mirror of
https://github.com/scr34m/php-malware-scanner.git
synced 2026-06-16 12:30:35 +00:00
Signature update reported in #19
This commit is contained in:
@@ -340,4 +340,8 @@ $f1 = ".ht"; $f2 = "acc"; $f3 = "ess";
|
||||
# split escaped
|
||||
\x73\x70\x6C\x69\x74
|
||||
# >tpircs/< aka </script>
|
||||
\x3E\x74\x70\x69\x72\x63\x73\x2F\x3C
|
||||
\x3E\x74\x70\x69\x72\x63\x73\x2F\x3C
|
||||
# comment spoof function call
|
||||
/*;*/
|
||||
# web shells host type extraction
|
||||
php_uname()
|
||||
|
||||
Reference in New Issue
Block a user