}return $this->fetch('rooms_detail_two',$return_data);}elseif($data['report_type'] == 9){// 类工装报告return $this->fetch('rooms_detail_three',$return_data);}else{return $this->fetch('mobile_report_detail',$return_data);}}else{if($data['report_type'] == 3 || $data['report_type'] == 4){// 验房报告return $this->fetch('inspection_detail',$return_data);}elseif($data['report_type'] == 6){// 普通验房报告if($data['report_rooms']['type_of_inspection'] == '毛坯验房'){$standard = ArticleService::ArticleDetail(['id' => 156]);$this->assign('standard',$standard);}else{$standard = ArticleService::ArticleDetail(['id' => 157]);
| service_area | think:{"id":"1","province":"440000","city":"440100","name":"%E5%B9%BF%E5%B7%9E","add_time":"1594004353","is_show":"1","is_delete":0,"upd_time":"1708652713","have_admin":"1","show_name":"%E5%B9%BF%E4%B8%9C%E5%B9%BF%E5%B7%9E%E6%80%BB%E9%83%A8","phone":"4000-020-315","addr":"%E5%B9%BF%E5%B7%9E%E5%B8%82%E7%95%AA%E7%A6%BA%E5%8C%BA%E8%BF%8E%E5%AE%BE%E8%B7%AF%E4%BA%94%E6%B4%B2%E5%9F%8EB%E5%BA%A74025","images":"https%3A%2F%2Fimages.niujiaojian.com%2Foxhorn%2Fupload%2Fcompress%2Fcommon%2F2020%2F07%2F16%2FquJ2hjiyu72rulg8HB9s7pEy.png","pc_x":"4.68","pc_y":"4.4","pc_show":"1","chapter":"https%3A%2F%2Fimages.niujiaojian.com%2Foxhorn%2Fupload%2Fcompress%2Fcommon%2F2021%2F02%2F06%2FAG212FUUndkgbda7qOyUbonP.png","open_company":"1","open_book_order":"1","sort":"10","open_flower_construction":0,"open_flower_designer":0,"open_need_supervisor":"1","open_need_user_sign":"1","change_supervisor_check":"1","bad_comment_check":"1","lat":"123.0000000000","lng":"456.0000000000","open_supervisor_confirm_build":"1","show_work":"1","open_grapher":"1","is_show_text":"%E6%98%AF","open_company_text":"%E6%98%AF","open_flower_construction_text":"%E5%90%A6","open_flower_designer_text":"%E5%90%A6","open_need_supervisor_text":"%E6%98%AF","open_need_user_sign_text":"%E6%98%AF","change_supervisor_check_text":"%E6%98%AF","bad_comment_check_text":"%E6%98%AF","show_work_text":"%E6%98%AF","open_grapher_text":"%E6%98%AF","pc_show_text":"%E6%98%AF","province_name":"%E5%B9%BF%E4%B8%9C","city_name":"%E5%B9%BF%E5%B7%9E"} |
| province_id | 440000 |
| city_id | 440100 |
| USER | www |
| HOME | /home/www |
| HTTP_CONNECTION | Keep-Alive |
| HTTP_ACCEPT_ENCODING | zstd, br, gzip |
| HTTP_IF_MODIFIED_SINCE | Tue, 09 Dec 2025 08:28:12 GMT |
| HTTP_ACCEPT_LANGUAGE | en-US,en;q=0.5 |
| HTTP_ACCEPT | text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 |
| HTTP_USER_AGENT | CCBot/2.0 (https://commoncrawl.org/faq/) |
| PATH_INFO | |
| HTTP_HOST | www.niujiaojianli.com |
| REDIRECT_STATUS | 200 |
| SERVER_NAME | www.niujiaojianli.com |
| SERVER_PORT | 80 |
| SERVER_ADDR | 172.16.61.177 |
| REMOTE_PORT | 54256 |
| REMOTE_ADDR | 18.97.9.172 |
| SERVER_SOFTWARE | nginx/1.28.0 |
| GATEWAY_INTERFACE | CGI/1.1 |
| REQUEST_SCHEME | http |
| SERVER_PROTOCOL | HTTP/1.1 |
| DOCUMENT_ROOT | /www/wwwroot/oxhorn/public |
| DOCUMENT_URI | /index.php |
| REQUEST_URI | /index.php?s=/Index/fixture/reportdetail/id/352671.html |
| SCRIPT_NAME | /index.php |
| CONTENT_LENGTH | |
