External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix for #12

Browse Source
This commit is contained in:
Gabor Gyorvari
2018-03-03 08:45:49 +01:00
parent 306b3cf703
commit 4149728e2b
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
definitions/patterns_re.txt
View File

@@ -77,4 +77,13 @@ chr\s*\(\s*['"]?\s*((95)|(0[Xx]5[Ff]))\s*['"]?\s*\)
\/\*[a-z0-9]{5}\*\/ \/\*[a-z0-9]{5}\*\/
# XOR-ed strings with custom math # XOR-ed strings with custom math
%\(\d+\-\d+\+\d+\)==\(\-\d+\+\d+\+\d+\) %\(\d+\-\d+\+\d+\)==\(\-\d+\+\d+\+\d+\)
# eval code from POST on second nested level
eval\(\$[a-z0-9_]+\(\$_POST
# characted concated with chr() alteast 3 times
("[a-z0-9]+"\.chr\(\d+\)\.){3,}
# nested function call used variables
\$[a-z]+\(\$[a-z0-9]+\(