Skip to content

Instantly share code, notes, and snippets.

@leveryd
Last active May 15, 2022 08:51
Show Gist options
  • Save leveryd/51b1ec0130d4b4e9df76d9413ae41239 to your computer and use it in GitHub Desktop.
Save leveryd/51b1ec0130d4b4e9df76d9413ae41239 to your computer and use it in GitHub Desktop.

规则

  • 命令执行

    \.exec\(|\.exec\.Command
    
  • 文件操作

    os\.Create|os\.Open|os\.OpenFile|os\.Stat|os\.Rename|os\.Remove|os\.Link|ioutil\.WriteFile|ioutil\.ReadFile|bufio\.NewWriter|archive/zip|compress/gzip|archive/tar
    
  • ssrf

    http.NewRequest|httpClient.Do
    
  • sql注入

    \bExec\(\b|\bRaw\(\b|\bFirst\(|\bQuery\b\([^\)]{1}|\bExec\b|\bSQL\b|\.OrderBy\(|\.Select\(
    
  • sql连接

    \.NewConfig\(\)
    
  • 不安全的随机数

    math/rand|NewUUID\(\)|sonyflake|\.NewV1\(
    
  • 代理服务

    \.ReverseProxy|NewSingleHostReverseProxy
    
  • 杂项

    webdav
    
@leveryd
Copy link
Author

leveryd commented Apr 15, 2022

审计工具

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment