adding custom.yar for user own webapp(s)

jvoisin · Jul 29, 2016 · 6cf5148 · 6cf5148
1 parent 1003fba
commit 6cf5148
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/php-malware-finder/whitelist.yar b/php-malware-finder/whitelist.yar
@@ -10,6 +10,7 @@ include "whitelists/symfony.yar"
 include "whitelists/phpmyadmin.yar"
 include "whitelists/magento2.yar"
 include "whitelists/prestashop.yar"
+include "whitelists/custom.yar"
 
 
 private rule Magento : ECommerce

diff --git a/php-malware-finder/whitelists/custom.yar b/php-malware-finder/whitelists/custom.yar
@@ -0,0 +1,15 @@
+/* Add your own rules here */
+import "hash"
+
+/* remove me if you add rules
+private rule Custom : Blog
+{
+    meta:
+        generated = "2016-07-28T09:50:53.795037"
+
+    condition:
+        /* my own webapp 0.42 */
+        hash.sha1(0, filesize) == "deadbeaf"
+}
+
+remove me if you add rules */