{
	"format": 2,
	"version": "2026.10.19",
	"updated_at": "2026-10-19",
	"categories": {
		"webshell": {
			"fr": "Webshell",
			"en": "Webshell"
		},
		"backdoor": {
			"fr": "Porte dérobée",
			"en": "Backdoor"
		},
		"obfuscation": {
			"fr": "Code obfusqué",
			"en": "Obfuscated code"
		},
		"injection": {
			"fr": "Injection JavaScript",
			"en": "JavaScript injection"
		},
		"downloader": {
			"fr": "Téléchargeur",
			"en": "Downloader"
		},
		"uploader": {
			"fr": "Dépôt de fichiers",
			"en": "File uploader"
		},
		"mailer": {
			"fr": "Envoi de spam",
			"en": "Spam mailer"
		},
		"miner": {
			"fr": "Mineur de cryptomonnaie",
			"en": "Cryptocurrency miner"
		},
		"phishing": {
			"fr": "Hameçonnage",
			"en": "Phishing"
		},
		"spam": {
			"fr": "Spam SEO",
			"en": "SEO spam"
		}
	},
	"signatures": [
		{
			"id": "webshell_wso",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0057\u0053\u004f \u0032.",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0057\u0053\u004f \u0064é\u0074\u0065\u0063\u0074é (\u0062\u0061\u006e\u006e\u0069è\u0072\u0065 \u0064\u0065 \u0076\u0065\u0072\u0073\u0069\u006f\u006e).",
				"en": "\u0057\u0053\u004f \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064 (\u0076\u0065\u0072\u0073\u0069\u006f\u006e \u0062\u0061\u006e\u006e\u0065\u0072)."
			}
		},
		{
			"id": "webshell_wso_var",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0077\u0073\u006f_\u0076\u0065\u0072\u0073\u0069\u006f\u006e",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0057\u0053\u004f \u0064é\u0074\u0065\u0063\u0074é (\u0076\u0061\u0072\u0069\u0061\u0062\u006c\u0065 \u0069\u006e\u0074\u0065\u0072\u006e\u0065 \u0063\u0061\u0072\u0061\u0063\u0074é\u0072\u0069\u0073\u0074\u0069\u0071\u0075\u0065).",
				"en": "\u0057\u0053\u004f \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064 (\u0063\u0068\u0061\u0072\u0061\u0063\u0074\u0065\u0072\u0069\u0073\u0074\u0069\u0063 \u0069\u006e\u0074\u0065\u0072\u006e\u0061\u006c \u0076\u0061\u0072\u0069\u0061\u0062\u006c\u0065)."
			}
		},
		{
			"id": "webshell_c99",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0063\u0039\u0039\u0073\u0068\u0065\u006c\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0043\u0039\u0039 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0043\u0039\u0039 \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_c99mad",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0063\u0039\u0039\u006d\u0061\u0064\u0073\u0068\u0065\u006c\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0043\u0039\u0039\u004d\u0061\u0064\u0073\u0068\u0065\u006c\u006c \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0043\u0039\u0039\u004d\u0061\u0064\u0073\u0068\u0065\u006c\u006c \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_r57",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0072\u0035\u0037\u0073\u0068\u0065\u006c\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0072\u0035\u0037 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0072\u0035\u0037 \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_filesman",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0046\u0069\u006c\u0065\u0073\u004d\u0061\u006e",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0046\u0069\u006c\u0065\u0073\u004d\u0061\u006e \u0064é\u0074\u0065\u0063\u0074é (\u0074\u0072è\u0073 \u0072é\u0070\u0061\u006e\u0064\u0075, \u0073\u006f\u0075\u0076\u0065\u006e\u0074 \u0069\u006e\u006a\u0065\u0063\u0074é \u0065\u006e \u006d\u0061\u0073\u0073\u0065).",
				"en": "\u0046\u0069\u006c\u0065\u0073\u004d\u0061\u006e \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064 (\u0076\u0065\u0072\u0079 \u0063\u006f\u006d\u006d\u006f\u006e, \u006f\u0066\u0074\u0065\u006e \u0069\u006e\u006a\u0065\u0063\u0074\u0065\u0064 \u0069\u006e \u0062\u0075\u006c\u006b)."
			}
		},
		{
			"id": "webshell_b374k",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0062\u0033\u0037\u0034\u006b",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0062\u0033\u0037\u0034\u006b \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0062\u0033\u0037\u0034\u006b \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_alfa",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0041\u006c\u0066\u0061 \u0053\u0068\u0065\u006c\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0041\u006c\u0066\u0061 \u0053\u0068\u0065\u006c\u006c \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0041\u006c\u0066\u0061 \u0053\u0068\u0065\u006c\u006c \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_cyber",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0043\u0079\u0062\u0065\u0072 \u0053\u0068\u0065\u006c\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0043\u0079\u0062\u0065\u0072 \u0053\u0068\u0065\u006c\u006c \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0043\u0079\u0062\u0065\u0072 \u0053\u0068\u0065\u006c\u006c \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_indoxploit",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0049\u006e\u0064\u006f\u0058\u0070\u006c\u006f\u0069\u0074",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0049\u006e\u0064\u006f\u0058\u0070\u006c\u006f\u0069\u0074 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0049\u006e\u0064\u006f\u0058\u0070\u006c\u006f\u0069\u0074 \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_phpjackal",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0050\u0048\u0050\u004a\u0061\u0063\u006b\u0061\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0050\u0048\u0050\u004a\u0061\u0063\u006b\u0061\u006c \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0050\u0048\u0050\u004a\u0061\u0063\u006b\u0061\u006c \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_antichat",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0041\u006e\u0074\u0069\u0063\u0068\u0061\u0074 \u0053\u0068\u0065\u006c\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0041\u006e\u0074\u0069\u0063\u0068\u0061\u0074 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0041\u006e\u0074\u0069\u0063\u0068\u0061\u0074 \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_orb",
			"category": "webshell",
			"type": "string",
			"pattern": "\u0057\u0065\u0062 \u0053\u0068\u0065\u006c\u006c \u0062\u0079 \u006f\u0052\u0062",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u006f\u0052\u0062 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u006f\u0052\u0062 \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "webshell_ninja",
			"category": "webshell",
			"type": "string",
			"pattern": "\u004e\u0069\u006e\u006a\u0061 \u0053\u0068\u0065\u006c\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0057\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u004e\u0069\u006e\u006a\u0061 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u004e\u0069\u006e\u006a\u0061 \u0053\u0068\u0065\u006c\u006c \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "backdoor_eval_superglobal",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045|\u0053\u0045\u0052\u0056\u0045\u0052)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u0064\u0065 \u0050\u0048\u0050 \u0064\u0069\u0072\u0065\u0063\u0074\u0065\u006d\u0065\u006e\u0074 \u0064\u0065\u0070\u0075\u0069\u0073 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u0065\u0076\u0061\u006c + \u0076\u0061\u0072\u0069\u0061\u0062\u006c\u0065 \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c\u0065) : \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072 \u0063\u006c\u0061\u0073\u0073\u0069\u0071\u0075\u0065.",
				"en": "\u0050\u0048\u0050 \u0063\u006f\u0064\u0065 \u0072\u0075\u006e \u0064\u0069\u0072\u0065\u0063\u0074\u006c\u0079 \u0066\u0072\u006f\u006d \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074 (\u0065\u0076\u0061\u006c + \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c): \u0063\u006c\u0061\u0073\u0073\u0069\u0063 \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072."
			}
		},
		{
			"id": "backdoor_assert_superglobal",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0061\u0073\u0073\u0065\u0072\u0074\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0061\u0073\u0073\u0065\u0072\u0074() \u0075\u0074\u0069\u006c\u0069\u0073é \u0061\u0076\u0065\u0063 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 : \u0070\u0065\u0072\u006d\u0065\u0074 \u006c'\u0065\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u0064\u0065 \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0069\u0072\u0065 (\u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0064\u0065 \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072).",
				"en": "\u0061\u0073\u0073\u0065\u0072\u0074() \u0075\u0073\u0065\u0064 \u0077\u0069\u0074\u0068 \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074: \u0061\u006c\u006c\u006f\u0077\u0073 \u0072\u0075\u006e\u006e\u0069\u006e\u0067 \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0072\u0079 \u0063\u006f\u0064\u0065 (\u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072 \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065)."
