Webshell木马查杀排查
php文件
find 网站目录/* -type f -name "*.php" |xargs grep "eval"
find 网站目录/* -type f -name "*.php" |xargs grep "base64_decode"
find 网站目录/* -type f -name "*.php" |xargs grep "@$"
jsp文件
find 网站目录/* -type f -name "*.jsp" |xargs grep "getRuntime"
find 网站目录/* -type f -name "*.jsp" |xargs grep "exec"
find 网站目录/* -type f -name "*.jsp" |xargs grep "AES"
asp文件
find 网站目录/* -type f -name "*.asp" |xargs grep "execute"
find 网站目录/* -type f -name "*.asp" |xargs grep "eval"
find 网站目录/* -type f -name "*.asp" |xargs grep "ExecuteGlobal"