php-malware-analysis/campaigns/random.campaign/find_shell_count at master · bediger4000/php-malware-analysis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
#!/bin/bash
while read URL
do
	fgrep -l "$URL" files/* | sed 's/files/edits2/' | xargs cksum | awk '{print $1}' | sort -n | uniq -c | awk '{print $2, $1}' |
	join -1 1 -2 1 shell.type - | awk '{print $2, $3}' | sort -k1.1 | awk '{print $2}' |
	awk '{printf "%s|", $1 }'
	echo $URL
done << ENDURLS
http://stratigery.com/admin/wp-content/plugins/apikey/single-rating.php
http://stratigery.com/admin/wp-content/plugins/apikey/wp-template-tags.php
http://stratigery.com/wordpress/wp-content/plugins/revslider/temp/update_extract/revslider/ps.php
http://stratigery.com/wp-content/plugins/apikey/class-IXR-error.php
http://stratigery.com/wp-content/plugins/apikey/class-wc-action-queue.php
http://stratigery.com/wp-content/plugins/apikey/class-wc-post-data.php
http://stratigery.com/wp-content/plugins/apikey/class-wc-privacy.php
http://stratigery.com/wp/wp-content/plugins/apikey/class.jetpack-cli.php
http://stratigery.com/wp/wp-content/plugins/apikey/customer-refunded-order.php
ENDURLS