mirror of
https://github.com/scr34m/php-malware-scanner.git
synced 2026-06-16 12:30:35 +00:00
Raw signature update reported in #16
This commit is contained in:
@@ -332,4 +332,12 @@ Souheyl Bypass Shell
|
|||||||
Welcome To Our Shell
|
Welcome To Our Shell
|
||||||
Devloped By El Moujahidin
|
Devloped By El Moujahidin
|
||||||
$f1 = ".ht"; $f2 = "acc"; $f3 = "ess";
|
$f1 = ".ht"; $f2 = "acc"; $f3 = "ess";
|
||||||
.php.suspected
|
.php.suspected
|
||||||
|
# join escaped
|
||||||
|
\x6A\x6F\x69\x6E
|
||||||
|
# reverse escaped
|
||||||
|
\x72\x65\x76\x65\x72\x73\x65
|
||||||
|
# split escaped
|
||||||
|
\x73\x70\x6C\x69\x74
|
||||||
|
# >tpircs/< aka </script>
|
||||||
|
\x3E\x74\x70\x69\x72\x63\x73\x2F\x3C
|
||||||
Reference in New Issue
Block a user