			}
		},
		{
			"id": "backdoor_assert_string",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0061\u0073\u0073\u0065\u0072\u0074\\\u0073*\\(\\\u0073*['\"]",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0061\u0073\u0073\u0065\u0072\u0074() \u0061\u0070\u0070\u0065\u006cé \u0061\u0076\u0065\u0063 \u0075\u006e\u0065 \u0063\u0068\u0061î\u006e\u0065 \u006c\u0069\u0074\u0074é\u0072\u0061\u006c\u0065 : \u0070\u0065\u0075\u0074 \u0065\u0078é\u0063\u0075\u0074\u0065\u0072 \u0064\u0075 \u0063\u006f\u0064\u0065 \u0050\u0048\u0050 \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0069\u0072\u0065, \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0063\u006f\u006e\u006e\u0075\u0065 \u0064\u0065 \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072.",
				"en": "\u0061\u0073\u0073\u0065\u0072\u0074() \u0063\u0061\u006c\u006c\u0065\u0064 \u0077\u0069\u0074\u0068 \u0061 \u006c\u0069\u0074\u0065\u0072\u0061\u006c \u0073\u0074\u0072\u0069\u006e\u0067: \u0063\u0061\u006e \u0072\u0075\u006e \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0072\u0079 \u0050\u0048\u0050 \u0063\u006f\u0064\u0065, \u0061 \u006b\u006e\u006f\u0077\u006e \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072 \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065."
			}
		},
		{
			"id": "backdoor_system_superglobal",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0073\u0079\u0073\u0074\u0065\u006d\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u006d\u006d\u0061\u006e\u0064\u0065 \u0073\u0079\u0073\u0074è\u006d\u0065 \u0064\u0065\u0070\u0075\u0069\u0073 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u0073\u0079\u0073\u0074\u0065\u006d + \u0076\u0061\u0072\u0069\u0061\u0062\u006c\u0065 \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c\u0065).",
				"en": "\u0053\u0079\u0073\u0074\u0065\u006d \u0063\u006f\u006d\u006d\u0061\u006e\u0064 \u0072\u0075\u006e \u0066\u0072\u006f\u006d \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074 (\u0073\u0079\u0073\u0074\u0065\u006d + \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c)."
			}
		},
		{
			"id": "backdoor_exec_superglobal",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\\\u0062\u0065\u0078\u0065\u0063\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u006d\u006d\u0061\u006e\u0064\u0065 \u0073\u0079\u0073\u0074è\u006d\u0065 \u0064\u0065\u0070\u0075\u0069\u0073 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u0065\u0078\u0065\u0063 + \u0076\u0061\u0072\u0069\u0061\u0062\u006c\u0065 \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c\u0065).",
				"en": "\u0053\u0079\u0073\u0074\u0065\u006d \u0063\u006f\u006d\u006d\u0061\u006e\u0064 \u0072\u0075\u006e \u0066\u0072\u006f\u006d \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074 (\u0065\u0078\u0065\u0063 + \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c)."
			}
		},
		{
			"id": "backdoor_passthru_superglobal",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0070\u0061\u0073\u0073\u0074\u0068\u0072\u0075\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u006d\u006d\u0061\u006e\u0064\u0065 \u0073\u0079\u0073\u0074è\u006d\u0065 \u0064\u0065\u0070\u0075\u0069\u0073 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u0070\u0061\u0073\u0073\u0074\u0068\u0072\u0075 + \u0076\u0061\u0072\u0069\u0061\u0062\u006c\u0065 \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c\u0065).",
				"en": "\u0053\u0079\u0073\u0074\u0065\u006d \u0063\u006f\u006d\u006d\u0061\u006e\u0064 \u0072\u0075\u006e \u0066\u0072\u006f\u006d \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074 (\u0070\u0061\u0073\u0073\u0074\u0068\u0072\u0075 + \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c)."
			}
		},
		{
			"id": "backdoor_shell_exec_superglobal",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0073\u0068\u0065\u006c\u006c_\u0065\u0078\u0065\u0063\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u006d\u006d\u0061\u006e\u0064\u0065 \u0073\u0079\u0073\u0074è\u006d\u0065 \u0064\u0065\u0070\u0075\u0069\u0073 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u0073\u0068\u0065\u006c\u006c_\u0065\u0078\u0065\u0063 + \u0076\u0061\u0072\u0069\u0061\u0062\u006c\u0065 \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c\u0065).",
				"en": "\u0053\u0079\u0073\u0074\u0065\u006d \u0063\u006f\u006d\u006d\u0061\u006e\u0064 \u0072\u0075\u006e \u0066\u0072\u006f\u006d \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074 (\u0073\u0068\u0065\u006c\u006c_\u0065\u0078\u0065\u0063 + \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c)."
			}
		},
		{
			"id": "backdoor_shell_exec_generic",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0073\u0068\u0065\u006c\u006c_\u0065\u0078\u0065\u0063\\\u0073*\\(",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0055\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0069\u006f\u006e \u0064\u0065 \u0073\u0068\u0065\u006c\u006c_\u0065\u0078\u0065\u0063() : \u0065\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u006d\u006d\u0061\u006e\u0064\u0065 \u0073\u0079\u0073\u0074è\u006d\u0065, \u0072\u0061\u0072\u0065 \u0065\u0074 à \u0076é\u0072\u0069\u0066\u0069\u0065\u0072 \u0065\u006e \u0063\u006f\u006e\u0074\u0065\u0078\u0074\u0065.",
				"en": "\u0055\u0073\u0065 \u006f\u0066 \u0073\u0068\u0065\u006c\u006c_\u0065\u0078\u0065\u0063(): \u0072\u0075\u006e\u0073 \u0061 \u0073\u0079\u0073\u0074\u0065\u006d \u0063\u006f\u006d\u006d\u0061\u006e\u0064. \u0052\u0061\u0072\u0065, \u0063\u0068\u0065\u0063\u006b \u0069\u0074 \u0069\u006e \u0063\u006f\u006e\u0074\u0065\u0078\u0074."
			}
		},
		{
			"id": "backdoor_proc_open",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0070\u0072\u006f\u0063_\u006f\u0070\u0065\u006e\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0070\u0072\u006f\u0063_\u006f\u0070\u0065\u006e() \u0075\u0074\u0069\u006c\u0069\u0073é \u0061\u0076\u0065\u0063 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 : \u0065\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u006d\u006d\u0061\u006e\u0064\u0065 \u0073\u0079\u0073\u0074è\u006d\u0065 \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0069\u0072\u0065.",
				"en": "\u0070\u0072\u006f\u0063_\u006f\u0070\u0065\u006e() \u0075\u0073\u0065\u0064 \u0077\u0069\u0074\u0068 \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074: \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0072\u0079 \u0073\u0079\u0073\u0074\u0065\u006d \u0063\u006f\u006d\u006d\u0061\u006e\u0064."
			}
		},
		{
			"id": "backdoor_popen",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0070\u006f\u0070\u0065\u006e\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0070\u006f\u0070\u0065\u006e() \u0075\u0074\u0069\u006c\u0069\u0073é \u0061\u0076\u0065\u0063 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 : \u0065\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u006d\u006d\u0061\u006e\u0064\u0065 \u0073\u0079\u0073\u0074è\u006d\u0065 \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0069\u0072\u0065.",
				"en": "\u0070\u006f\u0070\u0065\u006e() \u0075\u0073\u0065\u0064 \u0077\u0069\u0074\u0068 \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074: \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0072\u0079 \u0073\u0079\u0073\u0074\u0065\u006d \u0063\u006f\u006d\u006d\u0061\u006e\u0064."
			}
		},
		{
			"id": "backdoor_dynamic_call",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054)\\[[^\\]]+\\]\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u004e\u006f\u006d \u0064\u0065 \u0066\u006f\u006e\u0063\u0074\u0069\u006f\u006e \u0045\u0054 \u0061\u0072\u0067\u0075\u006d\u0065\u006e\u0074\u0073 \u0070\u0072\u0069\u0073 \u0064\u0065\u0070\u0075\u0069\u0073 \u006c'\u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u0065\u0078 : $_\u0047\u0045\u0054['\u0066']($_\u0047\u0045\u0054['\u0078'])) : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0064\u0065 \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072 \u0074\u0072è\u0073 \u0072é\u0070\u0061\u006e\u0064\u0075\u0065.",
				"en": "\u0046\u0075\u006e\u0063\u0074\u0069\u006f\u006e \u006e\u0061\u006d\u0065 \u0041\u004e\u0044 \u0061\u0072\u0067\u0075\u006d\u0065\u006e\u0074\u0073 \u0074\u0061\u006b\u0065\u006e \u0066\u0072\u006f\u006d \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074 (\u0065.\u0067. $_\u0047\u0045\u0054['\u0066']($_\u0047\u0045\u0054['\u0078'])): \u0076\u0065\u0072\u0079 \u0063\u006f\u006d\u006d\u006f\u006e \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072 \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065."
