From 26458d20afe0d7cf17d464f8157aa273f4a14f5f Mon Sep 17 00:00:00 2001 From: Gabor Gyorvari Date: Sun, 14 May 2023 08:59:43 +0200 Subject: [PATCH] Sample update --- definitions/patterns_raw.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/definitions/patterns_raw.txt b/definitions/patterns_raw.txt index d9b3b73..f9dac5e 100644 --- a/definitions/patterns_raw.txt +++ b/definitions/patterns_raw.txt @@ -205,6 +205,7 @@ http://www.fopo.com.ar/ @eval("\ ";eval( eval(eval( +@eval(` #Malware/Attack specific strings/fingerprints/signatures MagelangCyber @@ -413,6 +414,10 @@ eval(rawurldecode(' 'ode', 'e64_', 'bas', 'dec' 'unct', 'ion', 'te_f', 'crea' 'te', 'g', 'nf', 'l', 'a', 'zi' +'tion', 'e_func', 'creat' +'64_d', 'se', 'eco', 'de', 'ba' +'co', 'ki', 'e', 'o', 'set' +'str', '_rep', 'lace' # process data from request object directly extract($_REQUEST) && @$