External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity
199 Commits 2 Branches 32 Tags
920cf8a4c61565ca6314215d941d2dcd36c4cd25
Commit Graph

199 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Gabor Gyorvari
920cf8a4c6 Backdoor script samples 1.0.23 2022-08-17 18:52:03 +02:00
Gabor Gyorvari
aa774f4330 Another obfuscated malware check 1.0.22 2022-08-09 09:18:07 +02:00
Győrvári Gábor
cd1164dbb5 Merge pull request #80 from elliotkendall/master 
Cast $needle in calls to strpos/stripos to string to avoid automatic …
1.0.21 		2022-07-25 19:15:19 +02:00
Elliot Kendall
77ebd8abd7 Cast $needle in calls to strpos/stripos to string to avoid automatic ordinal conversion of integer patterns 2022-07-25 09:52:27 -07:00
Gabor Gyorvari
29e6c73558 Webshell matching pattern update 1.0.20 2022-07-22 11:28:18 +02:00
Gabor Gyorvari
bf13288367 Nested function call pattern update 1.0.19 2022-07-17 08:17:20 +02:00
Gabor Gyorvari
088c0761b3 Pattern update about new infections found 1.0.18 2022-07-14 19:59:23 +02:00
Gabor Gyorvari
18b06fc48b Whitelist update and two little pattern fix, reported in #78 1.0.17 2022-07-11 20:03:53 +02:00
Gabor Gyorvari
f1b8b89ca5 Samples update, reported in #77 1.0.16 2022-07-07 14:42:37 +02:00
Gabor Gyorvari
c6a52dc67e Whitelist update, reported in #76 1.0.15 2022-06-30 20:55:37 +02:00
Gabor Gyorvari
3b76a7270e Backdoor reported in #72 1.0.14 2022-03-24 18:46:58 +01:00
Gabor Gyorvari
f0bdb1f1e1 Backdoor reported in #71 1.0.13 2021-12-13 18:09:02 +01:00
Gabor Gyorvari
43876b337b Pattern updates from new infections 1.0.12 2021-05-27 06:57:08 +02:00
Gabor Gyorvari
1fad164790 gzipped payload 2021-05-27 06:57:08 +02:00
Gabor Gyorvari
f4d53e89d8 Pattern updates from new infections 2021-05-27 06:57:08 +02:00
Gabor Gyorvari
34ea02323b New flag to specify custom white list file 1.0.11 2021-04-01 12:44:15 +02:00
Gabor Gyorvari
b74494a4f1 base64 sample for "file" too short and causes false positive 1.0.10 2021-02-26 13:27:58 +01:00
Gabor Gyorvari
9624ec4403 README update with new -r flag 1.0.9 2021-02-24 16:47:13 +01:00
Győrvári Gábor
335b13b7c4 Merge pull request #67 from mitchobrian/master 
Feature flagHideErr #66
 2021-02-24 16:45:34 +01:00
Michael Palmer
78bee49176 https://github.com/scr34m/php-malware-scanner/issues/66 2021-02-24 13:36:10 +01:00
Győrvári Gábor
cc0fdc7a9f Merge pull request #63 from aldavigdis/patch-1 
Adding definitions based on recent code injection
 2020-11-17 08:07:52 +01:00
Alda Vigdis Skarphedinsdottir
ec8f9920ba Adding definitions based on recent code injection 2020-11-17 04:06:03 +01:00
Gabor Gyorvari
5883c68f54 Small example how to use as library, fix #61 1.0.8 2020-10-05 13:34:16 +02:00
Gabor Gyorvari
22b51a1ee3 Change addWordpressChecksums to public, fix #58 2020-10-05 10:59:13 +02:00
Gabor Gyorvari
2b1a0c1266 Signature update from new infections 1.0.7 2020-10-01 11:26:02 +02:00
Gabor Gyorvari
c495cc822c Signature update for a pattern $_uU(101).$_uU(118).$_uU(97) 2020-09-30 17:02:33 +02:00
Gabor Gyorvari
e9a45d4bdc Allowing multiple use of -d option and braces in path syntax, closes #56 1.0.6 2020-08-18 15:36:52 +02:00
Gabor Gyorvari
21185202f3 Combined whitelist updated 1.0.5 2020-06-25 17:10:40 +02:00
Győrvári Gábor
195717d625 Merge pull request #55 from scr34m/libmode 
Change function visibility to allow usage as library
 2020-06-24 10:17:19 +02:00
Gabor Gyorvari
2973e55871 Change function visibility to allow usage as library 2020-06-23 19:37:29 +02:00
Gabor Gyorvari
8b1994956e Whitelist for sucuri-scanner wordpress plugin reported in #54 2020-03-08 17:13:29 +01:00
Győrvári Gábor
46faa31c74 Merge pull request #52 from cbotsikas/fix-php-support 
Use array() instead of the short array syntax []
1.0.4 		2019-07-24 16:32:18 +02:00
Christos Botsikas
d67a865bf0 Use array() instead of the short array syntax [] 
Short array syntax [] was added in PHP 5.4 but the scanner should be able to work with [PHP >=5.2.0](https://github.com/scr34m/php-malware-scanner/blob/master/composer.json#L9).
 2019-07-24 12:32:59 +02:00
Gabor Gyorvari
b290826f82 New option to disable statistics 1.0.3 2019-05-28 09:17:11 +02:00
Gabor Gyorvari
8030cec89f PR-47 comment and duplicate fix 1.0.2 2019-05-17 13:21:04 +02:00
Győrvári Gábor
9ec295f80d Merge pull request #47 from cconversion/master 
Update patterns_raw.txt
 2019-05-17 13:16:55 +02:00
Gabor Gyorvari
00061e5a81 Composer update 1.0.0 1.0.1 2019-05-15 18:49:48 +02:00
Győrvári Gábor
6691e6006c Merge pull request #49 from gallogiuseppe/master 
Set scan method to public to allow for direct scan of single files in library mode
 2019-03-01 11:24:38 +01:00
PROMETEUSWEB\PrometeusWeb
4990f94239 Set scan method to public to allow for direct scan of single files in library mode 2019-03-01 11:02:38 +01:00
Gabor Gyorvari
0546396d01 Combined whitelist sources updated 2019-02-22 11:50:15 +01:00
cconversion
c1c71bd9ef Update patterns_raw.txt 
Added WP-VCD Malware strings
 2019-02-11 05:53:33 +11:00
Gabor Gyorvari
da765046f5 Combined whitelist jquery source packages checksum checks 2019-01-08 20:12:48 +01:00
Gabor Gyorvari
538d7fe3f6 README update 2018-12-31 11:15:54 +01:00
Gabor Gyorvari
79e7067803 Merge branch 't43' 2018-12-31 11:10:53 +01:00
Gabor Gyorvari
507603ae56 Combined whitelist release 2018-12-31 11:10:31 +01:00
Gabor Gyorvari
a0c59205e1 jQuery hashes added to pre generated list 2018-12-11 07:22:22 +01:00
Gabor Gyorvari
e61092bc24 Fix double whitelist checks 2018-12-10 21:59:02 +01:00
Gabor Gyorvari
afc4cd4ef9 Update to live URL for big data 2018-12-10 13:05:21 +01:00
Gabor Gyorvari
5cf90cd371 Working with pre generated big hash database for whitelisting 2018-12-10 13:02:03 +01:00
Gabor Gyorvari
ed5bc006e4 Signature update reported in #42 2018-11-30 11:40:47 +01:00