External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Added Experimental Patterns

Browse Source 
Removed anyresults.net from the base64 pattern strings.

Added base64 patterns for $_POST $_GET $_REQUEST $_COOKIE extract and GLOBALS
This commit is contained in:
nichogenius
2017-08-15 23:51:37 -06:00
committed by GitHub
parent b7942d6874
commit 3b8dff160b
1 changed files with 29 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
patterns_raw.txt
View File

@@ -132,10 +132,35 @@ Y3NsYXNoZX
NzbGFzaGVz NzbGFzaGVz
jc2xhc2hlc jc2xhc2hlc
# "anyresults.net" in base64 ... this one may be too specific ? # "extract" in base64
YW55cmVzdWx0cy5uZX ZXh0cmFjd
FueXJlc3VsdHMubmV0 V4dHJhY3
hbnlyZXN1bHRzLm5ld leHRyYWN0
# "$_GET" in base64
JF9HRV
RfR0VU
kX0dFV
# "$_POST" in base64
JF9QT1NU
RfUE9TV
kX1BPU1
# "$_COOKIE" in base64
JF9DT09LSU
RfQ09PS0lF
kX0NPT0tJR
# "$_REQUEST" in base64
JF9SRVFVRVNU
RfUkVRVUVTV
kX1JFUVVFU1
# "GLOBALS" in base64
R0xPQkFMU
dMT0JBTF
HTE9CQUxT
# Obfuscation related code # Obfuscation related code
eval("?> eval("?>