32 lines
885 B
Markdown
32 lines
885 B
Markdown
# Description
|
|
|
|
EvoMalware is a BASH script which permits to identify files (PHP/JS only ATM)
|
|
infected by malwares/virus/backdoor.
|
|
The main goal is to be used in a cron job to generate reports, but it can be
|
|
used in "one shot" mode.
|
|
|
|
The script uses 3 flat text files as databases:
|
|
|
|
* evomalware.filenames, known filenames.
|
|
* evomalware.patterns, known patterns.
|
|
* evomalware.whitelist, files to ignore.
|
|
|
|
There is also an "aggressive" mode which permits to find suspect files using
|
|
evomalware.suspect DB.
|
|
At each run, the script downloads the last databases.
|
|
|
|
# Configuration/Tuning
|
|
|
|
TODO
|
|
|
|
# Upstream
|
|
|
|
Upstream is at <https://gitea.evolix.org/evolix/evomalware>
|
|
GitHub is a mirror.
|
|
|
|
# Interesting others projects
|
|
|
|
* WPScan, http://wpscan.org/
|
|
* Plecost, https://github.com/iniqua/plecost
|
|
* Linux Malware Detect (with ClamAV), https://www.rfxn.com/projects/linux-malware-detect/
|