Rule feed

Detection rules

Every rule tracked across all seven sources, newest updates first.

Source	Rule	Status	Updated
yara	kacak_asp	—	—
yara	hidshell_php_php	—	—
yara	s72_Shell_v1_1_Coding_html	—	—
yara	Worse_Linux_Shell_php	—	—
yara	DxShell_php_php	—	—
yara	indexer_asp	—	—
yara	elmaliseker_asp	—	—
yara	backdoor1_php	—	—
yara	shells_PHP_wso	—	—
yara	DefaceKeeper_0_2_php	—	—
yara	connectback2_pl	—	—
yara	phpjackal_php	—	—
yara	webshell_webshells_new_JJjsp3	—	—
yara	webshell_webshells_new_xxxx	—	—
yara	webshell_webshells_new_jspyyy	—	—
yara	webshell_webshells_new_code	—	—
yara	webshell_webshells_new_pppp	—	—
yara	webshell_webshells_new_pHp	—	—
yara	webshell_dev_core	—	—
yara	webshell_webshell_123	—	—
yara	webshell_webshells_new_JSP	—	—
yara	webshell_sig_404super	—	—
yara	webshell_bypass_iisuser_p	—	—
yara	webshell_webshells_new_php2	—	—
yara	webshell_Expdoor_com_ASP	—	—
yara	webshell_webshells_new_aaa	—	—
yara	webshell_webshells_new_make2	—	—
yara	webshell_000_403_c5_queryDong_spyjsp2010	—	—
yara	webshell_browser_201_3_ma_ma2_download	—	—
yara	webshell_c99_locus7s_c99_w4cking_xxx	—	—
yara	webshell_phpspy_2005_full_phpspy_2005_lite_phpspy_2006_PHPSPY	—	—
yara	webshell_404_data_in_JFolder_jfolder01_jsp_suiyue_warn	—	—
yara	webshell_000_403_807_a_c5_config_css_dm_he1p_xxx	—	—
yara	webshell_NIX_REMOTE_WEB_SHELL_nstview_xxx	—	—
yara	webshell_r57shell127_r57_iFX_r57_kartal_r57_antichat	—	—
yara	webshell_c99_c99shell_c99_c99shell	—	—
yara	webshell_000_403_c5_config_myxx_queryDong_spyjsp2010_zend	—	—
yara	webshell_he1p_JspSpy_nogfw_ok_style_1_JspSpy1	—	—
yara	webshell_r57shell127_r57_kartal_r57	—	—
yara	webshell_c99_c66_c99_shadows_mod_c99shell	—	—

← Prev Next →