查看waf规则

query字段格式

CodeInjection 代码注入
FileInclusion 文件包含
HTTPProxy 代理
Leakages 数据泄露
SQLInjection SQL注入
ScannerDetection 程序监测/扫描器
SessionFixation 会话固定攻击
ShellInjection shell后门
XSS xss
Customize 自定义waf规则

其他查询参数

appname 分类

["joomla","Yeager","PivotX","WordPress","EasyHosting","Drupal","易托管","Zenphoto","Z-BlogPHP","Grawlix","CouchCMS","BigwareShop","Magmi","ProjeQtor","VtigerCRM","vBulletin","Microweber","WHMCS","Owncloud","DOKEOS","SimplePHPBplog","Coppermine","Vivvo","Tikiwiki","Zencart","TimThumb","PhpMyAdmin","TestLink","PrestaShop","PHP-Fusion","SugarCRM","Dolibarr","CMSMadeSimple","Coldfusion","Domino","WordPressPlugin","Adminsystems","Machform","WUZHI","Piwigo","SEMCMS","concrete5","EPESI","RabbitMQ","青蛙CMS","WebsiteBaker","Gnew","pfSense","FiyoCMS","GeckoCMS","MySqlLite","MantisBT","WolfCMS","refbase","osTicket","X2EngineX2CRM","DomainMod","SilverStripeCMS","ExponentCMS","SymphonyCMS","Metinfo","SubrionCMS","waimaiSuper","Serendipity","PHPMyWind","OpenEMR","cacti","ZeroCMS","GeniXCMS","TYPO3","ol-commerce","glFusion","LibreNMS","LimeSurvey","AuraCMS","ILIAS","phpLiteAdmin","FreeReprintablesArticleFR","Sefrengo","Saurus","optherapps"]

