External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Signature update reported in #19

Browse Source
This commit is contained in:
Gabor Gyorvari
2018-08-02 08:20:49 +02:00
parent a30e6c285a
commit 8d69958dcd
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
definitions/patterns_raw.txt
View File

@@ -340,4 +340,8 @@ $f1 = ".ht"; $f2 = "acc"; $f3 = "ess";
# split escaped # split escaped
\x73\x70\x6C\x69\x74 \x73\x70\x6C\x69\x74
# >tpircs/< aka </script> # >tpircs/< aka </script>
\x3E\x74\x70\x69\x72\x63\x73\x2F\x3C \x3E\x74\x70\x69\x72\x63\x73\x2F\x3C
# comment spoof function call
/*;*/
# web shells host type extraction
php_uname()

3
definitions/patterns_re.txt
View File

@@ -93,3 +93,6 @@ eval\(\$[a-z0-9_]+\(\$_POST
# GLOBALS inject with escaped content # GLOBALS inject with escaped content
\$GLOBALS;\$\{"\\x \$GLOBALS;\$\{"\\x
# web shells host type extraction RE
php_uname\(["'asrvm]+\)