From a93f594296675ab7a89983afd24af2dd04366912 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Roland=20H=C3=A4der?= Date: Tue, 13 Aug 2019 22:27:15 +0200 Subject: [PATCH] Continued: - blocked %systemroot% (search is case-insensitive) MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Roland Häder --- libs/lib_detector.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libs/lib_detector.php b/libs/lib_detector.php index fa47682..8096763 100644 --- a/libs/lib_detector.php +++ b/libs/lib_detector.php @@ -94,7 +94,7 @@ function initCrackerTrackerArrays () { 'bin/tclsh', 'bin/nasm', '/perl', // Windows-related - 'cmd.exe', 'nc.exe', 'ftp.exe', 'powershell', 'system.net.webclient', + 'cmd.exe', 'nc.exe', 'ftp.exe', 'powershell', 'system.net.webclient', '%systemroot%', // php.ini settings 'allow_url_fopen', 'allow_url_include', 'auto_prepend_file', 'disable_functions', 'safe_mode', -- 2.39.5