php-malware-finder - Detect potentially malicious PHP files

Age	Commit message (Collapse)	Author
2019-07-03	Fix some typos in the README	Scott C Wilson

2018-09-04	Point to the stable version of yara in the documentation	jvoisin

2018-09-04	Installation documentation (#78)	rotemreiss

2018-07-17	Automatic generation of Magento (1 and 2) whitelists	Jeroen Vermeulen

2018-07-16	Updated mass_whitelist to output progress to STDERR (#75)	Jeroen Vermeulen
	Only the generated rules are printed to STDOUT Now you can do: ``` ./mass_whitelist.py [NAME] [URL_PATTERN] [MAJOR] [MINOR] [PATCH] > ../whitelists/name.yar ```
2018-07-14	Improved scripts to be callable from another directory. (#73)	Jeroen Vermeulen
	Improved scripts to be callable from another directory instead of only from their own working dir.
2018-06-26	Detect things like '@include'	jvoisin
	This should close #71
2018-05-30	update symfony whitelist	MatToufoutu

2018-05-30	update phpmyadmin whitelist	MatToufoutu

2018-05-30	whitelists tags	MatToufoutu

2018-05-30	improve mass_whitelist.py output	MatToufoutu

2018-05-30	update drupal whitelists	MatToufoutu

2018-05-30	update wordpress whitelists	MatToufoutu

2018-05-29	Add detection for Nano	jvoisin
	[Nano]( https://github.com/UltimateHackers/nano ) is a family of PHP webshells which are code golfed to be extremely stealthy and efficient.
2018-04-26	Fix a missing link	jvoisin

2018-02-21	Add a detection for things like `eval/* …*/(`	jvoisin

2018-02-21	Update a bit the README	jvoisin

2018-02-21	Add a CONTRIBUTING.md	jvoisin

2018-02-21	Improve our non-default configuration file path handling	jvoisin

2018-02-21	Some regexps are now matching on word boundaries	jvoisin
	This should close #51
2018-02-21	Fix the debian packaging	jvoisin

2018-02-21	Remove a leftover file from the previous commit/great purge	jvoisin

2018-02-21	Major cleanup of useless files	jvoisin

2018-02-21	Remove a useless file	jvoisin
	This should close #64
2017-12-18	Improve a bit the wording of the help message	jvoisin

2017-11-21	Add a missing dep	jvoisin

2017-11-21	Fix the build	jvoisin
	Travis isn't running as root anymore :/
2017-11-21	Add a new sample, and a way to detect it	jvoisin

2017-07-26	Add some detections	jvoisin

2017-07-11	Remove the logo for now	jvoisin

2017-07-09	Add ob_start as dodgy php (#56)	Fariskhi Vidyan
	Wonderful, thank you ♥
2017-05-19	add gitter badge	Mathieu D
	add a badge linking to PMF's gitter chatroom
2017-04-28	Add Hpack detection method	jvoisin

2017-04-26	Add a detection for a smart webshell	jvoisin

2017-03-03	Add a test for "AddType application/x-httpd-cgi"	jvoisin

2017-02-21	Add another simple hex-string pattern	jvoisin

2016-12-30	\x09-\x0d are no-rintable chars, but aren't malicious.	jvoisin
	This close #44, thanks to @DrTyrell for spotting this issue ♥
2016-12-16	Update the readme to reflect the license change	jvoisin

2016-12-16	Change the license to LGPL	jvoisin

2016-12-09	Add a detection for register_shutdown_function	jvoisin
	Close #41
2016-12-08	Improve a bit the debian packaging	jvoisin

2016-12-08	Fix `make deb` warnings	jvoisin

2016-12-08	Add a missing test file	jvoisin

2016-12-08	fixing issue #40, no more double slash in output when scanning a whole directory	Julien "shaddai" Reveret

2016-12-08	fixed in commit b7143d389051f2bd7a8d4f15c89b4a76e9fdb9b6, long lines are ↵	Julien "shaddai" Reveret
	checked only if user asked pmf to
2016-12-08	fix for the newly introduced function, did somebody say QA ?	Julien "shaddai" Reveret

2016-12-08	Fix the Debian packaging	jvoisin

2016-12-08	Add a '${${' rule	jvoisin

2016-12-08	@eval isn't legit at all	jvoisin

2016-12-08	Remove a broken test	jvoisin