| CONTENT_TYPE | |
| REQUEST_METHOD | GET |
| QUERY_STRING | s=/Index/fixture/reportdetail/id/352671.html |
| SCRIPT_FILENAME | /www/wwwroot/oxhorn/public/index.php |
| FCGI_ROLE | RESPONDER |
| PHP_SELF | /index.php |
| REQUEST_TIME_FLOAT | 1781726570.6229 |
| REQUEST_TIME | 1781726570 |
| __alirasp_plugin_include__\plugin_name | include |
| __alirasp_plugin_include__\plugin_version | 1.0 |
| __alirasp_plugin_include__\plugin_group | standard |
| __alirasp_plugin_include__\travel_str | [ "..\/..\/", "..\\..\\", "..\/..\\", "..\\..\/" ] |
| __alirasp_plugin_include__\block_path_list | [ "\/etc\/passwd", "\/etc\/hosts", "\/etc\/shadow", "\/root\/.ssh\/authorized_keys" ] |
| DS | / |
| ROOT_PATH | /www/wwwroot/oxhorn/public/ |
| ROOT | /www/wwwroot/oxhorn/ |
| __MY_HTTP__ | http |
| __MY_ROOT__ | |
| __MY_ROOT_PUBLIC__ | / |
| __MY_HOST__ | www.niujiaojianli.com |
| __MY_PUBLIC_URL__ | http://www.niujiaojianli.com/ |
| __alirasp_plugin_file_list__\plugin_name | file_list |
| __alirasp_plugin_file_list__\plugin_version | 1.0 |
| __alirasp_plugin_file_list__\plugin_group | standard |
| __alirasp_plugin_file_list__\danger_dict_list | [ "\/etc" ] |
| __alirasp_plugin_ssrf__\plugin_name | ssrf |
| __alirasp_plugin_ssrf__\plugin_version | 1.0 |
| __alirasp_plugin_ssrf__\plugin_group | standard |
| __alirasp_plugin_ssrf__\internalRegex | /^(0\.0\.0|127|10|192\.168|172\.(1[6-9]|2[0-9]|3[01]))\./ |
| __alirasp_plugin_ssrf__\block_dnslog_list | [ ".dns.1433.eu.org", ".dnslog.cn", ".ceye.io", ".burpcollaborator.net", ".gobygo.net", ".dnsbook.xyz", ".oast.live", ".oast.me", ".oast.site", ".oast.online", ".oast.fun", ".oast.pro", ".bxss.me", ".oastify.com", ".xms.la", ".nhg1z.cfd", ".dnslog.click", ".defvul.com", ".ddnnss.top", ".leiaffectionli.xyz", ".dnsbug.cn", ".nks.lol", ".xforlog.cn", ".ipv6.1433.eu.org", ".pingb.in", ".dnslog.ink", ".dnslog.pw", ".zohjftrs.site", ".cve.ink", ".safeveryday.cc", ".hacked.bdsec.top", ".0x557.wang", ".dnslog.rest", ".eyes.sh", ".dnsapi.cc", ".interact.sh", ".dnstunnel.run", ".canarytokens.com", ".7dscan.com", ".autoverify.cn", ".dnslog.cc", ".nbufe.shop", ".vuleye.pw", ".exeye.io", ".vcap.me", ".xip.name", ".xip.io", ".sslip.io", ".nip.io", ".tu4.org", ".2xss.cc", ".godns.vip", ".dnslog.link", ".dnslog.io", ".awvsscan119.autoverify.cn", "iplogger.org", "dnsl0g.cn", "zsec.uk", "csrf.cc", ".webpulse.cn", ".dahepai.com", ".secchecker.site", ".appsechcl.com", ".nx.vii.one", ".mauu.me", ".vii.one", ".xaliyun.com", ".send.jiance.qianxin.com", ".o0w0o.cc", ".oob.li", ".mjmjbb.xyz", ".open-ssl.cf", ".evileye.me", ".microsoftupdate367.xyz", ".dnslog.bid", ".micorrsoft.com", ".r87.me", ".zeye.me", ".test.mydns.com", ".aqpg.cc", ".findyourdreamdns.link", ".e9b.xyz", ".vul.cc", ".dgrh3.cn", ".2for.bid", ".x3wkoc.xyz", ".mapsscanning.com", ".appscan.com", ".et81g.site", ".windows-update.tk", ".fachun.net", ".watchtowr.com", ".ofux.top", ".mooo-ng.com", ".moresec.cc", ".9696.club", ".h.i.ydscan.net", ".h.i.ydscan.com", ".reverse.nsfocus.com", ".zeroscan.xyz", ".axss.xyz", ".log.websectest.cn", ".secdnslog.qihoo.net", ".log-fuzz.top", ".c4p.cc", ".log.xn--9tr.com", ".next-scan.com", ".dahepai.co", ".baidutest.xyz", ".heibaidiguo.cn", ".binlog.fun", ".mixiyihao.xyz", ".dlsr.icu", ".wa0er.top", ".1010.red", ".dlam.site", ".dddns.co", ".gtlog.io", ".dnslog.store", ".dns.dnslogs.online", ".t4l.top" ] |
