diff --git a/README.md b/README.md index 58b0f1d..35ce584 100644 --- a/README.md +++ b/README.md @@ -1,13 +1,23 @@ -# LP-MSH-Scanner +# Palma Solutions - Malware Audit & Cleanup -LP MSH Scanner +Palma Solutions - Malware Audit & Cleanup -Made by Malin Cenusa +Made & maintained by Malin Cenusa + +July 2020 - v7 + +CHANGES: + + - renamed the scanner scripts and updated the repository + - added new malware patterns + - removed unused code + January 2020 - v6.1.0 - CHANGES: +CHANGES: - removed the cPanel specific path from malwaresh.pl + February 2019 - v6.0.0 @@ -15,16 +25,8 @@ February 2019 - v6.0.0 - added automation for scan process (run.sh) - merged all malwareX.pl scripts into malware.pl and moved the old, unused ones to the deprecated directory - added a scan.py version that does not use YAML due to a bug stripping the file paths + - TODO: - - automate the SOP (bash version of scan.sh) - - add more CMS fingerprints - - add more malware patterns - - improve garbage files cleanup prior to scanning - - code cleanup - -May 2018 - v5.0.1 - TODO: - beautify the code @@ -38,46 +40,4 @@ May 2018 - v5.0.1 - code cleanup - remove unused stuff - Version exceptions to be looked into and fixed if possible: - - -- PmWiki doesn't output the version properly for some reason and it will be checked later -- phpNuke support removed as newer phpNuke installs store the version in the database -- newest ELGG, CMS Made Simple, Sitecake, Pimcore, Microweber, ZenPhoto, WikkaWiki, JCow, Open Source Social Network, Lime Survey, Feng Office require PHP 5.4 to work -- phpLD is not compatible with PHP version 5.3+ so support for it has been removed from the scanner -- Pixie does not have proper version handling so it will not be supported -- eggBlog stores it's version in a file called VERSION which will generate too many false positives so it will not be supported -- PHP-Fusion normally pulls the version from the database, but we can try and grab it from it's upgrade script function -- ModX nowadays pulls the version info from the database so we'll no longer support it -- ocPortal seems to be pulling info from the database and we will not support it -- Typo3 requires fileinfo() which isn't supported on LP shared -- ProcessWire doesn't store any version related info so it will not be supported -- Fork, Prosper202 don't work from subdirectories -- Sitemagic fails to report the version properly so I've removed it from the script -- Tiki Wiki stores the version details in the database so we'll not support it -- razorCMS requires suPHP when installing with Softaculous and fails although suPHP exists -- SeoToasterCMS stores version information under a version.txt file which is bound to produce a lot of false positives so we'll not support it -- Bigace doesn't seem to store any version related info under it's files so it won't be supported -- Fiyo stores only the major core version in it's files and this could cause too many false positives so it will not be supported -- HotaruCMS couldn't be installed so I could not fingerprint it -- FUDforum doesn't appear to store any version info in it's files -- Beehive requires PHP 5.4, fileinfo () and intl () -- my little forum uses an improper version handling which will generate many false positives so we'll not support it -- Pixelpost stores version related data in an Readme.txt file which would generate too many false positives if used -- Plogger does not seem to store any version related info into it's files -- DokuWiki uses a file called VERSION to store version related info and this generates too many false positives -- pH7CMS requires PHP 5.2 & bz() -- Open Classifieds needs PHP 5.5 to work -- Noah's Classifieds seems to pull the version from an array and it cannot be supported -- GPixPixel doesn't store version related info in the files -- ExtCalendar is not compatible with PHP version 5.3+ -- poMMo is not compatible with PHP version 5.3+ -- Webinsta Maillist is not compatible with PHP version 5.3+ -- Open Newsletter does not store version info into it's files -- ccMail is not compatible with PHP version 5.3+ -- phpESP is not compatible with PHP version 5.3+ -- Advanced Poll does not store version info into it's files -- Easy Poll does not store version info into it's files -- Simple PHP Poll does not store version info into it's files -- The Bug Genie does not store version info into it's files -- SiteDove can not be installed in subdirectories. + \ No newline at end of file