From 7a0cad4d8272c62a4266150a80c854444cfaa3a7 Mon Sep 17 00:00:00 2001 From: Palma Solutions LTD Date: Fri, 11 Jan 2019 08:06:59 +0100 Subject: [PATCH] new whitelist --- malware4.pl | 1 + malware5.pl | 1 + malware6.pl | 1 + scan.py | 9 +++++---- 4 files changed, 8 insertions(+), 4 deletions(-) diff --git a/malware4.pl b/malware4.pl index f84d40b..321eaf7 100644 --- a/malware4.pl +++ b/malware4.pl @@ -552,6 +552,7 @@ foreach my $file (sort @files) { next if $file eq 'youtube.php'; next if $file eq 'FMModelForm_maker_fmc.php'; next if $file eq 'ninja-forms-submission.csv'; + next if $file eq 'Nette.min.php'; print "Scanning $start_dir/$file... "; diff --git a/malware5.pl b/malware5.pl index 28e6eb7..d32713a 100644 --- a/malware5.pl +++ b/malware5.pl @@ -581,6 +581,7 @@ foreach my $file (sort @files) { next if $file eq 'wpGoogleMaps.php'; next if $file eq 'wppa-settings-autosave.php'; next if $file eq 'ninja-forms-submission.csv'; + next if $file eq 'Nette.min.php'; print "Scanning $start_dir/$file... "; diff --git a/malware6.pl b/malware6.pl index d35f7c8..ebf3991 100644 --- a/malware6.pl +++ b/malware6.pl @@ -437,6 +437,7 @@ foreach my $file (sort @files) { next if $file eq 'menu_scan.php'; next if $file eq 'style_dynamic.php'; next if $file eq 'ninja-forms-submission.csv'; + next if $file eq 'Nette.min.php'; print "Scanning $start_dir/$file... "; diff --git a/scan.py b/scan.py index 1d910ca..59d35e1 100644 --- a/scan.py +++ b/scan.py @@ -15,9 +15,10 @@ import fnmatch whitelist = [ '/lp-msh-scanner/', - '/LP-MSH-Scanner-master/' - '/LP-MSH-Scanner-master/scan.php' - '/LP-MSH-Scanner-master/mscan.php' + 'LP-MSH-Scanner-master/', + 'LP-MSH-Scanner-master/scan.php', + 'LP-MSH-Scanner-master/mscan.php', + 'wp-content/plugins/essential-grid/includes/assets/default-posts.php', '/._', 'cache/object/000000/', 'libraries/simplepie/simplepie.php', @@ -636,7 +637,7 @@ if __name__ == '__main__': import yaml SERIALIZER = 'yaml' except ImportError: - import json + import json parser = argparse.ArgumentParser( description='Check directory or file for PHP malwares.') parser.add_argument('directory_file',