Signature update reported in #20

This commit is contained in:
Gabor Gyorvari
2018-08-14 07:44:16 +02:00
parent 8d69958dcd
commit 07b9cb6e80
2 changed files with 7 additions and 0 deletions

View File

@@ -96,3 +96,6 @@ eval\(\$[a-z0-9_]+\(\$_POST
# web shells host type extraction RE
php_uname\(["'asrvm]+\)
# XOR decode POST-ed payload
(\^\s*\$\w+\[\$\w+\s*%\s*strlen\(\$\w+\)\]\s*){2,}