Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	PHANTASMA_php	—	—
yara	shell_php_php	—	—
yara	telnet_cgi	—	—
yara	ironshell_php	—	—
yara	backdoorfr_php	—	—
yara	aspydrv_asp	—	—
yara	cmdjsp_jsp	—	—
yara	h4ntu_shell__powered_by_tsoi_	—	—
yara	Ajan_asp	—	—
yara	MySQL_Web_Interface_Version_0_8_php	—	—
yara	simple_cmd_html	—	—
yara	multiple_webshells_0001	—	—
yara	multiple_webshells_0002	—	—
yara	multiple_webshells_0003	—	—
yara	multiple_webshells_0004	—	—
yara	multiple_webshells_0005	—	—
yara	multiple_webshells_0006	—	—
yara	multiple_webshells_0007	—	—
yara	multiple_webshells_0008	—	—
yara	multiple_webshells_0009	—	—
yara	WebShell_php_webshells_matamu	—	—
yara	WebShell_ru24_post_sh	—	—
yara	WebShell_hiddens_shell_v1	—	—
yara	WebShell_c99_madnet	—	—
yara	WebShell_c99_locus7s	—	—
yara	WebShell_JspWebshell_1_2	—	—
yara	WebShell_safe0ver	—	—
yara	WebShell_php_webshells_kral	—	—
yara	WebShell_cgitelnet	—	—
yara	WebShell_simple_backdoor	—	—
yara	WebShell_Safe_Mode_Bypass_PHP_4_4_2_and_PHP_5_1_2_2	—	—
yara	WebShell_NTDaddy_v1_9	—	—
yara	WebShell_lamashell	—	—
yara	WebShell_Simple_PHP_backdoor_by_DK	—	—
yara	WebShell_Moroccan_Spamers_Ma_EditioN_By_GhOsT	—	—
yara	WebShell_C99madShell_v__2_0_madnet_edition	—	—
yara	WebShell_CmdAsp_asp_php	—	—
yara	WebShell_NCC_Shell	—	—
yara	WebShell_php_webshells_README	—	—
yara	WebShell_backupsql	—	—