| __alirasp_plugin_file_read__\plugin_name | file_read |
| __alirasp_plugin_file_read__\plugin_version | 1.0 |
| __alirasp_plugin_file_read__\plugin_group | standard |
| __alirasp_plugin_file_read__\grey_path_list | [ "\/etc\/group", "\/etc\/gshadow", "\/etc\/ssh\/ssh_config", "\/etc\/ssh\/sshd_config", "\/.ssh\/authorized_keys", "\/etc\/sudoers", "\/etc\/fstab", "\/etc\/hosts", "\/etc\/resolv.conf", "\/etc\/network\/interfaces", "\/etc\/sysconfig\/network-scripts", "\/var\/log\/auth.log", "\/var\/log\/secure", "\/var\/log\/syslog", "\/var\/log\/messages", "\/proc" ] |
| __alirasp_plugin_file_read__\block_path_list | [ "\/etc\/passwd", "\/etc\/shadow", "\/root\/.ssh\/authorized_keys", "\/root\/.bash_history", "\/root\/.bash_profile", "\/root\/.bashrc", "c:\/windows\/system32\/inetsrv\/metabase.xml", "c:\/windows\/system32\/drivers\/etc\/hosts", "c:\/boot.ini", "c:\/windows\/win.ini" ] |
| __alirasp_plugin_file_read__\block_travel_list | [ "..\/..\/", "..\\..\\", "..\/..\\", "..\\..\/" ] |
| __alirasp_plugin_file_read__\grey_travel_list | [ "..\/", "..\\" ] |
| __alirasp_plugin_callable__\b355F | callable |
| __alirasp_plugin_callable__\D1oHT | 1.0 |
| __alirasp_plugin_callable__\O0ejE | standard |
| __alirasp_plugin_sql_connection__\plugin_name | sql_connection |
| __alirasp_plugin_sql_connection__\plugin_version | 1.0 |
| __alirasp_plugin_sql_connection__\weak_passwords | [ "q123456", "qq5201314", "qwe123456", "password", "1234567890", "123456a", "123456", "123123123", "5201314520", "123456789.", "aaa123456", "!QAZ@WSX", "a12345678", "qq123456789", "zxc123456", "as123456", "8888888", "woaini1314", "123456q", "987654321", "asd123456", "1", "123", "123321", "aa123456789", "7708801314520", "qwerasdf", "{user}!", "123456789a", "z123456789", "{user}123", "w123456789", "1233211234567", "www123456", "{user}1", "123456789q", "abcd123456", "p@ssw0rd", "123456789abc", "123456.", "123456..", "woaini1314520", "a123456789", "0123456789", "z123456", "0000000000000000", "666666", "abcd1234", "12345678910", "123456789qq", "aini1314", "1234567", "woaini521", "woaini520", "1q2w3e4r", "123456789", "aa123456", "qwerty", "abc123", "12345678", "woaini123", "passw0rd", "123qwe!@#", "1234567891234567", "12345678900", "123456asd", "zxcvbnm123", "000000", "test", "abcd123", "qwer!@#$", "1314520", "123456abc", "admin888", "123123", "P@ssw0rd!!", "a123456", "{user}{user}", "52013145201314", "admin", "1qaz2wsx", "wang123456", "123456qq", "123456aa", "{user}2018", "a123123", "{user}2016", "{user}2017", "{user}2015", "qwa123", "123456789..", "woaini", "w123456", "abc123456", "abc123456789", "1111111111111111", "q123456789", "qaz123456", "12345", "qq123456", "123qwe", "{user}", "a5201314", "manager", "oem_temp", "tiger", "aqadm", "dbsnmp" ] |
