Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Select an option

  • Save oguzdelioglu/d3f9f9abf84b4e5b0509c40647ccd16a to your computer and use it in GitHub Desktop.

Select an option

Save oguzdelioglu/d3f9f9abf84b4e5b0509c40647ccd16a to your computer and use it in GitHub Desktop.
Cloudflare Waf List Custom Regex Mode
(http.request.uri.path in {"/.env" "/.env.local" "/.env.production" "/.env.bak" "/.git/config" "/.git/head" "/.ssh/id_rsa" "/.ssh/id_dsa" "/.ssh/authorized_keys" "/.aws/credentials" "/.aws/config" "/.azure-pipelines.yml" "/.docker/config" "/.dockercfg" "/.npmrc" "/.composer-auth.json" "/.kube/config" "/etc/passwd" "/proc/self/environ" "/config.php" "/config.php.bak" "/config/database.yml" "/config/settings.py" "/web.config" "/Web.config" "/application.ini" "/settings.local.yml" "/.htaccess" "/.htpasswd" "/phpinfo.php" "/info.php" "/_profiler/phpinfo" "/actuator/env" "/actuator/health" "/actuator/heapdump" "/actuator/logfile" "/actuator/metrics" "/admin/" "/adminer.php" "/phpmyadmin/" "/phpMyAdmin/" "/pma/" "/wp-admin/" "/wp-config.php" "/wp-config.php.bak" "/wp-content/debug.log" "/.wp-config.php.swp" "/backup.sql" "/database.sql" "/dump.sql" "/db.sql" "/backup.sh" "/mysql.sql" "/mysqldump.sql" "/config.js" "/appsettings.json" "/client_secrets.json" "/google-services.json" "/service-account-credentials.json" "/firebase-debug.log" "/.vault-token" "/.shodan/api_key" "/.git-credentials" "/auth/token" "/api/v1/namespaces/default/secrets" "/api/v1/namespaces/default/pods" "/server-status" "/nginx_status" "/debug/pprof" "/debug/vars" "/jmx-console/" "/jolokia/" "/druid/index.html" "/_cat/indices" "/_cluster/health" "/solr/" "/cacti/" "/nagios/" "/zabbix/" "/grafana/" "/jenkins/script" "/jenkins/config.xml" "/.jenkins.sh" "/exposed_secrets.txt" "/credentials.json" "/parameters.yml" "/.remote/info" "/.s3cfg" "/.bash_history" "/.mysql_history" "/Dockerfile" "/docker-compose.yml" "/Procfile" "/package-lock.json" "/composer.lock" "/yarn.lock" "/error.log" "/access.log" "/logs/access.log" "/logs/error.log" "/WEB-INF/web.xml" "/WEB-INF/config.xml" "/WEB-INF/debug.xml" "/META-INF/context.xml" "/api-docs" "/swagger-ui.html" "/swagger.json" "/graphiql" "/graphql" "/.well-known/security.txt" "/.well-known/envoy" "/aws.sh" "/setup.php" "/install.php" "/upgrade.php" "/emergency.php" "/test.php" "/old-index.php" "/copy-of-config.php" "/temp.sql" "/backup.zip" "/project.zip" "/site.tar.gz" "/www.zip" "/config.old" "/settings.bak" "/.idea/workspace.xml" "/.idea/php.xml" "/.vscode/settings.json" "/nbproject/project.properties" "/.terraform/terraform.tfstate" "/terraform.tfstate.backup" "/.serverless/" "/.netlify/" "/.vercel/" "/core" "/heapdump" "/java.hprof" "/dump.hprof" "/WS_FTP.LOG" "/filezilla.xml" "/recentservers.xml" "/.bashrc" "/.zshrc" "/.profile" "/id_rsa.pub" "/id_rsa.bak" "/id_rsa.old" "/id_rsa.save" "/id_rsa.1" "/.history" "/config/jwt/private.pem" "/jwt/private.pem" "/key.pem" "/localhost.key" "/server.key" "/cert.pem" "/.gnupg/" "/.netrc" "/.passwd-s3fs" "/auth.json" "/config.json" "/secrets.yml" "/master.key" "/credentials.db" "/access_tokens.db" "/.postman/" "/postman_collection.json" "/insomnia.json" "/.insomnia/" "/swagger.yaml" "/openapi.yaml" "/api/swagger.json" "/v1/swagger.json" "/v2/swagger.json" "/api/v1/status/config" "/actuator/mappings" "/actuator/scheduledtasks" "/actuator/threaddump" "/actuators/env" "/management/env" "/management/health" "/management/heapdump" "/management/logfile" "/management/metrics" "/cloudfoundryapplication" "/hystrix.stream" "/jolokia/list" "/jolokia/version" "/debug/pprof/heap" "/debug/pprof/profile" "/debug/pprof/trace" "/debug/pprof/goroutine" "/debug/pprof/threadcreate" "/debug/pprof/block" "/debug/pprof/mutex" "/debug/pprof/allocs" "/debug/vars" "/expvar" "/metrics" "/prometheus" "/federate" "/api/v1/query" "/api/v1/query_range" "/api/v1/series" "/api/v1/status/config" "/api/v1/status/rules" "/api/v1/targets" "/alertmanager/" "/kibana/" "/elasticsearch/" "/logstash/" "/splunk/" "/graylog/" "/papertrail/" "/sumologic/" "/newrelic/" "/datadog/" "/dynatrace/" "/appdynamics/" "/instana/" "/lightstep/" "/honeycomb/" "/sentry/" "/bugsnag/" "/rollbar/" "/airbrake/" "/raygun/" "/exceptionless/" "/logrocket/" "/fullstory/" "/hotjar/" "/mixpanel/" "/amplitude/" "/segment/" "/heap/" "/salesforce/" "/hubsoft/" "/marketo/" "/pardot/" "/eloqua/" "/mailchimp/" "/sendgrid/" "/mailgun/"})
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment