External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added functions, dropped Spammer.

Browse Source 
Spammers gives false positives.  added a couple more php functions in base64
This commit is contained in:
nichogenius
2017-07-27 07:08:05 -06:00
committed by GitHub
parent c4cac57689
commit 317ff8b6b7
1 changed files with 19 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
patterns_raw.txt
View File

@@ -39,6 +39,21 @@ PD9waH
w/cGhw w/cGhw
8P3Boc 8P3Boc
# "stat" in base64
c3Rhd
N0YX
zdGF0
# "copy" in base64
Y29we
NvcH
jb3B5
# "mail" in base64
bWFpb
1haW
tYWls
# "system" in base64 # "system" in base64
c3lzdGVt c3lzdGVt
N5c3Rlb N5c3Rlb
@@ -59,10 +74,10 @@ YmFzZTY0X2RlY29kZ
Jhc2U2NF9kZWNvZG Jhc2U2NF9kZWNvZG
iYXNlNjRfZGVjb2Rl iYXNlNjRfZGVjb2Rl
# "eval(" in base64 # "eval" in base64
ZXZhbC ZXZhb
V2YWwo V2YW
ldmFsK ldmFs
# "HTTP_USER_AGENT" in base64 # "HTTP_USER_AGENT" in base64
SFRUUF9VU0VSX0FHRU5U SFRUUF9VU0VSX0FHRU5U
@@ -134,8 +149,6 @@ Dr.abolalh
C0derz.com C0derz.com
Mr.HiTman Mr.HiTman
IrSecTeam IrSecTeam
#Spammer gives a lot of false positives... maybe worth dropping
Spammer
FLoodeR FLoodeR
eriuqer eriuqer
zehirhacker zehirhacker