| __alirasp_plugin_sql__\plugin_name | sql |
| __alirasp_plugin_sql__\plugin_version | 1.0 |
| __alirasp_plugin_sql__\plugin_group | standard |
| __alirasp_plugin_sql__\block_func_re | /\b(hextoraw|cast_to_varchar2|chr|length|substr|HTTPURITYPE|DBURITYPE|pg_sleep_for|query_to_xml|user|database|outfile|dumpfile|load_file|benchmark|pg_sleep|sleep|lpad|is_srvrolemember|updatexml|extractvalue|ascii|substring|pg_read_file|pg_read_binary_file|query_to_xml_and_xmlschema|database_to_xml|waitfor)\W*\([\s\S]*\)/i |
| __alirasp_plugin_sql__\block_query_re | /union\W+[\s\S]*select|insert\W+into[\s\S]+values\W*\(|grant[\s\S]{3,}privileges|\/\*[\s\S]*\*\/|into\W+(outfile|dumpfile)/i |
| __alirasp_plugin_sql__\grey_func_re | /\b([^\s\S])\W*\([\s\S]*\)/i |
| __alirasp_plugin_sql__\grey_query_re | /[^\s\S]/i |
| __alirasp_plugin_file_upload__\plugin_name | file_upload |
| __alirasp_plugin_file_upload__\plugin_version | 1.0 |
| __alirasp_plugin_file_upload__\plugin_group | standard |
| __alirasp_plugin_file_upload__\danger_stacks | [ "@unserialize", "@yaml_parse", "@assert", "@create_function", "@call_user_func", "@eval" ] |
| __alirasp_plugin_file_upload__\block_suffix_list | [ ".htaccess", ".user.ini" ] |
| __alirasp_plugin_file_upload__\grey_suffix_list | [ ".exe", ".sh", ".scr", ".py", ".dll", ".bat", ".cmd", ".vbs", ".so", ".phtml", ".phar" ] |
| __alirasp_plugin_file_upload__\travel_str | [ "..\/..\/", "..\\..\\", "..\/..\\", "..\\..\/" ] |
| __alirasp_plugin_file_upload__\white_stacks | [ "\/library\/think\/cache\/driver\/File.php@file_put_contents", "\/library\/think\/template\/driver\/File.php@file_put_contents" ] |
</tbody><?php } ?></table><?php } ?></div><?php } ?><div class="copyright"><a title="" href="" target="_blank"></a><span><?php echo APPLICATION_VERSION; ?></span><a title="" href="" target="_blank" class="bbs-ask"></a><span></span></div><?php if(\think\facade\App::isDebug()) { ?><script>var LINE = <?php echo $line; ?>;function $(selector, node){var elements;
| service_area | think:{"id":"1","province":"440000","city":"440100","name":"%E5%B9%BF%E5%B7%9E","add_time":"1594004353","is_show":"1","is_delete":0,"upd_time":"1708652713","have_admin":"1","show_name":"%E5%B9%BF%E4%B8%9C%E5%B9%BF%E5%B7%9E%E6%80%BB%E9%83%A8","phone":"4000-020-315","addr":"%E5%B9%BF%E5%B7%9E%E5%B8%82%E7%95%AA%E7%A6%BA%E5%8C%BA%E8%BF%8E%E5%AE%BE%E8%B7%AF%E4%BA%94%E6%B4%B2%E5%9F%8EB%E5%BA%A74025","images":"https%3A%2F%2Fimages.niujiaojian.com%2Foxhorn%2Fupload%2Fcompress%2Fcommon%2F2020%2F07%2F16%2FquJ2hjiyu72rulg8HB9s7pEy.png","pc_x":"4.68","pc_y":"4.4","pc_show":"1","chapter":"https%3A%2F%2Fimages.niujiaojian.com%2Foxhorn%2Fupload%2Fcompress%2Fcommon%2F2021%2F02%2F06%2FAG212FUUndkgbda7qOyUbonP.png","open_company":"1","open_book_order":"1","sort":"10","open_flower_construction":0,"open_flower_designer":0,"open_need_supervisor":"1","open_need_user_sign":"1","change_supervisor_check":"1","bad_comment_check":"1","lat":"123.0000000000","lng":"456.0000000000","open_supervisor_confirm_build":"1","show_work":"1","open_grapher