External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Webshell matching pattern update

Browse Source
This commit is contained in:
Gabor Gyorvari
2022-07-22 11:28:18 +02:00
parent bf13288367
commit 29e6c73558
1 changed files with 42 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

43
definitions/patterns_iraw.txt
View File

@@ -19,4 +19,45 @@ surfright
# symantec - removed because already a TLD too so generate many false positives # symantec - removed because already a TLD too so generate many false positives
# SEO poison, pharmacy redirect # SEO poison, pharmacy redirect
dealonline.su dealonline.su
# functions escaped as hexadecimal string
7068705f756e616d65
70687076657273696f6e
6368646972
676574637764
707265675f73706c6974
636f7079
66696c655f6765745f636f6e74656e7473
6261736536345f6465636f6465
69735f646972
6f625f656e645f636c65616e28293b
756e6c696e6b
6d6b646972
63686d6f64
7363616e646972
7374725f7265706c616365
68746d6c7370656369616c6368617273
7661725f64756d70
666f70656e
667772697465
66636c6f7365
64617465
66696c656d74696d65
737562737472
737072696e7466
66696c657065726d73
746f756368
66696c655f657869737473
72656e616d65
69735f6172726179
69735f6f626a656374
737472706f73
69735f7772697461626c65
69735f7265616461626c65
737472746f74696d65
66696c6573697a65
726d646972
6f625f6765745f636c65616e
7265616466696c65
617373657274