joomla 223230
Yeager  393734,393721
PivotX 393739,241320,241321,242420,244240,244490
WordPress 331216,377360
EasyHosting 391739
Drupal 377308,391235
易托管  391709
Zenphoto 393738
Z-BlogPHP 245970,246060,246110
Grawlix 393720
CouchCMS 393719
BigwareShop 364577
Magmi 344577,244160
ProjeQtor 344477
VtigerCRM 343481,220560,220230,222140,240890
vBulletin 377300,342154,376476,347474,331358,390649,390650
Microweber 337472,241590
WHMCS 378410,317368,331357,222040
Owncloud 331323,242730,242910,243330
DOKEOS 333458,220940,220941,220942
SimplePHPBplog 380107,380108,380101,380103,390486,220770
Coppermine 390205,240390,243230,245870,215050,243220,248200
Vivvo 390104,390105
Tikiwiki  390176,310087
Zencart 377323,377316,390637,390638,320757
TimThumb 380215,381214,381202
PhpMyAdmin 311293,220630,221490,240160,241470,241471,241472,241500,241501,241502,241610,242780,243110,220100,245720,247750,220090,241570,241620,241621,241720,242490,242860,247740
TestLink  311294,241830,247940
Prestashop 377320,377321,377322
PHP-Fusion 221292,221293,221294,221295,221296,221297,221298,241760,241761,243160,243161,243162,243163,243164,243165,243166,243167,243168,221190,247910,247911
SugarCRM 377303,391744,391745
Dolibarr  221360,221361
CMSMadeSimple 380105,215080,220780,220790,220791,242640,244590,245250,245670,245671,245880,246280,246960,247180,246290,246310,220960,248140
Coldfusion 310155,310156,310157,310158,310160,310161,310162,310163,310164,310165,310166,310167,310168,310171,310172,310173,310174,310175,310176,310154
Domino 310185,310186,310187,310188,310189,310190,310191,310192,310193,310194,310195,310196,310197,310198,310199,310200
WordPressPlugin 232320,220550
Adminsystems  241370,241380
Machform 220120,220122,247690,220110,220070
WUZHI 246330,246340,246350,246540,246560,246630,246860,247480,247510
Piwigo 240640,240750
SEMCMS 247830,248120,248130
concrete5 221330,241270,241271,241272,241273,241274,241275,241276,241279,241280,241290,241310,241940,241941,241942,245440,244080
EPESI 243980,243990,244000,244010,244220,244420,244430,244530
RabbitMQ 243510,243511
青蛙cms 245910,246040,246740
WebsiteBaker 241490,241491,241492,244580,241480
Gnew 243200,243203,243250,243251,243252,220980,220981,247970,247971,220990
pfSense 221610,221611,221612,221614,221620,221630,221631,221632,247730
FiyoCMS 241660,241661,241670,241671,244840,245350,247710,247711,241630,244850,244890,244990,245020,245260,245490
GeckoCMS 241050,241051,241052,241053,241054,241055,241056,241057,241058,241059,241060,241061,241070,241071
MySqlLite 242100,242101
MantisBT  240430,242250,242540,242580,242631,242670,242750,243690,244070,244100,244110,244170,244180,244190,244210,244820,247000,247130,244280,244390,247950
WolfCMS  246440,246450,246451,246510,246580
refbase  240690,240940,240941,240942,240980,240981,240982,240983,240984,240930,241740,242970
osTicket  241400,242140,242141,242142,245840,245850
X2EngineX2CRM 242940,247980,243461,243462,240001,241430
DomainMod  246090,246170,247070,247080,247190,246990
SilverStripecms  245300,245710
ExponentCMS  241850,242040,242840,243380,243530,243790,243280,243440,243450,243560,243561,242710,243270,243390,243490,243520
Symphonycms 240760,240860,240870,244370,221020,243900
Metinfo 245510,246890,247410,247420,247430,247440,245320
Subrioncms 246380,246381,246660,248000,246430
waimaiSuper 246930,246940
Serendipity 240770,241820,243570,240500,240520,240550,243600,245400,240540
PHPMyWind 247680,247820
OpenEMR 242590,242650,245160,245690,246070,246680,246700,246790,246820,246830,247760,242831,242832,247020,247770
cacti 240400,242600,242610,247250,247290,222330,222331,240280,240350,240360,240380,240670,241410,241840,242760,244740,248020,241580,241581,244960
ZeroCMS 221300,221310,240970
GeniXCMS 240230,240231,241190,241191,242120,242121,243610,243670,243680,243720,243740,243760,243810,243811,244340,245120,245940,243800,243870
TYPO3 377309,241800,242820,240960,240990,240991
Dolibarr 221360,221361,221362,221363,221364,240800,240810,241300,241301,241302,244350,244360,245420,245700,245900,246030,246031,246032,246100,246770,246800,247100,247220,211060,221350,244450,245030,245040,245540,245550,245560,245960,246550,247140,247160,247300,247310,247320,246120,247700
SEMCMS 247830,248120,248130
ol-commerce 210450,210451,210452,247960
Piwigo 240640,240750,243480,243620,244520,244720,244721,245580,245630,245660,245750,245760,245790,245800,248030,218560,240740,241000,241001,241770,241900,244570,245360,245570,245610,245770,247920,243640,243660,244130,244780,245620
glFusion  220510,220511,220512
LibreNMS 248160,248180
LimeSurvey 240060,240070,240071,240080,246880,240580,240590
AuraCMS 220590,220591,242190,242280
ILIAS 220710,220711,248040
phpLiteAdmin  240370,240371
FreeReprintablesArticleFR 240260,240261,240262,240300
Sefrengo 241010,241011,241012,241013,241020,241030,241031
Saurus 241040,241041,241042
optherapps 247460

level为对应的规则威胁程度 1低危 2中危 3高危

请求参数

Authorization

在 Header 添加参数

Authorization

，其值为在 Bearer 之后拼接 Token

示例：

Authorization: Bearer ********************

Query 参数

page

integer

页数

必需

size

integer

每页个数

必需

示例值:

