| Path : /proc/3/task/3/cwd/usr/local/scan/lw-yara/includes/ |
| Current File : //proc/3/task/3/cwd/usr/local/scan/lw-yara/includes/drupalgeddon-0.yar |
rule drupal_CVE_2018_7600_RCE_0
{
meta:
author= "Brian Laskowski"
info= " Drupal RCE shell"
strings:
$a = "echo"
$b = "<pre>"
$c = ";system($_GET['c'])"
condition:
all of them
}