
    i%
                     r    d Z ddlZddlZg dg dg dg dg dg dg d	Zdd
dddZd Zedk(  r e        yy)u   
Security Patterns - 보안 취약점 패턴 데이터

이 파일은 보안 패턴이 추가/수정될 때만 변경됨
코드 검토 로직과 분리되어 있음 (SRP 준수)
    N)z(execute\s*\(\s*[\"'].*%s.*[\"']\s*%\s*\(zcursor\.execute\s*\(\s*f[\"']z\.raw\s*\(\s*[\"'].*\+.*[\"']zSELECT.*FROM.*WHERE.*\+)zinnerHTML\s*=zdocument\.write\s*\(z\.html\s*\(\s*[^\"']zrender_template_string\s*\()z password\s*=\s*[\"'][^\"']+[\"']zapi_key\s*=\s*[\"'][^\"']+[\"']zsecret\s*=\s*[\"'][^\"']+[\"']ztoken\s*=\s*[\"'][^\"']+[\"']z!private_key\s*=\s*[\"']-----BEGIN)	eval\s*\(z	exec\s*\(zcompile\s*\(z__import__\s*\()z\.\./z\.\.\\zos\.path\.join\s*\([^)]*\+)zos\.system\s*\(z*subprocess\.call\s*\([^)]*shell\s*=\s*Truez+subprocess\.Popen\s*\([^)]*shell\s*=\s*Truer   )zSQL InjectionzXSS (Cross-Site Scripting)zHardcoded SecretzCode InjectionzPath TraversalzCommand InjectionzInsecure Dependencies         )lowmediumhighcriticalc            
      x   t        t        j                        dkD  r~t        j                  d   dk(  rht        t	        j
                  t        t              t        t        j                               t        t        j                               dd             yt        t	        j
                  ddi             y)	u   CLI 테스트 인터페이스r   test)patterns_loadedrisk_levelspattern_typesr   )indentusagez!python3 security_patterns.py testN)
lensysargvprintjsondumpsVULNERABILITY_PATTERNSlistRISK_LEVELSkeys     R/home/jay/workspace/.worktrees/task-2116-dev1/memory/red_team/security_patterns.pymainr   9   s    
388}qSXXa[F2JJ'*+A'B#'(8(8(:#;%)*@*E*E*G%H
 		
 	djj'#FGHIr   __main__)__doc__r   r   r   r   r   __name__r   r   r   <module>r#      si     
#
  K& R 1aQ?J" zF r   