layout | title | published | tags | ||
---|---|---|---|---|---|
post |
clamav - install and configure on mac osx |
true |
|
Install clamav via homebrew
rule webshell_b374k_3-2-3 { | |
meta: | |
description = "first ground detect b374k 3.2.3 web shell" | |
author = "thomasbad" | |
date = "2022-06-22" | |
hash1 = "53fe44b4753874f079a936325d1fdc9b1691956a29c3aaf8643cdbd49f5984bf" | |
strings: | |
$x1 = "var Zepto=function(){function G(a){return a==null?String(a):z[A.call(a)]||\"object\"}function H(a){return G(a)==\"function\"}fun" ascii | |
$s2 = "$cmd = execute(\"taskkill /F /PID \".$pid);" fullword ascii | |
$s3 = "$cmd = trim(execute(\"ps -p \".$pid));" fullword ascii |