php-malware-finder - Detect potentially malicious PHP files

Age	Commit message (Collapse)	Author
2018-05-30	update symfony whitelist	MatToufoutu

2018-05-30	update phpmyadmin whitelist	MatToufoutu

2018-05-30	whitelists tags	MatToufoutu

2018-05-30	improve mass_whitelist.py output	MatToufoutu

2018-05-30	update drupal whitelists	MatToufoutu

2018-05-30	update wordpress whitelists	MatToufoutu

2018-05-29	Add detection for Nano	jvoisin
	[Nano]( https://github.com/UltimateHackers/nano ) is a family of PHP webshells which are code golfed to be extremely stealthy and efficient.
2018-04-26	Fix a missing link	jvoisin

2018-02-21	Add a detection for things like `eval/* …*/(`	jvoisin

2018-02-21	Update a bit the README	jvoisin

2018-02-21	Add a CONTRIBUTING.md	jvoisin

2018-02-21	Improve our non-default configuration file path handling	jvoisin

2018-02-21	Some regexps are now matching on word boundaries	jvoisin
	This should close #51
2018-02-21	Fix the debian packaging	jvoisin

2018-02-21	Remove a leftover file from the previous commit/great purge	jvoisin

2018-02-21	Major cleanup of useless files	jvoisin

2018-02-21	Remove a useless file	jvoisin
	This should close #64
2017-12-18	Improve a bit the wording of the help message	jvoisin

2017-11-21	Add a missing dep	jvoisin

2017-11-21	Fix the build	jvoisin
	Travis isn't running as root anymore :/
2017-11-21	Add a new sample, and a way to detect it	jvoisin

2017-07-26	Add some detections	jvoisin

2017-07-11	Remove the logo for now	jvoisin

2017-07-09	Add ob_start as dodgy php (#56)	Fariskhi Vidyan
	Wonderful, thank you ♥
2017-05-19	add gitter badge	Mathieu D
	add a badge linking to PMF's gitter chatroom
2017-04-28	Add Hpack detection method	jvoisin

2017-04-26	Add a detection for a smart webshell	jvoisin

2017-03-03	Add a test for "AddType application/x-httpd-cgi"	jvoisin

2017-02-21	Add another simple hex-string pattern	jvoisin

2016-12-30	\x09-\x0d are no-rintable chars, but aren't malicious.	jvoisin
	This close #44, thanks to @DrTyrell for spotting this issue ♥
2016-12-16	Update the readme to reflect the license change	jvoisin

2016-12-16	Change the license to LGPL	jvoisin

2016-12-09	Add a detection for register_shutdown_function	jvoisin
	Close #41
2016-12-08	Improve a bit the debian packaging	jvoisin

2016-12-08	Fix `make deb` warnings	jvoisin

2016-12-08	Add a missing test file	jvoisin

2016-12-08	fixing issue #40, no more double slash in output when scanning a whole directory	Julien "shaddai" Reveret

2016-12-08	fixed in commit b7143d389051f2bd7a8d4f15c89b4a76e9fdb9b6, long lines are ↵	Julien "shaddai" Reveret
	checked only if user asked pmf to
2016-12-08	fix for the newly introduced function, did somebody say QA ?	Julien "shaddai" Reveret

2016-12-08	Fix the Debian packaging	jvoisin

2016-12-08	Add a '${${' rule	jvoisin

2016-12-08	@eval isn't legit at all	jvoisin

2016-12-08	Remove a broken test	jvoisin

2016-12-08	Remove some useless and buggy rules	jvoisin

2016-12-08	misc tools like whitelist generation require python yara	Julien "shaddai" Reveret

2016-12-08	Introducing new function : give user hints about potential malicious files	Julien "shaddai" Reveret

2016-12-01	Merge branch 'master' of https://github.com/nbs-system/php-malware-finder	Julien "shaddai" Reveret

2016-12-01	Add a link in the README	jvoisin

2016-12-01	Add a new detection way	jvoisin
	Close #38 Some webshells are using non-printable characters, so we match on them (kudos to @blotus for the idea). The regexp `[^ -~]` is completely killing the performances, this is why we're using [atoms](https://gist.github.com/Neo23x0/e3d4e316d7441d9143c7) to dramatically increase the scanning speed.
2016-12-01	debian package changelog modified for 0.3.4	Julien "shaddai" Reveret