├── .ca.def ├── .github ├── dependabot.yml └── workflows │ ├── packaging_test.yml │ └── release.yml ├── CHANGELOG ├── CHANGELOG.RELEASE ├── CHANGELOG.VARIABLES ├── COPYING.GPL ├── README ├── cron.d.pub ├── cron.daily ├── debian ├── README.Debian ├── README.source ├── bin │ ├── github-release.sh │ └── repack.sh ├── changelog ├── control ├── copyright ├── docs ├── maldet.1 ├── maldetect.default ├── maldetect.dirs ├── maldetect.install ├── maldetect.manpages ├── maldetect.postinst ├── patches │ ├── 0001-10_maldetect-paths.patch │ ├── 0002-12_maldetect-cron.daily-documentroots.patch │ ├── 0003-13_maldetect-cron.daily-default.patch │ ├── 0004-14_maldetect-manpage.patch │ ├── 0005-15_maldetect-no-autoupdate.patch │ ├── 0010-20_fix_man_section.patch │ └── series ├── rules ├── source │ ├── format │ └── options └── watch ├── files ├── VERSION.hash ├── clean │ ├── base64.inject.unclassed │ ├── gzbase64.inject.unclassed │ ├── js.inject.VisitorTracker │ ├── js.inject.fakejquery02 │ ├── php.brute.bf1lic │ ├── php.inject.n1zb │ ├── php.malware.magentocore_ccskim │ └── php_malware_hexinject ├── conf.maldet ├── conf.maldet.cron ├── cron │ ├── conf.maldet.cron │ └── custom.cron ├── hookscan.sh ├── ignore_file_ext ├── ignore_inotify ├── ignore_paths ├── ignore_sigs ├── internals │ ├── compat.conf │ ├── functions │ ├── hexfifo.pl │ ├── hexstring.pl │ ├── importconf │ ├── internals.conf │ ├── panel_alert.etpl │ ├── scan.etpl │ └── tlog ├── maldet ├── maldet.1 ├── modsec.sh ├── monitor_paths ├── service │ ├── maldet.service │ ├── maldet.sh │ └── maldet.sysconfig └── uninstall.sh └── install.sh /.ca.def: -------------------------------------------------------------------------------- 1 | files/internals/importconf -------------------------------------------------------------------------------- /.github/dependabot.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/.github/dependabot.yml -------------------------------------------------------------------------------- /.github/workflows/packaging_test.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/.github/workflows/packaging_test.yml -------------------------------------------------------------------------------- /.github/workflows/release.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/.github/workflows/release.yml -------------------------------------------------------------------------------- /CHANGELOG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/CHANGELOG -------------------------------------------------------------------------------- /CHANGELOG.RELEASE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/CHANGELOG.RELEASE -------------------------------------------------------------------------------- /CHANGELOG.VARIABLES: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/CHANGELOG.VARIABLES -------------------------------------------------------------------------------- /COPYING.GPL: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/COPYING.GPL -------------------------------------------------------------------------------- /README: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/README -------------------------------------------------------------------------------- /cron.d.pub: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/cron.d.pub -------------------------------------------------------------------------------- /cron.daily: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/cron.daily -------------------------------------------------------------------------------- /debian/README.Debian: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/README.Debian -------------------------------------------------------------------------------- /debian/README.source: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/README.source -------------------------------------------------------------------------------- /debian/bin/github-release.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/bin/github-release.sh -------------------------------------------------------------------------------- /debian/bin/repack.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/bin/repack.sh -------------------------------------------------------------------------------- /debian/changelog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/changelog -------------------------------------------------------------------------------- /debian/control: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/control -------------------------------------------------------------------------------- /debian/copyright: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/copyright -------------------------------------------------------------------------------- /debian/docs: -------------------------------------------------------------------------------- 1 | README 2 | -------------------------------------------------------------------------------- /debian/maldet.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/maldet.1 -------------------------------------------------------------------------------- /debian/maldetect.default: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/maldetect.default -------------------------------------------------------------------------------- /debian/maldetect.dirs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/maldetect.dirs -------------------------------------------------------------------------------- /debian/maldetect.install: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/maldetect.install -------------------------------------------------------------------------------- /debian/maldetect.manpages: -------------------------------------------------------------------------------- 1 | files/maldet.1 2 | -------------------------------------------------------------------------------- /debian/maldetect.postinst: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/maldetect.postinst -------------------------------------------------------------------------------- /debian/patches/0001-10_maldetect-paths.patch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/patches/0001-10_maldetect-paths.patch -------------------------------------------------------------------------------- /debian/patches/0002-12_maldetect-cron.daily-documentroots.patch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/patches/0002-12_maldetect-cron.daily-documentroots.patch -------------------------------------------------------------------------------- /debian/patches/0003-13_maldetect-cron.daily-default.patch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/patches/0003-13_maldetect-cron.daily-default.patch -------------------------------------------------------------------------------- /debian/patches/0004-14_maldetect-manpage.patch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/patches/0004-14_maldetect-manpage.patch -------------------------------------------------------------------------------- /debian/patches/0005-15_maldetect-no-autoupdate.patch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/patches/0005-15_maldetect-no-autoupdate.patch -------------------------------------------------------------------------------- /debian/patches/0010-20_fix_man_section.patch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/patches/0010-20_fix_man_section.patch -------------------------------------------------------------------------------- /debian/patches/series: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/patches/series -------------------------------------------------------------------------------- /debian/rules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/rules -------------------------------------------------------------------------------- /debian/source/format: -------------------------------------------------------------------------------- 1 | 3.0 (quilt) 2 | -------------------------------------------------------------------------------- /debian/source/options: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/source/options -------------------------------------------------------------------------------- /debian/watch: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/debian/watch -------------------------------------------------------------------------------- /files/VERSION.hash: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/VERSION.hash -------------------------------------------------------------------------------- /files/clean/base64.inject.unclassed: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/clean/base64.inject.unclassed -------------------------------------------------------------------------------- /files/clean/gzbase64.inject.unclassed: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/clean/gzbase64.inject.unclassed -------------------------------------------------------------------------------- /files/clean/js.inject.VisitorTracker: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/clean/js.inject.VisitorTracker -------------------------------------------------------------------------------- /files/clean/js.inject.fakejquery02: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/clean/js.inject.fakejquery02 -------------------------------------------------------------------------------- /files/clean/php.brute.bf1lic: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/clean/php.brute.bf1lic -------------------------------------------------------------------------------- /files/clean/php.inject.n1zb: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/clean/php.inject.n1zb -------------------------------------------------------------------------------- /files/clean/php.malware.magentocore_ccskim: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/clean/php.malware.magentocore_ccskim -------------------------------------------------------------------------------- /files/clean/php_malware_hexinject: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/clean/php_malware_hexinject -------------------------------------------------------------------------------- /files/conf.maldet: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/conf.maldet -------------------------------------------------------------------------------- /files/conf.maldet.cron: -------------------------------------------------------------------------------- 1 | cron/conf.maldet.cron -------------------------------------------------------------------------------- /files/cron/conf.maldet.cron: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/cron/conf.maldet.cron -------------------------------------------------------------------------------- /files/cron/custom.cron: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/cron/custom.cron -------------------------------------------------------------------------------- /files/hookscan.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/hookscan.sh -------------------------------------------------------------------------------- /files/ignore_file_ext: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /files/ignore_inotify: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/ignore_inotify -------------------------------------------------------------------------------- /files/ignore_paths: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/ignore_paths -------------------------------------------------------------------------------- /files/ignore_sigs: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /files/internals/compat.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/compat.conf -------------------------------------------------------------------------------- /files/internals/functions: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/functions -------------------------------------------------------------------------------- /files/internals/hexfifo.pl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/hexfifo.pl -------------------------------------------------------------------------------- /files/internals/hexstring.pl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/hexstring.pl -------------------------------------------------------------------------------- /files/internals/importconf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/importconf -------------------------------------------------------------------------------- /files/internals/internals.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/internals.conf -------------------------------------------------------------------------------- /files/internals/panel_alert.etpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/panel_alert.etpl -------------------------------------------------------------------------------- /files/internals/scan.etpl: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/scan.etpl -------------------------------------------------------------------------------- /files/internals/tlog: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/internals/tlog -------------------------------------------------------------------------------- /files/maldet: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/maldet -------------------------------------------------------------------------------- /files/maldet.1: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/maldet.1 -------------------------------------------------------------------------------- /files/modsec.sh: -------------------------------------------------------------------------------- 1 | hookscan.sh -------------------------------------------------------------------------------- /files/monitor_paths: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /files/service/maldet.service: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/service/maldet.service -------------------------------------------------------------------------------- /files/service/maldet.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/service/maldet.sh -------------------------------------------------------------------------------- /files/service/maldet.sysconfig: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/service/maldet.sysconfig -------------------------------------------------------------------------------- /files/uninstall.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/files/uninstall.sh -------------------------------------------------------------------------------- /install.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/waja/maldetect/HEAD/install.sh --------------------------------------------------------------------------------