Skip to content

Instantly share code, notes, and snippets.

@hink
Created July 25, 2012 03:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hink/3174218 to your computer and use it in GitHub Desktop.
Save hink/3174218 to your computer and use it in GitHub Desktop.
find . -type f -iname "*.php" -exec egrep -li "^<\?php eval(.)*;\?>" {} \; | xargs -n1 sed -i\.infected -r '/^<\?php eval\
(base64_decode\((.){1}JGlwPSRfU0VSVkVSWyJSRU1PVEVf(.)*\);\?>/d'
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment