fix blackhole php regex

ebeb9400 · Ԝеѕ · GitHub · 5fa44ce2 · ebeb9400
Unverified Commit ebeb9400 authored Nov 26, 2019 by Ԝеѕ Committed by GitHub Nov 26, 2019
Hide whitespace changes
Inline Side-by-side

Showing with 1 additions and 1 deletions

EK_Blackhole.yar Exploit-Kits/EK_Blackhole.yar +1 -1

No files found.
--- a/Exploit-Kits/EK_Blackhole.yar
+++ b/Exploit-Kits/EK_Blackhole.yar
@@ -116,7 +116,7 @@ condition:
 rule blackhole_basic :  EK
 {
    strings:
-        $a = /\.php\?\.*\?\:[a-zA-Z0-9\:]{6,}\&\.*\?\&/
+        $a = /\.php\?.*?\:[a-zA-Z0-9\:]{6,}?\&.*?\&/
    condition:
        $a
 }