100

query

string

规则类型

可选

string

可选

根据规则id进行搜索，支持批量，使用英文逗号进行分割

示例值:

913100,913210

name

string

可选

根据规则名称进行模糊搜索，支持批量，使用英文逗号,分割

示例值:

扫描器,HTTP

appName

string

可选

用于查询指定应用所对应的waf规则

level

integer

规则等级

可选

instanceId

string

实例id

必需

domain_uuid

string

必需

Header 参数

string

必需

默认值:

application/json

示例代码

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

返回响应

🟢200成功

application/json

Body

code

integer

必需

message

string

必需

total

integer

必需

data

array [object {24}]

必需

level

integer

必需

app_name

string

必需

configuration_notes

string

必需

alert_message

string

必需

rule_class

string

必需

version

string

必需

action

string

必需

additional_information

string

必需

rule_id

integer

必需

filename

string

必需

transforms

string

必需

troubleshooting

string

必需

rule_factory_type

integer

必需

description

string

必需

outside_references

string

必需

tuning_guidance_notes

string

必需

log_types

string

必需

severity

string

必需

http_protocol_phase

string

必需

false_positives

string

必需

original_rule

string

必需

name

string

必需

http_status

string

必需

similar_rules

string

必需

示例

{"code":200,"message":"成功","total":47,"data":[{"level":1,"app_name":"","configuration_notes":"","alert_message":"","rule_class":"","version":"","action":"","additional_information":"","rule_id":933011,"filename":"REQUEST-933-APPLICATION-ATTACK-PHP.conf","transforms":"","troubleshooting":"","rule_factory_type":1,"description":"","outside_references":"","tuning_guidance_notes":"","log_types":"","severity":"","http_protocol_phase":"","false_positives":"","original_rule":"SecRule TX:DETECTION_PARANOIA_LEVEL \"@lt 1\" \"id:933011,phase:1,pass,nolog,skipAfter:END-REQUEST-933-APPLICATION-ATTACK-PHP\"","name":"PHP代码执行攻击防护规则-1","http_status":"","similar_rules":""},{"level":1,"app_name":"","configuration_notes":"","alert_message":"","rule_class":"","version":"","action":"","additional_information":"","rule_id":933012,"filename":"REQUEST-933-APPLICATION-ATTACK-PHP.conf","transforms":"","troubleshooting":"","rule_factory_type":1,"description":"","outside_references":"","tuning_guidance_notes":"","log_types":"","severity":"","http_protocol_phase":"","false_positives":"","original_rule":"SecRule TX:DETECTION_PARANOIA_LEVEL \"@lt 1\" \"id:933012,phase:2,pass,nolog,skipAfter:END-REQUEST-933-APPLICATION-ATTACK-PHP\"","name":"PHP代码执行攻击防护规则-2","http_status":"","similar_rules":""},{"level":3,"app_name":"","configuration_notes":"","alert_message":"","rule_class":"","version":"","action":"","additional_information":"","rule_id":933100,"filename":"REQUEST-933-APPLICATION-ATTACK-PHP.conf","transforms":"","troubleshooting":"","rule_factory_type":1,"description":"PHP注入攻击:发现PHP打开标签","outside_references":"","tuning_guidance_notes":"","log_types":"","severity":"","http_protocol_phase":"","false_positives":"","original_rule":"SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* \"@rx (?:<\\?