Clever Geek Handbook

RegExp to find a specific string with random characters in between

I do not even hope that this is possible. I am looking for the "base64_decode" string in the PHP files (yes, this is for cleaning up a site that has been cracked). The problem is that this hacker "hid" the line like this:

'ba'.'se'.(32*2).'_d'.'eco'.'de'
or
'b'.'as'.'e6'.'4_d'.'ec'.'ode';

And a few more ways.

So I would like to search for the string "decode" or "base", ignoring all characters in between each letter. I understand this will be very CPU intensive (especially if you have a few hundred MB of files (yes, it hides the code in other files like GIF image).

Is it possible?

I know about Sucuri for an online site, but if you have any other suggestion for tools to scan files and find other hacks that I'm interested in.

+3


source to share


1 answer 


(?:b[^a-zA-Z]*?a[^a-zA-Z]*?s[^a-zA-Z]*?e)|(?:d[^a-zA-Z]*?e[^a-zA-Z]*?c[^a-zA-Z]*?o[^a-zA-Z]*?d[^a-zA-Z]*?e)

You can try this. See demo.



https://regex101.com/r/pG1kU1/17

+1


source






More articles:


All Articles