wshake

webshell dectector rewrite from Shell-Detector

#result template

{
  'alarm': 'medium',
  'created_time': 'Sat May  2 10:50:35 2015',
  'filename': './php-webshells/529.php',
  'filesize': 1523,
  'fingerprint': [],
  'last_modified': 'Sat May  2 10:50:35 2015',
  'owner': '1000:100',
  'perm': '644',
  'suspicious': [{ 'func': ['curl_exec'], 'line': 1}]
}