Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	pws_php_php	—	—
yara	PHP_Shell_php_php	—	—
yara	Ayyildiz_Tim___AYT__Shell_v_2_1_Biz_html	—	—
yara	EFSO_2_asp	—	—
yara	lamashell_php	—	—
yara	Ajax_PHP_Command_Shell_php	—	—
yara	JspWebshell_1_2_jsp	—	—
yara	Sincap_php_php	—	—
yara	Test_php_php	—	—
yara	Phyton_Shell_py	—	—
yara	mysql_tool_php_php	—	—
yara	Zehir_4_asp	—	—
yara	sh_php_php	—	—
yara	phpbackdoor15_php	—	—
yara	sql_php_php	—	—
yara	cgi_python_py	—	—
yara	ru24_post_sh_php_php	—	—
yara	DTool_Pro_php	—	—
yara	telnetd_pl	—	—
yara	php_include_w_shell_php	—	—
yara	Safe0ver_Shell__Safe_Mod_Bypass_By_Evilc0der_php	—	—
yara	PHANTASMA_php	—	—
yara	shell_php_php	—	—
yara	telnet_cgi	—	—
yara	ironshell_php	—	—
yara	backdoorfr_php	—	—
yara	aspydrv_asp	—	—
yara	cmdjsp_jsp	—	—
yara	h4ntu_shell__powered_by_tsoi_	—	—
yara	MySQL_Web_Interface_Version_0_8_php	—	—
yara	simple_cmd_html	—	—
yara	multiple_webshells_0001	—	—
yara	multiple_webshells_0002	—	—
yara	multiple_webshells_0003	—	—
yara	multiple_webshells_0004	—	—
yara	multiple_webshells_0005	—	—
yara	multiple_webshells_0006	—	—
yara	multiple_webshells_0007	—	—
yara	multiple_webshells_0008	—	—
yara	multiple_webshells_0009	—	—