Skip to content

Instantly share code, notes, and snippets.

@wedancedalot

wedancedalot/grep_for_phpshell.sh

Created February 16, 2016 14:26
Show Gist options
  • Save wedancedalot/290b446dcd4d6d6584fa to your computer and use it in GitHub Desktop.
Save wedancedalot/290b446dcd4d6d6584fa to your computer and use it in GitHub Desktop.
Download ZIP
Grep to search for php shells
Raw
grep_for_phpshell.sh
grep '((eval.*(base64_decode|gzinflate|\$_))|\$[0O]{4,}|FilesMan|JGF1dGhfc|IIIl|die\(PHP_OS|posix_getpwuid|Array\(base64_decode|document\.write\("\\u00|sh(3(ll|11)))' . -lroE --include=*.php*
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment