Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	webshell_webshells_new_make2	—	—
yara	webshell_webshells_new_aaa	—	—
yara	webshell_Expdoor_com_ASP	—	—
yara	webshell_webshells_new_php2	—	—
yara	webshell_bypass_iisuser_p	—	—
yara	webshell_sig_404super	—	—
yara	webshell_webshells_new_JSP	—	—
yara	webshell_webshell_123	—	—
yara	webshell_dev_core	—	—
yara	webshell_webshells_new_pHp	—	—
yara	webshell_webshells_new_pppp	—	—
yara	webshell_webshells_new_code	—	—
yara	webshell_webshells_new_jspyyy	—	—
yara	webshell_webshells_new_xxxx	—	—
yara	webshell_webshells_new_JJjsp3	—	—
yara	phpjackal_php	—	—
yara	webshell_webshells_new_PHP1	—	—
yara	webshell_webshells_new_JJJsp2	—	—
yara	webshell_webshells_new_radhat	—	—
yara	webshell_webshells_new_asp1	—	—
yara	webshell_webshells_new_php6	—	—
yara	webshell_webshells_new_xxx	—	—
yara	webshell_GetPostpHp	—	—
yara	webshell_webshells_new_php5	—	—
yara	webshell_webshells_new_PHP	—	—
yara	webshell_webshells_new_Asp	—	—
yara	perlbot_pl	—	—
yara	php_backdoor_php	—	—
yara	Liz0ziM_Private_Safe_Mode_Command_Execuriton_Bypass_Exploit_php	—	—
yara	Nshell__1__php_php	—	—
yara	shankar_php_php	—	—
yara	PhpShell	—	—
yara	Casus15_php_php	—	—
yara	small_php_php	—	—
yara	shellbot_pl	—	—
yara	fuckphpshell_php	—	—
yara	ngh_php_php	—	—
yara	jsp_reverse_jsp	—	—
yara	Tool_asp	—	—
yara	NT_Addy_asp	—	—