adding custom.yar for user own webapp(s)

2 files changed, 16 insertions, 0 deletions

diff --git a/php-malware-finder/whitelist.yar b/php-malware-finder/whitelist.yar
index 2d1ea10..b957660 100644
--- a/php-malware-finder/whitelist.yar
+++ b/php-malware-finder/whitelist.yar
@@ -10,6 +10,7 @@ include "whitelists/symfony.yar"
 include "whitelists/phpmyadmin.yar"
 include "whitelists/magento2.yar"
 include "whitelists/prestashop.yar"
+include "whitelists/custom.yar"
 
 
 private rule Magento : ECommerce
diff --git a/php-malware-finder/whitelists/custom.yar b/php-malware-finder/whitelists/custom.yar
new file mode 100644
index 0000000..5f1dedb
--- /dev/null
+++ b/php-malware-finder/whitelists/custom.yar
@@ -0,0 +1,15 @@
+/* Add your own rules here */
+import "hash"
+
+/* remove me if you add rules
+private rule Custom : Blog
+{
+    meta:
+        generated = "2016-07-28T09:50:53.795037"
+
+    condition:
+        /* my own webapp 0.42 */
+        hash.sha1(0, filesize) == "deadbeaf"
+}
+
+remove me if you add rules */