(?:[^x]|x[^m]|xm[^l]|xml[^\\s]|xml$|$)|<\\?php|\\[(?:/|\\x5c)?php\\])\" \\\n    \"id:933100,\\\n    phase:2,\\\n    block,\\\n    capture,\\\n    t:none,t:lowercase,\\\n    msg:'PHP Injection Attack: PHP Open Tag Found',\\\n    logdata:'Matched Data: %{TX.0} found within %{MATCHED_VAR_NAME}: %{MATCHED_VAR}',\\\n    tag:'application-multi',\\\n    tag:'language-php',\\\n    tag:'platform-multi',\\\n    tag:'attack-injection-php',\\\n    tag:'paranoia-level/1',\\\n    tag:'OWASP_CRS',\\\n    tag:'capec/1000/152/242',\\\n    ver:'OWASP_CRS/4.0.0-rc2',\\\n    severity:'CRITICAL',\\\n    setvar:'tx.php_injection_score=+%{tx.critical_anomaly_score}',\\\n    setvar:'tx.inbound_anomaly_score_pl1=+%{tx.critical_anomaly_score}'\"","name":"PHP代码执行攻击防护规则-3","http_status":"","similar_rules":""},{"level":3,"app_name":"","configuration_notes":"","alert_message":"","rule_class":"","version":"","action":"","additional_information":"","rule_id":933110,"filename":"REQUEST-933-APPLICATION-ATTACK-PHP.conf","transforms":"","troubleshooting":"","rule_factory_type":1,"description":"PHP注入攻击:发现PHP脚本文件上传","outside_references":"","tuning_guidance_notes":"","log_types":"","severity":"","http_protocol_phase":"","false_positives":"","original_rule":"SecRule FILES|REQUEST_HEADERS:X-Filename|REQUEST_HEADERS:X_Filename|REQUEST_HEADERS:X.Filename|REQUEST_HEADERS:X-File-Name \"@rx .*\\.ph(?:p\\d*|tml|ar|ps|t|pt)\\.*$\" \"id:933110,phase:2,block,capture,t:none,t:lowercase,msg:'PHP Injection Attack: PHP Script File Upload Found',logdata:'Matched Data: %{TX.0} found within %{MATCHED_VAR_NAME}: %{MATCHED_VAR}',tag:'application-multi',tag:'language-php',tag:'platform-multi',tag:'attack-injection-php',tag:'paranoia-level/1',tag:'OWASP_CRS',tag:'capec/1000/152/242',ver:'OWASP_CRS/4.0.0-rc2',severity:'CRITICAL',setvar:'tx.php_injection_score=+%{tx.critical_anomaly_score}',setvar:'tx.inbound_anomaly_score_pl1=+%{tx.critical_anomaly_score}'\"","name":"PHP代码执行攻击防护规则-4","http_status":"","similar_rules":""},{"level":3,"app_name":"","configuration_notes":"","alert_message":"","rule_class":"","version":"","action":"","additional_information":"","rule_id":933120,"filename":"REQUEST-933-APPLICATION-ATTACK-PHP.conf","transforms":"","troubleshooting":"","rule_factory_type":1,"description":"PHP注入攻击:发现配置指令","outside_references":"","tuning_guidance_notes":"","log_types":"","severity":"","http_protocol_phase":"","false_positives":"","original_rule":"SecRule REQUEST_COOKIES|!REQUEST_COOKIES:/__utm/|REQUEST_COOKIES_NAMES|ARGS_NAMES|ARGS|XML:/* \"@pmFromFile ./waf_rules/php-config-directives.data\" \\\n    \"id:933120,\\\n    phase:2,\\\n    block,\\\n    capture,\\\n    t:none,t:normalisePath,\\\n    msg:'PHP Injection Attack: Configuration Directive Found',\\\n    logdata:'Matched Data: %{TX.933120_TX_0} found within %{MATCHED_VAR_NAME}: %{MATCHED_VAR}',\\\n    tag:'application-multi',\\\n    tag:'language-php',\\\n    tag:'platform-multi',\\\n    tag:'attack-injection-php',\\\n    tag:'paranoia-level/1',\\\n    tag:'OWASP_CRS',\\\n    tag:'capec/1000/152/242',\\\n    ver:'OWASP_CRS/4.0.0-rc2',\\\n    severity:'CRITICAL',\\\n    setvar:'tx.933120_tx_0=%{tx.0}',\\\n

query字段格式#

其他查询参数#

请求参数

示例代码

返回响应

query字段格式

其他查询参数