diff --git a/scan.py b/scan.py index 2fb8c08..2c083ba 100644 --- a/scan.py +++ b/scan.py @@ -4,6 +4,11 @@ # Original code by Planet-Work # Forked by Malin Cenusa for Lunarpages (malin.cenusa@lunarpages.com) # +# To Do: +# - Organize +# - Translate +# - Add more patterns +# import os import re @@ -424,6 +429,7 @@ def is_hacked(filename): or (line_num == 2 and "$ref = $_SERVER['HTTP_USER_AGENT'];" in l) \ or (line_num < 4 and "passthru($_POST[" in l) \ or (line_num == 1 and '$stg="ba"."se"."64_d"."ecode";eval($stg(' in l) \ + or '(edoced_46esab(etalfnizg(lave' in l \ or "file_put_contents('1.txt', print_r" in l: score.append(('PHP_SHELL', ''))