			}
		},
		{
			"id": "backdoor_call_user_func",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0063\u0061\u006c\u006c_\u0075\u0073\u0065\u0072_\u0066\u0075\u006e\u0063(_\u0061\u0072\u0072\u0061\u0079)?\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0063\u0061\u006c\u006c_\u0075\u0073\u0065\u0072_\u0066\u0075\u006e\u0063() \u0061\u0070\u0070\u0065\u006cé \u0061\u0076\u0065\u0063 \u0075\u006e\u0065 \u0066\u006f\u006e\u0063\u0074\u0069\u006f\u006e \u0066\u006f\u0075\u0072\u006e\u0069\u0065 \u0070\u0061\u0072 \u006c'\u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 : \u0065\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u0064\u0065 \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0069\u0072\u0065.",
				"en": "\u0063\u0061\u006c\u006c_\u0075\u0073\u0065\u0072_\u0066\u0075\u006e\u0063() \u0063\u0061\u006c\u006c\u0065\u0064 \u0077\u0069\u0074\u0068 \u0061 \u0066\u0075\u006e\u0063\u0074\u0069\u006f\u006e \u0073\u0075\u0070\u0070\u006c\u0069\u0065\u0064 \u0062\u0079 \u0074\u0068\u0065 \u0075\u0073\u0065\u0072: \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0072\u0079 \u0063\u006f\u0064\u0065 \u0065\u0078\u0065\u0063\u0075\u0074\u0069\u006f\u006e."
			}
		},
		{
			"id": "backdoor_create_function",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0063\u0072\u0065\u0061\u0074\u0065_\u0066\u0075\u006e\u0063\u0074\u0069\u006f\u006e\\\u0073*\\(",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0063\u0072\u0065\u0061\u0074\u0065_\u0066\u0075\u006e\u0063\u0074\u0069\u006f\u006e() : \u0066\u006f\u006e\u0063\u0074\u0069\u006f\u006e \u0064é\u0070\u0072é\u0063\u0069é\u0065 \u0065\u0074 \u0064\u0061\u006e\u0067\u0065\u0072\u0065\u0075\u0073\u0065, \u0073\u006f\u0075\u0076\u0065\u006e\u0074 \u0075\u0074\u0069\u006c\u0069\u0073é\u0065 \u0070\u006f\u0075\u0072 \u0064\u0069\u0073\u0073\u0069\u006d\u0075\u006c\u0065\u0072 \u0064\u0075 \u0063\u006f\u0064\u0065 \u0065\u0078é\u0063\u0075\u0074\u0061\u0062\u006c\u0065 (\u0065\u0071\u0075\u0069\u0076. \u0065\u0076\u0061\u006c).",
				"en": "\u0063\u0072\u0065\u0061\u0074\u0065_\u0066\u0075\u006e\u0063\u0074\u0069\u006f\u006e(): \u0064\u0065\u0070\u0072\u0065\u0063\u0061\u0074\u0065\u0064 \u0061\u006e\u0064 \u0064\u0061\u006e\u0067\u0065\u0072\u006f\u0075\u0073 \u0066\u0075\u006e\u0063\u0074\u0069\u006f\u006e, \u006f\u0066\u0074\u0065\u006e \u0075\u0073\u0065\u0064 \u0074\u006f \u0068\u0069\u0064\u0065 \u0065\u0078\u0065\u0063\u0075\u0074\u0061\u0062\u006c\u0065 \u0063\u006f\u0064\u0065 (\u0073\u0061\u006d\u0065 \u0061\u0073 \u0065\u0076\u0061\u006c)."
			}
		},
		{
			"id": "backdoor_preg_replace_e",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0070\u0072\u0065\u0067_\u0072\u0065\u0070\u006c\u0061\u0063\u0065\\\u0073*\\(\\\u0073*['\"][^'\"]*\\/[\u0061-\u007a\u0041-\u005a]*\u0065[\u0061-\u007a\u0041-\u005a]*['\"]",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0070\u0072\u0065\u0067_\u0072\u0065\u0070\u006c\u0061\u0063\u0065() \u0061\u0076\u0065\u0063 \u006c\u0065 \u006d\u006f\u0064\u0069\u0066\u0069\u0063\u0061\u0074\u0065\u0075\u0072 /\u0065 : \u0065\u0078é\u0063\u0075\u0074\u0065 \u006c\u0065 \u0072\u0065\u006d\u0070\u006c\u0061\u0063\u0065\u006d\u0065\u006e\u0074 \u0063\u006f\u006d\u006d\u0065 \u0064\u0075 \u0063\u006f\u0064\u0065 \u0050\u0048\u0050, \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0064\u0065 \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072 \u0068\u0069\u0073\u0074\u006f\u0072\u0069\u0071\u0075\u0065.",
				"en": "\u0070\u0072\u0065\u0067_\u0072\u0065\u0070\u006c\u0061\u0063\u0065() \u0077\u0069\u0074\u0068 \u0074\u0068\u0065 /\u0065 \u006d\u006f\u0064\u0069\u0066\u0069\u0065\u0072: \u0072\u0075\u006e\u0073 \u0074\u0068\u0065 \u0072\u0065\u0070\u006c\u0061\u0063\u0065\u006d\u0065\u006e\u0074 \u0061\u0073 \u0050\u0048\u0050 \u0063\u006f\u0064\u0065. \u0048\u0069\u0073\u0074\u006f\u0072\u0069\u0063 \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072 \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 (\u0069\u0067\u006e\u006f\u0072\u0065\u0064 \u0073\u0069\u006e\u0063\u0065 \u0050\u0048\u0050 \u0037, \u0062\u0075\u0074 \u0061 \u0073\u0069\u0067\u006e \u006f\u0066 \u006f\u006c\u0064 \u006d\u0061\u006c\u0077\u0061\u0072\u0065)."
			}
		},
		{
			"id": "jsinject_document_write_unescape",
			"category": "injection",
			"type": "regex",
			"pattern": "\u0064\u006f\u0063\u0075\u006d\u0065\u006e\u0074\\.\u0077\u0072\u0069\u0074\u0065\\\u0073*\\(\\\u0073*\u0075\u006e\u0065\u0073\u0063\u0061\u0070\u0065\\\u0073*\\(",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0049\u006e\u006a\u0065\u0063\u0074\u0069\u006f\u006e \u004a\u0061\u0076\u0061\u0053\u0063\u0072\u0069\u0070\u0074 \u006f\u0062\u0066\u0075\u0073\u0071\u0075é\u0065 (\u0064\u006f\u0063\u0075\u006d\u0065\u006e\u0074.\u0077\u0072\u0069\u0074\u0065 + \u0075\u006e\u0065\u0073\u0063\u0061\u0070\u0065) : \u0073\u006f\u0075\u0076\u0065\u006e\u0074 \u0075\u0074\u0069\u006c\u0069\u0073é\u0065 \u0070\u006f\u0075\u0072 \u0069\u006e\u0073é\u0072\u0065\u0072 \u0064\u0075 \u0063\u006f\u006e\u0074\u0065\u006e\u0075 \u006d\u0061\u006c\u0076\u0065\u0069\u006c\u006c\u0061\u006e\u0074 \u0063\u0061\u0063\u0068é.",
				"en": "\u004f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0065\u0064 \u004a\u0061\u0076\u0061\u0053\u0063\u0072\u0069\u0070\u0074 \u0069\u006e\u006a\u0065\u0063\u0074\u0069\u006f\u006e (\u0064\u006f\u0063\u0075\u006d\u0065\u006e\u0074.\u0077\u0072\u0069\u0074\u0065 + \u0075\u006e\u0065\u0073\u0063\u0061\u0070\u0065): \u006f\u0066\u0074\u0065\u006e \u0075\u0073\u0065\u0064 \u0074\u006f \u0069\u006e\u0073\u0065\u0072\u0074 \u0068\u0069\u0064\u0064\u0065\u006e \u006d\u0061\u006c\u0069\u0063\u0069\u006f\u0075\u0073 \u0063\u006f\u006e\u0074\u0065\u006e\u0074."
			}
		},
		{
			"id": "jsinject_hidden_iframe",
			"category": "injection",
			"type": "regex",
			"pattern": "<\u0069\u0066\u0072\u0061\u006d\u0065[^>]+\u0073\u0074\u0079\u006c\u0065\\\u0073*=\\\u0073*[\"']?[^\"'>]*\u0064\u0069\u0073\u0070\u006c\u0061\u0079\\\u0073*:\\\u0073*\u006e\u006f\u006e\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0069\u0066\u0072\u0061\u006d\u0065 \u0063\u0061\u0063\u0068é \u0069\u006e\u006a\u0065\u0063\u0074é (\u0064\u0069\u0073\u0070\u006c\u0061\u0079:\u006e\u006f\u006e\u0065) : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0063\u006c\u0061\u0073\u0073\u0069\u0071\u0075\u0065 \u0064'\u0069\u006e\u006a\u0065\u0063\u0074\u0069\u006f\u006e \u006d\u0061\u006c\u0076\u0065\u0069\u006c\u006c\u0061\u006e\u0074\u0065 \u006f\u0075 \u0064\u0065 \u0064\u0072\u0069\u0076\u0065-\u0062\u0079 \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064.",
				"en": "\u0048\u0069\u0064\u0064\u0065\u006e \u0069\u0066\u0072\u0061\u006d\u0065 (\u0064\u0069\u0073\u0070\u006c\u0061\u0079:\u006e\u006f\u006e\u0065): \u0063\u006c\u0061\u0073\u0073\u0069\u0063 \u006d\u0061\u006c\u0069\u0063\u0069\u006f\u0075\u0073 \u0069\u006e\u006a\u0065\u0063\u0074\u0069\u006f\u006e \u006f\u0072 \u0064\u0072\u0069\u0076\u0065-\u0062\u0079 \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064 \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065."
