mirror of
https://github.com/scr34m/php-malware-scanner.git
synced 2026-06-16 12:30:35 +00:00
Signature update for a pattern $_uU(101).$_uU(118).$_uU(97)
This commit is contained in:
@@ -4,10 +4,13 @@ eval\/\*[a-z0-9]+\*\/
|
|||||||
#
|
#
|
||||||
eval\([a-z0-9]{4,}\(\$[a-z0-9]{4,}, \$[0-9a-z]{4,}\)\);
|
eval\([a-z0-9]{4,}\(\$[a-z0-9]{4,}, \$[0-9a-z]{4,}\)\);
|
||||||
|
|
||||||
#
|
# chr(101).chr(118).chr(97)
|
||||||
(chr\(\d+\^\d+\)\.){4,}
|
(chr\(\d+\^\d+\)\.){4,}
|
||||||
|
|
||||||
#
|
# $_uU(101).$_uU(118).$_uU(97)
|
||||||
|
(\$\_[a-z0-9]{2,}\(\d+\)\.){4,}
|
||||||
|
|
||||||
|
# $uUx[101].$uUx[118].$uUx[97]
|
||||||
(\$[a-z0-9]{3,}\[\d+\]\.){4,}
|
(\$[a-z0-9]{3,}\[\d+\]\.){4,}
|
||||||
|
|
||||||
#
|
#
|
||||||
|
|||||||
Reference in New Issue
Block a user