shieldon icon indicating copy to clipboard operation
shieldon copied to clipboard

小心enphp...

Open c2xusnpq6 opened this issue 4 years ago • 9 comments

https://enphp.djunny.com/

https://github.com/djunny/enphp

c2xusnpq6 avatar Mar 07 '21 13:03 c2xusnpq6

什麼意思?

terrylinooo avatar Mar 07 '21 13:03 terrylinooo

怕shieldon不會擋經enphp的木馬...

經enphp的b374k: magic.zip

https://www.virustotal.com/gui/file/db069fb498469425e1b38abc4bbb32224d9ef0e08248b844de6c5807a44e246c/detection

image

c2xusnpq6 avatar Mar 07 '21 13:03 c2xusnpq6

image https://www.virustotal.com/gui/file/bdb35b2c8b389ac35e5fcda1c71d2c8748b7e8ff0978793fc5aa74fc4a7c27f9/detection

c2xusnpq6 avatar Mar 07 '21 13:03 c2xusnpq6

沒關係喔。Shieldon 不是防毒。是偵測網頁 request 的異常,主要擋暴力攻擊和惡意爬蟲。不過還是謝謝您的提醒。

terrylinooo avatar Mar 07 '21 13:03 terrylinooo

image

c2xusnpq6 avatar Mar 07 '21 13:03 c2xusnpq6

就是怕用户上傳經enphp的木馬.....

c2xusnpq6 avatar Mar 07 '21 13:03 c2xusnpq6

關於掃描上傳檔案這個功能,我再研究看看或許可加入第三方的防毒掃描 API 作為進階功能。 謝謝您的建議。有進一步的消息我再回覆在這篇貼文。

terrylinooo avatar Mar 07 '21 14:03 terrylinooo

連eset, bitdefender都不會顯示suspicious/經混淆的超超超強木馬?.............

c2xusnpq6 avatar Mar 16 '21 18:03 c2xusnpq6

eset, bitdefender我都跟他們講了

您這邊進展如何?

c2xusnpq6 avatar Apr 25 '21 18:04 c2xusnpq6

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days.

github-actions[bot] avatar Jun 12 '23 00:06 github-actions[bot]

This issue was closed because it has been inactive for 14 since being marked as stale.

github-actions[bot] avatar Jun 19 '23 00:06 github-actions[bot]