mirror of
https://github.com/scr34m/php-malware-scanner.git
synced 2026-06-16 12:30:35 +00:00
Signature update for a pattern $_uU(101).$_uU(118).$_uU(97)
This commit is contained in:
@@ -4,10 +4,13 @@ eval\/\*[a-z0-9]+\*\/
|
||||
#
|
||||
eval\([a-z0-9]{4,}\(\$[a-z0-9]{4,}, \$[0-9a-z]{4,}\)\);
|
||||
|
||||
#
|
||||
# chr(101).chr(118).chr(97)
|
||||
(chr\(\d+\^\d+\)\.){4,}
|
||||
|
||||
#
|
||||
# $_uU(101).$_uU(118).$_uU(97)
|
||||
(\$\_[a-z0-9]{2,}\(\d+\)\.){4,}
|
||||
|
||||
# $uUx[101].$uUx[118].$uUx[97]
|
||||
(\$[a-z0-9]{3,}\[\d+\]\.){4,}
|
||||
|
||||
#
|
||||
|
||||
Reference in New Issue
Block a user