystemInfo -^/TCExam/public/code/index\.php -^/Taskfreak/login -^/Taskfreak/login\.php -^/TeamPass/index\.php -^/Templates/ -^/ToDo/ -^/TomatoCart/index\.php -^/TopAccess/Device/Device\.htm -^/TrackIT/Account/LogIn -^/TrackIt/Account/LogIn -^/TrackItWeb/Account/LogIn -^/Tribisur/scripts\.php -^/Truc/login\.php -^/UI/ -^/UI/Login\.jsp -^/UI/login -^/UseBB/index\.php -^/Vanilla113rc1/index\.php -^/Vanilla117/index\.php -^/Vanilla118/index\.php -^/WEB\-INF/web\.xml -^/WEB\-INf\./web\.xml -^/WS_FTP\.INI -^/WS_FTP\.ini -^/WSsamples/ -^/WW/cwiki\.apache\.org/WW/guides\.html -^/WW/cwiki\.apache\.org/WW/home\.html -^/WackoWiki -^/WeBid/index\.php -^/Web/\? -^/WebBank/ -^/WebCalendar/ -^/WebCalendar/login\.php -^/WebConfig/ -^/WebConsole/Login\.jsp -^/WebDB/ -^/WebServiceImpl/axis2\-admin/ -^/WebServiceImpl/axis2\-web/index\.jsp -^/WebServiceImpl/index\.jsp -^/WebServiceImpl/services/Version/getVersion -^/WebServiceImpl/services/Version\?method=getVersion -^/WebServiceImpl/services/non\-existent -^/WebShop/ -^/WebSiteAdmin/index\.php -^/WebTrend/ -^/Web_store/ -^/Welcome\.do -^/WideImage\-master/composer\.json -^/WideImage\-master/doc/index\.html -^/WideImage\-master/index\.php -^/WikiHome -^/Wiky/index\.php -^/WinSCP\.ini -^/XSL/ -^/ZeusCMS/index\.php -^/Zeuscart/index\.php -^/Zikula_Core/ -^/Zikula_Core/docs/distribution/tour_page1\.htm -^/Zikula_Core/index\.php -^/_ScriptLibrary/ -^/_backup/ -^/_derived/ -^/_errors/ -^/_fpclass/ -^/_mem_bin/ -^/_notes/ -^/_objects/ -^/_old/ -^/_pages/ -^/_passwords/ -^/_private/ -^/_profiler/latest -^/_scripts/ -^/_sharedtemplates/ -^/_tests/ -^/_themes/ -^/_top\.html -^/_whatsnew\.html -^/a/ -^/a2billing/Public/index\.php -^/a2billing/admin/Public/index\.php -^/a2billing/index\.php -^/aardvarktopsites/index\.php -^/about -^/about\-show\.do -^/about\.html -^/about\.php -^/about/ -^/abtpportal/includes/esqueletos/skel_null\.php -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/abtpportal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/acceso/ -^/access/ -^/accessset\.html -^/accesswatch/ -^/acciones/ -^/account/ -^/account/index\.php -^/account/login -^/account/login\.php -^/account/login/ -^/accounting/ -^/accounting/control/main -^/accounting/control/main/ -^/accounts/inc/include\.php\?language=0\&lang_settings\[0\]\[1\]=http\://xxxxxxxxxxxxxxx/openvasvt/ -^/accounts/login/ -^/achievo/index\.php -^/acp/index\.php -^/activex/ -^/activities/control/main -^/actuator/gateway/routes -^/adaptbb/index\.php -^/adaptcms/sitemap\.xml -^/addrbook/index\.php -^/address/index\.php -^/addressbook/index\.php -^/adm/ -^/adm/wizard\.asp -^/admcgi/ -^/admentor/ -^/admin -^/admin\#/mode -^/admin\-bak/ -^/admin\-ng/ -^/admin\-ng/login\.html -^/admin\-old/ -^/admin\.back/ -^/admin\.php -^/admin/ -^/admin/Public/index\.php -^/admin/ckeditor/CHANGES\.md -^/admin/ckeditor/ckeditor\.js -^/admin/config\.php -^/admin/doc/README\.txt -^/admin/fckeditor/_whatsnew\.html -^/admin/fckeditor/fckeditor\.js -^/admin/htmleditor/_whatsnew\.html -^/admin/htmleditor/fckeditor\.js -^/admin/index\.html\?Language=0 -^/admin/index\.jsp -^/admin/index\.php -^/admin/index\.php\?login -^/admin/install -^/admin/install\.php -^/admin/lib/gradient/gradient\.php -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/admin/lists/admin/\?page=about -^/admin/login\-default\.do -^/admin/login\.action -^/admin/login\.html -^/admin/login\.jsp -^/admin/login\.php -^/admin/login/ -^/admin/moderation\.php -^/admin/password_check_token\.php\?f_email=1\&token=\%22\%3E\%3Cscript\%3Ealert\%28/xss\-test/\%29\;\%3C/script\%3E -^/admin/public/index\.html -^/admin/setup\.php -^/admin_/ -^/admin_area/login\.php -^/admin_login\.html -^/admin_panel/index\.php -^/adminer\.php -^/adminer/ -^/adminer/adminer\.php -^/adminer/editor\.php -^/administration/ -^/administration/profiles\.php -^/administrator/ -^/adminuser/ -^/adminweb/ -^/admisapi/ -^/ads/admin/index\.php -^/ads/www/admin/index\.php -^/adserver/admin/index\.php -^/adserver/www/admin/index\.php -^/aeNovo1\.mdb -^/aeromail/index\.php -^/af\.cgi\?_browser_out=\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2Fetc\%2Fpasswd -^/afdrukken\.php -^/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/aflog/Readme\.txt -^/afterlogic/ -^/ag\.cgi -^/ag\.exe -^/ag/ang/index\.php -^/ag/index\.php -^/agentes/ -^/aihs/index\.php -^/ajaxplorer/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/ajaxportal/index\.php -^/album/index\.php -^/alerts\.php -^/algosec/suite/login\.html -^/alienform\.cgi\?_browser_out=\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2F\.\|\.\%2Fetc\%2Fpasswd -^/am/index\.php -^/amazon/control/main -^/amserver/UI/Login\.jsp -^/analog/ -^/analytics/ -^/analytics/index\.php -^/analytics/index\.php\?owa_do=base\.loginForm -^/ang/ang/index\.php -^/ang/index\.php -^/anguestbook/ang/index\.php -^/anguestbook/index\.php -^/anima/index\.php -^/ans\.pl\?p=\.\./\.\./\.\./\.\./\.\./usr/bin/id\|\&blah -^/ans/ans\.pl\?p=\.\./\.\./\.\./\.\./\.\./usr/bin/id\|\&blah -^/ant/Lisez\%20moi\.txt -^/ant/Readme\.txt -^/ant/news/admin/index\.php -^/anthill/ -^/ap/control/main -^/ap/control/main/ -^/apache\-wicket/index\.html -^/apache/ -^/apache/openmeetings/signin -^/apachesolr/ -^/apage/lcgi\-bin -^/apc\.php -^/apc/apc\.php -^/apc/apcinfo\.php -^/apc/apcu\.php -^/apc/index\.php -^/apcinfo\.php -^/apcu\.php -^/aphpkb/index\.php -^/api/ -^/api/appconfiguration -^/api/config/v1/version/image -^/api/index\.html -^/api/v1\.0/ -^/api/v1/ -^/api/v1/appconfiguration -^/api/v1/overview -^/api/v2\.0/ -^/api/v2/ -^/api/v2/appconfiguration -^/api/v3\.0/ -^/api/v3/ -^/api/v3/appconfiguration -^/api/v4\.0/ -^/api/v4/ -^/api/v5\.0/ -^/api/v5/ -^/api/version -^/apiclient/ember/Login\.jsp -^/apidocs/index\.html -^/apoll/admin/login\.php -^/app -^/app\.php -^/app/ -^/app/kibana -^/app/kibana/ -^/app/ui/ -^/app/ui/login\.jsp -^/appconfiguration -^/applets/ -^/appletvid\.html -^/appliance/ -^/application/ -^/application/login/login\.html -^/applicationengine/ -^/applications/ -^/apps/ -^/appsuite/apps/io\.ox/help/style\.less -^/aproxengine/engine/inc/version\.info -^/aps/Login\.do -^/ar/ -^/ar/control/main -^/ar/control/main/ -^/arcgis/rest/services/ -^/archiva/index\.action -^/archive/ -^/archives/ -^/arsc/base/index\.php -^/arsys/shared/login\.jsp -^/artifactory/webapp/home\.html\?0 -^/artmedic_links5/index\.php\?id=index\.php -^/asbru/index\.jsp -^/asp/ -^/aspnet_client -^/aspx/ -^/assetmaint/control/main -^/assetmaint/control/main/ -^/asterisk/control/main -^/atc/ -^/aterm_httpif\.cgi -^/atmail/index\.php -^/atmail/index\.php/admin -^/atsphp/index\.php -^/atutor/login\.php -^/audistat/index\.php -^/aurora/ -^/auth -^/auth/ -^/auth/login -^/auth/login\?redirect=/ -^/auth\?next=\%2F -^/authadmin/ -^/authenticate/login -^/authenticate/login\.php -^/authentication/ -^/authentication/login -^/authentication_index\.php\?PGV_BASE_DIRECTORY=http\://xxxxxxx/ -^/avarcade/index\.php -^/avarcade/upload/index\.php -^/aw/ -^/awstats\-cgi/ -^/awstats\-cgi/awstats\.pl\?framename=mainright -^/awstats\.pl\?framename=mainright -^/awstats/ -^/awstats/awstats\.pl\?framename=mainright -^/awstats/cgi\-bin/ -^/awstats/cgi\-bin/awstats\.pl\?framename=mainright -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/axdcms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/axis\-cgi/prod_brand_info/getbrand\.cgi -^/axis/admin/index\.php -^/axis/index\.jsp -^/axis/services/Version\?method=getVersion -^/axis/services/non\-existent -^/axis2\-admin/ -^/axis2\-web/index\.jsp -^/axis2/axis2\-admin/ -^/axis2/axis2\-web/index\.jsp -^/axis2/services/Version/getVersion -^/ayuda/ -^/b/ -^/b2\-include/ -^/b2epms/index\.php -^/b2evolution/admin\.php -^/b2evolution/blogs/admin\.php -^/b2evolution/evoadm\.php -^/b2evolution/index\.php -^/b2evolution/login\.php -^/back/ -^/backend/ -^/backend/plugin/Registration/index\.php -^/backend/plugin/Registration/index\.php\?confirm=\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/backend/start/index\.php -^/backup/ -^/backups/ -^/bacula\-web/ -^/bak/ -^/bamboo/userlogin\!default\.action -^/bamboo/userlogin\!doDefault\.action -^/banca/ -^/banco/ -^/bands/index\.php -^/bank/ -^/banner/ -^/banner01/ -^/banners/ -^/base/ -^/base/index\.php -^/basic_status -^/basicset\.html -^/basilix\.php\?is_ssl=1 -^/basilix/basilix\.php\?is_ssl=1 -^/batavi/admin/index\.php\?login -^/batch/ -^/bb\-dnbd/ -^/bblog/index\.php -^/bbv/ -^/bca\-networks/main/displayTop\.do -^/bdata/ -^/bdatos/ -^/bds/Login\.do -^/berta/engine/login\.php -^/berta/login\.php -^/beta/ -^/betsy/ress\.php -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/betsy/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/bi/control/main -^/bi/control/main/ -^/bid/index\.php -^/bigtree/admin/login/ -^/bigtree/site/index\.php/admin/login/ -^/bill/index\.php -^/billpay/ -^/bin/ -^/bin/view/TWiki/WebHome -^/bin/view/foswiki/WebHome -^/birt/control/main -^/birt/control/main/ -^/bitbucket/login -^/bitweaver/users/login\.php -^/bitweaver/wiki/index\.php -^/blackcat/backend/start/index\.php -^/blackcatcms/backend/start/index\.php -^/blob\.php -^/blob/blob\.php -^/blog/ -^/blog/admin/moderation\.php -^/blog/blob\.php -^/blog/blogengine/ -^/blog/database\.sql -^/blog/feed/ -^/blog/index\.php -^/blog/installer\-backup\.php -^/blog/installer\.php -^/blog/login\.php -^/blog/readme\.html -^/blog/wp\-links\-opml\.php -^/blog/wp\-login\.php -^/blogengine/ -^/blogs/admin\.php -^/boadmin/ -^/board/ -^/board/admin\.php -^/board/db/users\.dat -^/board/index\.php -^/board/upload/index\.php -^/board/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/boards/ -^/boards/index\.php -^/bolt/field/index\.php -^/bolt/index\.php -^/boltwire/field/index\.php -^/boltwire/index\.php -^/bonita/login\.jsp -^/booked/Web/\? -^/boot/ -^/box/shoutbox\.php -^/brainkeeper/index\.php -^/brainkeeper_enterprise_wiki/index\.php -^/breakcal/calendar\.cgi -^/brightmail/viewLogin\.do -^/browser/ -^/browser/dist/ -^/browser/dist/admin/ -^/btauxdir/ -^/bug/ -^/bugport/php/index\.php -^/bugs/ -^/bugs/index\.cgi -^/bugs/index\.php -^/bugs/login_page\.php -^/bugtracker/index\.php -^/bugtracker/login_page\.php -^/bugzilla/ -^/bugzilla/index\.cgi -^/buildbot/about -^/business/ -^/buy/ -^/buynow/ -^/bw/users/login\.php -^/bw/wiki/index\.php -^/c/ -^/cPassMan/index\.php -^/cPcreator/index\.php -^/cache\-stats/ -^/cache/apc\.php -^/cache/apcinfo\.php -^/cache/apcu\.php -^/cache/index\.php -^/cacti/ -^/cacti/index\.php -^/caja/ -^/calendar\.php -^/calendar\.php\?year=2004\&month=\foo\\&day=01 -^/calendar/index\.php -^/calendar/login\.php -^/calendarix/calendar\.php -^/campsite/admin/login\.php -^/campsite/implementation/site/admin/login\.php -^/campsite/implementation/site/index\.php -^/campsite/index\.php -^/campsite/src/admin/login\.php -^/campsite/src/index\.php -^/candid/htdocs/index\.php -^/candid/index\.php -^/carbon/product/about\.html -^/card/ -^/cards/ -^/cart\.php -^/cart/ -^/cart/admin/login\.php -^/cart/index\.php -^/cas\-server\-webapp/login -^/cas/login -^/cash/ -^/caspsamp/ -^/catalog\.php\?action=category_show\&id=\' -^/catalog/ -^/catalog/control/main -^/catalog/control/main/ -^/catalog/index\.php -^/catalog/ssl_check\.php -^/caucho\-status -^/cb/db/budget\.sqlite -^/cb/login -^/cb_install/ -^/cbag/ag\.cgi -^/cbag/ag\.exe -^/cbdb/db\.exe -^/cbgrn/grn\.exe -^/cbi\-bin/ -^/cbmw/mw\.exe -^/ccard/ -^/ccards/ -^/ccmadmin/showHome\.do -^/ccms/afdrukken\.php -^/ccms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/ccmuser/showHome\.do -^/cd\-cgi/ -^/cd/ -^/cdn\-cgi/trace -^/cdrom/ -^/ce_html/ -^/cedm/index\.php -^/centreon/index\.php -^/centreon/install/setup\.php -^/cert/ -^/certificado/ -^/certificate/ -^/cfappman/ -^/cfdocs/ -^/cfide/ -^/cgi\-auth/ -^/cgi\-bim/ -^/cgi\-bin/ -^/cgi\-bin/MANGA/index\.cgi -^/cgi\-bin/authLogin\.cgi -^/cgi\-bin/cbag/ag\.cgi -^/cgi\-bin/cbag/ag\.exe -^/cgi\-bin/cgi\?req=twz -^/cgi\-bin/chklogin\.cgi -^/cgi\-bin/chksession\.cgi -^/cgi\-bin/config\.cgi -^/cgi\-bin/dada/mail\.cgi -^/cgi\-bin/dna/password\.cgi -^/cgi\-bin/getServerValue\.cgi\?id=2 -^/cgi\-bin/get_status\.cgi -^/cgi\-bin/home\.ha -^/cgi\-bin/html/login\.html -^/cgi\-bin/koha/opac\-search\.pl -^/cgi\-bin/login -^/cgi\-bin/login\.cgi -^/cgi\-bin/login\.cgi\?lang=en\&src=AwLoginDownload\.html -^/cgi\-bin/login\.html -^/cgi\-bin/luci -^/cgi\-bin/mapserv\.exe\?map= -^/cgi\-bin/mapserv\?map= -^/cgi\-bin/mt/mt\.cgi -^/cgi\-bin/openwebmail/openwebmail\.pl -^/cgi\-bin/pki/pub/pki\?cmd=serverInfo -^/cgi\-bin/pub/pki\?cmd=serverInfo -^/cgi\-bin/run\-cvstrac/index -^/cgi\-bin/status\.xml -^/cgi\-bin/top\.cgi -^/cgi\-bin/view/TWiki/WebHome -^/cgi\-bin/vmtadmin\.cgi\?callType=ACTION\&actionType=VERSIONS -^/cgi\-bin/web_index\.cgi\?lang=en\&src=AwWelcome\.html -^/cgi\-bin/webproc -^/cgi\-bin2/ -^/cgi\-csc/ -^/cgi\-isapi/ -^/cgi\-lib/ -^/cgi\-local/ -^/cgi\-mod/index\.cgi -^/cgi\-nmis4/nmiscgi\.pl -^/cgi\-nmis8/nmiscgi\.pl -^/cgi\-scripts/ -^/cgi\-shl/ -^/cgi\-shop/ -^/cgi\-sys/ -^/cgi\-weddico/ -^/cgi\-win/ -^/cgi/ -^/cgi/about -^/cgi/lang/en/login\.xsl -^/cgibin/ -^/cgicso\?query=AAA -^/cgilib/ -^/cgis/ -^/cgiscripts/ -^/cgit/ -^/cgiwin/ -^/chamilo/index\.php -^/changelog -^/changelog\.txt -^/chassis/config/GeneralChassisConfig\.html -^/chat/ -^/chat/base/index\.php -^/chat/chat/setup\.php3\?next=1 -^/chat/index\.php -^/chat/setup\.php3\?next=1 -^/check_mk/login\.py -^/checker/index\.php -^/chillyCMS/index\.php -^/chipmunk/index\.php -^/chklogin\.cgi -^/chksession\.cgi -^/chora/README -^/chora/cvs\.php -^/chora/horde/services/help/\?module=chora\&show=about -^/ckeditor\.js -^/ckeditor/CHANGES\.md -^/ckeditor/ckeditor\.js -^/claroline/claroline/install/index\.php -^/class/ -^/classes/ -^/classifieds/Site_Admin/admin\.php\ -^/clearsite/about\.php -^/clicknet/index\.php -^/clicknetcms/index\.php -^/client/ -^/cliente/ -^/clientes/ -^/clientscript/ckeditor/CHANGES\.md -^/clientscript/ckeditor/ckeditor\.js -^/clientscript/fckeditor/_whatsnew\.html -^/clientscript/fckeditor/fckeditor\.js -^/clipbucket/admin_area/login\.php -^/cloud/status\.php -^/cluster/cluster -^/clustercontrol/users/login -^/clwarn\.cgi -^/cm/ -^/cmf/login -^/cmk/check_mk/login\.py -^/cmp/ -^/cmplatform/showHome\.do -^/cms/ -^/cms/\.htaccess -^/cms/\?view=home -^/cms/ChangeLog -^/cms/README -^/cms/README\.php -^/cms/admin/ -^/cms/admin/index\.php -^/cms/admin/login\.php -^/cms/admin/login/ -^/cms/admin/moderation\.php -^/cms/afdrukken\.php -^/cms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/cms/backend/start/index\.php -^/cms/cms/website\.php\?id=/de/index\.htm\&admin=login -^/cms/complete\-modules/modules/forcedownload/force_download\.php -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/boot\.ini -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/etc/passwd -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/windows/win\.ini -^/cms/complete\-modules/modules/forcedownload/force_download\.php\?filename=/winnt/win\.ini -^/cms/data/nanoadmin\.php -^/cms/e107_admin/admin\.php -^/cms/engine/inc/version\.info -^/cms/htaccess\.txt -^/cms/includes/js/mambojavascript\.js -^/cms/indeks\.php\?db=frontpage -^/cms/index\.html -^/cms/index\.php -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/cms/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/cms/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/cms/index\.php\?controller=login\&action=showlogin -^/cms/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/cms/index\.php\?mode=administration -^/cms/index\.php\?module=users\&action=user\&command=login_page -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/login\.php -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/news\.php -^/cms/nonexistent\.php -^/cms/ress\.php -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/cms/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/cms/ru/ -^/cms/site/index\.php/admin/login/ -^/cms/sitemap\.xml -^/cms/symphony/ -^/cms/system/login\.php -^/cms/templates/system/css/editor\.css -^/cms/typo3/index\.php -^/cms/typo3/sysext/opendocs/composer\.json -^/cms/typo3/sysext/recordlist/composer\.json -^/cms/typo3/sysext/sys_note/composer\.json -^/cms/typo3/sysext/t3editor/composer\.json -^/cms/typo3_src/ChangeLog -^/cms/update\.php -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/cms/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/cms/website\.php\?id=/de/index\.htm\&admin=login -^/cmsample/ -^/cmscout/index\.php -^/cmsmadesimple/index\.php -^/cmssite/control/main -^/cmssite/control/main/ -^/cncms/index\.php -^/cobalt\-images/ -^/cobbler_web -^/code/ -^/codoforum/index\.php -^/coldusr/index\.cfm -^/collabtive/index\.php -^/command/inquiry\.cgi\?inqjs=sysinfo -^/comments/ -^/common/ -^/commoncgi/servlet/CCGIServlet\?ApHost=PDT_InterScan_NT\&CGIAlias=PDT_InterScan_NT\&File=logout\.htm -^/communicator/ -^/community/ -^/community/index\.php -^/community/login -^/community/upload/index\.php -^/compactcms/afdrukken\.php -^/compactcms/afdrukken\.php\?page=\%22\%3E\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/company/ -^/complete\-modules/modules/forcedownload/force_download\.php -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/boot\.ini -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/etc/passwd -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/windows/win\.ini -^/complete\-modules/modules/forcedownload/force_download\.php\?filename=/winnt/win\.ini -^/composer\.json -^/composer\.json\-dist -^/composer\.json\.dist -^/composer\.lock -^/compra/ -^/compras/ -^/compressed/ -^/conecta/ -^/conf/ -^/conference/roschedule\.php -^/config\-browser/index -^/config\-browser/index\.action -^/config/ -^/config/NonExistent\.html -^/config/help\.cgi -^/configurations\.do -^/confluence/login\.action -^/connect/ -^/console/ -^/console/faces/jsp/login/BeginLogin\.jsp -^/console/login/LoginForm\.jsp -^/console/logon\.jsp -^/contao/install -^/contao/install\.php -^/content\.html -^/content\.php -^/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/content/ -^/content/control/main -^/content/control/main/ -^/content/nonexistant1331069233814248391545649413\.mp3 -^/content/smarthome\.php -^/continuum/about\.action -^/control/main -^/control/main/ -^/controllerinjectex/control/main -^/controlpanel/ -^/cookbook/index\.php -^/cool/ -^/cool/adminws/ -^/coppermine/login\.php -^/copyright/info\.js -^/core/ -^/core/orionSplashScreen\.do -^/coregui/login -^/corp/ -^/corporate/webpages/login\.jsp -^/correo/ -^/counter/ -^/counter/index\.php -^/courier/ -^/cp/index\.php -^/cpassman/index\.php -^/cpqlogin\.htm -^/cps/Login -^/cqweb/login -^/crawler/html/infoen\.htm -^/crawltrack/html/infoen\.htm -^/cre\-loaded/index\.php -^/cre/index\.php -^/credit/ -^/crm/index\.php -^/crmsfa/control/main -^/crmsfa/control/main/ -^/cron/ -^/crons/ -^/crowd/console/login\.action -^/crucible/ -^/crypt/cryptographp\.inc\.php\?cfg=verifier\.php\&sn=PHPSESSID\& -^/crypto/ -^/cs\-cart/ -^/cs/ -^/cs/login/login\.htm -^/cscart/ -^/csr/ -^/css/ -^/csvn/login/auth -^/cubecart/index\.php -^/cucm/showHome\.do -^/cuenta/ -^/cuentas/ -^/cultbooking/login -^/currency/ -^/custom_lang/English\.txt -^/customers/ -^/customviews/image/login_bg/ -^/cutenews/index\.php -^/cvs\.php -^/cvstrac/index -^/cvsweb\.cgi/ -^/cvsweb/ -^/cybercash/ -^/d/ -^/d/users/sign_in -^/dana\-cached/ -^/dana\-cached/sc/ -^/dana\-cached/setup/ -^/dana\-na/ -^/dana\-na/auth/ -^/dana\-na/download/ -^/dana\-na/meeting/ -^/dana/ -^/dana/fb/ -^/dana/fb/smb/ -^/darkportal/ -^/dashboard\.html -^/dashboard/ -^/dat/ -^/data/ -^/data/adminusers\.csv -^/data/nanoadmin\.php -^/database\.sql -^/database/ -^/database/_sessions/ -^/databases/ -^/datafiles/ -^/dataimport/control/main -^/dato/ -^/datos/ -^/dav/ -^/db\.exe -^/db/ -^/db/budget\.sqlite -^/db/users\.dat -^/dbase/ -^/dbase/aeNovo1\.mdb -^/dce/rest/settings/version -^/dcforum/ -^/ddem/login/ -^/ddreport/ -^/ddrint/ -^/de/index\.html -^/default\.cfm\?Mode=debug -^/default\.cfml\?Mode=debug -^/default\.html -^/deluxebb/index\.php -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/demium/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/demo/ -^/demo/demo/phpThumb\.demo\.demo\.php -^/demo/index\.php -^/demoauct/ -^/demomall/ -^/demos/ -^/deployment\-config\.json -^/deploymentmanager/index\.jsp -^/design/ -^/desknow/index\.html -^/desktop\.php -^/desktop/container/ -^/dev/ -^/devel/ -^/development/ -^/deviceinfo\.htm -^/dezie/db\.exe -^/dfshealth\.html -^/dfshealth\.jsp -^/dialup/ -^/dialup/content\.html -^/dialup_admin/ -^/didiwiki/WikiHome -^/dienstplan/\?page=login\&action=about -^/digitalscribe/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/diglib/ -^/dir/ -^/directory/ -^/directory/index\.php -^/directorymanager/ -^/discloser/login\.php -^/discoverer/viewer -^/discuz/index\.php -^/dist/ -^/dist/admin/ -^/diycms/diy/index\.php -^/dl/ -^/dll/ -^/dm\-filemanager/login\.php -^/dm/ -^/dm/index\.php -^/dmanager/php/login\.php -^/dmf/login\.php -^/dms/ -^/dms/index\.php -^/dms0/ -^/dmsdump/ -^/dns/index\.php -^/do/view/TWiki/WebHome -^/doc\-html/ -^/doc/ -^/doc/catalogue\.html -^/doc/index\.html -^/doc/script/config/system/channelDigital\.js -^/doc/xml/en/Login\.xml -^/doc/xml/en/Preview\.xml -^/doc1/ -^/docman/admin\.php -^/docman/index\.php -^/docs/ -^/docs/RELEASE\-NOTES\.txt -^/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/docs/WW/cwiki\.apache\.org/WW/home\.html -^/docs/changelog\.html -^/docs/distribution/tour_page1\.htm -^/docs/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/docs/docs/WW/cwiki\.apache\.org/WW/home\.html -^/docs/docs/index\.html -^/docs/docs/struts2\-core\-apidocs/help\-doc\.html -^/docs/docs/struts2\-core\-apidocs/index\-all\.html -^/docs/docs/struts2\-core\-apidocs/overview\-summary\.html -^/docs/index\.html -^/docs/index\.php -^/docs/readme\.txt -^/docs/struts2\-core\-apidocs/help\-doc\.html -^/docs/struts2\-core\-apidocs/index\-all\.html -^/docs/struts2\-core\-apidocs/overview\-summary\.html -^/docs1/ -^/document/ -^/documentation\.html -^/documents/ -^/docushare/dsweb/HomePage -^/doesnt_exist/ -^/dokeos/ -^/dokeos/index\.php -^/doku\.php -^/dokuwiki/doku\.php -^/dokuwiki/feed\.php -^/dolibarr/htdocs/index\.php -^/dolibarr/index\.php -^/dolph/administration/profiles\.php -^/dolph/index\.php -^/dolphin/administration/profiles\.php -^/dolphin/index\.php -^/domainmod/CHANGELOG -^/domainmod/index\.php -^/domcfg\.nsf -^/dorg/admin_panel/index\.php -^/dotAdmin/api/appconfiguration -^/dotAdmin/api/v1/appconfiguration -^/dotAdmin/api/v2/appconfiguration -^/dotAdmin/api/v3/appconfiguration -^/dotAdmin/appconfiguration -^/dotAdmin/application/login/login\.html -^/dotAdmin/html/portal/login\.jsp -^/dotCMS/api/appconfiguration -^/dotCMS/api/v1/appconfiguration -^/dotCMS/api/v2/appconfiguration -^/dotCMS/api/v3/appconfiguration -^/dotCMS/appconfiguration -^/dotCMS/application/login/login\.html -^/dotCMS/html/portal/login\.jsp -^/dotProject/index\.php -^/dotclear/index\.php -^/dotcms/api/appconfiguration -^/dotcms/api/v1/appconfiguration -^/dotcms/api/v2/appconfiguration -^/dotcms/api/v3/appconfiguration -^/dotcms/appconfiguration -^/dotcms/application/login/login\.html -^/dotcms/html/portal/login\.jsp -^/dotproject/index\.php -^/down/ -^/download/ -^/download_manager/index\.php -^/downloader/ -^/downloads/ -^/dp/login\.xml -^/dpi/index\.php -^/dpi11f/index\.php -^/dragon/login\.jsp -^/drupal/ -^/drupal/update\.php -^/drupal6/ -^/drupal6/update\.php -^/drupal7/ -^/drupal7/update\.php -^/dsc/ -^/dspam/ -^/dsweb/HomePage -^/dswsbobje/axis2\-admin/ -^/dswsbobje/axis2\-web/index\.jsp -^/dswsbobje/index\.jsp -^/dswsbobje/services/Version/getVersion -^/dswsbobje/services/Version\?method=getVersion -^/dswsbobje/services/non\-existent -^/dtlt/home\.html -^/dump/ -^/durep/ -^/dvwa/ -^/dwa/welcome/welcome\.jsp -^/e/ -^/e107/e107_admin/admin\.php -^/e107/login\.php -^/e107/news\.php -^/e107_admin/admin\.php -^/eFront/index\.php -^/eFront/www/index\.php -^/eGroupware/egroupware/login\.php -^/eManager/ -^/eTicket/license\.txt -^/eXtplorer/extplorer\.xml -^/easylog/ -^/ebay/control/main -^/ebay/control/main/ -^/ebaystore/control/main -^/ebaystore/control/main/ -^/ecms/\?view=home -^/ecommerce/admin/login\.php -^/ecommerce/control/main -^/ecommerce/control/main/ -^/ecomseo -^/ecomseo/ -^/ecp -^/editor\.php -^/editor/ -^/editor/CHANGES\.md -^/editor/_whatsnew\.html -^/editor/ckeditor\.js -^/editor/editor\.php -^/editor/fckeditor\.js -^/eforum/ -^/efront/index\.php -^/efront/www/index\.php -^/egroupware/ -^/egroupware/login\.php -^/egw/login\.php -^/ejemplo/ -^/ejemplos/ -^/elFinder/elfinder\.html -^/elastix/index\.php -^/elfinder\.html -^/elfinder/elfinder\.html -^/elite/admin/login\.php -^/em/console/logon/logon -^/email/ -^/email/index\.php -^/emailclass/ -^/employees/ -^/empoyees/ -^/empris/ -^/en\-US/ -^/en\-US/account/login -^/en/ -^/en/index\.html -^/en/neoclassic/login/login -^/eng/js/lang_en_us\.js -^/eng/start/about\.htm -^/eng/status/statprn\.htm -^/eng/status/statprn1\.htm -^/engine/inc/version\.info -^/engine/login\.php -^/enter\.cfm -^/envia/ -^/enviamail/ -^/epesi/index\.php -^/error -^/error/ -^/error500\.html -^/errors/ -^/es/ -^/eshop/admin/ -^/esrs/html/about\.html -^/ess\.do -^/estmt/ -^/etc/ -^/euq\-login -^/evalsmsi\.php -^/evalsmsi/evalsmsi\.php -^/event/index3\.do -^/eventh/index\.php -^/eventhorizon/index\.php -^/evoadm\.php -^/evolution/manager/index\.php -^/example/ -^/example/HelloWorld\.action -^/example/control/main -^/example/control/main/ -^/exampleext/control/main -^/exampleext/control/main/ -^/examples/ -^/exc/ -^/excel/ -^/exchange/ -^/exchange/Home\.do -^/exchange/logon\.asp -^/exe/ -^/exec/ -^/exhibitor/v1/ui/index\.html -^/explorer/index\.php\?action=login -^/exponent/index\.php -^/exponent/index\.php\?controller=login\&action=showlogin -^/exponent/login\.php -^/export/ -^/express/ -^/extensions/FCKeditor/_whatsnew\.html -^/extensions/FCKeditor/fckeditor\.js -^/extensions/FCKeditor/fckeditor/_whatsnew\.html -^/extensions/FCKeditor/fckeditor/fckeditor\.js -^/external/ -^/extplorer\.xml -^/extplorer/extplorer\.xml -^/extras -^/eyeOS/desktop\.php -^/eyeos/desktop\.php -^/f/ -^/facility/control/main -^/facility/control/main/ -^/faq/ -^/faq/index\.php -^/farcry/core/webtop/install/index\.cfm -^/favicon\.ico -^/fbsd/ -^/fcgi\-bin/ -^/fckeditor\.js -^/fckeditor/_whatsnew\.html -^/fckeditor/fckeditor\.js -^/fcms/index\.php -^/feed -^/feed\.php -^/feed/ -^/feng/index\.php\?c=access\&a=login -^/feng_community/index\.php\?c=access\&a=login -^/fengoffice/index\.php\?c=access\&a=login -^/fhm/admin/login\.php -^/fibaro/en/home/login\.html -^/field/index\.php -^/file/ -^/fileexplorer/index\.php\?action=login -^/filemanager/ -^/filemanager/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/filemanager/index\.php -^/files/ -^/fileserver/index\.php -^/filestore/Login\.do -^/filr/\#/login -^/filter\.php\?dbtable=Accounts\&dbfield=Password -^/financials/control/main -^/financials/control/main/ -^/firestats/tools\.php\?file_id=reset_password -^/fisheye/ -^/fisheye/admin/login\-default\.do -^/fiyo/login\.php -^/fiyocms/login\.php -^/flash/README\.txt -^/flashlight/README\.txt -^/flatchat/index\.php -^/flatpress/index\.php -^/flexcube\@/ -^/flexcubeat/ -^/fm/Login\.do -^/fm/index\.php -^/fms/index\.php -^/fog/management/index\.php -^/foldergallery/index\.php -^/foldoc/ -^/foo\.cfm\?param=\foo\ -^/foo\.cfm\?param=\foo\\.cfm -^/foo\.jsp\?param=\foo\ -^/foo\.jsp\?param=\foo\\.jsp -^/foo\.php\?param=\foo\ -^/foo\.php\?param=\foo\\.php -^/foo\.shtml\?param=\foo\ -^/foo\.shtml\?param=\foo\\.shtml -^/foo\.thtml\?param=\foo\ -^/foo\.thtml\?param=\foo\\.thtml -^/form\-totaller/ -^/form/ -^/formalms/ -^/forms/ -^/forms/login\.fcc -^/formsmgr/ -^/forum\.php -^/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/forum/ -^/forum/admin\.php -^/forum/chat/setup\.php3\?next=1 -^/forum/content\.php -^/forum/index\.php -^/forum/login -^/forum/login\.php -^/forum/setup\.php3\?next=1 -^/forum/upload/index\.php -^/forum/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/forums/ -^/forums/index\.php -^/forums/login -^/foswiki/Main/WebHome -^/foswiki/bin/view/foswiki/WebHome -^/foto/ -^/fotos/ -^/fotoware/fotoweb/views/login -^/fotoweb/views/login -^/fpadmin/ -^/fpdb/ -^/fpsample/ -^/fpws/index\.php -^/fr/ -^/fr/index\.html -^/frameset/ -^/framesets/ -^/framework/ -^/framework/docs/distribution/tour_page1\.htm -^/framework/index\.php -^/freehostingmanager/admin/login\.php -^/freepbx/admin/config\.php -^/freewebshop/index\.php -^/frontaccount/index\.php -^/frontend/frontend\.nocache\.js -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00\&file=frontend\.js\&language=en -^/frontend/js\.php\?module=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00\&file=frontend\.js\&language=en -^/frontend/nagvis\-js/index\.php -^/froxlor/index\.php -^/fsm/login\.jsp -^/ftp/ -^/ftp/admin_login\.html -^/ftp/help\.html -^/ftp/index\.php -^/ftproot/ -^/ftpserver/admin_login\.html -^/fusion/login\.php -^/fuzzylime/_cms303/docs/readme\.txt -^/fuzzylime/index\.php -^/fw\.login\.php -^/g/ -^/gallery/ -^/gallery/admin/index\.php -^/gallery/index\.php -^/gallery/login\.php -^/gang/index\.php -^/ganglia/ -^/ganglia/index\.php -^/garoon/grn\.exe -^/gc/flash\.php -^/gdl/ -^/geccBB/index\.php -^/geccBBlite/index\.php -^/geeklog/admin/moderation\.php -^/geneald/Index2\.php -^/genealogie/Index2\.php -^/genealogie_sql/Index2\.php -^/general/information\.html\?kind=item -^/geoserver/web/\?wicket\:bookmarkablePage=\:org\.geoserver\.web\.AboutGeoServerPage -^/geoserver/welcome\.do -^/get_status\.cgi -^/getsimple/index\.php -^/gfx/ -^/gimtel/html/affich\.php\?base=http\://xxx\.xxxxxx\./ -^/git/ -^/gitea/user/login -^/glFusion/index\.php -^/glfusion/public_html/index\.php -^/global/ -^/glpi/ -^/gm\.cgi -^/gmp/ -^/gnat\-tgp/gnat/admin/index\.php -^/gnat/admin/index\.php -^/go/about\.php -^/gogs/user/login -^/gollem/index\.php -^/googlebase/control/main -^/googlebase/control/main/ -^/gosa/ -^/grades/index\.php -^/grafana/login -^/gravity/index\.php -^/greymatter/gm\.cgi -^/grn\.exe -^/grn/grn\.exe -^/grocery/ -^/group\-office/about\.php -^/groupoffice/about\.php -^/groupware/about\.php -^/groupware/login\.php -^/guacamole/ -^/guest/ -^/guestbook\.php -^/guestbook/ -^/guestbook/ang/index\.php -^/guestbook/guestbook\.php -^/guestbook/index\.php -^/guests/ -^/gui/gui_outer_frame\.shtml -^/gwadmin\-console/login\.jsp -^/gweb/index\.php -^/hastymail/index\.php -^/hastymail2/index\.php -^/hdjobq\.htm -^/hdstat\.htm -^/header\.php -^/help\.html -^/help\.php -^/help/ -^/help/contents\.htm -^/help/copyright\.html -^/help/index\.php -^/helpdesk/ -^/helpdesk/index\.php -^/helpdesk/signin\.php -^/hero/index\.php -^/hero_os/index\.php -^/hesk/index\.php -^/hhfacility/control/main -^/hhfacility/control/main/ -^/hidden/ -^/hide/ -^/hit_tracker/ -^/hitmatic/ -^/hlstats/ -^/hm2/index\.php -^/home\.cfm\?Mode=debug -^/home\.cfml\?Mode=debug -^/home\.html -^/home\.php -^/home/ -^/home/index\.php -^/home/monitoring\.cgi -^/home/msg/message_en\-US\.json -^/horde/ -^/horde/chora/README -^/horde/chora/cvs\.php -^/horde/chora/horde/services/help/\?module=chora\&show=about -^/horde/gollem/index\.php -^/horde/imp/ -^/horde/services/help/\?module=chora\&show=about -^/horizonqcms/index\.php -^/hosting/ -^/hosting/capabilities/ -^/hosting/discovery -^/hosting/discovery/ -^/hostingcontroller/ -^/howto/ -^/hp/device/ -^/hp/device/InternalPages/Index\?id=ConfigurationPage -^/hp/device/SignIn/Index -^/hp/jetdirect/index\.html -^/hpmpa/home/ -^/hpsm/ess\.do -^/hpsm/index\.do -^/hqcms/index\.php -^/hr/ -^/hrm/ -^/ht/ -^/htaccess\.txt -^/htbin/ -^/htdocs/ -^/htdocs/admin/index\.php -^/htdocs/index\.php -^/htdocs/login\.php -^/html/ -^/html/admin\.php -^/html/affich\.php\?base=http\://xxx\.xxxxxx\./ -^/html/en/index\.html -^/html/index\.php -^/html/infoen\.htm -^/html/portal/login\.jsp -^/hudson/ -^/hui/index\.html -^/humanres/control/main -^/humanres/control/main/ -^/hyperstat/ -^/i\-doit/ -^/i\.php -^/iPrinterHome\.cgi -^/ibank/ -^/ibill/ -^/icfb/ -^/icinga\-web/index\.php -^/icinga/ -^/icinga/authentication/ -^/icinga/authentication/login -^/icinga/cgi\-bin/config\.cgi -^/icinga/index\.php -^/icinga/lib/ -^/icinga/lib/icinga/ -^/icinga/main\.html -^/icinga/static/ -^/icingaweb2/ -^/icingaweb2/authentication/ -^/icingaweb2/authentication/login -^/icingaweb2/lib/ -^/icingaweb2/lib/icinga/ -^/icingaweb2/static/ -^/icons/ -^/idashboards/ -^/idb/index\.php -^/idea/ -^/ideas/ -^/identity/login/shell/sitecoreidentityserver -^/iem/admin/index\.php -^/iisadmin/ -^/iisprotect/ -^/iissamples/ -^/ikiwiki/ -^/ilias/setup/setup\.php -^/ilohamail/index\.php -^/ilohamail/source/index\.php -^/image/ -^/image/index\.php -^/imagenes/ -^/imagery/ -^/images -^/images/ -^/images/login_top\.gif -^/images/logo\.gif -^/images/logo\.png -^/images/logon_merge\.gif -^/imageset\.html -^/imcws/axis2\-admin/ -^/imcws/axis2\-web/index\.jsp -^/imcws/index\.jsp -^/imcws/services/Version/getVersion -^/imcws/services/Version\?method=getVersion -^/imcws/services/non\-existent -^/img/ -^/imp/ -^/import/ -^/impreso/ -^/inc/ -^/inc/fckeditor/_whatsnew\.html -^/inc/fckeditor/fckeditor\.js -^/include/ -^/include/fckeditor/_whatsnew\.html -^/include/fckeditor/fckeditor\.js -^/includes/ -^/includes/esqueletos/skel_null\.php -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/includes/fckeditor/_whatsnew\.html -^/includes/fckeditor/fckeditor\.js -^/includes/js/mambojavascript\.js -^/incoming/ -^/indeks\.php\?db=frontpage -^/index -^/index\.action -^/index\.asp -^/index\.aspx -^/index\.cfm -^/index\.cfm\?Mode=debug -^/index\.cfml\?Mode=debug -^/index\.cgi -^/index\.cmd\?user=Admin -^/index\.do -^/index\.hsp\?login= -^/index\.htm -^/index\.htm\. -^/index\.htm\?cat=info\&page=printerInfo -^/index\.html -^/index\.js\%70 -^/index\.jsp -^/index\.nginx\-debian\.html -^/index\.php -^/index\.php\.backup -^/index\.php\.bak -^/index\.php\.bkp -^/index\.php\.copy -^/index\.php\.old -^/index\.php\.orig -^/index\.php\.save -^/index\.php\.swp -^/index\.php\.temp -^/index\.php\.tmp -^/index\.php/Special\:Version -^/index\.php/admin -^/index\.php/index/install -^/index\.php/install/ -^/index\.php/login -^/index\.php/s/login -^/index\.php/sessions/login -^/index\.php/wp\-json/ -^/index\.php5 -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/index\.php\?OPT_Session=VT_Req -^/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/index\.php\?act=login -^/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/index\.php\?action=login -^/index\.php\?action=login\.index\&host=0 -^/index\.php\?c=access\&a=login -^/index\.php\?controller=login\&action=showlogin -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/index\.php\?get_action=get_boot_conf -^/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/index\.php\?mod=home\&act=about -^/index\.php\?mode=administration -^/index\.php\?module=Users\&parent=Settings\&view=SystemSetup -^/index\.php\?module=site\&show=home -^/index\.php\?module=users\&action=user\&command=login_page -^/index\.php\?n=guest\&c=0\&m=search\&s=forum\&wert=\-1\%25\%22\%20UNION\%20ALL\%20SELECT\%201\,2\,3\,4\,CONCAT\(nick\,\%200x3a\,\%20pwd\)\,6\%20FROM\%20com_users\%23 -^/index\.php\?owa_do=base\.loginForm -^/index\.php\?page=http\://xxxxxxxxxxxxx/vt\-test -^/index\.php\?page=master\&menu1=Help\&menu2=\&menu3=\&menu4= -^/index\.php\?page=start -^/index\.php\?section=\alert\(document\.cookie\)\\&action=login -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/index\.php~ -^/index\.pl -^/index\.psgi/non\-existent\-1730364226 -^/index\.py -^/index\.rb -^/index_airmedia\.html -^/index_en\.htm -^/index_top\.htm -^/info\.php -^/info/ -^/info_deviceStatus\.html -^/info_deviceStatus\.html\? -^/info_deviceStatus\.html\?tab=Status -^/information/ -^/ingresa/ -^/ingreso/ -^/initial\.do -^/install\.php -^/install/ -^/install/index\.php -^/install/make\-config\.php -^/install/system\-compatibility -^/installation/default\.asp -^/installation/index\.php -^/installer\-backup\.php -^/installer\.php -^/installer\.pl -^/interface/login/login\.php -^/interface/logon\.do -^/interleave/index\.php -^/internal/ -^/intl/ -^/intramaps75/ApplicationEngine/ -^/intramaps75/applicationengine/ -^/intranet/ -^/intro\.php -^/intruvert/jsp/admin/Login\.jsp -^/intruvert/jsp/module/Login\.jsp -^/inventory/ -^/invitado/ -^/invohost/site\.php -^/invoiceplane/sessions/login -^/invoker/EJBInvokerServlet -^/invoker/JMXInvokerServlet -^/io/newfile\.txt -^/ipa/ui/ -^/ipb/index\.php -^/ipb/upload/index\.php -^/ipecs\-cm/admin/ -^/irokez/ru/ -^/isapi/ -^/isgw/Welcome\.do\?method=setupStartPage -^/ispcp/index\.php -^/itim/self/jsp/logon/login\.jsp -^/iwiccle/index\.php -^/iwiccle/index\.php\?module=site\&show=home -^/jag/guestbook\.php -^/jamon/menu\.jsp -^/japidoc/ -^/jasperreports/login\.html -^/jasperserver\-pro/login\.html -^/jasperserver/login\.html -^/java/ -^/javascripts/app\.js -^/javasdk/ -^/javatest/ -^/jave/ -^/jaws/index\.php -^/jaxcms/index\.php -^/jdbc/ -^/jenkins/ -^/jenkins/login -^/jetspeed/ -^/jetspeed/portal/ -^/jira/login\.jsp -^/job/ -^/joomla/\.htaccess -^/joomla/includes/js/mambojavascript\.js -^/joomla/index\.php -^/joomla/templates/system/css/editor\.css -^/jpgraph/docportal/index\.html -^/jpgraph/docs/index\.html -^/jpgraph/index\.html -^/jrun/ -^/js/ -^/js/jssrc/model/dvcinfo/dvcconfig/DvcConfig_Config\.model\.htm\?arg1=0 -^/js/jssrc/model/startwlm/Start_Wlm\.model\.htm\?arg1=\&arg2=\&arg3=\&arg4=\&arg5=\&arg6=\&arg8=\&arg9=\&arg10=0\&arg11= -^/js/language_webviewer\.js -^/js/login\.js -^/js/main\.js -^/jserv/ -^/jslib/ -^/jsonrpc\.php -^/jsp/ -^/jsp/fw/internal/Login\.jsp -^/junk/ -^/kallithea/ -^/kanboard/\?controller=auth\&action=login -^/kanboard/\?controller=user\&action=login -^/kanboard/jsonrpc\.php -^/kb/index\.php -^/kb/index\.php\?page=http\://xxxxxxxxxxxxx/vt\-test -^/keyserver/ -^/kibana/ -^/kibana/app/kibana -^/kiva/ -^/kos2/changelog\.txt -^/koschtit/changelog\.txt -^/koschtit2/changelog\.txt -^/kpwinSQL/index\.php -^/ksmg/en\-US/ -^/kvd/start/index\.php -^/labs/ -^/lam/ -^/laravel/ -^/laravel/public/telescope -^/laravel/telescope -^/laravel/telescope/requests -^/lasernet/index\.php -^/lasernet/index\.php\?id=\-1\'\%20UNION\%20SELECT\%201\,2\,3\,0x53514c2d496e6a656374696f6e2d54657374\,5\,6\,7\,8\,9\,10\,11\,12\,13\-\-\+ -^/lcgi -^/lcgi\-bin -^/lcgi/ -^/lcms/index\.php -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/lcms/index\.php\?system=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/ldap/ -^/ldap/control/main -^/ldap/control/main/ -^/ldap/index\.php -^/ldapadmin/ -^/ldapadmin/htdocs/ -^/ldapadmin/htdocs/index\.php -^/ldapadmin/index\.php -^/leap/ -^/ledger/login\.pl -^/legacy/account/login/ -^/legal/ -^/lg/ENU\.xml -^/lib/ -^/lib/CHANGES -^/lib/README -^/lib/browsefiles\.php\?dir=/etc -^/lib/browsefolders\.php\?dir=/etc -^/lib/composer\.json -^/lib/icinga/ -^/libraries/ -^/library/ -^/libro/ -^/libs/granite/core/content/login\.html\? -^/license\.php -^/license\.txt -^/license/records -^/lightneasy/LightNEasy\.php\?do=login -^/lightneasy/index\.php -^/limesurvey/index\.php -^/limny/index\.php -^/limny/upload/index\.php -^/linkSpheric/admin/index\.php -^/linkSpheric/index\.php -^/links/ -^/linpha/index\.php -^/linux/ -^/list/ -^/list/lists/admin/\?page=about -^/listinfo -^/listinfo\.cgi -^/listinfo\.py -^/listing\.php -^/lists/admin/\?page=about -^/liveview -^/livezilla/index\.php -^/lne/LightNEasy\.php\?do=login -^/lne/index\.php -^/loader/ -^/localclassifieds/classifieds/Site_Admin/admin\.php\ -^/locales/ -^/log\-in -^/log/ -^/loganalyzer/login\.php -^/logeye/security/auth/login\.jsp -^/logfile/ -^/logfiles/ -^/logg/ -^/logger/ -^/logging/ -^/logicaldoc/frontend/frontend\.nocache\.js -^/logicaldoc/login/login\.nocache\.js -^/login -^/login\.action -^/login\.asp -^/login\.aspx -^/login\.cgi -^/login\.htm -^/login\.html -^/login\.jsf -^/login\.jsp -^/login\.php -^/login\.pl -^/login\.rol -^/login\.rsp -^/login\.xhtml -^/login/ -^/login/auth -^/login/index\.php -^/login/login\.html -^/login/login\.nocache\.js -^/login\?redirects=20 -^/login_new\.asp -^/login_page\.php -^/login_up\.php3 -^/logon\.htm -^/logon\.jsp -^/logon\.php -^/logon\.php\?redirect=index\.php\&nouser=1 -^/logon/ -^/logs/ -^/logs/awstats\.pl\?framename=mainright -^/loleaflet/ -^/loleaflet/dist/ -^/loleaflet/dist/admin/ -^/lool/ -^/lool/adminws/ -^/lost\+found/ -^/lua/about\.lua -^/lua/login\.lua\?referer=/ -^/lua/onlinehelp/LUHelp0002\.html -^/lucee/admin/server\.cfm -^/lucee/doc/index\.cfm -^/lucee/templates/error/error\.cfm -^/lucence/control/main -^/lucence/control/main/ -^/m/ -^/machform/index\.php -^/machinei\.asp\?Lang=en\-us -^/magento/ -^/magento/RELEASE_NOTES\.txt -^/magento/admin/ -^/magento/downloader/ -^/magmi\-importer/ReleaseNotes\.txt -^/magmi\-importer/web/magmi\.php -^/magmi/ReleaseNotes\.txt -^/magmi/web/magmi\.php -^/mahara/admin/index\.php -^/mahara/htdocs/admin/index\.php -^/mahara/htdocs/index\.php -^/mahara/index\.php -^/mail\.cgi -^/mail/ -^/mail/accounts/inc/include\.php\?language=0\&lang_settings\[0\]\[1\]=http\://xxxxxxxxxxxxxxx/openvasvt/ -^/mail/index\.php -^/mail/index\.php/admin -^/mail/lists/admin/\?page=about -^/mail/login\.php -^/mail/source/index\.php -^/mail/src/login\.php -^/mail_log_files/ -^/mailman/ -^/mailman/listinfo -^/mailman/listinfo\.cgi -^/mailman/listinfo\.py -^/mailpop/database/_sessions/ -^/mailroot/ -^/mailwise/mw\.exe -^/main\.html -^/main\.js -^/main\.mwp\?op=2 -^/main\.php -^/main/login\.php\?action=login -^/main/web/status/ -^/mainui/ -^/makefile/ -^/mall/shop\.cgi -^/mall_log_files/ -^/mambo/README\.php -^/mambo/htaccess\.txt -^/mambo/includes/js/mambojavascript\.js -^/mambo/index\.php -^/manage/ -^/manageengine/index\.do -^/management/ -^/management/index\.php -^/manager/index\.php -^/manifest\.json -^/mantis/login_page\.php -^/mantisbt/login_page\.php -^/manual/ -^/manual/ag/contents\.htm -^/manual/en/index\.html -^/manufacturing/control/main -^/manufacturing/control/main/ -^/marketing/ -^/marketing/control/main -^/marketing/control/main/ -^/matomo/ -^/matomo/index\.php -^/mattermost/ -^/mautic/index\.php/s/login -^/md/index\.php -^/mdb\-database/aeNovo1\.mdb -^/mdpro/index\.php -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/media/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/mediawiki/index\.php/Special\:Version -^/member/ -^/member/admin/login\.php -^/members/ -^/membership/admin/login\.php -^/menu\.jsp -^/merchant\-sdk\-php/composer\.json -^/mercuryboard/ -^/mercuryboard/index\.php -^/message/ -^/messaging/ -^/metacart/ -^/minicms/index\.php -^/misc/ -^/mkstats/ -^/mod_pagespeed_global_statistics -^/mod_pagespeed_message -^/mod_pagespeed_statistics -^/module\.php/core/frontpage_welcome\.php -^/module\.php\?link=http\://xxxx\./index\.php -^/modules\.php\?name=gallery\&files=foobar -^/modules/Submit/index\.php\?op=pre\&title=\window\.alert\(document\.cookie\)\;\ -^/modules/fckeditor/_whatsnew\.html -^/modules/fckeditor/fckeditor\.js -^/modules/module_db\.php\?pivot_path=http\://xxxxxxxxxx/ -^/modules/news/index\.php -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/modules/profile/user\.php\?aXconf\[default_language\]=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/modx/manager/index\.php -^/moin/SystemInfo -^/mollify/backend/plugin/Registration/index\.php -^/mollify/backend/plugin/Registration/index\.php\?confirm=\%3Cscript\%3Ealert\(\%27openvasvt\%27\)\%3C/script\%3E -^/mongo/index\.php\?action=login\.index\&host=0 -^/monitor/check_mk/login\.py -^/monitor/menu\.jsp -^/monitoring/index\.php -^/monitoring/main\.html -^/monitoring/main\.php -^/monstra/ -^/moodle/index\.php -^/moosocial/ -^/movimientos/ -^/moziloCMS/index\.php -^/mp3/ -^/mp3s/ -^/mqseries/ -^/mrbs/help\.php -^/mrbs/web/help\.php -^/mrbs1261/help\.php -^/mrbs1261/web/help\.php -^/msd/index\.php -^/msd1\.24\.4/index\.php -^/mseui/ -^/msggateway/control/main -^/msggateway/control/main/ -^/msql/ -^/mt\.cgi -^/mt/mt\.cgi -^/multiflex/control/main -^/multiflex/control/main/ -^/mutillidae/ -^/mve/help/en/inventory/am_about\.html -^/mw\.exe -^/myaccount/ -^/mybb/index\.php -^/mymsg/Login\.php -^/myportal/control/main -^/myportal/control/main/ -^/myserver/index\.html -^/mysql/ -^/mysql_admin/ -^/mysqldumper/index\.php -^/mywebsql -^/nagios/index\.php/login -^/nagios/login -^/nagios/login\.php -^/nagios/main\.html -^/nagios/main\.php -^/nagiosfusion/login\.php -^/nagioslogserver/login -^/nagiosna/index\.php/login -^/nagiosxi/login\.php -^/nagvis/frontend/nagvis\-js/index\.php -^/nakid/index\.php -^/nanocms/data/nanoadmin\.php -^/nbmember\.cgi\?cmd=test -^/nc/status\.php -^/ncadmin/ -^/nchelp/ -^/ncsample/ -^/nds/ -^/nedi/ -^/nep/status/index/ -^/net2ftp/help\.html -^/net2ftp/index\.php -^/netbasic/ -^/netburner\-logo\.gif -^/netcat/ -^/netconf\.html -^/netmagstats/ -^/netpet/index\.php -^/netrisk/index\.php -^/netscape/ -^/netshare/ -^/nettracker/ -^/new/ -^/newfile\.txt -^/news\.php -^/news/\?group_id=\&limit=50\&offset=50\;select\+1\+as\+id\,unix_pw\+as\+forum_id\,\+user_name\|\|unix_pw\+as\+summary\+from\+users -^/news/admin\.php -^/news/admin/index\.php -^/news/index\.php -^/newscoop/admin/password_check_token\.php\?f_email=1\&token=\%22\%3E\%3Cscript\%3Ealert\%28/xss\-test/\%29\;\%3C/script\%3E -^/nextcloud/status\.php -^/nextgeneration/ -^/nexus/\#browse/welcome -^/nexus/\#welcome -^/nginx\-status -^/nginx_status -^/ngx_pagespeed_global_statistics -^/ngx_pagespeed_message -^/ngx_pagespeed_statistics -^/niKa9MGnMKDw\.html -^/nidp/app -^/nl/ -^/nmiscgi\.pl -^/nnm/main -^/nodatabase/LightNEasy\.php\?do=login -^/nodatabase/index\.php -^/nodebb/ -^/non\-existent\-1159966931\.shtm -^/non\-existent\-1187858196\.php5 -^/non\-existent\-1263513827\. -^/non\-existent\-1546426698\.htm -^/non\-existent\-1868527253\.jsp -^/non\-existent\-2079473927\.html -^/non\-existent\-460935845\.php3 -^/non\-existent\-48606353/ -^/non\-existent\-608677879\.cfm -^/non\-existent\-763206966\.shtml -^/non\-existent\-834414960\.php7 -^/non\-existent\-924165093\.php4 -^/non\-existent\-941666255\.php -^/non\-existent483826565/ -^/nonexistent\.nsf -^/nonexistent\.php -^/noredirect\.html -^/nosuchfile\-10303\-10310\.php3 -^/notftp/index\.php -^/noticeboardpro/index\.php -^/noticias/ -^/novaboard/index\.php -^/novell\-service\-desk/LiveTime/WebObjects/LiveTime\.woa -^/novell/LiveTime/WebObjects/LiveTime\.woa -^/novell/welcome/index\.html -^/novelllogmanager/views/logon\.html -^/nps/servlet/webacc\?taskId=dev\.Empty\&merge=fw\.About -^/ntop\-bin/dashboard\.cgi -^/nuke/admin\.php -^/nuke/html/admin\.php -^/nuke/html/index\.php -^/nuke/index\.php -^/nullam/index\.php -^/nuxeo/ -^/nuxeo/login\.jsp -^/obj/ -^/objects/ -^/oc/status\.php -^/ocm\-provider/ -^/ocs\-provider/ -^/ocsreports/index\.php -^/odbc/ -^/odoo_cmr/web/login -^/odoo_cms/web/login -^/ofbizsetup/control/main -^/ofbizsetup/control/main/ -^/offers/ -^/office/ag\.cgi -^/office/ag\.exe -^/office/index\.php\?c=access\&a=login -^/officescan/console/html/help/webhelp/Preface\.html -^/offiria/index\.php -^/oi/index\.php -^/ojs/ -^/old/ -^/old_files/ -^/oldfiles/ -^/olt/Login\.do -^/omk/oae/login -^/omp/ -^/onlinegrades/index\.php -^/oo/ -^/open\.php -^/openadmin/index\.php\?act=help\&do=aboutOAT -^/opencart/index\.php -^/opendb/login\.php -^/opendocman/admin\.php -^/opendocman/index\.php -^/openemr/interface/login/login\.php -^/openengine/cms/website\.php\?id=/de/index\.htm\&admin=login -^/openforum/index\.php -^/openmairie_annuaire/index\.php -^/openmairie_annuaire/login\.php -^/openmairie_catalogue/doc/catalogue\.html -^/openmairie_cimetiere/index\.php -^/openmairie_cimetiere/login\.php -^/openmairie_cominterne/index\.php -^/openmairie_cominterne/login\.php -^/openmairie_courrier/index\.php -^/openmairie_courrier/login\.php -^/openmairie_foncier/index\.php -^/openmairie_foncier/login\.php -^/openmairie_planning/index\.php -^/openmairie_planning/login\.php -^/openmairie_presse/index\.php -^/openmairie_presse/login\.php -^/openmairie_registreCIL/index\.php -^/openmairie_registreCIL/login\.php -^/openmeetings/signin -^/openmrs/index\.htm -^/openmrs/login\.htm -^/opennms/login\.jsp -^/openpro/login\.php -^/opensso/UI/Login\.jsp -^/opentaps/control/main -^/openurgence_vaccin/index\.php -^/openurgencevaccin/index\.php -^/openwebmail\-cgi/openwebmail\.pl -^/openwebmail\.pl -^/openx/www/admin/index\.php -^/opnfrm/index\.php -^/oprocmgr\-service/ -^/oprocmgr\-status/ -^/opt/index\.php\?OPT_Session=VT_Req -^/oracle/ -^/oradata/ -^/orangehrm/ -^/orangehrm/login\.php -^/orangehrm/symfony/web/index\.php/auth/login -^/orbis/admin/login\.php -^/order/ -^/ordermgr/control/main -^/ordermgr/control/main/ -^/orders/ -^/orion/login -^/ortro/index\.php -^/ortro/www/index\.php -^/os/index\.php -^/os/upload/index\.php -^/osCSS/index\.php -^/osTicket/open\.php -^/osc/index\.php -^/osc/ssl_check\.php -^/osclass/index\.php -^/oscmax/admin/login\.php -^/oscmax/catalog/admin/login\.php -^/oscommerce/index\.php -^/oscommerce/ssl_check\.php -^/oss5/lib/browsefiles\.php\?dir=/etc -^/oss5/lib/browsefolders\.php\?dir=/etc -^/oss6/lib/browsefiles\.php\?dir=/etc -^/oss6/lib/browsefolders\.php\?dir=/etc -^/oss7/lib/browsefiles\.php\?dir=/etc -^/oss7/lib/browsefolders\.php\?dir=/etc -^/ossec\-wui/index\.php -^/ossec/index\.php -^/ossim/session/login\.php -^/osticket/open\.php -^/otrs\-web/ -^/otrs/ -^/otrs/index\.pl -^/otrs/installer\.pl -^/otrs/public\.pl -^/ou/index\.php -^/outgoing/ -^/overlook/src/login\.php -^/overview\.shtm -^/owa/auth/logon\.aspx -^/owa/index\.php\?owa_do=base\.loginForm -^/owls/glossaries/index\.php\?file=/boot\.ini -^/owls/glossaries/index\.php\?file=/etc/passwd -^/owls/glossaries/index\.php\?file=/windows/win\.ini -^/owls/glossaries/index\.php\?file=/winnt/win\.ini -^/ownCloud/status\.php -^/owncloud/ -^/owncloud/status\.php -^/owners/ -^/ox\.html -^/ox6/ox\.html -^/oxid\-eshop/admin/ -^/oxid/admin/ -^/pHpmyADmiN/index\.php -^/pacs/login\.php -^/pacsone/login\.php -^/page\.php\?xPage=\alert\(document\.cookie\)\ -^/page/login/login\.html -^/pages/ -^/pagespeed_admin/ -^/pagespeed_console -^/pagespeed_global_admin/ -^/pandora_console/index\.php -^/panel/ -^/papoo/ -^/parser/parser\.php\?file=\foo\ -^/partymgr/control/main -^/partymgr/control/main/ -^/passman/index\.php -^/passport/ -^/passport/control/main -^/passport/control/main/ -^/password/ -^/passwords/ -^/payment/ -^/payments/ -^/paypal/composer\.json -^/pb/index\.php -^/pbx/gate\?bean=pbxadmin\.web\.PbxLogin -^/pccsmysqladm/ -^/pecio\-cms/index\.php -^/pecio/index\.php -^/pecio_cms/index\.php -^/pem/login/pages/login\.jsf -^/pentaho\-di/Login -^/pentaho\-solutions/Login -^/pentaho/Login -^/perl\-status -^/perl\-status/ -^/perl/ -^/perl5/ -^/personal/ -^/personal_pages/ -^/petition/signing_system\-admin/index\.php -^/pforum/ -^/pgadmin/intro\.php -^/phPmYaDmiN/index\.php -^/phorum/ -^/phorum/admin\.php -^/photo/ -^/photo/index\.php -^/photopost/index\.php -^/photos/ -^/photos/index\.php -^/php\-belt/index\.php -^/php\-calendar/index\.php -^/php\-fusion/home\.php -^/php\-fusion/news\.php -^/php\-nuke/admin\.php -^/php\-nuke/html/admin\.php -^/php\-nuke/html/index\.php -^/php\-nuke/index\.php -^/php\-utility\-belt\-master/index\.php -^/php\-vms/index\.php -^/php/ -^/php/login\.php -^/php/mytutos\.php -^/phpBB/ -^/phpBB/index\.php -^/phpBB2/index\.php -^/phpBB3/index\.php -^/phpBB31/index\.php -^/phpBazar/index\.php -^/phpCoin165/license\.php -^/phpMyAdmin/ -^/phpMyAdmin/index\.php -^/phpMyadMiN/index\.php -^/phpNagios/index\.php -^/phpPgAdmin/intro\.php -^/phpPhotoAlbum/ -^/phpSecurePages/ -^/phpThumb\.demo\.demo\.php -^/phpThumb/demo/phpThumb\.demo\.demo\.php -^/php_classes/ -^/php_info\.php -^/phpaaCMS/index\.php -^/phpbb/index\.php -^/phpbt/index\.php -^/phpclassifieds/ -^/phpcoin/license\.php -^/phpcom/index\.php\?n=guest\&c=0\&m=search\&s=forum\&wert=\-1\%25\%22\%20UNION\%20ALL\%20SELECT\%201\,2\,3\,4\,CONCAT\(nick\,\%200x3a\,\%20pwd\)\,6\%20FROM\%20com_users\%23 -^/phpfinance/index\.php -^/phpfootball/filter\.php\?dbtable=Accounts\&dbfield=Password -^/phpforum/index\.php -^/phpfusion/home\.php -^/phpfusion/news\.php -^/phpgroupware/login\.php -^/phpgw/login\.php -^/phpicalendar/print\.php -^/phpimageview/ -^/phpinfo\.php -^/phpip/ -^/phpip/login\.php -^/phpipam/\?page=login -^/phpldapadmin/ -^/phpldapadmin/htdocs/ -^/phpldapadmin/htdocs/index\.php -^/phpldapadmin/index\.php -^/phplite/ -^/phplite/index\.php -^/phplite/phpliteadmin\.php -^/phpliteadmin\.php -^/phpliteadmin/ -^/phpliteadmin/index\.php -^/phpliteadmin/phpliteadmin\.php -^/phplive/index\.php -^/phpmailer/README -^/phpmailer/README\.md -^/phpmailer/composer\.json -^/phpmailer/extras -^/phpmailer/lib/composer\.json -^/phpmongodb/index\.php -^/phpmv2/index\.php -^/phpmyadmin/ -^/phpmyadmin/index\.php -^/phpmyfaq/index\.php -^/phpmyvisites/index\.php -^/phpnagios/index\.php -^/phpnuke/ -^/phpnuke/admin\.php -^/phpnuke/html/admin\.php -^/phpnuke/html/index\.php -^/phpnuke/index\.php -^/phportfolio/index\.php -^/phppgadmin/ -^/phppgadmin/intro\.php -^/phpprojekt/ -^/phpqa/index\.php -^/phpqa/phpqa/index\.php -^/phprainchecks/settings\.php -^/phpservermon/index\.php -^/phpshop/index\.php -^/phpsurveyor/index\.php -^/phpticket/index\.php -^/phptt/index\.php -^/phpunit/ -^/phpunity\.newsmanager/tmpl/news_main\.htm -^/phpvidz/index\.php -^/phpvidz_0\.9\.5/index\.php -^/phpvms/index\.php -^/phpwebsite/index\.php\?module=users\&action=user\&command=login_page -^/phpwebthings/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/phpwebthings/index\.php -^/phpwiki/index\.php -^/phpwt/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/phpx/index\.php -^/phreeBooks/index\.php -^/phreebooks/index\.php -^/phreedom/index\.php -^/phux/index\.php -^/piranha/ -^/pivot/index\.php -^/pivot/modules/module_db\.php\?pivot_path=http\://xxxxxxxxxx/ -^/pivot/pivot/index\.php -^/pivotx/index\.php -^/piwigo/index\.php -^/piwik/ -^/piwik/index\.php -^/pki/pub/pki\?cmd=serverInfo -^/pligg/index\.php -^/plone/ -^/pls/ -^/plugin\-management/html/homepage\:main\.int\.html -^/plugins/fckeditor/_whatsnew\.html -^/plugins/fckeditor/fckeditor\.js -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/pma/ -^/pma/index\.php -^/pmwiki\.php -^/pmwiki/pmwiki\.php -^/podcast/index\.php -^/poll/ -^/poll/admin/login\.php -^/polls/ -^/pootle/about/ -^/portal\.css -^/portal/ -^/portal/includes/esqueletos/skel_null\.php -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/boot\.ini -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/etc/passwd -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/windows/win\.ini -^/portal/includes/esqueletos/skel_null\.php\?ABTPV_BLOQUE_CENTRAL=/winnt/win\.ini -^/portal/index\.php -^/portal/login -^/postfixadmin/login\.php -^/postgres/ -^/postnuke/ -^/postnuke/docs/distribution/tour_page1\.htm -^/postnuke/index\.php -^/pp/ -^/pphlogger/index\.php -^/ppim/Readme\.txt -^/ppim/upload\.php -^/pppblog/index\.php -^/ppwb/ -^/prado/ -^/prelogin -^/prestashop/error500\.html -^/pricat/control/main -^/pricat/control/main/ -^/prime\-home/login/ -^/print\.php -^/printers/ -^/priv/ -^/privado/ -^/private/ -^/prochatrooms/help/index\.php -^/prod -^/prod/ -^/profil\.php\?id=1\%20\foo\ -^/profile -^/project/index\.php -^/projectmgr/control/main -^/projectmgr/control/main/ -^/protected/ -^/prueba/ -^/pruebas/ -^/prv/ -^/psconsole/faces/common/ProductVersion\.jsp -^/pub/ -^/pub/pki\?cmd=serverInfo -^/public\.pl -^/public/ -^/public/about\.html -^/public/code/index\.php -^/public/telescope -^/publica/ -^/publicar/ -^/publico/ -^/publish/ -^/publisher/ -^/pubn/index\.php -^/pulsecms/ -^/pulsecms/admin/index\.php -^/pulsecms/index\.php -^/punbb/index\.php -^/purchase/ -^/purchases/ -^/purchasing/control/main -^/purchasing/control/main/ -^/pw/ -^/pwn\.php -^/pwngame/pwn\.php -^/pydio/index\.php\?get_action=get_boot_conf -^/qcenter/qcenter/index\.html -^/qcms/index\.php -^/query\?group=/\* -^/quickpoll/index\.php -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/quickpoll/index\.php\?fct=preview\&p=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/quixplore/index\.php -^/quixplorer/index\.php -^/qwerty/index\.php\?act=publ\&id=\-3\+UNION\+SELECT\+1\,2\,3\,4\,0x53514c2d496e6a656374696f6e2d54657374 -^/radserver/admin/index\.php -^/radserver/www/admin/index\.php -^/rails/info/properties/ -^/rails/info/routes/ -^/rainchecks/settings\.php -^/rainloop/ -^/random_banner/ -^/rave/login -^/rdp/ -^/readme\.html -^/readme\.txt -^/recentservers\.xml -^/recovery/install/ -^/redaxscript/ -^/redmine/ -^/ref/ -^/refbase/index\.php -^/refdb/index\.php -^/register\.php -^/register/ -^/registered/ -^/rem/ -^/remote/ -^/report/ -^/reports/ -^/repos/kallithea/ -^/reseller/ -^/resource/images/logon\.gif -^/resource/images/logon_t\.gif -^/resources/ckeditor/CHANGES\.md -^/resources/ckeditor/ckeditor\.js -^/resources/fckeditor/_whatsnew\.html -^/resources/fckeditor/fckeditor\.js -^/ress\.php -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/ress\.php\?page=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/restgui/locale/personality/personality_en\.json -^/restricted/ -^/retail/ -^/reviews/ -^/revive\-adserver/admin/index\.php -^/revive\-adserver/www/admin/index\.php -^/revolution/manager/index\.php -^/revsense/index\.php\?section=\alert\(document\.cookie\)\\&action=login -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/rhinos\-es\-3\.0/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/rhinos/admin/lib/gradient/gradient\.php\?tam=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/rips\-scanner\-master/index\.php -^/rips/index\.php -^/robohelp/admin/login\.jsp -^/robot\.txt -^/robots\.txt -^/rock\-mongo/index\.php\?action=login\.index\&host=0 -^/rockmongo/index\.php\?action=login\.index\&host=0 -^/roller\-ui/index\.jsp -^/roller\-ui/login\.rol -^/roller/index\.jsp -^/roller/login\.rol -^/root/ -^/roschedule\.php -^/roundcube/ -^/roundcubemail/ -^/rsrc/ -^/rt/index\.html -^/rtl/about\.lsp -^/rtm\.log -^/ru/ -^/rws/user/ -^/s/test/_/\;/WEB\-INF/web\.xml -^/s/test/_/\;/web\-inf/web\.xml -^/s/test/_/WEB\-INF/web\.xml -^/sNews/index\.php -^/sNews/readme\.html -^/sNews/readme\.txt -^/sahana/index\.php\?mod=home\&act=about -^/sales/ -^/sample/ -^/sampler/ -^/samples/ -^/sap/bc/gui/sap/its/webgui -^/sap/bc/soap/rfc -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/sapid/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/sapmc/sapmc\.html -^/sauruscms/admin/ -^/save/ -^/sc/ess\.do -^/sc/index\.do -^/schedule/roschedule\.php -^/scm/viewvc\.cgi/ -^/scm/viewvc/ -^/scr/index\.php -^/scr/login\.php -^/scribe/login\.php -^/script/ -^/script/index\.php -^/scripts\.php -^/scripts/ -^/scripts/ag\.cgi -^/scripts/ag\.exe -^/scripts/branding\.js -^/scripts/cbag/ag\.cgi -^/scripts/cbag/ag\.exe -^/scripts/cbdb/db\.exe -^/scripts/cbgrn/grn\.exe -^/scripts/cbmw/mw\.exe -^/scripts/cgi\-bin/cbag/ag\.cgi -^/scripts/cgi\-bin/cbag/ag\.exe -^/scripts/db\.exe -^/scripts/dbman/db\.cgi\?db=no\-db -^/scripts/dezie/db\.exe -^/scripts/garoon/grn\.exe -^/scripts/grn\.exe -^/scripts/grn/grn\.exe -^/scripts/lan_0_m\.xml -^/scripts/mailwise/mw\.exe -^/scripts/mw\.exe -^/scripts/office/ag\.cgi -^/scripts/office/ag\.exe -^/scrum/control/main -^/scrum/control/main/ -^/scrumworks/login -^/sdcard/cpt/app/signin\.php -^/sdn/ui/app/index -^/search\-ui/ -^/search/ -^/search/control/main -^/search/show\.pl\?url=file\:/etc/passwd -^/search97/ -^/secret/ -^/secretserver/Login\.aspx -^/secure/ -^/secured/ -^/sell/ -^/sendcard\.php\?view=1\&id=\%27openvasvt -^/sendio/ice/ui/ -^/sentinel/views/logon\.html -^/sentrifugo/index\.php -^/seopanel/ -^/seportal/index\.php -^/serendipity/index\.php -^/serve/ -^/server\-info -^/server\-info/ -^/server\-status -^/server\-status/ -^/server/properties -^/server/version -^/server_stats/ -^/server_version\.xsl -^/servers/ -^/serverstats/ -^/service/ -^/services/ -^/services/Version/getVersion -^/services/Version\?method=getVersion -^/services/api\.js -^/services/non\-existent -^/servicio/ -^/servicios/ -^/servlet/ -^/servlet/Login\?omacmd=getlogin\&page=Login\&managedws=true -^/servlet/UDataArea\?plugin=com\.dell\.oma\.webplugins\.AboutWebPlugin -^/servlet/com\.newatlanta\.servletexec\.JSP10Servlet -^/servlet/one2planet\.infolet\.InfoServlet\?page=\foo\ -^/servlet\?m=mod_listener\&p=login\&q=loginForm -^/servlets/ -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/servlets/FetchFile\?fileName=\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/servlets/FetchFile\?fileName=conf/securitydbData\.xml -^/session/ -^/session/login\.php -^/setseed\-hub/ -^/setting/prtinfo\.htm -^/settings\.php -^/setup\.php -^/setup\.php3\?next=1 -^/setup/ -^/setup/index\.php -^/setup/install\.php -^/setup/setup\.php -^/setup/unlock -^/sfa/control/main -^/sfa/control/main/ -^/sftp\-config\.json -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fboot\.ini\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fetc/passwd\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwindows/win\.ini\%00 -^/shadowbox/plugins/system/shadowbox/min/index\.php\?g=sb\&ad=base\&lan=en\&play=\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2f\.\.\%2fwinnt/win\.ini\%00 -^/share/ -^/share/dsweb/HomePage -^/shared/ -^/shell\-cgi/ -^/shell/sitecore\.version\.xml -^/shipping/ -^/shop\.cgi -^/shop/ -^/shop/RELEASE_NOTES\.txt -^/shop/admin/ -^/shop/admin/index\.php -^/shop/admin/index\.php\?login -^/shop/admin/login\.html -^/shop/admin/login\.php -^/shop/downloader/ -^/shop/index\.php -^/shop/shop\.cgi -^/shop/ssl_check\.php -^/shop/viart_shop\.xml -^/shopper/ -^/shopping/ -^/shoutbox\.php -^/shoutbox/shoutbox\.php -^/showHome\.do -^/showcase\.action -^/siestta/ -^/signin -^/signin\.php -^/signing_system\-admin/index\.php -^/simpleid/index\.php -^/simpleid/www/index\.php -^/simpnew248/news\.php -^/sine/index\.php -^/sinecms/index\.php -^/sit/index\.php -^/site\.php -^/site/ -^/site/index\.php/admin/login/ -^/site/login\.php -^/site_admin/ -^/siteadmin/ -^/sitebuildercontent/ -^/sitebuilderfiles/ -^/sitebuilderpictures/ -^/sitecore/identity/login/shell/sitecoreidentityserver -^/sitecore/login/ -^/sitecore/shell/sitecore\.version\.xml -^/sitemanager\.xml -^/sitemap\.xml -^/sitemgr/ -^/siteminder/ -^/siteminder/forms/login\.fcc -^/siteminderagent/ -^/siteminderagent/forms/login\.fcc -^/sites/ -^/sites/all/modules/ckeditor/CHANGES\.md -^/sites/all/modules/ckeditor/ckeditor\.js -^/sites/all/modules/fckeditor/_whatsnew\.html -^/sites/all/modules/fckeditor/fckeditor\.js -^/sites/all/modules/fckeditor/fckeditor/_whatsnew\.html -^/sites/all/modules/fckeditor/fckeditor/fckeditor\.js -^/siteserver/ -^/sitestats/ -^/siteupdate/ -^/skZIDtt8\.html -^/slide/ -^/sm\-webtier/ess\.do -^/sm\-webtier/index\.do -^/sm/ess\.do -^/sm/index\.do -^/sm/src/login\.php -^/sm7/ess\.do -^/sm7/index\.do -^/sm_forum/ -^/sm_forum/index\.php -^/smadmr5\.nsf -^/smconf\.nsf -^/smency\.nsf -^/smf/ -^/smf/index\.php -^/smf1/ -^/smf1/index\.php -^/smf2/ -^/smf2/index\.php -^/smftypes\.nsf -^/smhelp\.nsf -^/smmsg\.nsf -^/smquar\.nsf -^/smreports/ -^/smreportsviewer/ -^/sms/index\.php -^/smsmvlog\.nsf -^/smtime\.nsf -^/snews/index\.php -^/snews/readme\.html -^/snews/readme\.txt -^/snipegallery/index\.php -^/snipsnap/space/start -^/snort/alerts\.php -^/snort/base/ -^/snortreport\-1\.3\.1/alerts\.php -^/snortreport/alerts\.php -^/soap/ -^/soapdocs/ -^/social/ -^/social/index\.php -^/social/login -^/sofami/control/main -^/sofami/control/main/ -^/softnas/login\.php -^/software\-description\.php\?id=\-5\%20union\%20all\%20select\%201\,2\,1234567890987654321\,4\,5\,6\,7\,8\,9\,10\,11\,12\,13\,14\,15\,16\,17\,18\,19\,20\,21\,22\,23\,24\,25\,26\,27 -^/software/ -^/software/software\-description\.php\?id=\-5\%20union\%20all\%20select\%201\,2\,1234567890987654321\,4\,5\,6\,7\,8\,9\,10\,11\,12\,13\,14\,15\,16\,17\,18\,19\,20\,21\,22\,23\,24\,25\,26\,27 -^/solaris/ -^/solr/ -^/solr/control/main -^/solr/control/main/ -^/solutions/ -^/source/ -^/source/index\.php -^/space/start -^/spaces/ -^/spaces/enter/ -^/sphider/changelog -^/spip\.php -^/spip/spip\.php -^/splunk/en\-US/account/login -^/sprt\.htm -^/spywall/login\.php -^/sql\-ledger/login\.pl -^/sql/ -^/sqlite/LightNEasy\.php\?do=login -^/sqlite/index\.php -^/sqlite/main\.php -^/sqlitemanager/main\.php -^/squid/ -^/squirrel/src/login\.php -^/squirrelmail/ -^/squirrelmail/src/login\.php -^/src/ -^/src/Symfony/Component/Console/CHANGELOG\.md -^/src/apps/pom\.xml -^/src/login\.php -^/src/pom\.xml -^/src/src/site/xdoc/index\.xml -^/srchadm/ -^/ssf/a/do\?p_name=ss_forum\&p_action=1\&action=__login -^/ssgmanager/about\.jsf -^/ssi\.cgi/Login\.htm -^/ssi/ -^/ssl/ -^/ssl_check\.php -^/sslkeys/ -^/sso/UI/Login\.jsp -^/staff/ -^/stag/ -^/stage/ -^/staging/ -^/star57\.cgi\?download=\;id\| -^/star57\.cgi\?download=\;ipconfig\| -^/star57cm/star57\.cgi\?download=\;id\| -^/star57cm/star57\.cgi\?download=\;ipconfig\| -^/start -^/start\.html -^/start/about\.htm -^/start/index\.php -^/startPage -^/starter/config\-browser/index -^/starter/config\-browser/index\.action -^/startwlm/Start_Wlm\.htm -^/stash/login -^/stat/ -^/static -^/static/twake/images/favicon\.ico\\x22\ rel=\\x22icon\\x22\ type=\\x22image/x\-icon\\x22\ sizes=\\x2216x16\ 32x32\ 48x48\ 64x64\ 128x128 -^/statistic/ -^/statistics/ -^/statistics/awstats\.pl\?framename=mainright -^/statistik/ -^/statistik/cgi\-bin/ -^/statistik/cgi\-bin/awstats\.pl\?framename=mainright -^/statistiken/ -^/stats\-bin\-p/ -^/stats/ -^/stats/awstats\.pl\?framename=mainright -^/stats/index\.php -^/stats/tools\.php\?file_id=reset_password -^/stats_old/ -^/status\.php -^/status/ -^/stcenter\.nsf -^/storage/ -^/store/ -^/store/agora\.cgi\?cart_id=\alert\(document\.domain\)\\&xm=on\&product=HTML -^/store/index\.php -^/store/ssl_check\.php -^/storemgr/ -^/strings\.js -^/stronghold\-info -^/stronghold\-info/ -^/stronghold\-status -^/stronghold\-status/ -^/struts\-cookbook/Welcome\.do -^/struts\-cookbook/config\-browser/index -^/struts\-cookbook/config\-browser/index\.action -^/struts\-cookbook/example/HelloWorld\.action -^/struts\-cookbook/index\.action -^/struts\-cookbook/showcase\.action -^/struts\-examples/Welcome\.do -^/struts\-examples/config\-browser/index -^/struts\-examples/config\-browser/index\.action -^/struts\-examples/example/HelloWorld\.action -^/struts\-examples/index\.action -^/struts\-examples/showcase\.action -^/struts/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/WW/cwiki\.apache\.org/WW/home\.html -^/struts/Welcome\.do -^/struts/config\-browser/index -^/struts/config\-browser/index\.action -^/struts/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/docs/WW/cwiki\.apache\.org/WW/home\.html -^/struts/docs/docs/WW/cwiki\.apache\.org/WW/guides\.html -^/struts/docs/docs/WW/cwiki\.apache\.org/WW/home\.html -^/struts/docs/docs/index\.html -^/struts/docs/docs/struts2\-core\-apidocs/help\-doc\.html -^/struts/docs/docs/struts2\-core\-apidocs/index\-all\.html -^/struts/docs/docs/struts2\-core\-apidocs/overview\-summary\.html -^/struts/docs/index\.html -^/struts/docs/struts2\-core\-apidocs/help\-doc\.html -^/struts/docs/struts2\-core\-apidocs/index\-all\.html -^/struts/docs/struts2\-core\-apidocs/overview\-summary\.html -^/struts/example/HelloWorld\.action -^/struts/index\.action -^/struts/index\.html -^/struts/showcase\.action -^/struts/src/apps/pom\.xml -^/struts/src/pom\.xml -^/struts/src/src/site/xdoc/index\.xml -^/struts/struts\-cookbook/Welcome\.do -^/struts/struts\-cookbook/example/HelloWorld\.action -^/struts/struts\-cookbook/index\.action -^/struts/struts\-cookbook/showcase\.action -^/struts/struts\-examples/Welcome\.do -^/struts/struts\-examples/example/HelloWorld\.action -^/struts/struts\-examples/index\.action -^/struts/struts\-examples/showcase\.action -^/struts/struts2\-basic/Welcome\.do -^/struts/struts2\-basic/example/HelloWorld\.action -^/struts/struts2\-basic/index\.action -^/struts/struts2\-basic/showcase\.action -^/struts/struts2\-blank/example/HelloWorld\.action -^/struts/struts2\-core\-apidocs/help\-doc\.html -^/struts/struts2\-core\-apidocs/index\-all\.html -^/struts/struts2\-core\-apidocs/overview\-summary\.html -^/struts/struts2\-mailreader/Welcome\.do -^/struts/struts2\-portlet/Welcome\.do -^/struts/struts2\-portlet/example/HelloWorld\.action -^/struts/struts2\-portlet/index\.action -^/struts/struts2\-portlet/showcase\.action -^/struts/struts2\-rest\-showcase/Welcome\.do -^/struts/struts2\-rest\-showcase/example/HelloWorld\.action -^/struts/struts2\-rest\-showcase/index\.action -^/struts/struts2\-rest\-showcase/showcase\.action -^/struts/struts2\-showcase/showcase\.action -^/struts/utils\.js -^/struts2\-basic/Welcome\.do -^/struts2\-basic/config\-browser/index -^/struts2\-basic/config\-browser/index\.action -^/struts2\-basic/example/HelloWorld\.action -^/struts2\-basic/index\.action -^/struts2\-basic/showcase\.action -^/struts2\-blank/config\-browser/index -^/struts2\-blank/config\-browser/index\.action -^/struts2\-blank/example/HelloWorld\.action -^/struts2\-core\-apidocs/help\-doc\.html -^/struts2\-core\-apidocs/index\-all\.html -^/struts2\-core\-apidocs/overview\-summary\.html -^/struts2\-mailreader/Welcome\.do -^/struts2\-mailreader/config\-browser/index -^/struts2\-mailreader/config\-browser/index\.action -^/struts2\-portlet/Welcome\.do -^/struts2\-portlet/config\-browser/index -^/struts2\-portlet/config\-browser/index\.action -^/struts2\-portlet/example/HelloWorld\.action -^/struts2\-portlet/index\.action -^/struts2\-portlet/showcase\.action -^/struts2\-rest\-showcase/Welcome\.do -^/struts2\-rest\-showcase/config\-browser/index -^/struts2\-rest\-showcase/config\-browser/index\.action -^/struts2\-rest\-showcase/example/HelloWorld\.action -^/struts2\-rest\-showcase/index\.action -^/struts2\-rest\-showcase/showcase\.action -^/struts2\-showcase/config\-browser/index -^/struts2\-showcase/config\-browser/index\.action -^/struts2\-showcase/showcase\.action -^/stuff/ -^/stuworkdisplay\.php\?ID=\-1\)\%20UNION\%20ALL\%20SELECT\%200x53514c2d496e6a656374696f6e2d54657374\,2\,3\,4\,5\,6\,7\,8\,9\,10\,11\%23 -^/style/ -^/styles/ -^/stylesheet/ -^/stylesheets/ -^/subir/ -^/subrion/index\.php -^/subscribe/index\.php -^/sugar/ -^/sugar/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/sugarcrm/ -^/sugarcrm/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/suite/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/suitecrm/index\.php\?action=Login\&module=Users\&login_module=Home\&login_action=index -^/sun/ -^/super_stats/ -^/support/ -^/support/esupport/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/support/index\.php -^/support/index\.php\?_a=knowledgebase\&_j=search\&searchm=\alert\(document\.cookie\)\ -^/support/index\.pl -^/support/installer\.pl -^/support/public\.pl -^/supporter/ -^/surgeweb -^/survey/index\.php -^/svn/ -^/svn/listing\.php -^/svn/viewvc\.cgi/ -^/svn/viewvc/ -^/swdesk/signin\.php -^/swhelpdesk/signin\.php -^/swiftmailer/ -^/swiftmailer/CHANGES -^/swiftmailer/README -^/swiftmailer/composer\.json -^/swiftmailer/lib/ -^/swiftmailer/lib/CHANGES -^/swiftmailer/lib/README -^/swiftmailer/lib/composer\.json -^/sws/index\.sws -^/swvm/ConsoleContainer\.jsp -^/symfony/app\.php -^/symfony/login -^/symfony/src/Symfony/Component/Console/CHANGELOG\.md -^/symfony/web/app_dev\.php/_configurator/step/0 -^/symfony/web/index\.php/auth/login -^/sympa/ -^/symphony/ -^/symphony/index\.php\?mode=administration -^/symphony/symphony/ -^/sys/ -^/sys/en/neoclassic/login/login -^/sysadmin/ -^/sysaid/Login\.jsp -^/sysbackup/ -^/sysmgr/SysMgr\.html -^/system\.xml -^/system/ -^/system/cluster/node -^/system/login -^/system/login\.php -^/system_report/ -^/sysworkflow/en/neoclassic/login/login -^/t_welcom\.cgi\?page=Language_name\&lang=1 -^/tangocms/README -^/tao/install/ -^/tar/ -^/tarantella/ -^/tarjetas/ -^/task/login -^/task/login\.php -^/taskfreak/login -^/taskfreak/login\.php -^/tcexam/public/code/index\.php -^/tcpbx/ -^/tcpdb/main\.php -^/tdbin/ -^/tdiary/index\.rb -^/te_html/ -^/teampass/index\.php -^/tech/ -^/technote/ -^/telaen/index\.php -^/teleparkwiki/index\.php -^/telescope -^/telescope/requests -^/telpho/login\.php -^/tematres/index\.php -^/temp/ -^/template/ -^/templates/ -^/templates/system/css/editor\.css -^/temporal/ -^/tenant\-app\-api/ -^/test\-cgi/ -^/test\.php -^/test\.php\?mode=phpinfo -^/test/ -^/testing/ -^/testlink/login\.php -^/tests/ -^/testweb/ -^/theme1/images/logo\.gif -^/this_page_should_not_exist\.htm -^/tibbr/web/login -^/ticket/ -^/ticket/index\.php -^/tickets/ -^/tickets/index\.php -^/tiki\-index\.php -^/tiki\-install\.php -^/tiki/ -^/tiki/tiki\-index\.php -^/tikiwiki/ -^/tikiwiki/tiki\-index\.php -^/tiles/apidocs/index\.html -^/timesheet/about\-show\.do -^/tinywebgallery/admin/index\.php -^/titleBar\.php -^/tiweb/Account/LogIn -^/tkset/login\.html -^/tmp/ -^/tmpl/news_main\.htm -^/tmui/login\.jsp -^/tmui/tmui/login/welcome\.jsp -^/todoyu/index\.php -^/tomatocart/index\.php -^/tomcat\-docs/changelog\.html -^/tools\.php\?file_id=reset_password -^/tools/ -^/tools/webinterface/index\.php -^/toplist/ -^/topology/home -^/topsites/index\.php -^/torrent/index\.php -^/torrent/site/login\.php -^/torrent/upload/account\-login\.php -^/torrenttrader/index\.php -^/torrenttrader/upload/account\-login\.php -^/torrentvolve/site/login\.php -^/tos/index\.php\?user/login -^/tpv/ -^/trabajo/ -^/trac/ -^/trac/query\?group=/\* -^/track/ -^/tracker/index\.html -^/tracker/index\.php -^/tracker/upload/account\-login\.php -^/tracking/ -^/trackit/Account/LogIn -^/trade\.php -^/transito/ -^/translate/about/ -^/transpolar/ -^/trc/ -^/tree/ -^/trees/ -^/tribisur/scripts\.php -^/triton/login/pages/loginPage\.jsf -^/truc/login\.php -^/ttc/index\.php -^/ttc/upload/account\-login\.php -^/ttwm/tt/index\.php -^/tunnel\"\ 200\ 139121\ \"\-\"\ \"\-\"\ rt=0\.448\ ut=0\.038 -^/tutos/ChangeLog -^/tutos/php/mytutos\.php -^/tvs/Start\.do -^/twg/admin/index\.php -^/twiki/ -^/twiki/bin/view/TWiki/WebHome -^/twiki/cgi\-bin/view/TWiki/WebHome -^/twiki/do/view/TWiki/WebHome -^/twiki/index\.php -^/twiki/view/TWiki/WebHome -^/typo/ -^/typo/ChangeLog -^/typo/typo3/index\.php -^/typo/typo3/sysext/opendocs/composer\.json -^/typo/typo3/sysext/recordlist/composer\.json -^/typo/typo3/sysext/sys_note/composer\.json -^/typo/typo3/sysext/t3editor/composer\.json -^/typo/typo3_src/ChangeLog -^/typo3/ -^/typo3/ChangeLog -^/typo3/index\.php -^/typo3/sysext/opendocs/composer\.json -^/typo3/sysext/recordlist/composer\.json -^/typo3/sysext/sys_note/composer\.json -^/typo3/sysext/t3editor/composer\.json -^/typo3/typo3/index\.php -^/typo3/typo3/sysext/opendocs/composer\.json -^/typo3/typo3/sysext/recordlist/composer\.json -^/typo3/typo3/sysext/sys_note/composer\.json -^/typo3/typo3/sysext/t3editor/composer\.json -^/typo3/typo3_src/ChangeLog -^/typo3_src/ChangeLog -^/uapi\-cgi/ -^/uapi\-cgi/admin/ -^/ucmdb\-ui/login_page\.jsp -^/ucs\-overview/ -^/uebimiau/index\.php -^/ui/ -^/ui/faces/Login\.xhtml -^/ui/images/logo\.png -^/ui/login -^/ui/login/ -^/ui/main\.js -^/ui/modules/login/ -^/uimhome/ -^/um/ -^/umotion/modules/system/externalframe\.php\?context=runtime -^/univention\-management\-console/ -^/upb/db/users\.dat -^/update\.php -^/updater/ -^/updates/ -^/upload\.php -^/upload/ -^/upload/account\-login\.php -^/upload/index\.php -^/uploads/ -^/urchin/ -^/urchin3/ -^/urchin5/ -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini\%00 -^/urheber\.php\?name=\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini\%00 -^/us/ -^/usage/ -^/usebb/index\.php -^/user\.php -^/user/ -^/user/index\.php -^/user/login -^/user_lang\.js -^/userdb/ -^/userlogin\!default\.action -^/userlogin\!doDefault\.action -^/userportal/webpages/myaccount/login\.jsp -^/users/ -^/users/login -^/users/login\.php -^/users/sign_in -^/usr/ -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/boot\.ini\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/etc/passwd\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/windows/win\.ini\%00 -^/usr/extensions/get_tree\.inc\.php\?GLOBALS\[root_path\]=/winnt/win\.ini\%00 -^/ustats/ -^/usuario/ -^/usuarios/ -^/usvn/login/index\.php -^/usvn/public/login/index\.php -^/utf\-8/index\.php -^/util/ -^/utils\.js -^/utils/ -^/v\-webmail/htdocs/login\.php -^/v1/agent/self -^/v1/settings/first\-login -^/v3/settings/first\-login -^/v4/ -^/vPetEngine/index\.php -^/vbulletin/content\.php -^/vbulletin/forum/content\.php -^/vbulletin/forum/index\.php -^/vbulletin/index\.php -^/vco/ -^/vegadns/index\.php -^/vendor/ -^/vendor/plugins/fckeditor/public/javascripts/_whatsnew\.html -^/vendor/plugins/fckeditor/public/javascripts/fckeditor\.js -^/version -^/vfs/ -^/viart/viart_shop\.xml -^/viart_cms/viart_shop\.xml -^/viart_shop\.xml -^/viart_shop/viart_shop\.xml -^/vicidial/welcome\.php -^/view/TWiki/WebHome -^/view/login\.html -^/view/loginPro\.html -^/viewcvs\.cgi/\?cvsroot=\foo\ -^/viewer -^/views/login -^/viewvc\.cgi/ -^/viewvc/ -^/vimbadmin/auth/login -^/visionweb/index2\.html -^/voip/sipserver/login/ -^/volve/site/login\.php -^/vpet/index\.php -^/vpn/ -^/vpn/index\.html -^/vpn/js/ -^/vpn/tmindex\.html -^/vpns/ -^/vpns/cfg/ -^/vpns/portal/ -^/vpns/portal/scripts/ -^/vsmc\.html -^/vsom/ -^/vt\-test\-non\-existent\.html -^/vt\-test/vt\-test\-non\-existent\.html -^/vtigercrm/index\.php -^/vttest\-345678\.html -^/w\-agora/ -^/w\-agora/index\.php -^/w3perl/ -^/warehouse/control/main -^/warehouse/control/main/ -^/wavemaster\.internal/ -^/way\-board/ -^/wbb/acp/index\.php -^/wbb/index\.php -^/wbb/upload/index\.php -^/wbm/index\.php -^/wbm/state\.php -^/wcf/acp/dereferrer\.php\?url=javascript\:alert\(document\.cookie\)\; -^/wcm/index\.jsp -^/web/ -^/web/\?wicket\:bookmarkablePage=\:org\.geoserver\.web\.AboutGeoServerPage -^/web/ACS\.html -^/web/app_dev\.php/_configurator/step/0 -^/web/guest -^/web/guest/en/websys/status/configuration\.cgi -^/web/help\.php -^/web/index\.html -^/web/index\.php -^/web/login -^/web/magmi\.php -^/web/signin -^/web800fo/ -^/webERP/index\.php -^/webEdition/index\.php -^/webMathematica/ -^/web_caps/webCapsConfig -^/web_usage/ -^/webaccess/ -^/webacs/pages/common/login\.jsp -^/webadmin/ -^/webadmin/start/index\.php -^/webalizer/ -^/webapp -^/webapp/ -^/webapp/home\.html\?0 -^/webappng/sites/meetings/dashboard/home -^/webapps/ -^/webboard/ -^/webcalendar/login\.php -^/webcart\-lite/ -^/webcart/ -^/webconsole/webpages/login\.jsp -^/webcookbook/index\.php -^/webdata/ -^/webdav/ -^/webdb/ -^/webedition/index\.php -^/weberp/index\.php -^/webftp/help\.html -^/webftp/index\.php -^/webgrind/index\.php -^/webid/index\.php -^/webimages/ -^/webimages2/ -^/weblate/about/ -^/webline/html/admin/wcs/LoginPage\.jhtml\?oper=login\&dest=\%2Fadmin\%2FCiscoAdmin\.jhtml -^/weblog/ -^/weblogger/index\.php -^/weblogin\.htm -^/weblogs/ -^/webmail/ -^/webmail/\?interface=basic -^/webmail/database/_sessions/ -^/webmail/htdocs/login\.php -^/webmail/index\.php -^/webmail/index\.php/admin -^/webmail/login\.php -^/webmail/source/index\.php -^/webmail/src/login\.php -^/webmailpro/ -^/webman/index\.cgi -^/webmaster/ -^/webmaster_logs/ -^/webmatic/index\.php -^/webplus\.exe\?about -^/webplus\?about -^/webpos/control/main -^/webpos/control/main/ -^/webpub\-ui/ -^/webpub/ -^/webreports/ -^/webreps/ -^/webserv/index\.ssi -^/webshare/ -^/website/ -^/websiteadmin/index\.php -^/webstat/ -^/webstats/ -^/webstore/control/main -^/websvn/ -^/websvn/listing\.php -^/webthings/forum\.php\?forum=\-1\%20UNION\%20SELECT\%20null\%2c123456\%2cnull\%2cnull\%2cnull\%2cnull\%2f\* -^/webtier/ess\.do -^/webtier/index\.do -^/webtools/control/main -^/webtools/control/main/ -^/webtrace/ -^/webtrends/ -^/webui/index\.php -^/welcome\.do -^/welcome/index\.html -^/whizzy/index\.php -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./boot\.ini -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./etc/passwd -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./windows/win\.ini -^/whizzy/index\.php\?\.\./\.\./\.\./\.\./\.\./\.\./\.\./winnt/win\.ini -^/whmcs/index\.php -^/wicket\-examples/index\.html -^/wicket/wicket\-examples/index\.html -^/wideimage/composer\.json -^/wideimage/doc/index\.html -^/wideimage/index\.php -^/wiki/ -^/wiki/Main/WebHome -^/wiki/SystemInfo -^/wiki/WikiHome -^/wiki/bin/view/TWiki/WebHome -^/wiki/bin/view/foswiki/WebHome -^/wiki/cgi\-bin/view/TWiki/WebHome -^/wiki/do/view/TWiki/WebHome -^/wiki/doku\.php -^/wiki/feed\.php -^/wiki/index\.php -^/wiki/index\.php/Special\:Version -^/wiki/login\.action -^/wiki/pmwiki\.php -^/wiki/tiki\-index\.php -^/wiki/view/TWiki/WebHome -^/wikihelp/index\.php -^/windows/ -^/wing/admin_login\.html -^/wingftp/admin_login\.html -^/winscp\.ini -^/wmail/login\.php -^/wme/index\.php\?action=login -^/wondercms/nonexistent\.php -^/word/ -^/wordpress\-mu/ -^/wordpress\-mu/feed/ -^/wordpress\-mu/index\.php -^/wordpress\-mu/readme\.html -^/wordpress\-mu/wp\-links\-opml\.php -^/wordpress\-mu/wp\-login\.php -^/wordpress/ -^/wordpress/database\.sql -^/wordpress/feed/ -^/wordpress/index\.php -^/wordpress/installer\-backup\.php -^/wordpress/installer\.php -^/wordpress/readme\.html -^/wordpress/wp\-admin/ -^/wordpress/wp\-content/ -^/wordpress/wp\-content/gallery/ -^/wordpress/wp\-content/languages/ -^/wordpress/wp\-content/plugins/ -^/wordpress/wp\-content/themes/ -^/wordpress/wp\-content/upgrade/ -^/wordpress/wp\-links\-opml\.php -^/wordpress/wp\-login\.php -^/work/ -^/workeffort/control/main -^/workeffort/control/main/ -^/workspace/ -^/wp\-admin/ -^/wp\-admin/install\.php -^/wp\-admin/setup\-config\.php -^/wp\-config\.php\.backup -^/wp\-config\.php\.bak -^/wp\-config\.php\.bkp -^/wp\-config\.php\.copy -^/wp\-config\.php\.old -^/wp\-config\.php\.orig -^/wp\-config\.php\.temp -^/wp\-config\.php\.tmp -^/wp\-content/ -^/wp\-content/gallery/ -^/wp\-content/languages/ -^/wp\-content/plugins/ -^/wp\-content/plugins/ckeditor\-for\-wordpress/ckeditor/CHANGES\.md -^/wp\-content/plugins/ckeditor\-for\-wordpress/ckeditor/ckeditor\.js -^/wp\-content/plugins/fckeditor\-for\-wordpress/fckeditor/_whatsnew\.html -^/wp\-content/plugins/fckeditor\-for\-wordpress/fckeditor/fckeditor\.js -^/wp\-content/themes/ -^/wp\-content/upgrade/ -^/wp\-content/uploads/ -^/wp\-includes/ -^/wp\-json/ -^/wp\-links\-opml\.php -^/wp\-login\.php -^/wp/database\.sql -^/wp/installer\-backup\.php -^/wp/installer\.php -^/wpad\.dat -^/wps/portal/Home/Welcome/ -^/wrm/index\.php -^/ws/ -^/ws/auth/ -^/ws/axis2\-admin/ -^/ws/axis2\-web/index\.jsp -^/ws/debug/ -^/ws/index\.jsp -^/ws/pairing/ -^/ws/services/Version/getVersion -^/ws/services/Version\?method=getVersion -^/ws/services/non\-existent -^/ws_ftp\.ini -^/wsdocs/ -^/wstats/ -^/wt2parser\.cgi\?home_en -^/wt4/home -^/wusage/ -^/wwb/index\.php -^/wwb/index\.php\?module=site\&show=home -^/wwh/index\.php -^/wws/ -^/wwsympa/ -^/www\-sql/ -^/www/ -^/www/admin/index\.php -^/www/index\.php -^/www/start\.html -^/wwwboard\.html -^/wwwjoin/ -^/wwwlog/ -^/wwwstat/ -^/wwwstats/ -^/xGB/ -^/x_news\.php -^/xampp/ -^/xampp/index\.php -^/xampp/start\.php -^/xaraya/index\.php -^/xcart/cart\.php -^/xcart_ecommerce/cart\.php -^/xenforo/ -^/xenforo/index\.php -^/xf/ -^/xf/index\.php -^/xml/ -^/xmldata\?item=All -^/xmlpserver/login\.jsp -^/xoops/index\.php -^/xoops/user\.php -^/xoopscelepar/index\.php -^/xplorer/content\.php\?get_action=display_doc\&doc_file=CREDITS -^/xtemp/ -^/xwiki/bin/login/XWiki/XWikiLogin -^/xwiki/bin/view/Main/WebHome -^/xymon\.html -^/xymon/xymon\.html -^/yapig/ -^/zTree/demo/en/index\.html -^/zTree/en/index\.html -^/zabbix/ -^/zabbix/index\.php -^/zb41/ -^/zdm/login_xdm_uc\.jsp -^/zeeways/admin/index\.php -^/zen\-cart/admin/login\.php -^/zen\-cart/index\.php -^/zen/admin/login\.php -^/zenbership\-master/admin/login\.php -^/zenbership/admin/login\.php -^/zenworks/jsp/fw/internal/Login\.jsp -^/zeuscart/index\.php -^/zeuscms/index\.php -^/zikula/ -^/zikula/docs/distribution/tour_page1\.htm -^/zikula/index\.php -^/zimbraAdmin/ -^/zipfiles/ -^/zm/index\.php -^/zml\.cgi\?file=(\.\./)+etc/passwd\%00 -^/zoneminder/index\.php -^/zpanel/index\.php -^/zport/acl_users/cookieAuthHelper/login_form -^/~1/ -^/~admin/ -^/~log/ -^/~root/ -^/~stats/ -^/~webstats/ -^/~wsdocs/ diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re deleted file mode 100644 index 43b15d6..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_icons/icons.re +++ /dev/null @@ -1,8 +0,0 @@ -^/favicon\.ico$ -^/apple-touch-icon.*\.png$ -^/robots\.txt$ -^/sitemap\.xml$ -^/browserconfig\.xml$ -^/site\.webmanifest$ -^/manifest\.json$ -^/\.well-known/ diff --git a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re b/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re deleted file mode 100644 index 94adcdc..0000000 --- a/uwsgi-portal/install/var/lib/lemonldap-ng/crowdsec-filters/urlskip_robots/robots.re +++ /dev/null @@ -1,3 +0,0 @@ -^/robots\.txt$ -^/sitemap\.xml$ -^/\.well-known/