search

scr34m / php-malware-scanner

Scans PHP files for malwares and known threats
GNU General Public License v3.0
556 stars 96 forks source link

Naughty WP-like file #11

Closed jaygilmore closed 6 years ago

jaygilmore commented 6 years ago

And another file we've found that wasn't detected:

https://gist.github.com/jaygilmore/abcc8b2e98ad383ee50f8f56d2c8eab7

scr34m commented 6 years ago

This string 'OY<--X17N-.OB8X'^',+YLY=nQ;CM;+W6'; equals to create_function so now just a non regular signature added to the list.

jaygilmore commented 6 years ago

Cool! Thanks.