			}
		},
		{
			"id": "jsinject_eval_fromcharcode",
			"category": "injection",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*\u0053\u0074\u0072\u0069\u006e\u0067\\.\u0066\u0072\u006f\u006d\u0043\u0068\u0061\u0072\u0043\u006f\u0064\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u004a\u0061\u0076\u0061\u0053\u0063\u0072\u0069\u0070\u0074 \u006f\u0062\u0066\u0075\u0073\u0071\u0075é \u0076\u0069\u0061 \u0065\u0076\u0061\u006c(\u0053\u0074\u0072\u0069\u006e\u0067.\u0066\u0072\u006f\u006d\u0043\u0068\u0061\u0072\u0043\u006f\u0064\u0065(...)) : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0064'\u0069\u006e\u006a\u0065\u0063\u0074\u0069\u006f\u006e \u0063\u006f\u0075\u0072\u0061\u006e\u0074\u0065.",
				"en": "\u004a\u0061\u0076\u0061\u0053\u0063\u0072\u0069\u0070\u0074 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0065\u0064 \u0077\u0069\u0074\u0068 \u0065\u0076\u0061\u006c(\u0053\u0074\u0072\u0069\u006e\u0067.\u0066\u0072\u006f\u006d\u0043\u0068\u0061\u0072\u0043\u006f\u0064\u0065(...)): \u0063\u006f\u006d\u006d\u006f\u006e \u0069\u006e\u006a\u0065\u0063\u0074\u0069\u006f\u006e \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065."
			}
		},
		{
			"id": "mailer_mail_from_input",
			"category": "mailer",
			"type": "regex",
			"pattern": "\\\u0062\u006d\u0061\u0069\u006c\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u006d\u0061\u0069\u006c() \u0070\u0069\u006c\u006f\u0074é \u0064\u0069\u0072\u0065\u0063\u0074\u0065\u006d\u0065\u006e\u0074 \u0070\u0061\u0072 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 : \u0070\u0065\u0072\u006d\u0065\u0074 \u006c'\u0065\u006e\u0076\u006f\u0069 \u0064\u0065 \u0073\u0070\u0061\u006d \u006f\u0075 \u006c'\u0069\u006e\u006a\u0065\u0063\u0074\u0069\u006f\u006e \u0064'\u0065\u006e-\u0074ê\u0074\u0065\u0073 \u0065\u006d\u0061\u0069\u006c.",
				"en": "\u006d\u0061\u0069\u006c() \u0064\u0072\u0069\u0076\u0065\u006e \u0064\u0069\u0072\u0065\u0063\u0074\u006c\u0079 \u0062\u0079 \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074: \u0061\u006c\u006c\u006f\u0077\u0073 \u0073\u0065\u006e\u0064\u0069\u006e\u0067 \u0073\u0070\u0061\u006d \u006f\u0072 \u0069\u006e\u006a\u0065\u0063\u0074\u0069\u006e\u0067 \u0065\u006d\u0061\u0069\u006c \u0068\u0065\u0061\u0064\u0065\u0072\u0073."
			}
		},
		{
			"id": "mailer_bulk_string",
			"category": "mailer",
			"type": "string",
			"pattern": "\u0042\u0075\u006c\u006b \u004d\u0061\u0069\u006c\u0065\u0072",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u0068\u0061î\u006e\u0065 é\u0076\u006f\u0071\u0075\u0061\u006e\u0074 \u0075\u006e \u006f\u0075\u0074\u0069\u006c \u0064'\u0065\u006e\u0076\u006f\u0069 \u006d\u0061\u0073\u0073\u0069\u0066 \u0064'\u0065\u006d\u0061\u0069\u006c\u0073 (\u0073\u0070\u0061\u006d \u006d\u0061\u0069\u006c\u0065\u0072).",
				"en": "\u0054\u0065\u0078\u0074 \u0073\u0075\u0067\u0067\u0065\u0073\u0074\u0069\u006e\u0067 \u0061 \u0062\u0075\u006c\u006b \u0065\u006d\u0061\u0069\u006c \u0074\u006f\u006f\u006c (\u0073\u0070\u0061\u006d \u006d\u0061\u0069\u006c\u0065\u0072)."
			}
		},
		{
			"id": "mailer_xmailer_forged",
			"category": "mailer",
			"type": "string",
			"pattern": "\u0058-\u004d\u0061\u0069\u006c\u0065\u0072: \u0050\u0048\u0050 \u0053\u0065\u006e\u0064\u0065\u0072",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u006e-\u0074ê\u0074\u0065 \u0058-\u004d\u0061\u0069\u006c\u0065\u0072 \u0074\u0079\u0070\u0069\u0071\u0075\u0065 \u0064\u0065 \u0063\u0065\u0072\u0074\u0061\u0069\u006e\u0073 \u0073\u0063\u0072\u0069\u0070\u0074\u0073 \u0064\u0065 \u0073\u0070\u0061\u006d \u006d\u0061\u0069\u006c\u0065\u0072.",
				"en": "\u0058-\u004d\u0061\u0069\u006c\u0065\u0072 \u0068\u0065\u0061\u0064\u0065\u0072 \u0074\u0079\u0070\u0069\u0063\u0061\u006c \u006f\u0066 \u0073\u006f\u006d\u0065 \u0073\u0070\u0061\u006d \u006d\u0061\u0069\u006c\u0065\u0072 \u0073\u0063\u0072\u0069\u0070\u0074\u0073."
			}
		},
		{
			"id": "downloader_write_remote_content",
			"category": "downloader",
			"type": "regex",
			"pattern": "\u0066\u0069\u006c\u0065_\u0070\u0075\u0074_\u0063\u006f\u006e\u0074\u0065\u006e\u0074\u0073\\\u0073*\\([^,]+,\\\u0073*\u0066\u0069\u006c\u0065_\u0067\u0065\u0074_\u0063\u006f\u006e\u0074\u0065\u006e\u0074\u0073\\\u0073*\\(\\\u0073*['\"]\u0068\u0074\u0074\u0070\u0073?:\\/\\/",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0054é\u006cé\u0063\u0068\u0061\u0072\u0067\u0065\u006d\u0065\u006e\u0074 \u0064'\u0075\u006e \u0066\u0069\u0063\u0068\u0069\u0065\u0072 \u0064\u0069\u0073\u0074\u0061\u006e\u0074 é\u0063\u0072\u0069\u0074 \u0064\u0069\u0072\u0065\u0063\u0074\u0065\u006d\u0065\u006e\u0074 \u0073\u0075\u0072 \u006c\u0065 \u0064\u0069\u0073\u0071\u0075\u0065 (\u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064\u0065\u0072 / \u0064\u0072\u006f\u0070\u0070\u0065\u0072).",
				"en": "\u0052\u0065\u006d\u006f\u0074\u0065 \u0066\u0069\u006c\u0065 \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064\u0065\u0064 \u0061\u006e\u0064 \u0077\u0072\u0069\u0074\u0074\u0065\u006e \u0073\u0074\u0072\u0061\u0069\u0067\u0068\u0074 \u0074\u006f \u0064\u0069\u0073\u006b (\u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064\u0065\u0072 / \u0064\u0072\u006f\u0070\u0070\u0065\u0072)."
			}
		},
		{
			"id": "downloader_fwrite_remote",
			"category": "downloader",
			"type": "regex",
			"pattern": "\u0066\u006f\u0070\u0065\u006e\\\u0073*\\(\\\u0073*['\"]\u0068\u0074\u0074\u0070\u0073?:\\/\\/[^'\"]+['\"]\\\u0073*,\\\u0073*['\"]\u0077",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u004f\u0075\u0076\u0065\u0072\u0074\u0075\u0072\u0065 \u0065\u006e é\u0063\u0072\u0069\u0074\u0075\u0072\u0065 \u0064'\u0075\u006e\u0065 \u0055\u0052\u004c \u0064\u0069\u0073\u0074\u0061\u006e\u0074\u0065 : \u0063\u006f\u006d\u0070\u006f\u0072\u0074\u0065\u006d\u0065\u006e\u0074 \u0064\u0065 \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064\u0065\u0072.",
				"en": "\u0052\u0065\u006d\u006f\u0074\u0065 \u0055\u0052\u004c \u006f\u0070\u0065\u006e\u0065\u0064 \u0066\u006f\u0072 \u0077\u0072\u0069\u0074\u0069\u006e\u0067: \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064\u0065\u0072 \u0062\u0065\u0068\u0061\u0076\u0069\u006f\u0075\u0072."
