diff options
| author | Mathieu Deous | 2016-07-28 17:55:13 +0200 |
|---|---|---|
| committer | Mathieu Deous | 2016-07-28 17:56:19 +0200 |
| commit | 6720ad7efb3d20c93fa3aa2b35e7a87c39c7bad4 (patch) | |
| tree | 274632f016dc505561c72a50206d22ff32704ade | |
| parent | 15358c9055df9e87fc587065a8876ba2088c425d (diff) | |
also add generated meta in existing whitelists
| -rw-r--r-- | php-malware-finder/whitelists/drupal.yar | 8 | ||||
| -rw-r--r-- | php-malware-finder/whitelists/wordpress.yar | 8 |
2 files changed, 10 insertions, 6 deletions
diff --git a/php-malware-finder/whitelists/drupal.yar b/php-malware-finder/whitelists/drupal.yar index 08a1bac..a36cdb9 100644 --- a/php-malware-finder/whitelists/drupal.yar +++ b/php-malware-finder/whitelists/drupal.yar | |||
| @@ -1,7 +1,10 @@ | |||
| 1 | import "hash" | 1 | import "hash" |
| 2 | 2 | ||
| 3 | rule drupal | 3 | private rule Drupal : Blog |
| 4 | { | 4 | { |
| 5 | meta: | ||
| 6 | generated = "2016-07-27T18:00:53.795037" | ||
| 7 | |||
| 5 | condition: | 8 | condition: |
| 6 | /* Drupal 4.0.0 */ | 9 | /* Drupal 4.0.0 */ |
| 7 | hash.sha1(0, filesize) == "afb55274b55f41a9b6933cc7c31c53a8b94ad1f8" or // includes/xmlrpc.inc | 10 | hash.sha1(0, filesize) == "afb55274b55f41a9b6933cc7c31c53a8b94ad1f8" or // includes/xmlrpc.inc |
| @@ -530,5 +533,4 @@ rule drupal | |||
| 530 | /* Drupal 8.0.6 */ | 533 | /* Drupal 8.0.6 */ |
| 531 | hash.sha1(0, filesize) == "9488e1d8204f771476468cd3d18c20ed41f1b61e" or // core/tests/Drupal/KernelTests/KernelTestBase.php | 534 | hash.sha1(0, filesize) == "9488e1d8204f771476468cd3d18c20ed41f1b61e" or // core/tests/Drupal/KernelTests/KernelTestBase.php |
| 532 | hash.sha1(0, filesize) == "a964b62e7cb4729dac1723d46a95e96aab66bd79" // core/modules/migrate_drupal/tests/fixtures/drupal6.php | 535 | hash.sha1(0, filesize) == "a964b62e7cb4729dac1723d46a95e96aab66bd79" // core/modules/migrate_drupal/tests/fixtures/drupal6.php |
| 533 | 536 | } | |
| 534 | } \ No newline at end of file | ||
diff --git a/php-malware-finder/whitelists/wordpress.yar b/php-malware-finder/whitelists/wordpress.yar index bfea385..3583ce3 100644 --- a/php-malware-finder/whitelists/wordpress.yar +++ b/php-malware-finder/whitelists/wordpress.yar | |||
| @@ -1,7 +1,10 @@ | |||
| 1 | import "hash" | 1 | import "hash" |
| 2 | 2 | ||
| 3 | rule wordpress | 3 | private rule Wordpress : Blog |
| 4 | { | 4 | { |
| 5 | meta: | ||
| 6 | generated = "2016-07-27T18:00:53.795037" | ||
| 7 | |||
| 5 | condition: | 8 | condition: |
| 6 | /* Wordpress 2.0 */ | 9 | /* Wordpress 2.0 */ |
| 7 | hash.sha1(0, filesize) == "7d564f9b4be82f140438a8c5b701e52d7b7315ba" or // wp-includes/template-functions-post.php | 10 | hash.sha1(0, filesize) == "7d564f9b4be82f140438a8c5b701e52d7b7315ba" or // wp-includes/template-functions-post.php |
| @@ -388,5 +391,4 @@ rule wordpress | |||
| 388 | 391 | ||
| 389 | /* Wordpress 4.5.3 */ | 392 | /* Wordpress 4.5.3 */ |
| 390 | hash.sha1(0, filesize) == "f3cc06e022008a67f5f29359ef886bd164d2b5b3" // wp-includes/load.php | 393 | hash.sha1(0, filesize) == "f3cc06e022008a67f5f29359ef886bd164d2b5b3" // wp-includes/load.php |
| 391 | 394 | } | |
| 392 | } \ No newline at end of file | ||
