diff options
| -rw-r--r-- | php-malware-finder/common.yar | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/php-malware-finder/common.yar b/php-malware-finder/common.yar index 184e5ce..82d1235 100644 --- a/php-malware-finder/common.yar +++ b/php-malware-finder/common.yar | |||
| @@ -80,7 +80,7 @@ rule DodgyStrings | |||
| 80 | { | 80 | { |
| 81 | strings: | 81 | strings: |
| 82 | $ = ".bash_history" | 82 | $ = ".bash_history" |
| 83 | $ = /AddType\s+application\/x-httpd-php/ nocase | 83 | $ = /AddType\s+application\/x-httpd-(php|cgi)/ nocase |
| 84 | $ = /php_value\s*auto_prepend_file/ nocase | 84 | $ = /php_value\s*auto_prepend_file/ nocase |
| 85 | $ = /SecFilterEngine\s+Off/ nocase // disable modsec | 85 | $ = /SecFilterEngine\s+Off/ nocase // disable modsec |
| 86 | $ = /Add(Handler|Type|OutputFilter)\s+[^\s]+\s+\.htaccess/ nocase | 86 | $ = /Add(Handler|Type|OutputFilter)\s+[^\s]+\s+\.htaccess/ nocase |