Sample update from #94 and some found in servers

This commit is contained in:
Gabor Gyorvari
2026-02-24 06:58:29 +01:00
parent 201ab77516
commit ba466dc1ff
2 changed files with 26 additions and 6 deletions

View File

@@ -146,6 +146,8 @@ eval\([A-Za-z0-9]{5,}\(\) \. '
# eval function return, parameter is a hex string
eval\([A-Za-z0-9]{5,}\(\"[A-Z0-9]{16,}
eval\(\s+'\?>'
# gzip payload called by variable named function
\$[a-zA-Z0-9]{6,}\('\x78\x9C\xAD\x90\x41\x0E
@@ -159,4 +161,7 @@ return @\$[a-z]{2}\d+\[\d+\]\(\$[a-z]{2}\d+\[\d+\],
# JS - escaped command
\.fromCharCode\([0-9,]{4,}\)
\+-parseInt\(\w\('0x[0-9a-z]+'\)\)\/
\+-parseInt\(\w\('0x[0-9a-z]+'\)\)\/
# concated hash value
('[a-z0-9]{2,}'\.){4,}