forked from scr34m/php-malware-scanner
-
Notifications
You must be signed in to change notification settings - Fork 1
/
whitelist.txt
61 lines (60 loc) · 4.95 KB
/
whitelist.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
808a427ba07643d4deaf4dfdcf418e6d wp-includes/class-json.php
60468ee875f1a005008edaa573cf573b wp-includes/functions.php
67a0f4e33e2e3f8e4d6011e8bfdbbc3b mod_templatechooser.php
a7e015a2085227ad95f5f5a6297452ee admin.trash.html.php
e2723c200270f2effd67b4781c520fde admin.events.html.php
8edd98ba2bf1ef851798fcaa0e6b297c com_joomlaxplorer/libraries/Archive/Writer/Zip.php
7ff5a64c2f22419308bcbc22f72eae96 com_joomlaxplorer/libraries/Archive/Predicate/Custom.php
a7a44b247630fee8d7fc20249c72e26d PEAR.php
5ab95e30525ab196c45f7dbfc1625083 com_joomlaxplorer/libraries/lib_zip.php
9cb0169a8305b362fe9a13f4ea08f1f1 admin.menumanager.html.php
123de131caa0f2b9570f6720e6710d04 geshi/php.php
0fd1b837fed4fcaedf3ae469fa4a0781 pcl/zip.lib.php
6a8d1fe91a1f34a7533ffe3a98145b9f pcl/pclzip.lib.php
17226e93e2b740844ce1ccb71da5f728 domit/xml_domit_xpath.php
ff5377c902545fbde188dbd49947eb9c class.ezpdf.php
a93613b6acf4cc90ce0b47298f564211 patTemplate/patTemplate/Modifier/Expression.php
f43cb20a9f9b629c24c835bf1f9851a6 PEAR/PEAR.php
0a25de138e3db72c29a56e97c98820fd mod_naplement.php
bf18aba9b916a5cc48ae8790793419bc wp-content/plugins/contact-form-7-to-database-extension/CFDBFilterParser.php
3db2e647a23035f1c3ddef601b5dae18 wp-content/plugins/wp-filebase/classes/Item.php
d539f65804806585a7ed470f46465333 wp-content/plugins/wp-filebase/classes/TplLib.php
a6cce6be28fd8c451e54280aaa88bfcc wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/datamapper/package.module.datamapper.php
6d9afe2a2e7ecf99ba71ef327989c0a1 wp-content/plugins/nextgen-gallery/pope/lib/class.extensibleobject.php
834d22f8b68a2c5c01866a43eb24efc4 wp-admin/includes/class-pclzip.php
16312a9542e3f4fc39dcbde1ac5dcb33 wp-includes/class-json.php
73e90cd5d7580cba2f599d39f9351865 wp-includes/functions.php
e9cf6421fe6afc7b724bf0372697e1c4 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
eb034c991aee49aa232f6d50372f8b4a wp-content/themes/enfold/framework/php/function-set-avia-frontend.php -> (\$[a-z0-9]{3,}\[\d+\]\.){4,}
5311094f43c7252b22c71fd4dee43f03 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
d2865536f339150ee54a81811ca80128 wp-includes/rss.php -> (\$[a-z0-9]{3,}\[\d+\]\.){4,}
279d3f9add6b50ccdb7e07803e713618 wp-content/plugins/wp-simple-firewall/src/common/googleauthenticator/googleauthenticator.php -> (chr\(\d+\)\.){4,}
1d1490c6c99b8ea03688428d8a22bb4a wp-content/plugins/wp-simple-firewall/src/features/firewall.php -> /etc/passwd
7b41326263c3868548a54d34eb595750 wp-content/plugins/google-calendar-events/vendor/mexitek/phpcolors/src/Mexitek/PHPColors/Color.php -> (\$[a-z0-9]{3,}\[\d+\]\.){4,}
f4e049f25bf7affcbf8d2cd99166d867 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
68cbd184451abe2a8427421125fd2d10 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
8268eaaad7d3dfa81480276500ffbf27 owncloud/apps/files_external/3rdparty/smb4php/smb.php -> /etc/passwd
fa38cd66e5affb09324ece9fdafde98b smarty/SmartyBC.class.php -> {\s*eval\s*\(\s*\$
0f48a8c36e1b295545c9d4232c398ea4 smarty/sysplugins/smarty_cacheresource_keyvaluestore.php -> eval("?>
ae98a8bb6651b95c5bcb1c9c2139610e smarty/sysplugins/smarty_internal_template.php -> eval("?>
dde809382f87ac708cbda79254a05cc1 smarty/sysplugins/smarty_cacheresource_custom.php -> eval("?>
2781a19943e9ba76d30143708d3dc04c smarty/sysplugins/smarty_internal_templatebase.php -> eval("?>
26f93373fd5f05bb3432e153e294c844 x5engine.php -> "base64_decode"
a74724b2a02b50afb0e71f78b7661a4c owncloud/3rdparty/OS/Guess.php -> uname -a
633af7bb3b31b39324bac96eca848668 owncloud/apps/files_external/3rdparty/smb4php/smb.php -> /etc/passwd
a74724b2a02b50afb0e71f78b7661a4c owncloud/3rdparty/OS/Guess.php -> uname -a
b3c71065cb5420e15a8bd1aeac63b00d owncloud/3rdparty/smb4php/smb.php -> /etc/passwd
f063d5b84d03538b85f05cde9aae8037 civicrm/packages/os/guess.php -> uname -a
f10b143d678bff74c4f3b69543472d6d wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
db08c00ae52f4408393789ee7f927939 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
341b2bf7bbc2fbc9d756d8793be3c2ee wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
9dc68d6e080fccf0b8867ef44f3a8620 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
ebb2fe179c852ce247418925743ee7b0 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
d77cecbe949c76a1d54a70cba5bf8df0 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
1a8664f9385c28fc01c4224c51fcb72c wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
edd1548e1908e445eeae6ca465d1c259 wp-includes/formatting.php -> (chr\(\d+\)\.){4,}
124ee8826072a166503ccca21b954e48 wp-content/plugins/ultimate-security-checker/securitycheck.class.php -> uname -a
380ae5f3190f2b2e38477e2d52c09a3b wp-content/plugins/wordfence/lib/wordfenceURLHoover.php -> @preg_replace
b2f59fc0fcc1e40561e3ca485d5569a2 wp-content/plugins/s2member/includes/classes/tracking-codes.inc.php -> eval("?>
0af39249db48e6c5c274cb0a085b530d wp-content/plugins/buddypress/bp-forums/bbpress/bb-includes/backpress/functions.formatting.php -> (chr\(\d+\)\.){4,}
db0f55370d091c3960929f653c0a986d wp-content/plugins/tracking-code-manager/includes/classes/utils/Utils.php -> =urldecode