			}
		},
		{
			"id": "downloader_shell_wget_curl",
			"category": "downloader",
			"type": "regex",
			"pattern": "(\u0073\u0079\u0073\u0074\u0065\u006d|\u0065\u0078\u0065\u0063|\u0073\u0068\u0065\u006c\u006c_\u0065\u0078\u0065\u0063|\u0070\u0061\u0073\u0073\u0074\u0068\u0072\u0075)\\\u0073*\\(\\\u0073*['\"](\u0077\u0067\u0065\u0074|\u0063\u0075\u0072\u006c)\\\u0073",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0041\u0070\u0070\u0065\u006c \u0073\u0079\u0073\u0074è\u006d\u0065 à \u0077\u0067\u0065\u0074/\u0063\u0075\u0072\u006c \u0070\u006f\u0075\u0072 \u0074é\u006cé\u0063\u0068\u0061\u0072\u0067\u0065\u0072 \u0075\u006e \u0066\u0069\u0063\u0068\u0069\u0065\u0072 \u0064\u0065\u0070\u0075\u0069\u0073 \u006c\u0065 \u0063\u006f\u0064\u0065 \u0050\u0048\u0050 : \u0063\u006f\u006d\u0070\u006f\u0072\u0074\u0065\u006d\u0065\u006e\u0074 \u0064\u0065 \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064\u0065\u0072.",
				"en": "\u0053\u0079\u0073\u0074\u0065\u006d \u0063\u0061\u006c\u006c \u0074\u006f \u0077\u0067\u0065\u0074/\u0063\u0075\u0072\u006c \u0074\u006f \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064 \u0061 \u0066\u0069\u006c\u0065 \u0066\u0072\u006f\u006d \u0050\u0048\u0050 \u0063\u006f\u0064\u0065: \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064\u0065\u0072 \u0062\u0065\u0068\u0061\u0076\u0069\u006f\u0075\u0072."
			}
		},
		{
			"id": "downloader_curl_url_from_input",
			"category": "downloader",
			"type": "regex",
			"pattern": "\u0063\u0075\u0072\u006c_\u0073\u0065\u0074\u006f\u0070\u0074\\\u0073*\\(\\\u0073*\\$\\\u0077+\\\u0073*,\\\u0073*\u0043\u0055\u0052\u004c\u004f\u0050\u0054_\u0055\u0052\u004c\\\u0073*,\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0055\u0052\u004c \u0063\u0055\u0052\u004c \u0070\u0069\u006c\u006f\u0074é\u0065 \u0070\u0061\u0072 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 : \u0072\u0069\u0073\u0071\u0075\u0065 \u0064\u0065 \u0053\u0053\u0052\u0046 \u006f\u0075 \u0064\u0065 \u0074é\u006cé\u0063\u0068\u0061\u0072\u0067\u0065\u006d\u0065\u006e\u0074 \u0064\u0065 \u0063\u0068\u0061\u0072\u0067\u0065 \u006d\u0061\u006c\u0076\u0065\u0069\u006c\u006c\u0061\u006e\u0074\u0065 à \u0064\u0069\u0073\u0074\u0061\u006e\u0063\u0065.",
				"en": "\u0063\u0055\u0052\u004c \u0055\u0052\u004c \u0064\u0072\u0069\u0076\u0065\u006e \u0062\u0079 \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074: \u0053\u0053\u0052\u0046 \u0072\u0069\u0073\u006b \u006f\u0072 \u0064\u006f\u0077\u006e\u006c\u006f\u0061\u0064 \u006f\u0066 \u0061 \u0072\u0065\u006d\u006f\u0074\u0065 \u006d\u0061\u006c\u0069\u0063\u0069\u006f\u0075\u0073 \u0070\u0061\u0079\u006c\u006f\u0061\u0064."
			}
		},
		{
			"id": "obf_base64_long_blob",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065\\\u0073*\\(\\\u0073*['\"][\u0041-\u005a\u0061-\u007a\u0030-\u0039+\\/=]{\u0032\u0030\u0030,}['\"]",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0042\u006c\u006f\u0063 \u0062\u0061\u0073\u0065\u0036\u0034 \u0074\u0072è\u0073 \u006c\u006f\u006e\u0067 \u0064é\u0063\u006f\u0064é \u0065\u006e \u0064\u0075\u0072 \u0064\u0061\u006e\u0073 \u006c\u0065 \u0063\u006f\u0064\u0065 : \u0073\u0069\u0067\u006e\u0065 \u0066\u006f\u0072\u0074 \u0064\u0065 \u0063\u0068\u0061\u0072\u0067\u0065 \u006d\u0061\u006c\u0076\u0065\u0069\u006c\u006c\u0061\u006e\u0074\u0065 \u0065\u006e\u0063\u006f\u0064é\u0065.",
				"en": "\u0056\u0065\u0072\u0079 \u006c\u006f\u006e\u0067 \u0062\u0061\u0073\u0065\u0036\u0034 \u0062\u006c\u006f\u0063\u006b \u0064\u0065\u0063\u006f\u0064\u0065\u0064 \u0069\u006e \u0074\u0068\u0065 \u0063\u006f\u0064\u0065: \u0073\u0074\u0072\u006f\u006e\u0067 \u0073\u0069\u0067\u006e \u006f\u0066 \u0061\u006e \u0065\u006e\u0063\u006f\u0064\u0065\u0064 \u006d\u0061\u006c\u0069\u0063\u0069\u006f\u0075\u0073 \u0070\u0061\u0079\u006c\u006f\u0061\u0064."
			}
		},
		{
			"id": "obf_eval_base64",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u0064\u0065 \u0064é\u0063\u006f\u0064é \u0064\u0065\u0070\u0075\u0069\u0073 \u0064\u0075 \u0062\u0061\u0073\u0065\u0036\u0034 (\u0065\u0076\u0061\u006c + \u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065) : \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0063\u006c\u0061\u0073\u0073\u0069\u0071\u0075\u0065 \u0064\u0065 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u0050\u0048\u0050.",
				"en": "\u0043\u006f\u0064\u0065 \u0064\u0065\u0063\u006f\u0064\u0065\u0064 \u0066\u0072\u006f\u006d \u0062\u0061\u0073\u0065\u0036\u0034 \u0061\u006e\u0064 \u0072\u0075\u006e (\u0065\u0076\u0061\u006c + \u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065): \u0063\u006c\u0061\u0073\u0073\u0069\u0063 \u0050\u0048\u0050 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e."
			}
		},
		{
			"id": "obf_assert_base64",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0061\u0073\u0073\u0065\u0072\u0074\\\u0073*\\(\\\u0073*\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u0064\u0065 \u0064é\u0063\u006f\u0064é \u0064\u0065\u0070\u0075\u0069\u0073 \u0064\u0075 \u0062\u0061\u0073\u0065\u0036\u0034 \u0076\u0069\u0061 \u0061\u0073\u0073\u0065\u0072\u0074() : \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0063\u006c\u0061\u0073\u0073\u0069\u0071\u0075\u0065 \u0064\u0065 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u0050\u0048\u0050.",
				"en": "\u0043\u006f\u0064\u0065 \u0064\u0065\u0063\u006f\u0064\u0065\u0064 \u0066\u0072\u006f\u006d \u0062\u0061\u0073\u0065\u0036\u0034 \u0061\u006e\u0064 \u0072\u0075\u006e \u0074\u0068\u0072\u006f\u0075\u0067\u0068 \u0061\u0073\u0073\u0065\u0072\u0074(): \u0063\u006c\u0061\u0073\u0073\u0069\u0063 \u0050\u0048\u0050 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e."
			}
		},
		{
			"id": "obf_eval_gzinflate",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*\u0067\u007a\u0069\u006e\u0066\u006c\u0061\u0074\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u006f\u0064\u0065 \u0063\u006f\u006d\u0070\u0072\u0065\u0073\u0073é (\u0067\u007a\u0069\u006e\u0066\u006c\u0061\u0074\u0065) \u0065\u0078é\u0063\u0075\u0074é \u0076\u0069\u0061 \u0065\u0076\u0061\u006c : \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0063\u006f\u0075\u0072\u0061\u006e\u0074\u0065 \u0064\u0065 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u0050\u0048\u0050.",
				"en": "\u0043\u006f\u006d\u0070\u0072\u0065\u0073\u0073\u0065\u0064 \u0063\u006f\u0064\u0065 (\u0067\u007a\u0069\u006e\u0066\u006c\u0061\u0074\u0065) \u0072\u0075\u006e \u0074\u0068\u0072\u006f\u0075\u0067\u0068 \u0065\u0076\u0061\u006c: \u0063\u006f\u006d\u006d\u006f\u006e \u0050\u0048\u0050 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e."
