Current Path : /proc/2/root/usr/local/scan/lw-yara/includes/

Upload File :

Current File : //proc/2/root/usr/local/scan/lw-yara/includes/drupal-index-ico-injection.yar

rule ico_injection_detected
{

    meta:
       author = "Brian Laskowski"
       info = " general ico injection 05/18/18 "

    strings:
    
	$s1="<?php"
	$s2="@include"
	//$s3="ic\x6f"
	$s4="drupal_bootstrap"
	$s5="require_once"
	$s6="menu_execute_active_handler"

    condition:
    all of them
}

Copyright 2K16 - 2K18 Indonesian Hacker Rulez