Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	webshell_in_JFolder_jfolder01_jsp_leo_warn	—	—
yara	webshell_r57shell_r57shell127_SnIpEr_SA_Shell_EgY_SpIdEr_ShElL_V2_r57_xxx	—	—
yara	webshell_807_a_css_dm_he1p_JspSpy_xxx	—	—
yara	webshell_201_3_ma_download	—	—
yara	webshell_browser_201_3_400_in_JFolder_jfolder01_jsp_leo_ma_warn_webshell_nc_download	—	—
yara	webshell_shell_phpspy_2006_arabicspy	—	—
yara	webshell_webshells_new_con2	—	—
yara	webshell_2_520_icesword_job_ma1_ma4_2	—	—
yara	webshell_phpspy_2005_full_phpspy_2005_lite_PHPSPY	—	—
yara	webshell_shell_phpspy_2006_arabicspy_hkrkoz	—	—
yara	webshell_c99_Shell_ci_Biz_was_here_c100_v_xxx	—	—
yara	webshell_2008_2009lite_2009mssql	—	—
yara	webshell_shell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_arabicspy_PHPSPY_hkrkoz	—	—
yara	webshell_807_dm_JspSpyJDK5_m_cofigrue	—	—
yara	webshell_Dive_Shell_1_0_Emperor_Hacking_Team_xxx	—	—
yara	webshell_404_data_in_JFolder_jfolder01_xxx	—	—
yara	webshell_jsp_reverse_jsp_reverse_jspbd	—	—
yara	webshell_400_in_JFolder_jfolder01_jsp_leo_warn_webshell_nc	—	—
yara	webshell_2_520_icesword_job_ma1	—	—
yara	webshell_2_520_job_JspWebshell_1_2_ma1_ma4_2	—	—
yara	webshell_shell_2008_2009mssql_phpspy_2005_full_phpspy_2006_arabicspy_hkrkoz	—	—
yara	webshell_gfs_sh_r57shell_r57shell127_SnIpEr_SA_xxx	—	—
yara	webshell_itsec_PHPJackal_itsecteam_shell_jHn	—	—
yara	webshell_Shell_ci_Biz_was_here_c100_v_xxx	—	—
yara	webshell_NIX_REMOTE_WEB_SHELL_NIX_REMOTE_WEB_xxx1	—	—
yara	webshell_c99_c99shell_c99_w4cking_Shell_xxx	—	—
yara	webshell_2008_2009mssql_phpspy_2005_full_phpspy_2006_arabicspy_hkrkoz	—	—
yara	webshell_c99_c66_c99_shadows_mod_c99shell	—	—
yara	webshell_r57shell127_r57_kartal_r57	—	—
yara	webshell_he1p_JspSpy_nogfw_ok_style_1_JspSpy1	—	—
yara	webshell_000_403_c5_config_myxx_queryDong_spyjsp2010_zend	—	—
yara	webshell_c99_c99shell_c99_c99shell	—	—
yara	webshell_r57shell127_r57_iFX_r57_kartal_r57_antichat	—	—
yara	webshell_NIX_REMOTE_WEB_SHELL_nstview_xxx	—	—
yara	webshell_000_403_807_a_c5_config_css_dm_he1p_xxx	—	—
yara	webshell_404_data_in_JFolder_jfolder01_jsp_suiyue_warn	—	—
yara	webshell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_PHPSPY	—	—
yara	webshell_c99_locus7s_c99_w4cking_xxx	—	—
yara	webshell_browser_201_3_ma_ma2_download	—	—
yara	webshell_000_403_c5_queryDong_spyjsp2010	—	—

← Prev Next →