Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	webshell_webshells_new_xxx	—	—
yara	webshell_GetPostpHp	—	—
yara	webshell_webshells_new_php5	—	—
yara	webshell_webshells_new_PHP	—	—
yara	webshell_webshells_new_Asp	—	—
yara	perlbot_pl	—	—
yara	php_backdoor_php	—	—
yara	Liz0ziM_Private_Safe_Mode_Command_Execuriton_Bypass_Exploit_php	—	—
yara	Nshell__1__php_php	—	—
yara	shankar_php_php	—	—
yara	PhpShell	—	—
yara	Casus15_php_php	—	—
yara	small_php_php	—	—
yara	shellbot_pl	—	—
yara	fuckphpshell_php	—	—
yara	ngh_php_php	—	—
yara	jsp_reverse_jsp	—	—
yara	Tool_asp	—	—
yara	NT_Addy_asp	—	—
yara	SimAttacker___Vrsion_1_0_0___priv8_4_My_friend_php	—	—
yara	RemExp_asp	—	—
yara	phvayvv_php_php	—	—
yara	klasvayv_asp	—	—
yara	r57shell_php_php	—	—
yara	rst_sql_php_php	—	—
yara	wh_bindshell_py	—	—
yara	HYTop_DevPack_config	—	—
yara	lurm_safemod_on_cgi	—	—
yara	c99madshell_v2_0_php_php	—	—
yara	backupsql_php_often_with_c99shell	—	—
yara	uploader_php_php	—	—
yara	telnet_pl	—	—
yara	w3d_php_php	—	—
yara	WebShell_cgi	—	—
yara	WinX_Shell_html	—	—
yara	Dx_php_php	—	—
yara	csh_php_php	—	—
yara	pHpINJ_php_php	—	—
yara	sig_2008_php_php	—	—
yara	ak74shell_php_php	—	—