diff options
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/changelog | 101 | ||||
| -rw-r--r-- | debian/compat | 1 | ||||
| -rw-r--r-- | debian/conffiles | 0 | ||||
| -rw-r--r-- | debian/control | 14 | ||||
| -rw-r--r-- | debian/copyright | 7 | ||||
| -rw-r--r-- | debian/files | 1 | ||||
| -rw-r--r-- | debian/nbs-phpmalwarefinder.dirs | 1 | ||||
| -rw-r--r-- | debian/nbs-phpmalwarefinder.install | 12 | ||||
| -rwxr-xr-x | debian/rules | 12 |
9 files changed, 0 insertions, 149 deletions
diff --git a/debian/changelog b/debian/changelog deleted file mode 100644 index e169478..0000000 --- a/debian/changelog +++ /dev/null | |||
| @@ -1,101 +0,0 @@ | |||
| 1 | nbs-phpmalwarefinder (0.3.4-1~deb) oldstable; urgency=medium | ||
| 2 | |||
| 3 | * new upstream version : | ||
| 4 | - update the whitelists | ||
| 5 | - new rules to prevent bypasses | ||
| 6 | - readme improvement | ||
| 7 | |||
| 8 | -- jre <jre@nbs-system.com> Mon, 07 Nov 2016 14:26:22 +0100 | ||
| 9 | |||
| 10 | nbs-phpmalwarefinder (0.3.3-1~deb) oldstable; urgency=medium | ||
| 11 | |||
| 12 | * new upstream version : | ||
| 13 | - add a strrev-based detection | ||
| 14 | - update the whitelists | ||
| 15 | - add a new fancy logo | ||
| 16 | * improve the release process | ||
| 17 | |||
| 18 | -- jvo <jvo@nbs-system.com> Mon, 24 Oct 2016 10:02:32 +0200 | ||
| 19 | |||
| 20 | nbs-phpmalwarefinder (0.3.2-1~deb) oldstable; urgency=medium | ||
| 21 | |||
| 22 | * new upstream version : | ||
| 23 | - whitelists are now split into files, each for one CMS | ||
| 24 | - a custom whitelist is available for users to add their own | ||
| 25 | - a mass whitelist helper has been added | ||
| 26 | * Added the custom whitelist to conffiles to prevent package upgrade from | ||
| 27 | overwriting users modification. | ||
| 28 | |||
| 29 | -- jre <jre@nbs-system.com> Fri, 29 Jul 2016 09:47:56 +0200 | ||
| 30 | |||
| 31 | nbs-phpmalwarefinder (0.3.1-1~deb) oldstable; urgency=medium | ||
| 32 | |||
| 33 | * new upstream version : | ||
| 34 | - rules for visbot detection | ||
| 35 | - now detecting base64 encoded string USER_AGENT | ||
| 36 | - debian squeeze support dropped | ||
| 37 | - some false positives fixes | ||
| 38 | |||
| 39 | -- jre <jre@nbs-system.com> Thu, 19 May 2016 15:22:47 +0200 | ||
| 40 | |||
| 41 | nbs-phpmalwarefinder (0.3.0-1~deb) oldstable; urgency=medium | ||
| 42 | |||
| 43 | * rules files refactoring : | ||
| 44 | - php-malware-finder now comes with asp malware detection | ||
| 45 | - rules have been split in different files to avoid false positives | ||
| 46 | |||
| 47 | * The -l option allows language specific checks, for now only ASP and PHP | ||
| 48 | are supported. | ||
| 49 | * The -u option now allows to update rules without having to upgrade the | ||
| 50 | package. | ||
| 51 | |||
| 52 | -- jre <jre@nbs-system.com> Thu, 14 Apr 2016 16:04:14 +0200 | ||
| 53 | |||
| 54 | nbs-phpmalwarefinder (0.2.2-1~deb) oldstable; urgency=medium | ||
| 55 | |||
| 56 | * new rules : bad_php.yara to find bad coding practices | ||
| 57 | * malwares.yara now comes with posix_* functions detection, new hard-coded | ||
| 58 | strings as well as php:// filter | ||
| 59 | * The TooShort rule has been improved to reduce FP | ||
| 60 | |||
| 61 | -- jre <jre@nbs-system.com> Mon, 15 Feb 2016 15:48:06 +0100 | ||
| 62 | |||
| 63 | nbs-phpmalwarefinder (0.2.1-1~deb) oldstable; urgency=medium | ||
| 64 | |||
| 65 | * docroot-checker.sh added, helpful for both first and periodic security | ||
| 66 | scan. | ||
| 67 | |||
| 68 | -- jre <jre@nbs-system.com> Mon, 01 Feb 2016 11:08:08 +0100 | ||
| 69 | |||
| 70 | nbs-phpmalwarefinder (0.2.0-2~deb) oldstable; urgency=medium | ||
| 71 | |||
| 72 | * New detection rules added | ||
| 73 | |||
| 74 | -- sbl <sbl@nbs-system.com> Thu, 28 Jan 2016 14:58:45 +0200 | ||
| 75 | |||
| 76 | nbs-phpmalwarefinder (0.2.0-1~deb) oldstable; urgency=medium | ||
| 77 | |||
| 78 | * Now supports whitelist using yara hash function | ||
| 79 | * New detection rules added (tested against | ||
| 80 | https://github.com/tennc/webshell malware collection) | ||
| 81 | |||
| 82 | -- jre <jre@nbs-system.com> Fri, 09 Oct 2015 14:58:45 +0200 | ||
