Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	md5_fd141197c89d27b30821f3de8627ac38	—	—
yara	visbot	—	—
yara	remsec_executable_blob_64	—	—
yara	md5_4aa900ddd4f1848a15c61a9b7acd5035	—	—
yara	onepage_or_checkout	—	—
yara	hidden_file_upload_in_503	—	—
yara	md5_ab63230ee24a988a4a9245c2456e4874	—	—
yara	md5_50be694a82a8653fa8b31d049aac721a	—	—
yara	indoexploit_autoexploiter	—	—
yara	md5_fb9e35bf367a106d18eb6aa0fe406437	—	—
yara	md5_b579bff90970ec58862ea8c26014d643	—	—
yara	md5_d30b23d1224438518d18e90c218d7c8b	—	—
yara	md5_24f2df1b9d49cfb02d8954b08dba471f	—	—
yara	eval_base64_decode_a	—	—
yara	SmartCopy2	—	—
yara	md5_39ca2651740c2cef91eb82161575348b	—	—
yara	base64_hidden_in_image	—	—
yara	ShellCreator2	—	—
yara	Dx_php_php	—	—
yara	WinX_Shell_html	—	—
yara	WebShell_cgi	—	—
yara	w3d_php_php	—	—
yara	telnet_pl	—	—
yara	uploader_php_php	—	—
yara	backupsql_php_often_with_c99shell	—	—
yara	c99madshell_v2_0_php_php	—	—
yara	lurm_safemod_on_cgi	—	—
yara	HYTop_DevPack_config	—	—
yara	wh_bindshell_py	—	—
yara	rst_sql_php_php	—	—
yara	r57shell_php_php	—	—
yara	klasvayv_asp	—	—
yara	phvayvv_php_php	—	—
yara	RemExp_asp	—	—
yara	SimAttacker___Vrsion_1_0_0___priv8_4_My_friend_php	—	—
yara	webshell_PHP_co	—	—
yara	webshell_asp_list	—	—
yara	webshell_php_cmd	—	—
yara	webshell_asp_ajn	—	—
yara	webshell_jsp_hsxa1	—	—