diff options
| author | jvoisin | 2015-07-09 14:42:54 +0200 |
|---|---|---|
| committer | jvoisin | 2015-07-09 14:42:54 +0200 |
| commit | e964f0ba03798f4626e0c5552c0c390aabd3bbd5 (patch) | |
| tree | 3610ac9490fccca00828c38c1f4056f3a5071094 | |
| parent | 40dbc1cb5bd274452ac56613b61976fe218ce031 (diff) | |
Add some comments
| -rw-r--r-- | whitelist.yara | 13 |
1 files changed, 9 insertions, 4 deletions
diff --git a/whitelist.yara b/whitelist.yara index 58e237d..ce7bafb 100644 --- a/whitelist.yara +++ b/whitelist.yara | |||
| @@ -1,4 +1,9 @@ | |||
| 1 | private rule Wordpress | 1 | /* |
| 2 | Careful; those rules are pretty heavy on computation, | ||
| 3 | since the sha1sum my be recomputed for every since test; | ||
| 4 | please make sure that you're calling them after every other ones. | ||
| 5 | */ | ||
| 6 | private rule Wordpress : Blog | ||
| 2 | { | 7 | { |
| 3 | condition: | 8 | condition: |
| 4 | /* Wordpress 3.5.1 */ | 9 | /* Wordpress 3.5.1 */ |
| @@ -11,7 +16,7 @@ private rule Wordpress | |||
| 11 | hash.sha1(0, filesize) == "232e4705e3aa28269c4d5e4a4a700bb7a2d06f24" // wp-admin/includes/menu.php | 16 | hash.sha1(0, filesize) == "232e4705e3aa28269c4d5e4a4a700bb7a2d06f24" // wp-admin/includes/menu.php |
| 12 | } | 17 | } |
| 13 | 18 | ||
| 14 | private rule Prestashop | 19 | private rule Prestashop : ECommerce |
| 15 | { | 20 | { |
| 16 | condition: | 21 | condition: |
| 17 | /* Prestashop 1.6.1.0 */ | 22 | /* Prestashop 1.6.1.0 */ |
| @@ -20,7 +25,7 @@ private rule Prestashop | |||
| 20 | hash.sha1(0, filesize) == "15da986fccdc7104f9d4e8c344f332db5ae9a32b" // classes/Tools.php | 25 | hash.sha1(0, filesize) == "15da986fccdc7104f9d4e8c344f332db5ae9a32b" // classes/Tools.php |
| 21 | } | 26 | } |
| 22 | 27 | ||
| 23 | private rule Magento | 28 | private rule Magento : ECommerce |
| 24 | { | 29 | { |
| 25 | condition: | 30 | condition: |
| 26 | /* Magento 1.7.0.2 */ | 31 | /* Magento 1.7.0.2 */ |
| @@ -36,7 +41,7 @@ private rule Magento | |||
| 36 | hash.sha1(0, filesize) == "44ba7a5b685f4a52113559f366aaf6e9a22ae21e" // app/code/core/Mage/Adminhtml/Model/Url.php | 41 | hash.sha1(0, filesize) == "44ba7a5b685f4a52113559f366aaf6e9a22ae21e" // app/code/core/Mage/Adminhtml/Model/Url.php |
| 37 | } | 42 | } |
| 38 | 43 | ||
| 39 | private rule Drupal | 44 | private rule Drupal : Blog |
| 40 | { | 45 | { |
| 41 | condition: | 46 | condition: |
| 42 | hash.sha1(0, filesize) == "23cc0e2c6eebe94fe189e258a3658b40b0005891" or // modules/simpletest/tests/upgrade/drupal-6.bare.database.php | 47 | hash.sha1(0, filesize) == "23cc0e2c6eebe94fe189e258a3658b40b0005891" or // modules/simpletest/tests/upgrade/drupal-6.bare.database.php |
