Security vulnerabilities knowledge base - OWASP Top 10 2025 + Advanced
| 287 | |
| 288 | # ==================== KNOWLEDGE BASE ==================== |
| 289 | class SecurityKnowledgeBase: |
| 290 | """Security vulnerabilities knowledge base - OWASP Top 10 2025 + Advanced""" |
| 291 | |
| 292 | # Common vulnerability patterns database |
| 293 | VULN_PATTERNS = { |
| 294 | "php": { |
| 295 | # A05:2025 - Injection |
| 296 | "rce": [ |
| 297 | r'eval\s*\(\s*\$_', |
| 298 | r'system\s*\(\s*\$_', |
| 299 | r'exec\s*\(\s*\$_', |
| 300 | r'shell_exec\s*\(\s*\$_', |
| 301 | r'passthru\s*\(\s*\$_', |
| 302 | r'popen\s*\(\s*\$_', |
| 303 | r'proc_open\s*\(\s*\$_', |
| 304 | r'assert\s*\(\s*\$_', |
| 305 | r'create_function\s*\([^)]*\$_', |
| 306 | r'call_user_func\s*\(\s*["\']eval["\']', |
| 307 | ], |
| 308 | "sql_injection": [ |
| 309 | r'mysql_query\s*\([^)]*\$_', |
| 310 | r'mysqli_query\s*\([^)]*\$_', |
| 311 | r'pg_query\s*\([^)]*\$_', |
| 312 | r'query\s*\([^)]*\$_', |
| 313 | r'prepare\s*\([^)]*\$_', |
| 314 | r'execute\s*\([^)]*\$_', |
| 315 | ], |
| 316 | "path_traversal": [ |
| 317 | r'include\s*\(\s*\$_', |
| 318 | r'require\s*\(\s*\$_', |
| 319 | r'file_get_contents\s*\(\s*\$_', |
| 320 | ], |
| 321 | "deserialization": [ |
| 322 | r'unserialize\s*\(\s*\$_', |
| 323 | ], |
| 324 | "xss": [ |
| 325 | r'echo\s*\$_', |
| 326 | r'print\s*\$_', |
| 327 | r'printf\s*\(\s*\$_', |
| 328 | ], |
| 329 | }, |
| 330 | "python": { |
| 331 | "rce": [ |
| 332 | r'eval\s*\(\s*input', |
| 333 | r'exec\s*\(\s*input', |
| 334 | r'os\.system\s*\(\s*input', |
| 335 | r'subprocess\.run\s*\(\s*input', |
| 336 | ], |
| 337 | "sql_injection": [ |
| 338 | r'cursor\.execute\s*\(\s*f"SELECT', |
| 339 | r'cursor\.execute\s*\(\s*"SELECT.*\%s', |
| 340 | ], |
| 341 | "pickle": [ |
| 342 | r'pickle\.loads\s*\(\s*request', |
| 343 | ], |
| 344 | }, |
| 345 | "javascript": { |
| 346 | "rce": [ |