":"1","is_show_text":"%E6%98%AF","open_company_text":"%E6%98%AF","open_flower_construction_text":"%E5%90%A6","open_flower_designer_text":"%E5%90%A6","open_need_supervisor_text":"%E6%98%AF","open_need_user_sign_text":"%E6%98%AF","change_supervisor_check_text":"%E6%98%AF","bad_comment_check_text":"%E6%98%AF","show_work_text":"%E6%98%AF","open_grapher_text":"%E6%98%AF","pc_show_text":"%E6%98%AF","province_name":"%E5%B9%BF%E4%B8%9C","city_name":"%E5%B9%BF%E5%B7%9E"} |
| province_id | 440000 |
| city_id | 440100 |
| USER | www |
| HOME | /home/www |
| HTTP_CONNECTION | Keep-Alive |
| HTTP_ACCEPT_ENCODING | zstd, br, gzip |
| HTTP_IF_MODIFIED_SINCE | Tue, 09 Dec 2025 08:28:12 GMT |
| HTTP_ACCEPT_LANGUAGE | en-US,en;q=0.5 |
| HTTP_ACCEPT | text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 |
| HTTP_USER_AGENT | CCBot/2.0 (https://commoncrawl.org/faq/) |
| PATH_INFO | |
| HTTP_HOST | www.niujiaojianli.com |
| REDIRECT_STATUS | 200 |
| SERVER_NAME | www.niujiaojianli.com |
| SERVER_PORT | 80 |
| SERVER_ADDR | 172.16.61.177 |
| REMOTE_PORT | 54256 |
| REMOTE_ADDR | 18.97.9.172 |
| SERVER_SOFTWARE | nginx/1.28.0 |
| GATEWAY_INTERFACE | CGI/1.1 |
| REQUEST_SCHEME | http |
| SERVER_PROTOCOL | HTTP/1.1 |
| DOCUMENT_ROOT | /www/wwwroot/oxhorn/public |
| DOCUMENT_URI | /index.php |
| REQUEST_URI | /index.php?s=/Index/fixture/reportdetail/id/352671.html |
| SCRIPT_NAME | /index.php |
| CONTENT_LENGTH | |
| CONTENT_TYPE | |
| REQUEST_METHOD | GET |
| QUERY_STRING | s=/Index/fixture/reportdetail/id/352671.html |
| SCRIPT_FILENAME | /www/wwwroot/oxhorn/public/index.php |
| FCGI_ROLE | RESPONDER |
| PHP_SELF | /index.php |
| REQUEST_TIME_FLOAT | 1781726570.6229 |
| REQUEST_TIME | 1781726570 |
| __alirasp_plugin_include__\plugin_name | include |
| __alirasp_plugin_include__\plugin_version | 1.0 |
| __alirasp_plugin_include__\plugin_group | standard |
| __alirasp_plugin_include__\travel_str | [ "..\/..\/", "..\\..\\", "..\/..\\", "..\\..\/" ] |
| __alirasp_plugin_include__\block_path_list | [ "\/etc\/passwd", "\/etc\/hosts", "\/etc\/shadow", "\/root\/.ssh\/authorized_keys" ] |
| DS | / |
| ROOT_PATH | /www/wwwroot/oxhorn/public/ |
| ROOT | /www/wwwroot/oxhorn/ |
| __MY_HTTP__ | http |
| __MY_ROOT__ | |
| __MY_ROOT_PUBLIC__ | / |
| __MY_HOST__ | www.niujiaojianli.com |
| __MY_PUBLIC_URL__ | http://www.niujiaojianli.com/ |
| __alirasp_plugin_file_list__\plugin_name | file_list |
| __alirasp_plugin_file_list__\plugin_version | 1.0 |
| __alirasp_plugin_file_list__\plugin_group | standard |
| __alirasp_plugin_file_list__\danger_dict_list | [ "\/etc" ] |
| __alirasp_plugin_ssrf__\plugin_name | ssrf |
| __alirasp_plugin_ssrf__\plugin_version | 1.0 |
| __alirasp_plugin_ssrf__\plugin_group | standard |
| __alirasp_plugin_ssrf__\internalRegex | /^(0\.0\.0|127|10|192\.168|172\.(1[6-9]|2[0-9]|3[01]))\./ |
