new pattern
This commit is contained in:
parent
613d6a0464
commit
88959d7a59
6
scan.py
6
scan.py
@ -4,6 +4,11 @@
|
|||||||
# Original code by Planet-Work <f.vanniere@planet-work.com>
|
# Original code by Planet-Work <f.vanniere@planet-work.com>
|
||||||
# Forked by Malin Cenusa for Lunarpages (malin.cenusa@lunarpages.com)
|
# Forked by Malin Cenusa for Lunarpages (malin.cenusa@lunarpages.com)
|
||||||
#
|
#
|
||||||
|
# To Do:
|
||||||
|
# - Organize
|
||||||
|
# - Translate
|
||||||
|
# - Add more patterns
|
||||||
|
#
|
||||||
|
|
||||||
import os
|
import os
|
||||||
import re
|
import re
|
||||||
@ -424,6 +429,7 @@ def is_hacked(filename):
|
|||||||
or (line_num == 2 and "$ref = $_SERVER['HTTP_USER_AGENT'];" in l) \
|
or (line_num == 2 and "$ref = $_SERVER['HTTP_USER_AGENT'];" in l) \
|
||||||
or (line_num < 4 and "passthru($_POST[" in l) \
|
or (line_num < 4 and "passthru($_POST[" in l) \
|
||||||
or (line_num == 1 and '$stg="ba"."se"."64_d"."ecode";eval($stg(' in l) \
|
or (line_num == 1 and '$stg="ba"."se"."64_d"."ecode";eval($stg(' in l) \
|
||||||
|
or '(edoced_46esab(etalfnizg(lave' in l \
|
||||||
or "file_put_contents('1.txt', print_r" in l:
|
or "file_put_contents('1.txt', print_r" in l:
|
||||||
score.append(('PHP_SHELL', ''))
|
score.append(('PHP_SHELL', ''))
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user