mirror of
https://github.com/scr34m/php-malware-scanner.git
synced 2026-06-16 12:30:35 +00:00
base64 pattern updates
This commit is contained in:
@@ -107,20 +107,25 @@ SFRUUF9VU0VSX0FHRU5U
|
|||||||
hUVFBfVVNFUl9BR0VOV
|
hUVFBfVVNFUl9BR0VOV
|
||||||
IVFRQX1VTRVJfQUdFTl
|
IVFRQX1VTRVJfQUdFTl
|
||||||
|
|
||||||
# "file_get_contents" in base64
|
# "file" in base64
|
||||||
ZmlsZV9nZXRfY29udGVudH
|
ZmlsZ
|
||||||
ZpbGVfZ2V0X2NvbnRlbnRz
|
ZpbG
|
||||||
maWxlX2dldF9jb250ZW50c
|
maWxl
|
||||||
|
|
||||||
# "gzinflate" in base64
|
# "gzinflate" in base64
|
||||||
Z3ppbmZsYXRl
|
Z3ppbmZsYXRl
|
||||||
d6aW5mbGF0Z
|
d6aW5mbGF0Z
|
||||||
nemluZmxhdG
|
nemluZmxhdG
|
||||||
|
|
||||||
# "fopen" in base64
|
# "open" in base64
|
||||||
Zm9wZW
|
b3Blb
|
||||||
ZvcGVu
|
9wZW
|
||||||
mb3Blb
|
vcGVu
|
||||||
|
|
||||||
|
# "close" in base64
|
||||||
|
Y2xvc2
|
||||||
|
Nsb3Nl
|
||||||
|
jbG9zZ
|
||||||
|
|
||||||
# "array_" in base64
|
# "array_" in base64
|
||||||
YXJyYXlf
|
YXJyYXlf
|
||||||
@@ -162,6 +167,21 @@ R0xPQkFMU
|
|||||||
dMT0JBTF
|
dMT0JBTF
|
||||||
HTE9CQUxT
|
HTE9CQUxT
|
||||||
|
|
||||||
|
# "sizeof" in base64
|
||||||
|
c2l6ZW9m
|
||||||
|
NpemVvZ
|
||||||
|
zaXplb2
|
||||||
|
|
||||||
|
# "printf" in base64
|
||||||
|
cHJpbnRm
|
||||||
|
ByaW50Z
|
||||||
|
wcmludG
|
||||||
|
|
||||||
|
# "define" in base64
|
||||||
|
ZGVmaW5l
|
||||||
|
RlZmluZ
|
||||||
|
kZWZpbm
|
||||||
|
|
||||||
# Obfuscation related code
|
# Obfuscation related code
|
||||||
eval("?>
|
eval("?>
|
||||||
"base64_decode"
|
"base64_decode"
|
||||||
|
|||||||
Reference in New Issue
Block a user