External/php-malware-scanner
1
0
Fork 0
mirror of https://github.com/scr34m/php-malware-scanner.git synced 2026-06-16 12:30:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Compare commits

base: External:1.0.13
Branches Tags
External:master External:gh-pages
External:1.0.31 External:1.0.30 External:1.0.29 External:1.0.28 External:1.0.27 External:1.0.26 External:1.0.25 External:1.0.24 External:1.0.23 External:1.0.22 External:1.0.21 External:1.0.20 External:1.0.19 External:1.0.18 External:1.0.17 External:1.0.16 External:1.0.15 External:1.0.14 External:1.0.13 External:1.0.12 External:1.0.11 External:1.0.10 External:1.0.9 External:1.0.8 External:1.0.7 External:1.0.6 External:1.0.5 External:1.0.4 External:1.0.3 External:1.0.2 External:1.0.1 External:1.0.0
..
compare: External:1.0.16
Branches Tags
External:master External:gh-pages
External:1.0.31 External:1.0.30 External:1.0.29 External:1.0.28 External:1.0.27 External:1.0.26 External:1.0.25 External:1.0.24 External:1.0.23 External:1.0.22 External:1.0.21 External:1.0.20 External:1.0.19 External:1.0.18 External:1.0.17 External:1.0.16 External:1.0.15 External:1.0.14 External:1.0.13 External:1.0.12 External:1.0.11 External:1.0.10 External:1.0.9 External:1.0.8 External:1.0.7 External:1.0.6 External:1.0.5 External:1.0.4 External:1.0.3 External:1.0.2 External:1.0.1 External:1.0.0

3 Commits
1.0.13 ... 1.0.16

Author SHA1 Message Date
Gabor Gyorvari
f1b8b89ca5 Samples update, reported in #77 2022-07-07 14:42:37 +02:00
Gabor Gyorvari
c6a52dc67e Whitelist update, reported in #76 2022-06-30 20:55:37 +02:00
Gabor Gyorvari
3b76a7270e Backdoor reported in #72 2022-03-24 18:46:58 +01:00
2 changed files with 34 additions and 22 deletions
Expand all files Collapse all files

6
definitions/patterns_re.txt
View File

@@ -133,3 +133,9 @@ explode\('\|\x01\|\x03\|\x03', gzinflate\(
# backdoor reported #71 # backdoor reported #71
@header\(\w{3,5}::\w{1,2}\('_\w{1,3}' \. '\w{1,3}', '_\w{1,3}'\)\); @header\(\w{3,5}::\w{1,2}\('_\w{1,3}' \. '\w{1,3}', '_\w{1,3}'\)\);
@header\(\w{3,5}::\w{1,2}\('_\w{1,3}', '_' \. '\w{1,3}' . '\w{1,3}'\)\); @header\(\w{3,5}::\w{1,2}\('_\w{1,3}', '_' \. '\w{1,3}' . '\w{1,3}'\)\);
# backdoor reported #72
@\$[a-z]{1}\[\d+\]\(\$[a-z]{1}\[\d+\]\);
# reported #77
\$[a-z]11 \^ [a-z]8\(\$[a-z]6, \$[a-z]14, \$[a-z]6\[13\]\(\$[a-z]11\)\)\)\);

6
whitelist.txt
View File

@@ -278,3 +278,9 @@ bb127b5ce56b45e8b4b91de2e60dd9eb /assets/components/googleanalytics/js/mgr/libs
abfd2987afd1f66e3eed50bebbeb6750 /sucuri-scanner-1.8.24/src/base.lib.php abfd2987afd1f66e3eed50bebbeb6750 /sucuri-scanner-1.8.24/src/base.lib.php
78477b67cb223e4504689fef33119884 /sucuri-scanner-1.8.24/src/sitecheck.lib.php 78477b67cb223e4504689fef33119884 /sucuri-scanner-1.8.24/src/sitecheck.lib.php
e48460f6ef0c911dc5ad558c57bfd52f /sucuri-scanner-1.8.24/src/integrity.lib.php e48460f6ef0c911dc5ad558c57bfd52f /sucuri-scanner-1.8.24/src/integrity.lib.php
29f34168b7384cca58ba64885461e115 wp-admin/includes/class-pclzip.php -> Wordpress Core 6.0
a54895edc1402cf1b7b5ecd3f5d85e6b wp-includes/formatting.php -> Wordpress Core 6.0
178f2fbc6a48f605ed84b156103d5366 wp-content/plugins/wordpress-seo/vendor_prefixed/guzzlehttp/guzzle/src/Middleware.php -> Yoast SEO plugin 19.2
1e2d246c57d2123aa8938c8263cb1d3d wp-content/plugins/wordpress-seo/admin/tracking/class-tracking-server-data.php -> Yoast SEO plugin 19.2
cacb5670ebb2de31976a4b2eb06cac86 wp-content/plugins/worker/src/MWP/ServiceContainer/Abstract.php -> managewp plugin 4.9.14 from managewp.com
ffa76b9ff298702a733747521cfdee69 wp-content/plugins/worker/src/MWP/Action/GetState.php -> managewp plugin 4.9.14 from managewp.com