			}
		},
		{
			"id": "obf_eval_gzuncompress",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*\u0067\u007a\u0075\u006e\u0063\u006f\u006d\u0070\u0072\u0065\u0073\u0073",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u006f\u0064\u0065 \u0063\u006f\u006d\u0070\u0072\u0065\u0073\u0073é (\u0067\u007a\u0075\u006e\u0063\u006f\u006d\u0070\u0072\u0065\u0073\u0073) \u0065\u0078é\u0063\u0075\u0074é \u0076\u0069\u0061 \u0065\u0076\u0061\u006c : \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0063\u006f\u0075\u0072\u0061\u006e\u0074\u0065 \u0064\u0065 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u0050\u0048\u0050.",
				"en": "\u0043\u006f\u006d\u0070\u0072\u0065\u0073\u0073\u0065\u0064 \u0063\u006f\u0064\u0065 (\u0067\u007a\u0075\u006e\u0063\u006f\u006d\u0070\u0072\u0065\u0073\u0073) \u0072\u0075\u006e \u0074\u0068\u0072\u006f\u0075\u0067\u0068 \u0065\u0076\u0061\u006c: \u0063\u006f\u006d\u006d\u006f\u006e \u0050\u0048\u0050 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e."
			}
		},
		{
			"id": "obf_eval_gzdecode",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*\u0067\u007a\u0064\u0065\u0063\u006f\u0064\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u006f\u0064\u0065 \u0063\u006f\u006d\u0070\u0072\u0065\u0073\u0073é (\u0067\u007a\u0064\u0065\u0063\u006f\u0064\u0065) \u0065\u0078é\u0063\u0075\u0074é \u0076\u0069\u0061 \u0065\u0076\u0061\u006c : \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0063\u006f\u0075\u0072\u0061\u006e\u0074\u0065 \u0064\u0065 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u0050\u0048\u0050.",
				"en": "\u0043\u006f\u006d\u0070\u0072\u0065\u0073\u0073\u0065\u0064 \u0063\u006f\u0064\u0065 (\u0067\u007a\u0064\u0065\u0063\u006f\u0064\u0065) \u0072\u0075\u006e \u0074\u0068\u0072\u006f\u0075\u0067\u0068 \u0065\u0076\u0061\u006c: \u0063\u006f\u006d\u006d\u006f\u006e \u0050\u0048\u0050 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e."
			}
		},
		{
			"id": "obf_gzinflate_base64",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0067\u007a\u0069\u006e\u0066\u006c\u0061\u0074\u0065\\\u0073*\\(\\\u0073*\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u0068\u0061î\u006e\u0065 \u0064'\u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0062\u0061\u0073\u0065\u0036\u0034 + \u0067\u007a\u0069\u0070 \u0064é\u0074\u0065\u0063\u0074é\u0065 (\u0067\u007a\u0069\u006e\u0066\u006c\u0061\u0074\u0065(\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065(...))).",
				"en": "\u0062\u0061\u0073\u0065\u0036\u0034 + \u0067\u007a\u0069\u0070 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0063\u0068\u0061\u0069\u006e \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064 (\u0067\u007a\u0069\u006e\u0066\u006c\u0061\u0074\u0065(\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065(...)))."
			}
		},
		{
			"id": "obf_eval_rot13",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*\u0073\u0074\u0072_\u0072\u006f\u0074\u0031\u0033",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u006f\u0064\u0065 \u0064é\u0063\u006f\u0064é \u0065\u006e \u0052\u004f\u0054\u0031\u0033 \u0065\u0078é\u0063\u0075\u0074é \u0076\u0069\u0061 \u0065\u0076\u0061\u006c : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0064'\u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0073\u0069\u006d\u0070\u006c\u0065 \u006d\u0061\u0069\u0073 \u0074\u006f\u0075\u006a\u006f\u0075\u0072\u0073 \u0075\u0074\u0069\u006c\u0069\u0073é\u0065.",
				"en": "\u0052\u004f\u0054\u0031\u0033-\u0064\u0065\u0063\u006f\u0064\u0065\u0064 \u0063\u006f\u0064\u0065 \u0072\u0075\u006e \u0074\u0068\u0072\u006f\u0075\u0067\u0068 \u0065\u0076\u0061\u006c: \u0073\u0069\u006d\u0070\u006c\u0065 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065, \u0073\u0074\u0069\u006c\u006c \u0069\u006e \u0075\u0073\u0065."
			}
		},
		{
			"id": "obf_rot13_base64",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0073\u0074\u0072_\u0072\u006f\u0074\u0031\u0033\\\u0073*\\(\\\u0073*\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u0068\u0061î\u006e\u0065 \u0064'\u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0062\u0061\u0073\u0065\u0036\u0034 + \u0052\u004f\u0054\u0031\u0033 \u0064é\u0074\u0065\u0063\u0074é\u0065.",
				"en": "\u0062\u0061\u0073\u0065\u0036\u0034 + \u0052\u004f\u0054\u0031\u0033 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0063\u0068\u0061\u0069\u006e \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "obf_eval_pack",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*\u0070\u0061\u0063\u006b\\\u0073*\\(",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u006f\u0064\u0065 \u0072\u0065\u0063\u006f\u006e\u0073\u0074\u0072\u0075\u0069\u0074 \u0076\u0069\u0061 \u0070\u0061\u0063\u006b() \u0070\u0075\u0069\u0073 \u0065\u0078é\u0063\u0075\u0074é : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0064'\u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e (\u0073\u006f\u0075\u0076\u0065\u006e\u0074 \u006c\u0069é\u0065 à \u0075\u006e \u0064é\u0063\u006f\u0064\u0061\u0067\u0065 \u0058\u004f\u0052 \u006f\u0075 \u0068\u0065\u0078\u0061\u0064é\u0063\u0069\u006d\u0061\u006c).",
				"en": "\u0043\u006f\u0064\u0065 \u0072\u0065\u0062\u0075\u0069\u006c\u0074 \u0077\u0069\u0074\u0068 \u0070\u0061\u0063\u006b() \u0061\u006e\u0064 \u0074\u0068\u0065\u006e \u0072\u0075\u006e: \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 (\u006f\u0066\u0074\u0065\u006e \u0058\u004f\u0052 \u006f\u0072 \u0068\u0065\u0078 \u0064\u0065\u0063\u006f\u0064\u0069\u006e\u0067)."
			}
		},
		{
			"id": "obf_xor_loop",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\u0066\u006f\u0072\\\u0073*\\(\\\u0073*\\$\\\u0077+\\\u0073*=\\\u0073*\u0030.{\u0030,\u0034\u0030}\\^\\\u0073*\\$\\\u0077+\\[.{\u0030,\u0032\u0030}%\\\u0073*(\u0073\u0074\u0072\u006c\u0065\u006e|\u0063\u006f\u0075\u006e\u0074)",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0042\u006f\u0075\u0063\u006c\u0065 \u0064\u0065 \u0064é\u0063\u0068\u0069\u0066\u0066\u0072\u0065\u006d\u0065\u006e\u0074 \u0058\u004f\u0052 \u0064é\u0074\u0065\u0063\u0074é\u0065 (\u006d\u006f\u0074\u0069\u0066 \u0063\u006f\u0075\u0072\u0061\u006e\u0074 \u0064'\u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u0068\u0061\u0072\u0067\u0065 \u006d\u0061\u006c\u0076\u0065\u0069\u006c\u006c\u0061\u006e\u0074\u0065).",
				"en": "\u0058\u004f\u0052 \u0064\u0065\u0063\u0072\u0079\u0070\u0074\u0069\u006f\u006e \u006c\u006f\u006f\u0070 \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064 (\u0063\u006f\u006d\u006d\u006f\u006e \u0070\u0061\u0074\u0074\u0065\u0072\u006e \u0069\u006e \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0065\u0064 \u006d\u0061\u006c\u0069\u0063\u0069\u006f\u0075\u0073 \u0070\u0061\u0079\u006c\u006f\u0061\u0064\u0073)."
