External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

extending patterns and whitelists

Browse Source
This commit is contained in:
Gabor Gyorvari
2016-08-15 15:07:23 +02:00
parent dbeec3d29e
commit 4f41362a46
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
scan.php
View File

@@ -149,6 +149,7 @@ class MalwareScanner
'=\'base\'.(32*2).\'_de\'.\'code\'',
'"base64_decode"',
'YmFzZTY0X2RlY29kZ', // base64_decode
'"p"."r"."e"."g"."_"', // preg_
/* 'eval', 'eval(', */
'eval("?>',
@@ -191,6 +192,8 @@ class MalwareScanner
// eval(v5JONDD($v5EKGVD, $vX3Z3DE));
'(chr\(\d+\)\.){4,}',
// chr(22).chr(33).chr(22).chr(22)
'(chr\(\d+\^\d+\)\.){4,}',
// chr(95^57).chr(95^54).chr(95^51).chr(95^58)
'(\$[a-z0-9]{3,}\[\d+\]\.){4,}',
// $saz98[5].$saz98[2].$saz98[1].$saz98[3].$saz98[5]
'chr\(\d+\)\.""\.""\.""\.""\.""',