From ad9327f187de3816f9517d82f671a209578a136b Mon Sep 17 00:00:00 2001
From: Julien (jvoisin) Voisin
Date: Thu, 7 May 2015 17:37:14 +0200
Subject: Add two doggy functions

---
 malwares.yara | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/malwares.yara b/malwares.yara
index dc1a6cd..c5a11e6 100644
--- a/malwares.yara
+++ b/malwares.yara
@@ -143,6 +143,8 @@ rule DangerousPhp
         $u = "fpassthru" fullword
         $v = "posix_setuid" fullword
         $w = "xmlrpc_decode" fullword
+        $x = "show_source" fullword
+        $y = "pcntl_exec" fullword
 
         $whitelist = /escapeshellcmd|escapeshellarg/
 
-- 
cgit v1.3