new scan changes
This commit is contained in:
10
scan.sh
10
scan.sh
@@ -16,28 +16,30 @@ base64 = "patterns/base64.txt"
|
||||
mailing = "patterns/mailing.txt"
|
||||
polymorphic = "patterns/polymorphic.txt"
|
||||
crypto = "patterns/crypto.txt"
|
||||
shells = "patterns/shells.txt"
|
||||
misc = "patterns/misc.txt"
|
||||
|
||||
# Scanning for Phishing
|
||||
for i in $(cat $phishing)
|
||||
do
|
||||
grep -Rl -e $i --include=*.{php,phtml,js,html,suspected}* /home/$user/public_html
|
||||
grep -Rle $i --include=*.{php,phtml,js,html,suspected}* /home/$user/public_html
|
||||
done
|
||||
|
||||
|
||||
# Scanning for base64
|
||||
for i in $(cat $base64)
|
||||
do
|
||||
grep -Rl -e $i /home/$user/public_html
|
||||
grep -Rle $i --include=*.{php,phtml,js,html,suspected}* /home/$user/public_html
|
||||
done
|
||||
|
||||
# Scanning for Mailing Scripts
|
||||
for i in $(cat $mailing)
|
||||
do
|
||||
grep -Rl -e $i /home/$user/public_html
|
||||
grep -Rle $i --include=*.{php,phtml}* /home/$user/public_html
|
||||
done
|
||||
|
||||
# Scanning for CryptoCurrency Miners
|
||||
for i in $(cat $crypto)
|
||||
do
|
||||
grep -Rl -e $i /home/$user/public_html
|
||||
grep -Rle $i /home/$user/public_html
|
||||
done
|
||||
Reference in New Issue
Block a user