Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	webshell_c99_c99shell_c99_w4cking_Shell_xxx	—	—
yara	webshell_2008_2009mssql_phpspy_2005_full_phpspy_2006_arabicspy_hkrkoz	—	—
yara	webshell_c99_c66_c99_shadows_mod_c99shell	—	—
yara	webshell_r57shell127_r57_kartal_r57	—	—
yara	webshell_he1p_JspSpy_nogfw_ok_style_1_JspSpy1	—	—
yara	webshell_000_403_c5_config_myxx_queryDong_spyjsp2010_zend	—	—
yara	webshell_c99_c99shell_c99_c99shell	—	—
yara	webshell_r57shell127_r57_iFX_r57_kartal_r57_antichat	—	—
yara	webshell_NIX_REMOTE_WEB_SHELL_nstview_xxx	—	—
yara	webshell_000_403_807_a_c5_config_css_dm_he1p_xxx	—	—
yara	webshell_404_data_in_JFolder_jfolder01_jsp_suiyue_warn	—	—
yara	webshell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_PHPSPY	—	—
yara	webshell_c99_locus7s_c99_w4cking_xxx	—	—
yara	webshell_browser_201_3_ma_ma2_download	—	—
yara	webshell_000_403_c5_queryDong_spyjsp2010	—	—
yara	webshell_webshells_new_make2	—	—
yara	webshell_webshells_new_aaa	—	—
yara	webshell_Expdoor_com_ASP	—	—
yara	webshell_webshells_new_php2	—	—
yara	webshell_bypass_iisuser_p	—	—
yara	webshell_sig_404super	—	—
yara	webshell_webshells_new_JSP	—	—
yara	webshell_webshell_123	—	—
yara	webshell_dev_core	—	—
yara	webshell_webshells_new_pHp	—	—
yara	webshell_webshells_new_pppp	—	—
yara	webshell_webshells_new_code	—	—
yara	webshell_webshells_new_jspyyy	—	—
yara	webshell_webshells_new_xxxx	—	—
yara	webshell_webshells_new_JJjsp3	—	—
yara	phpjackal_php	—	—
yara	multiple_webshells_0010	—	—
yara	multiple_webshells_0011	—	—
yara	multiple_webshells_0012	—	—
yara	multiple_webshells_0013	—	—
yara	multiple_webshells_0014	—	—
yara	multiple_webshells_0015	—	—
yara	multiple_webshells_0016	—	—
yara	multiple_webshells_0017	—	—
yara	multiple_webshells_0018	—	—

← Prev Next →