diff options
| -rw-r--r-- | php-malware-finder/whitelist.yar | 1 | ||||
| -rw-r--r-- | php-malware-finder/whitelists/custom.yar | 15 |
2 files changed, 16 insertions, 0 deletions
diff --git a/php-malware-finder/whitelist.yar b/php-malware-finder/whitelist.yar index 2d1ea10..b957660 100644 --- a/php-malware-finder/whitelist.yar +++ b/php-malware-finder/whitelist.yar | |||
| @@ -10,6 +10,7 @@ include "whitelists/symfony.yar" | |||
| 10 | include "whitelists/phpmyadmin.yar" | 10 | include "whitelists/phpmyadmin.yar" |
| 11 | include "whitelists/magento2.yar" | 11 | include "whitelists/magento2.yar" |
| 12 | include "whitelists/prestashop.yar" | 12 | include "whitelists/prestashop.yar" |
| 13 | include "whitelists/custom.yar" | ||
| 13 | 14 | ||
| 14 | 15 | ||
| 15 | private rule Magento : ECommerce | 16 | private rule Magento : ECommerce |
diff --git a/php-malware-finder/whitelists/custom.yar b/php-malware-finder/whitelists/custom.yar new file mode 100644 index 0000000..5f1dedb --- /dev/null +++ b/php-malware-finder/whitelists/custom.yar | |||
| @@ -0,0 +1,15 @@ | |||
| 1 | /* Add your own rules here */ | ||
| 2 | import "hash" | ||
| 3 | |||
| 4 | /* remove me if you add rules | ||
| 5 | private rule Custom : Blog | ||
| 6 | { | ||
| 7 | meta: | ||
| 8 | generated = "2016-07-28T09:50:53.795037" | ||
| 9 | |||
| 10 | condition: | ||
| 11 | /* my own webapp 0.42 */ | ||
| 12 | hash.sha1(0, filesize) == "deadbeaf" | ||
| 13 | } | ||
| 14 | |||
| 15 | remove me if you add rules */ | ||