			}
		},
		{
			"id": "uploader_move_uploaded_file",
			"category": "uploader",
			"type": "regex",
			"pattern": "\u006d\u006f\u0076\u0065_\u0075\u0070\u006c\u006f\u0061\u0064\u0065\u0064_\u0066\u0069\u006c\u0065\\\u0073*\\(\\\u0073*\\$_\u0046\u0049\u004c\u0045\u0053",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0055\u0070\u006c\u006f\u0061\u0064 \u0064\u0065 \u0066\u0069\u0063\u0068\u0069\u0065\u0072 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u006d\u006f\u0076\u0065_\u0075\u0070\u006c\u006f\u0061\u0064\u0065\u0064_\u0066\u0069\u006c\u0065) : \u006cé\u0067\u0069\u0074\u0069\u006d\u0065 \u0064\u0061\u006e\u0073 \u0075\u006e \u0066\u006f\u0072\u006d\u0075\u006c\u0061\u0069\u0072\u0065 \u0064'\u0075\u0070\u006c\u006f\u0061\u0064, à \u0076é\u0072\u0069\u0066\u0069\u0065\u0072 \u0073\u0069 \u006c\u0065 \u0066\u0069\u0063\u0068\u0069\u0065\u0072 \u0065\u0073\u0074 \u0069\u006e\u0061\u0074\u0074\u0065\u006e\u0064\u0075.",
				"en": "\u0055\u0070\u006c\u006f\u0061\u0064 \u006f\u0066 \u0061 \u0075\u0073\u0065\u0072 \u0066\u0069\u006c\u0065 (\u006d\u006f\u0076\u0065_\u0075\u0070\u006c\u006f\u0061\u0064\u0065\u0064_\u0066\u0069\u006c\u0065): \u006c\u0065\u0067\u0069\u0074\u0069\u006d\u0061\u0074\u0065 \u0069\u006e \u0061\u006e \u0075\u0070\u006c\u006f\u0061\u0064 \u0066\u006f\u0072\u006d, \u0063\u0068\u0065\u0063\u006b \u0069\u0074 \u0069\u0066 \u0074\u0068\u0065 \u0066\u0069\u006c\u0065 \u0069\u0073 \u0075\u006e\u0065\u0078\u0070\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "uploader_file_put_contents_input_path",
			"category": "uploader",
			"type": "regex",
			"pattern": "\u0066\u0069\u006c\u0065_\u0070\u0075\u0074_\u0063\u006f\u006e\u0074\u0065\u006e\u0074\u0073\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "É\u0063\u0072\u0069\u0074\u0075\u0072\u0065 \u0064\u0065 \u0066\u0069\u0063\u0068\u0069\u0065\u0072 \u0064\u006f\u006e\u0074 \u006c\u0065 \u0063\u0068\u0065\u006d\u0069\u006e \u0065\u0073\u0074 \u0070\u0069\u006c\u006f\u0074é \u0070\u0061\u0072 \u006c'\u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 : \u0070\u0065\u0072\u006d\u0065\u0074 \u006c'é\u0063\u0072\u0061\u0073\u0065\u006d\u0065\u006e\u0074 \u006f\u0075 \u006c\u0061 \u0063\u0072é\u0061\u0074\u0069\u006f\u006e \u0064\u0065 \u0066\u0069\u0063\u0068\u0069\u0065\u0072\u0073 \u0061\u0072\u0062\u0069\u0074\u0072\u0061\u0069\u0072\u0065\u0073.",
				"en": "\u0046\u0069\u006c\u0065 \u0077\u0072\u0069\u0074\u0074\u0065\u006e \u0074\u006f \u0061 \u0070\u0061\u0074\u0068 \u0063\u0068\u006f\u0073\u0065\u006e \u0062\u0079 \u0074\u0068\u0065 \u0075\u0073\u0065\u0072: \u0061\u006c\u006c\u006f\u0077\u0073 \u006f\u0076\u0065\u0072\u0077\u0072\u0069\u0074\u0069\u006e\u0067 \u006f\u0072 \u0063\u0072\u0065\u0061\u0074\u0069\u006e\u0067 \u0061\u006e\u0079 \u0066\u0069\u006c\u0065."
			}
		},
		{
			"id": "uploader_write_php_from_input",
			"category": "uploader",
			"type": "regex",
			"pattern": "\u0066\u0069\u006c\u0065_\u0070\u0075\u0074_\u0063\u006f\u006e\u0074\u0065\u006e\u0074\u0073\\\u0073*\\([^)]*\\.\u0070\u0068\u0070['\"]\\\u0073*,\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "É\u0063\u0072\u0069\u0074\u0075\u0072\u0065 \u0064'\u0075\u006e \u0066\u0069\u0063\u0068\u0069\u0065\u0072 .\u0070\u0068\u0070 \u0064\u006f\u006e\u0074 \u006c\u0065 \u0063\u006f\u006e\u0074\u0065\u006e\u0075 \u0076\u0069\u0065\u006e\u0074 \u0064\u0065 \u006c'\u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 : \u0064é\u0070ô\u0074 \u0064\u0065 \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0063\u006c\u0061\u0073\u0073\u0069\u0071\u0075\u0065.",
				"en": "\u0041 .\u0070\u0068\u0070 \u0066\u0069\u006c\u0065 \u0077\u0072\u0069\u0074\u0074\u0065\u006e \u0077\u0069\u0074\u0068 \u0063\u006f\u006e\u0074\u0065\u006e\u0074 \u0066\u0072\u006f\u006d \u0074\u0068\u0065 \u0075\u0073\u0065\u0072: \u0063\u006c\u0061\u0073\u0073\u0069\u0063 \u0077\u0065\u0062\u0073\u0068\u0065\u006c\u006c \u0064\u0072\u006f\u0070."
			}
		},
		{
			"id": "miner_coinhive",
			"category": "miner",
			"type": "string",
			"pattern": "\u0063\u006f\u0069\u006e\u0068\u0069\u0076\u0065",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0053\u0063\u0072\u0069\u0070\u0074 \u0064\u0065 \u006d\u0069\u006e\u0061\u0067\u0065 \u0064\u0065 \u0063\u0072\u0079\u0070\u0074\u006f\u006d\u006f\u006e\u006e\u0061\u0069\u0065 (\u0043\u006f\u0069\u006e\u0048\u0069\u0076\u0065) \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0043\u0072\u0079\u0070\u0074\u006f\u0063\u0075\u0072\u0072\u0065\u006e\u0063\u0079 \u006d\u0069\u006e\u0069\u006e\u0067 \u0073\u0063\u0072\u0069\u0070\u0074 (\u0043\u006f\u0069\u006e\u0048\u0069\u0076\u0065) \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "miner_cryptonight",
			"category": "miner",
			"type": "string",
			"pattern": "\u0063\u0072\u0079\u0070\u0074\u006f\u006e\u0069\u0067\u0068\u0074",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0041\u006c\u0067\u006f\u0072\u0069\u0074\u0068\u006d\u0065 \u0064\u0065 \u006d\u0069\u006e\u0061\u0067\u0065 \u0043\u0072\u0079\u0070\u0074\u006f\u004e\u0069\u0067\u0068\u0074 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0043\u0072\u0079\u0070\u0074\u006f\u004e\u0069\u0067\u0068\u0074 \u006d\u0069\u006e\u0069\u006e\u0067 \u0061\u006c\u0067\u006f\u0072\u0069\u0074\u0068\u006d \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "miner_cryptoloot",
			"category": "miner",
			"type": "string",
			"pattern": "\u0063\u0072\u0079\u0070\u0074\u006f-\u006c\u006f\u006f\u0074",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0053\u0063\u0072\u0069\u0070\u0074 \u0064\u0065 \u006d\u0069\u006e\u0061\u0067\u0065 \u0043\u0072\u0079\u0070\u0074\u006f-\u004c\u006f\u006f\u0074 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0043\u0072\u0079\u0070\u0074\u006f-\u004c\u006f\u006f\u0074 \u006d\u0069\u006e\u0069\u006e\u0067 \u0073\u0063\u0072\u0069\u0070\u0074 \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "miner_webminerpool",
			"category": "miner",
			"type": "string",
			"pattern": "\u0077\u0065\u0062\u006d\u0069\u006e\u0065\u0072\u0070\u006f\u006f\u006c",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0053\u0063\u0072\u0069\u0070\u0074 \u0064\u0065 \u006d\u0069\u006e\u0061\u0067\u0065 \u0057\u0065\u0062\u004d\u0069\u006e\u0065\u0072\u0050\u006f\u006f\u006c \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0057\u0065\u0062\u004d\u0069\u006e\u0065\u0072\u0050\u006f\u006f\u006c \u006d\u0069\u006e\u0069\u006e\u0067 \u0073\u0063\u0072\u0069\u0070\u0074 \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "miner_stratum",
			"category": "miner",
			"type": "string",
			"pattern": "\u0073\u0074\u0072\u0061\u0074\u0075\u006d+\u0074\u0063\u0070://",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0041\u0064\u0072\u0065\u0073\u0073\u0065 \u0064\u0065 \u0070\u006f\u006f\u006c \u0064\u0065 \u006d\u0069\u006e\u0061\u0067\u0065 (\u0070\u0072\u006f\u0074\u006f\u0063\u006f\u006c\u0065 \u0073\u0074\u0072\u0061\u0074\u0075\u006d) \u0064é\u0074\u0065\u0063\u0074é\u0065 : \u006d\u0069\u006e\u0065\u0075\u0072 \u0064\u0065 \u0063\u0072\u0079\u0070\u0074\u006f\u006d\u006f\u006e\u006e\u0061\u0069\u0065 \u0063ô\u0074é \u0073\u0065\u0072\u0076\u0065\u0075\u0072 \u0070\u0072\u006f\u0062\u0061\u0062\u006c\u0065.",
				"en": "\u004d\u0069\u006e\u0069\u006e\u0067 \u0070\u006f\u006f\u006c \u0061\u0064\u0064\u0072\u0065\u0073\u0073 (\u0073\u0074\u0072\u0061\u0074\u0075\u006d \u0070\u0072\u006f\u0074\u006f\u0063\u006f\u006c) \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064: \u0070\u0072\u006f\u0062\u0061\u0062\u006c\u0065 \u0073\u0065\u0072\u0076\u0065\u0072-\u0073\u0069\u0064\u0065 \u0063\u0072\u0079\u0070\u0074\u006f\u0063\u0075\u0072\u0072\u0065\u006e\u0063\u0079 \u006d\u0069\u006e\u0065\u0072."
