mirror of
https://github.com/scr34m/php-malware-scanner.git
synced 2026-06-16 12:30:35 +00:00
Signature update reported in #20
This commit is contained in:
@@ -96,3 +96,6 @@ eval\(\$[a-z0-9_]+\(\$_POST
|
||||
|
||||
# web shells host type extraction RE
|
||||
php_uname\(["'asrvm]+\)
|
||||
|
||||
# XOR decode POST-ed payload
|
||||
(\^\s*\$\w+\[\$\w+\s*%\s*strlen\(\$\w+\)\]\s*){2,}
|
||||
Reference in New Issue
Block a user