From 6720ad7efb3d20c93fa3aa2b35e7a87c39c7bad4 Mon Sep 17 00:00:00 2001 From: Mathieu Deous Date: Thu, 28 Jul 2016 17:55:13 +0200 Subject: also add generated meta in existing whitelists --- php-malware-finder/whitelists/drupal.yar | 8 +++++--- php-malware-finder/whitelists/wordpress.yar | 8 +++++--- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/php-malware-finder/whitelists/drupal.yar b/php-malware-finder/whitelists/drupal.yar index 08a1bac..a36cdb9 100644 --- a/php-malware-finder/whitelists/drupal.yar +++ b/php-malware-finder/whitelists/drupal.yar @@ -1,7 +1,10 @@ import "hash" -rule drupal +private rule Drupal : Blog { + meta: + generated = "2016-07-27T18:00:53.795037" + condition: /* Drupal 4.0.0 */ hash.sha1(0, filesize) == "afb55274b55f41a9b6933cc7c31c53a8b94ad1f8" or // includes/xmlrpc.inc @@ -530,5 +533,4 @@ rule drupal /* Drupal 8.0.6 */ hash.sha1(0, filesize) == "9488e1d8204f771476468cd3d18c20ed41f1b61e" or // core/tests/Drupal/KernelTests/KernelTestBase.php hash.sha1(0, filesize) == "a964b62e7cb4729dac1723d46a95e96aab66bd79" // core/modules/migrate_drupal/tests/fixtures/drupal6.php - -} \ No newline at end of file +} diff --git a/php-malware-finder/whitelists/wordpress.yar b/php-malware-finder/whitelists/wordpress.yar index bfea385..3583ce3 100644 --- a/php-malware-finder/whitelists/wordpress.yar +++ b/php-malware-finder/whitelists/wordpress.yar @@ -1,7 +1,10 @@ import "hash" -rule wordpress +private rule Wordpress : Blog { + meta: + generated = "2016-07-27T18:00:53.795037" + condition: /* Wordpress 2.0 */ hash.sha1(0, filesize) == "7d564f9b4be82f140438a8c5b701e52d7b7315ba" or // wp-includes/template-functions-post.php @@ -388,5 +391,4 @@ rule wordpress /* Wordpress 4.5.3 */ hash.sha1(0, filesize) == "f3cc06e022008a67f5f29359ef886bd164d2b5b3" // wp-includes/load.php - -} \ No newline at end of file +} -- cgit v1.3