PHPAV

PHP CLI Virus/Malware Scanner

A simple console framework for detected infected PHP files among Web servers.

@copyright Nexylan.com - 2016

Installation

You can install it globally thanks to composer:

composer global require nexylan/phpav

Usage

via CLI

phpav /path/to/scan

Inspiration

Websites

• Malicious Code Scanner
• PHP Shell Detector
• Obfuscalp
• Tripwire
• Malicious

Security informations

• How to Tell if Your PHP Site has been Hacked or Compromised
• Exploitable PHP functions
• Code injection – a simple PHP virus carried in a JPEG image

TODO

• Plugins management
• Detect more shell scripts
• Create whitelist database
• Automatic fix/quarantine
• Doc

Disclaimer

This software is provided "as is" without warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability and fitness for a particular purpose. In no event shall the author be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if the author has been advised of the possibility of such damages.