Skip to content

Instantly share code, notes, and snippets.

@ceelsoin
Created September 15, 2024 20:59
Show Gist options
  • Save ceelsoin/b593b5277b0364971f49cddb9b39649e to your computer and use it in GitHub Desktop.
Save ceelsoin/b593b5277b0364971f49cddb9b39649e to your computer and use it in GitHub Desktop.
Find php shell/virus/malware in linux server
grep -rF \
-e "eval(" \
-e "base64_decode(" \
-e "shell_exec(" \
-e "exec(" \
-e "passthru(" \
-e "popen(" \
-e "proc_open(" \
-e "system(" \
-e "assert(" \
-e "str_rot13(" \
-e "gzinflate(" \
-e "preg_replace('/e/'" \
-e 'header("X-XSS-Protection: 0");' \
-e "ob_start();" \
-e "set_time_limit(0);" \
-e "error_reporting(0);" \
-e "ini_set('display_errors', FALSE);" .
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment