One more malicious pattern found

[vmirkovicmodx]

Hey @scr34m,

Found another pattern that the scanner didn't pick up.

https://gist.github.com/vmirkovicmodx/24de92c053c187f6dba90e0df8816b3a

It was in a .json file.

[scr34m]

This file is truncated, I'm missing the closing quote aren't there any? The escape sequence is common that's why not in regexp definitions. Possible solution is to match as array with 2-more hex escape sequense.

[scr34m]

Well why would anyone escape these strings, so the raw patterns updated with this fragments:

• join escaped \x6A\x6F\x69\x6E
• reverse escaped \x72\x65\x76\x65\x72\x73\x65
• split escaped \x73\x70\x6C\x69\x74
• reversed \x3E\x74\x70\x69\x72\x63\x73\x2F\x3C