Skip to content

Commit 5943ace

Browse files
committed
Extras module update.
1 parent 268866a commit 5943ace

2 files changed

Lines changed: 5 additions & 5 deletions

File tree

modules/module_extras.php

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* License: GNU/GPLv2
99
* @see LICENSE.txt
1010
*
11-
* This file: Optional security extras module (last modified: 2025.05.24).
11+
* This file: Optional security extras module (last modified: 2025.06.26).
1212
*
1313
* False positive risk (an approximate, rough estimate only): « [ ]Low [x]Medium [ ]High »
1414
*/
@@ -155,11 +155,11 @@
155155

156156
/** Probing for webshells/backdoors. */
157157
if ($Trigger(preg_match(
158-
'~(?:^|[/?])(?:[1-9cefimnptuwx]{27}\.jsp|(?:send-)?ses\.sh)(?:$|[/?])~',
158+
'~(?:^|[/?])(?:[1-9cefimnptuwx]{27}\.jsp|alfa-?rexhp\d\.p|(?:send-)?ses\.sh)(?:$|[/?])~',
159159
$LCNrURI
160160
), 'Probing for webshells/backdoors')) {
161161
$CIDRAM['Reporter']->report([15, 20], ['Caught probing for webshells/backdoors. Host might be compromised.'], $CIDRAM['BlockInfo']['IPAddr']);
162-
} // 2024.02.18 mod 2025.04.28
162+
} // 2024.02.18 mod 2025.06.26
163163

164164
/** Probing for webshells/backdoors. */
165165
if ($Trigger(preg_match(

modules/modules.dat

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -239,7 +239,7 @@ module_cookies.php:
239239
module_extras.php:
240240
Name: "Optional security extras module"
241241
False Positive Risk: "Medium"
242-
Version: "2025.143.0"
242+
Version: "2025.176.0"
243243
Dependencies:
244244
PHP: "^5.4|^7|^8"
245245
CIDRAM Core: "^1.13.1|^2.0.1"
@@ -254,7 +254,7 @@ module_extras.php:
254254
- "module_extras.php"
255255
- "module_extras.yaml"
256256
Checksum:
257-
- "72c6fcea5c34b6f2042c428ce7833c99f2588f41142d45259696c1ffc4d4aacd:31500"
257+
- "3d2b3679bcacd48a203cf223fe4df84c4db40b8762c6eb9c1d2343ee159915cd:31517"
258258
- "7b891d1fa4b1c52c410220bc758e8cb7064bd6040430fb149a5b60e9ae2e0838:890"
259259
Used with: "modules"
260260
Reannotate: "modules.dat"

0 commit comments

Comments
 (0)