new pattern

2017-07-13 20:20:09 +02:00
parent 8a68889c1e
commit 3b6bbbdf49
1 changed files with 2 additions and 0 deletions
--- a/malware4.pl
+++ b/malware4.pl
@@ -112,6 +112,8 @@ my @regexen = (
    qr/<\?php\s+eval\(eval\(\".+?\;\}\s+else\s+\{.+?\}\"\)\)\;\s+\?>/is,
    qr/<\?php\s+\/\*\*\s+\*\s+\@package.+?if\s+\(empty\s+\(\$\_POST\)\)\s+\{\s+echo\s+\'Empty\s+data\.\'.+?array\_map\s+\(.+?\$\_POST\[\'([A-z0-9]{1,5})\'\]\)\s+\)\)\;/is,
    qr/<\?php\s+\@require\(\'wp\-admin\/([0-9]{1,20})\'\)\;/is,
+    qr/<\?php\s+echo\s+\'([0-9]{1,20})\.txt\'\;\s+\?>/is,
+


 );