valitydev/signature-base
14
0
Fork 0
mirror of https://github.com/valitydev/signature-base.git synced 2024-11-06 10:05:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

add missing period in Request.Item

Browse Source
This commit is contained in:
tylabs 2019-07-25 19:33:41 -04:00 committed by GitHub
parent 5aa7258694
commit 7c2c41e2f0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
yara/apt_webshell_chinachopper.yar
View File

@ -7,7 +7,7 @@ rule ChinaChopper_Generic {
reference = "https://www.fireeye.com/content/dam/legacy/resources/pdfs/fireeye-china-chopper-report.pdf"
date = "2015/03/10"
strings:
$aspx = /%@\sPage\sLanguage=.Jscript.%><%eval\(RequestItem\[.{,100}unsafe/
$aspx = /%@\sPage\sLanguage=.Jscript.%><%eval\(Request\.Item\[.{,100}unsafe/
$php = /<?php.\@eval\(\$_POST./
condition:
1 of them