From 3854653c8686cf9ff9bbab13f09d1566682efb5e Mon Sep 17 00:00:00 2001 From: xarkes Date: Mon, 11 Apr 2016 11:22:01 +0200 Subject: Fixed debian package + readme --- README.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index 5778d06..7ed97d3 100644 --- a/README.md +++ b/README.md @@ -47,7 +47,7 @@ both) category, and should re-read the previous sentence. ## How does it work? Detection is performed by crawling the filesystem and testing files against a -[set]( https://github.com/nbs-system/php-malware-finder/blob/master/malwares.yara ) +[set]( https://github.com/nbs-system/php-malware-finder/blob/master/php.yara ) of [YARA](https://plusvic.github.io/yara/) rules. Yes, it's that simple! @@ -67,7 +67,8 @@ Usage phpmalwarefinder [-cfhtv] [-l (php|asp)] ... Or if you prefer to use `yara`: ``` -$ yara -r ./malwares.yara /var/www +$ yara -r ./php.yara /var/www +$ yara -r ./asp.yara /var/www ``` Please keep in mind that you should use at least YARA 3.4 because we're using -- cgit v1.3