| 83 | |||
| 84 | nbs-phpmalwarefinder (0.1.1-1~deb) oldstable; urgency=medium | ||
| 85 | |||
| 86 | * new dependecy on util-linux since the script is using ionice | ||
| 87 | * postinst script added to create diff folder | ||
| 88 | |||
| 89 | -- jre <jre@nbs-system.com> Tue, 28 Apr 2015 15:07:12 +0200 | ||
| 90 | |||
| 91 | nbs-phpmalwarefinder (0.1.1-1~deb) oldstable; urgency=medium | ||
| 92 | |||
| 93 | * new signature to detect malware in footer and header | ||
| 94 | |||
| 95 | -- jre <jre@nbs-system.com> Tue, 14 Apr 2015 14:40:05 +0000 | ||
| 96 | |||
| 97 | nbs-phpmalwarefinder (0.1) UNRELEASED; urgency=medium | ||
| 98 | |||
| 99 | * Initial release. | ||
| 100 | |||
| 101 | -- jvoisin <jvo@nbs-system.com> Tue, 24 Mar 2015 11:10:36 +0100 | ||
diff --git a/debian/compat b/debian/compat deleted file mode 100644 index 7ed6ff8..0000000 --- a/debian/compat +++ /dev/null | |||
| @@ -1 +0,0 @@ | |||
| 1 | 5 | ||
diff --git a/debian/conffiles b/debian/conffiles deleted file mode 100644 index e69de29..0000000 --- a/debian/conffiles +++ /dev/null | |||
diff --git a/debian/control b/debian/control deleted file mode 100644 index b50454f..0000000 --- a/debian/control +++ /dev/null | |||
| @@ -1,14 +0,0 @@ | |||
| 1 | Source: nbs-phpmalwarefinder | ||
| 2 | Section: utils | ||
| 3 | Priority: optional | ||
| 4 | Maintainer: Security team <secu@nbs-system.com> | ||
| 5 | Build-Depends: debhelper (>= 8) | ||
| 6 | Standards-Version: 3.9.5 | ||
| 7 | Vcs-Git: https://github.com/nbs-system/php-malware-finder | ||
| 8 | Vcs-Browser: https://github.com/nbs-system/php-malware-finder | ||
| 9 | |||
| 10 | Package: nbs-phpmalwarefinder | ||
| 11 | Architecture: any | ||
| 12 | Depends: nbs-yara, wget, nbs-python-yara, python | ||
| 13 | Description: yara-based php webshell finder | ||
| 14 | PhpMalwareFinder is a webshell and malware hunter using yara and signatures. | ||
diff --git a/debian/copyright b/debian/copyright deleted file mode 100644 index 6bec77a..0000000 --- a/debian/copyright +++ /dev/null | |||
| @@ -1,7 +0,0 @@ | |||
| 1 | Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ | ||
| 2 | Upstream-Name: phpmalwarefinder | ||
| 3 | Source: https://github.com/nbs-system/php-malware-finder | ||
| 4 | |||
| 5 | Files: * | ||
| 6 | Copyright 2015 Julien (jvoisin) Voisin <jvo@nbs-system.com> | ||
| 7 | License: GPLv3 | ||
diff --git a/debian/files b/debian/files deleted file mode 100644 index 23f95ef..0000000 --- a/debian/files +++ /dev/null | |||
| @@ -1 +0,0 @@ | |||
| 1 | nbs-phpmalwarefinder_0.1_amd64.deb utils optional | ||
diff --git a/debian/nbs-phpmalwarefinder.dirs b/debian/nbs-phpmalwarefinder.dirs deleted file mode 100644 index 61a8d27..0000000 --- a/debian/nbs-phpmalwarefinder.dirs +++ /dev/null | |||
| @@ -1 +0,0 @@ | |||
| 1 | etc/phpmalwarefinder/ \ No newline at end of file | ||
diff --git a/debian/nbs-phpmalwarefinder.install b/debian/nbs-phpmalwarefinder.install deleted file mode 100644 index 748222d..0000000 --- a/debian/nbs-phpmalwarefinder.install +++ /dev/null | |||
| @@ -1,12 +0,0 @@ | |||
| 1 | whitelists/custom.yar etc/phpmalwarefinder/whitelists | ||
| 2 | whitelists/drupal.yar etc/phpmalwarefinder/whitelists | ||
| 3 | whitelists/magento2.yar etc/phpmalwarefinder/whitelists | ||
| 4 | whitelists/phpmyadmin.yar etc/phpmalwarefinder/whitelists | ||
| 5 | whitelists/prestashop.yar etc/phpmalwarefinder/whitelists | ||
| 6 | whitelists/symfony.yar etc/phpmalwarefinder/whitelists | ||
| 7 | whitelists/wordpress.yar etc/phpmalwarefinder/whitelists | ||
| 8 | utils/generate_whitelist.py usr/bin/ | ||
| 9 | utils/mass_whitelist.py usr/bin/ | ||
| 10 | php.yar etc/phpmalwarefinder | ||
| 11 | whitelist.yar etc/phpmalwarefinder | ||
| 12 | phpmalwarefinder usr/bin/ | ||
diff --git a/debian/rules b/debian/rules deleted file mode 100755 index bcf500a..0000000 --- a/debian/rules +++ /dev/null | |||
| @@ -1,12 +0,0 @@ | |||
| 1 | #!/usr/bin/make -f | ||
| 2 | |||
| 3 | BUILDDIR=debian/build | ||
| 4 | |||
| 5 | override_dh_auto_clean: #fuck you debian | ||
| 6 | |||
| 7 | override_dh_auto_build: | ||
| 8 | |||
| 9 | %: | ||
| 10 | dh $@ | ||
| 11 | |||
| 12 | .PHONY: build | ||