| __alirasp_plugin_ssrf__\block_dnslog_list | [ ".dns.1433.eu.org", ".dnslog.cn", ".ceye.io", ".burpcollaborator.net", ".gobygo.net", ".dnsbook.xyz", ".oast.live", ".oast.me", ".oast.site", ".oast.online", ".oast.fun", ".oast.pro", ".bxss.me", ".oastify.com", ".xms.la", ".nhg1z.cfd", ".dnslog.click", ".defvul.com", ".ddnnss.top", ".leiaffectionli.xyz", ".dnsbug.cn", ".nks.lol", ".xforlog.cn", ".ipv6.1433.eu.org", ".pingb.in", ".dnslog.ink", ".dnslog.pw", ".zohjftrs.site", ".cve.ink", ".safeveryday.cc", ".hacked.bdsec.top", ".0x557.wang", ".dnslog.rest", ".eyes.sh", ".dnsapi.cc", ".interact.sh", ".dnstunnel.run", ".canarytokens.com", ".7dscan.com", ".autoverify.cn", ".dnslog.cc", ".nbufe.shop", ".vuleye.pw", ".exeye.io", ".vcap.me", ".xip.name", ".xip.io", ".sslip.io", ".nip.io", ".tu4.org", ".2xss.cc", ".godns.vip", ".dnslog.link", ".dnslog.io", ".awvsscan119.autoverify.cn", "iplogger.org", "dnsl0g.cn", "zsec.uk", "csrf.cc", ".webpulse.cn", ".dahepai.com", ".secchecker.site", ".appsechcl.com", ".nx.vii.one", ".mauu.me", ".vii.one", ".xaliyun.com", ".send.jiance.qianxin.com", ".o0w0o.cc", ".oob.li", ".mjmjbb.xyz", ".open-ssl.cf", ".evileye.me", ".microsoftupdate367.xyz", ".dnslog.bid", ".micorrsoft.com", ".r87.me", ".zeye.me", ".test.mydns.com", ".aqpg.cc", ".findyourdreamdns.link", ".e9b.xyz", ".vul.cc", ".dgrh3.cn", ".2for.bid", ".x3wkoc.xyz", ".mapsscanning.com", ".appscan.com", ".et81g.site", ".windows-update.tk", ".fachun.net", ".watchtowr.com", ".ofux.top", ".mooo-ng.com", ".moresec.cc", ".9696.club", ".h.i.ydscan.net", ".h.i.ydscan.com", ".reverse.nsfocus.com", ".zeroscan.xyz", ".axss.xyz", ".log.websectest.cn", ".secdnslog.qihoo.net", ".log-fuzz.top", ".c4p.cc", ".log.xn--9tr.com", ".next-scan.com", ".dahepai.co", ".baidutest.xyz", ".heibaidiguo.cn", ".binlog.fun", ".mixiyihao.xyz", ".dlsr.icu", ".wa0er.top", ".1010.red", ".dlam.site", ".dddns.co", ".gtlog.io", ".dnslog.store", ".dns.dnslogs.online", ".t4l.top" ] |
| __alirasp_plugin_file_read__\plugin_name | file_read |
| __alirasp_plugin_file_read__\plugin_version | 1.0 |
| __alirasp_plugin_file_read__\plugin_group | standard |
| __alirasp_plugin_file_read__\grey_path_list | [ "\/etc\/group", "\/etc\/gshadow", "\/etc\/ssh\/ssh_config", "\/etc\/ssh\/sshd_config", "\/.ssh\/authorized_keys", "\/etc\/sudoers", "\/etc\/fstab", "\/etc\/hosts", "\/etc\/resolv.conf", "\/etc\/network\/interfaces", "\/etc\/sysconfig\/network-scripts", "\/var\/log\/auth.log", "\/var\/log\/secure", "\/var\/log\/syslog", "\/var\/log\/messages", "\/proc" ] |
| __alirasp_plugin_file_read__\block_path_list | [ "\/etc\/passwd", "\/etc\/shadow", "\/root\/.ssh\/authorized_keys", "\/root\/.bash_history", "\/root\/.bash_profile", "\/root\/.bashrc", "c:\/windows\/system32\/inetsrv\/metabase.xml", "c:\/windows\/system32\/drivers\/etc\/hosts", "c:\/boot.ini", "c:\/windows\/win.ini" ] |
| __alirasp_plugin_file_read__\block_travel_list | [ "..\/..\/", "..\\..\\", "..\/..\\", "..\\..\/" ] |
| __alirasp_plugin_file_read__\grey_travel_list | [ "..\/", "..\\" ] |
| __alirasp_plugin_callable__\b355F | callable |
| __alirasp_plugin_callable__\D1oHT | 1.0 |
| __alirasp_plugin_callable__\O0ejE | standard |
| __alirasp_plugin_sql_connection__\plugin_name | sql_connection |
| __alirasp_plugin_sql_connection__\plugin_version | 1.0 |
