| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-05-02 | Make application go-install-able and create a docker image | Mathieu Deous | |
| 2022-04-15 | Rewrite shell script in Go | Mathieu Deous | |
| 2018-06-26 | Detect things like '@include' | jvoisin | |
| This should close #71 | |||
| 2018-05-29 | Add detection for Nano | jvoisin | |
| [Nano]( https://github.com/UltimateHackers/nano ) is a family of PHP webshells which are code golfed to be extremely stealthy and efficient. | |||
| 2018-02-21 | Add a detection for things like `eval/* …*/(` | jvoisin | |
| 2018-02-21 | Some regexps are now matching on word boundaries | jvoisin | |
| This should close #51 | |||
| 2018-02-21 | Major cleanup of useless files | jvoisin | |
| 2017-11-21 | Add a new sample, and a way to detect it | jvoisin | |
| 2017-07-26 | Add some detections | jvoisin | |
| 2017-04-28 | Add Hpack detection method | jvoisin | |
| 2016-12-09 | Add a detection for register_shutdown_function | jvoisin | |
| Close #41 | |||
| 2016-12-08 | Add a '${${' rule | jvoisin | |
| 2016-12-08 | Remove a broken test | jvoisin | |
| 2016-12-01 | Add a new detection way | jvoisin | |
| Close #38 Some webshells are using non-printable characters, so we match on them (kudos to @blotus for the idea). The regexp `[^ -~]` is completely killing the performances, this is why we're using [atoms](https://gist.github.com/Neo23x0/e3d4e316d7441d9143c7) to dramatically increase the scanning speed. | |||
| 2016-12-01 | Detect [novahot]( https://github.com/chrisallenlane/novahot ) | jvoisin | |
| Closes #37 | |||
| 2016-06-27 | Add detection for a callback-based malwares | Julien (jvoisin) Voisin | |
| 2016-05-11 | Fix the tests | Julien (jvoisin) Voisin | |
| 2016-04-11 | Whitelist UHTMLPufifier | Julien (jvoisin) Voisin | |
| 2016-03-31 | Add ASP webshell detection | xarkes | |
| 2016-03-23 | Fix a broken test | Julien (jvoisin) Voisin | |
| 2016-03-01 | Simplify the previous commit | Julien (jvoisin) Voisin | |
| 2016-03-01 | Add a rule to catch fancy .htaccess tricks | Julien (jvoisin) Voisin | |
| 2016-02-26 | Add yet another cool bypass, thanks to @badluck81 | Julien (jvoisin) Voisin | |
| 2016-02-26 | Fix a really cool bypass | Julien (jvoisin) Voisin | |
| 2016-02-24 | Even more tests for the testsuite! | Julien (jvoisin) Voisin | |
| 2016-02-23 | Add some more tests | Julien (jvoisin) Voisin | |
| 2016-02-23 | Add a wonderful testsuite! | Julien Voisin | |
 |
index : php-malware-finder | |
| Detect potentially malicious PHP files |
| summaryrefslogtreecommitdiff |