php gen shell added

Hestat · May 4, 2018 · 8dde24d · 8dde24d
1 parent 655b8e1
commit 8dde24d
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 0 deletions.
diff --git a/includes/php-gen-0.yar b/includes/php-gen-0.yar
@@ -0,0 +1,17 @@
+rule generic_php_injection_0
+{
+
+    meta:
+       author = "Brian Laskowski"
+       info = " drupal injection "
+
+    strings:
+    
+    $s1="$GLOBALS"
+    $s2="Array();global"
+    $s3="eval"
+    $s4="NULL"
+
+    condition:
+    all of them
+}
diff --git a/lw-rules_index.yar b/lw-rules_index.yar
@@ -6,3 +6,4 @@ include "./includes/WShell_PHP_Anuna.yar"
 include "./includes/eitest1.yar"
 include "./includes/eitest2.yar"
 include "./includes/drupal-CPREA57Webshell.yar"
+include "./includes/php-gen-0.yar"