diff options
| author | jvoisin | 2016-01-04 15:56:18 +0100 |
|---|---|---|
| committer | jvoisin | 2016-01-04 15:56:18 +0100 |
| commit | a16310d442a72cd50f6eb7f1f493988f8a87a2f3 (patch) | |
| tree | 793d7e0210306c17d312a48d4826f7b236a4dd27 | |
| parent | 8039662c4ec5e407d23d19a27df34286e398ad45 (diff) | |
Add a whitelist for wordpress 4.4
| -rw-r--r-- | whitelist.yara | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/whitelist.yara b/whitelist.yara index 858860d..84da6b1 100644 --- a/whitelist.yara +++ b/whitelist.yara | |||
| @@ -13,7 +13,11 @@ private rule Wordpress : Blog | |||
| 13 | /* Wordpress 3.2.1 */ | 13 | /* Wordpress 3.2.1 */ |
| 14 | hash.sha1(0, filesize) == "b4f53b8c360f9e47cc63047305a0ce2e3ff6a251" or // wp-includes/functions.php | 14 | hash.sha1(0, filesize) == "b4f53b8c360f9e47cc63047305a0ce2e3ff6a251" or // wp-includes/functions.php |
| 15 | hash.sha1(0, filesize) == "ac8298df16a560c80fb213ef3f51f90df8ef5292" or // wp-includes/class-phpmailer.php | 15 | hash.sha1(0, filesize) == "ac8298df16a560c80fb213ef3f51f90df8ef5292" or // wp-includes/class-phpmailer.php |
| 16 | hash.sha1(0, filesize) == "232e4705e3aa28269c4d5e4a4a700bb7a2d06f24" // wp-admin/includes/menu.php | 16 | hash.sha1(0, filesize) == "232e4705e3aa28269c4d5e4a4a700bb7a2d06f24" or // wp-admin/includes/menu.php |
| 17 | |||
| 18 | /* Wordpress 4.4 */ | ||
| 19 | hash.sha1(0, filesize) == "2fdf93ae88735d062a8635ac1d22a6904cb89ab8" or // wp-includes/formatting.php | ||
| 20 | hash.sha1(0, filesize) == "ccd23ef96a588840943fba081bfa6f88531c4abc" // wp-admin/includes/class-pclzip.php | ||
| 17 | } | 21 | } |
| 18 | 22 | ||
| 19 | private rule Prestashop : ECommerce | 23 | private rule Prestashop : ECommerce |
