1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
# Execution
exec *\(.*\)
`.*`
passthru *\(.*\)
popen *\(.*\)
proc_close *\(.*\)
proc_open *\(.*\)
proc_get_status *\(.*\)
proc_nice *\(.*\)
proc_terminate *\(.*\)
proc_close *\(.*\)
proc_open *\(.*\)
proc_get_status *\(.*\)
proc_nice *\(.*\)
proc_terminate *\(.*\)
shell_exec *\(.*\)
system *\(.*\)
# Extensions
expect_
pcntl_
posix_
# Semaphore extension
ftok
msg_get_queue
msg_queue_exists
msg_receive
msg_remove_queue
msg_send
msg_set_queue
msg_stat_queue
sem_
shm_
shmop_
# Otherstuffs
header *\(.*\$_(GET|POST|REQUEST|COOKIE).*\)
eval\s*\(\s*.\$.*\s*\)
file *\(.\$.*\)
file_get_contents *\(.\$.*\)
fopen *\(.*\$.*\)
fwrite
move_uploaded_file *\(.*\)
stream_
create_function *\(.*\)
mail *\(.\$.*\)
include *\(.*\$.*\)
include_once *\(.*\$.*\)
preg_replace *\(.\$*\)
readfile *\(.\$.*\)
require *\(.*\$.*\)
require_once *\(.*\$.*\)
# Informatin disclosure
phpinfo *\(.*\)
phpcredits *\(.*\)
php_logo_guid *\(.*\)
php_uname *\(.*\)
phpversion *\(.*\)
zend_logo_guid *\(.*\)
zend_version *\(.*\)
get_loaded_extensions *\(.*\)
# Stefan Esser's research
unserialize *\(.*\)
unserialize_callback_func
# Database
mysql_connect *\(.*\$.*\)
mysql_pconnect *\(.*\$.*\)
mysql_change_user *\(.*\$.*\)
mysql_query *\(.*\$.*\)
mysql_error *\(.*\$.*\)
mysql_set_charset *\(.*\$.*\)
mysql_unbuffered_query *\(.*\$.*\)
pg_connect *\(.*\$.*\)
pg_pconnect *\(.*\$.*\)
pg_execute *\(.*\$.*\)
pg_insert *\(.*\$.*\)
pg_put_line *\(.*\$.*\)
pg_query *\(.*\$.*\)
pg_select *\(.*\$.*\)
pg_send_query *\(.*\$.*\)
pg_set_client_encoding *\(.*\$.*\)
pg_update *\(.*\$.*\)
# Superglobals
getenv *\(.*\)
apache_getenv *\(.*\)
putenv *\(.*\)
apache_setenv *\(.*\)
getallheaders *\(.*\)
apache_request_headers *\(.*\)
apache_response_headers *\(.*\)
\$_ENV\[.*\]
\$_GET\[.*\]
\$_POST\[.*\]
\$_COOKIE\[.*\]
\$_REQUEST\[.*\]
\$_FILES\[.*\]
\$PHPSELF
\$HTTP_GET_VARS
\$http_get_vars
\$HTTP_POST_VARS
\$http_post_vars
\$HTTP_ENV_VARS
\$http_env_vars
\$HTTP_POST_FILES
\$http_post_files
|