| __alirasp_plugin_sql_connection__\weak_passwords | [ "q123456", "qq5201314", "qwe123456", "password", "1234567890", "123456a", "123456", "123123123", "5201314520", "123456789.", "aaa123456", "!QAZ@WSX", "a12345678", "qq123456789", "zxc123456", "as123456", "8888888", "woaini1314", "123456q", "987654321", "asd123456", "1", "123", "123321", "aa123456789", "7708801314520", "qwerasdf", "{user}!", "123456789a", "z123456789", "{user}123", "w123456789", "1233211234567", "www123456", "{user}1", "123456789q", "abcd123456", "p@ssw0rd", "123456789abc", "123456.", "123456..", "woaini1314520", "a123456789", "0123456789", "z123456", "0000000000000000", "666666", "abcd1234", "12345678910", "123456789qq", "aini1314", "1234567", "woaini521", "woaini520", "1q2w3e4r", "123456789", "aa123456", "qwerty", "abc123", "12345678", "woaini123", "passw0rd", "123qwe!@#", "1234567891234567", "12345678900", "123456asd", "zxcvbnm123", "000000", "test", "abcd123", "qwer!@#$", "1314520", "123456abc", "admin888", "123123", "P@ssw0rd!!", "a123456", "{user}{user}", "52013145201314", "admin", "1qaz2wsx", "wang123456", "123456qq", "123456aa", "{user}2018", "a123123", "{user}2016", "{user}2017", "{user}2015", "qwa123", "123456789..", "woaini", "w123456", "abc123456", "abc123456789", "1111111111111111", "q123456789", "qaz123456", "12345", "qq123456", "123qwe", "{user}", "a5201314", "manager", "oem_temp", "tiger", "aqadm", "dbsnmp" ] |
| __alirasp_plugin_sql__\plugin_name | sql |
| __alirasp_plugin_sql__\plugin_version | 1.0 |
| __alirasp_plugin_sql__\plugin_group | standard |
| __alirasp_plugin_sql__\block_func_re | /\b(hextoraw|cast_to_varchar2|chr|length|substr|HTTPURITYPE|DBURITYPE|pg_sleep_for|query_to_xml|user|database|outfile|dumpfile|load_file|benchmark|pg_sleep|sleep|lpad|is_srvrolemember|updatexml|extractvalue|ascii|substring|pg_read_file|pg_read_binary_file|query_to_xml_and_xmlschema|database_to_xml|waitfor)\W*\([\s\S]*\)/i |
| __alirasp_plugin_sql__\block_query_re | /union\W+[\s\S]*select|insert\W+into[\s\S]+values\W*\(|grant[\s\S]{3,}privileges|\/\*[\s\S]*\*\/|into\W+(outfile|dumpfile)/i |
| __alirasp_plugin_sql__\grey_func_re | /\b([^\s\S])\W*\([\s\S]*\)/i |
| __alirasp_plugin_sql__\grey_query_re | /[^\s\S]/i |
| __alirasp_plugin_file_upload__\plugin_name | file_upload |
| __alirasp_plugin_file_upload__\plugin_version | 1.0 |
| __alirasp_plugin_file_upload__\plugin_group | standard |
| __alirasp_plugin_file_upload__\danger_stacks | [ "@unserialize", "@yaml_parse", "@assert", "@create_function", "@call_user_func", "@eval" ] |
| __alirasp_plugin_file_upload__\block_suffix_list | [ ".htaccess", ".user.ini" ] |
| __alirasp_plugin_file_upload__\grey_suffix_list | [ ".exe", ".sh", ".scr", ".py", ".dll", ".bat", ".cmd", ".vbs", ".so", ".phtml", ".phar" ] |
| __alirasp_plugin_file_upload__\travel_str | [ "..\/..\/", "..\\..\\", "..\/..\\", "..\\..\/" ] |
| __alirasp_plugin_file_upload__\white_stacks | [ "\/library\/think\/cache\/driver\/File.php@file_put_contents", "\/library\/think\/template\/driver\/File.php@file_put_contents" ] |