# Nginx WAF rules for SHELLS # Automatically generated from OWASP rules. # Include this file in your server or location block. map $request_uri $waf_block_shells { default 0; "~*Symlink_Sa [0-9.]+" 1; "~*^n n azrail [0-9.]+ by C-W-M" 1; "~*^rnrnGRP WebShell [0-9.]+" 1; "~*<title>.:: .* ~ Ashiyane V [0-9.]+ ::." 1; "~*Mini Shell.*Developed By LameHacker" 1; "~*^ *n[ ]+n[ ]+lostDC -" 1; "~*^ <html><head><title>:: b374k m1n1 [0-9.]+ ::" 1; "~*^.*? - WSO [0-9.]+" 1; "~*^nnRu24PostWebShell -" 1; "~*>SmEvK_PaThAn Shell v[0-9]+ coded by <a href=" 1; "~*^<!DOCTYPE html>n<html>n<!-- By Artyum .*<title>Web Shell" 1; "~*^rnrnrnPhpSpy Ver [0-9]+" 1; "~*lama's'hell v. [0-9.]+" 1; "~*CasuS [0-9.]+ by MafiABoY" 1; "~*NGHshell [0-9.]+ by Cr4shn$" 1; "~*B4TM4N SH3LL.*" 1; "~*^nn
Input command :
n
" 1; "~*s72 Shell v[0-9.]+ Codinf by Cr@zy_King" 1; "~*SimAttacker - (?:Version|Vrsion) : [0-9.]+ -" 1; "~*^ <html>nn<head>nn<title>g00nshell v[0-9.]+" 1; "~*@contains <h1 style=\"margin-bottom: 0\">webadmin.php</h1>" 1; "~*^<title>PHP Web Shellrnrnrn " 1; "~*@contains punkholicshell" 1; "~*^n.*? ~ Shell Inn