External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Backdoor reported in #71

Browse Source
This commit is contained in:
Gabor Gyorvari
2021-12-13 18:09:02 +01:00
parent 43876b337b
commit f0bdb1f1e1
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
definitions/patterns_re.txt
View File

@@ -128,4 +128,8 @@ create_function\s*\(\s*['"]{2}
\(count\(\$p\)==\d+&&in_array\(gettype\(\$p\)\.count\(\$p\),\$p\)\)
# gzipped payload post process
explode\('\|\x01\|\x03\|\x03', gzinflate\(
explode\('\|\x01\|\x03\|\x03', gzinflate\(
# backdoor reported #71
@header\(\w{3,5}::\w{1,2}\('_\w{1,3}' \. '\w{1,3}', '_\w{1,3}'\)\);
@header\(\w{3,5}::\w{1,2}\('_\w{1,3}', '_' \. '\w{1,3}' . '\w{1,3}'\)\);