External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update definitions by report #5

Browse Source
This commit is contained in:
Gabor Gyorvari
2017-08-31 06:54:20 +02:00
parent f2b43f4f0c
commit 68833a6882
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
definitions/patterns_re.txt
View File

@@ -66,3 +66,9 @@ chr\s*\(\s*['"]?\s*((95)|(0[Xx]5[Ff]))\s*['"]?\s*\)
#We can increase from 1100 later if we need to. #We can increase from 1100 later if we need to.
#Long single line of PHP. #Long single line of PHP.
^.*<\?php.{1100,}\?>.*$ ^.*<\?php.{1100,}\?>.*$
#Escaped path characters: \x2fho\x6de/\x69mp\x75ls\x69oq\x65/w\x77w. or \x2fhome\x2fimpu\x6csioq\x65/www\x2emusc
(\\x[0-9abcdef]{2}[a-z0-9.-\/]{1,4}){4,}
#Malware inffected files sometimes marked with comments like /*87cda*/ to avoid infect again
\/\*[a-z0-9]{5}\*\/