diff --git a/patterns_re.txt b/patterns_re.txt index fffaf34..727881e 100644 --- a/patterns_re.txt +++ b/patterns_re.txt @@ -29,3 +29,7 @@ chr\s*\(\s*['"]?\s*((95)|(0[Xx]5[Ff]))\s*['"]?\s*\) #Detects generic base64 strings longer than 260 characters enclosed in quotes ending with 0-3 '=' chars. #260 was a threshold chosen because strings of 256 characters are common enough. Might increase later to reduce false positives. ['"][A-Za-z0-9+\/]{260,}={0,3}['"] + +#Detects long single lines contained within PHP tags. +#We can increase from 750 later if we need to. +^.*<\?php.{750,}\?>.*$