From 18929a47aacfca4302e5a8de861c30d7a7f67ee8 Mon Sep 17 00:00:00 2001
From: Gabor Gyorvari <scr34m@gmail.com>
Date: Wed, 22 Feb 2017 14:01:44 +0100
Subject: [PATCH] Japanese keywoard SEO hack

More info at https://developers.google.com/webmasters/hacked/docs/fixing_the_japanese_keyword_hack
---
 patterns_raw.txt | 1 +
 patterns_re.txt  | 1 +
 2 files changed, 2 insertions(+)

diff --git a/patterns_raw.txt b/patterns_raw.txt
index 1e2739f..4ef95c9 100644
--- a/patterns_raw.txt
+++ b/patterns_raw.txt
@@ -150,3 +150,4 @@ WSOsetcookie(
 Dr.abolalh
 C0derz.com
 Mr.HiTman
+\x47\x4c\x4f\x42\x41\x4c\x53
\ No newline at end of file
diff --git a/patterns_re.txt b/patterns_re.txt
index e033050..f0b53f6 100644
--- a/patterns_re.txt
+++ b/patterns_re.txt
@@ -15,3 +15,4 @@ if\s*\(\s*mail\s*\(\s*\$mails\[\$i\]\s*,\s*\$tema\s*,\s*base64_encode\s*\(\s*\$t
 fwrite\s*\(\s*\$fh\s*,\s*stripslashes\s*\(\s*@*\$_(GET|POST|SERVER|COOKIE|REQUEST)\[
 echo\s+file_get_contents\s*\(\s*base64_url_decode\s*\(\s*@*\$_(GET|POST|SERVER|COOKIE|REQUEST)
 chr\s*\(\s*101\s*\)\s*\.\s*chr\s*\(\s*118\s*\)\s*\.\s*chr\s*\(\s*97\s*\)\s*\.\s*chr\s*\(\s*108\s*\)
+(\$OOO_O_000_\{\d+\}.){3,}
\ No newline at end of file