			}
		},
		{
			"id": "miner_xmrig",
			"category": "miner",
			"type": "string",
			"pattern": "\u0078\u006d\u0072\u0069\u0067",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php",
				"js",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0052é\u0066é\u0072\u0065\u006e\u0063\u0065 \u0061\u0075 \u006d\u0069\u006e\u0065\u0075\u0072 \u004d\u006f\u006e\u0065\u0072\u006f \u0058\u004d\u0052\u0069\u0067 \u0064é\u0074\u0065\u0063\u0074é\u0065.",
				"en": "\u0052\u0065\u0066\u0065\u0072\u0065\u006e\u0063\u0065 \u0074\u006f \u0074\u0068\u0065 \u0058\u004d\u0052\u0069\u0067 \u004d\u006f\u006e\u0065\u0072\u006f \u006d\u0069\u006e\u0065\u0072 \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "phishing_mailto_form",
			"category": "phishing",
			"type": "regex",
			"pattern": "\u0061\u0063\u0074\u0069\u006f\u006e\\\u0073*=\\\u0073*[\"']\u006d\u0061\u0069\u006c\u0074\u006f:",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0046\u006f\u0072\u006d\u0075\u006c\u0061\u0069\u0072\u0065 \u0065\u006e\u0076\u006f\u0079\u0061\u006e\u0074 \u0073\u0065\u0073 \u0064\u006f\u006e\u006eé\u0065\u0073 \u0064\u0069\u0072\u0065\u0063\u0074\u0065\u006d\u0065\u006e\u0074 \u0070\u0061\u0072 \u0065\u006d\u0061\u0069\u006c (\u006d\u0061\u0069\u006c\u0074\u006f) : \u006d\u006f\u0074\u0069\u0066 \u0070\u0061\u0072\u0066\u006f\u0069\u0073 \u0075\u0074\u0069\u006c\u0069\u0073é \u0070\u0061\u0072 \u0064\u0065\u0073 \u006b\u0069\u0074\u0073 \u0064\u0065 \u0070\u0068\u0069\u0073\u0068\u0069\u006e\u0067 \u0062\u0061\u0073\u0069\u0071\u0075\u0065\u0073. À \u0076é\u0072\u0069\u0066\u0069\u0065\u0072 \u0065\u006e \u0063\u006f\u006e\u0074\u0065\u0078\u0074\u0065.",
				"en": "\u0046\u006f\u0072\u006d \u0073\u0065\u006e\u0064\u0069\u006e\u0067 \u0069\u0074\u0073 \u0064\u0061\u0074\u0061 \u0064\u0069\u0072\u0065\u0063\u0074\u006c\u0079 \u0062\u0079 \u0065\u006d\u0061\u0069\u006c (\u006d\u0061\u0069\u006c\u0074\u006f): \u0073\u006f\u006d\u0065\u0074\u0069\u006d\u0065\u0073 \u0075\u0073\u0065\u0064 \u0062\u0079 \u0062\u0061\u0073\u0069\u0063 \u0070\u0068\u0069\u0073\u0068\u0069\u006e\u0067 \u006b\u0069\u0074\u0073. \u0043\u0068\u0065\u0063\u006b \u0069\u0074 \u0069\u006e \u0063\u006f\u006e\u0074\u0065\u0078\u0074."
			}
		},
		{
			"id": "phishing_generic_kit",
			"category": "phishing",
			"type": "string",
			"pattern": "\u0050\u0061\u0079\u0050\u0061\u006c \u0043\u006f\u006e\u0066\u0069\u0072\u006d \u0059\u006f\u0075\u0072 \u0049\u0064\u0065\u006e\u0074\u0069\u0074\u0079",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0054\u0065\u0078\u0074\u0065 \u0074\u0079\u0070\u0065 \u0064\u0065 \u006b\u0069\u0074 \u0064\u0065 \u0070\u0068\u0069\u0073\u0068\u0069\u006e\u0067 \u0067é\u006eé\u0072\u0069\u0071\u0075\u0065 \u0064é\u0074\u0065\u0063\u0074é.",
				"en": "\u0054\u0065\u0078\u0074 \u0074\u0079\u0070\u0069\u0063\u0061\u006c \u006f\u0066 \u0061 \u0067\u0065\u006e\u0065\u0072\u0069\u0063 \u0070\u0068\u0069\u0073\u0068\u0069\u006e\u0067 \u006b\u0069\u0074 \u0064\u0065\u0074\u0065\u0063\u0074\u0065\u0064."
			}
		},
		{
			"id": "wp_auth_cookie_from_input",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0077\u0070_\u0073\u0065\u0074_\u0061\u0075\u0074\u0068_\u0063\u006f\u006f\u006b\u0069\u0065\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u006f\u006e\u006e\u0065\u0078\u0069\u006f\u006e \u0066\u006f\u0072\u0063é\u0065 à \u0075\u006e \u0063\u006f\u006d\u0070\u0074\u0065 à \u0070\u0061\u0072\u0074\u0069\u0072 \u0064'\u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u0077\u0070_\u0073\u0065\u0074_\u0061\u0075\u0074\u0068_\u0063\u006f\u006f\u006b\u0069\u0065 + \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c\u0065) : \u0070\u006f\u0072\u0074\u0065 \u0064é\u0072\u006f\u0062é\u0065 \u0064'\u0061\u0063\u0063è\u0073 à \u006c'\u0061\u0064\u006d\u0069\u006e\u0069\u0073\u0074\u0072\u0061\u0074\u0069\u006f\u006e.",
				"en": "\u0046\u006f\u0072\u0063\u0065\u0064 \u006c\u006f\u0067\u0069\u006e \u0074\u006f \u0061\u006e \u0061\u0063\u0063\u006f\u0075\u006e\u0074 \u0066\u0072\u006f\u006d \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074 (\u0077\u0070_\u0073\u0065\u0074_\u0061\u0075\u0074\u0068_\u0063\u006f\u006f\u006b\u0069\u0065 + \u0073\u0075\u0070\u0065\u0072\u0067\u006c\u006f\u0062\u0061\u006c): \u0061\u0064\u006d\u0069\u006e \u0061\u0063\u0063\u0065\u0073\u0073 \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072."
			}
		},
		{
			"id": "wp_create_user_hardcoded",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0077\u0070_\u0063\u0072\u0065\u0061\u0074\u0065_\u0075\u0073\u0065\u0072\\\u0073*\\(\\\u0073*[\\'\"][^\\'\"]+[\\'\"]\\\u0073*,\\\u0073*[\\'\"][^\\'\"]+[\\'\"]",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"wordpress"
			],
			"description": {
				"fr": "\u0043\u0072é\u0061\u0074\u0069\u006f\u006e \u0064'\u0075\u006e \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 \u0061\u0076\u0065\u0063 \u0069\u0064\u0065\u006e\u0074\u0069\u0066\u0069\u0061\u006e\u0074 \u0065\u0074 \u006d\u006f\u0074 \u0064\u0065 \u0070\u0061\u0073\u0073\u0065 é\u0063\u0072\u0069\u0074\u0073 \u0065\u006e \u0064\u0075\u0072 : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0063\u006c\u0061\u0073\u0073\u0069\u0071\u0075\u0065 \u0070\u006f\u0075\u0072 \u0067\u0061\u0072\u0064\u0065\u0072 \u0075\u006e \u0061\u0063\u0063è\u0073 \u0061\u0064\u006d\u0069\u006e\u0069\u0073\u0074\u0072\u0061\u0074\u0065\u0075\u0072 \u0063\u0061\u0063\u0068é.",
				"en": "\u0055\u0073\u0065\u0072 \u0063\u0072\u0065\u0061\u0074\u0065\u0064 \u0077\u0069\u0074\u0068 \u0061 \u0068\u0061\u0072\u0064-\u0063\u006f\u0064\u0065\u0064 \u0075\u0073\u0065\u0072\u006e\u0061\u006d\u0065 \u0061\u006e\u0064 \u0070\u0061\u0073\u0073\u0077\u006f\u0072\u0064: \u0063\u006c\u0061\u0073\u0073\u0069\u0063 \u0077\u0061\u0079 \u0074\u006f \u006b\u0065\u0065\u0070 \u0068\u0069\u0064\u0064\u0065\u006e \u0061\u0064\u006d\u0069\u006e\u0069\u0073\u0074\u0072\u0061\u0074\u006f\u0072 \u0061\u0063\u0063\u0065\u0073\u0073."
			}
		},
		{
			"id": "wp_set_role_administrator",
			"category": "backdoor",
			"type": "regex",
			"pattern": "->\\\u0073*\u0073\u0065\u0074_\u0072\u006f\u006c\u0065\\\u0073*\\(\\\u0073*[\\'\"]\u0061\u0064\u006d\u0069\u006e\u0069\u0073\u0074\u0072\u0061\u0074\u006f\u0072[\\'\"]\\\u0073*\\)",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"wordpress"
			],
			"description": {
				"fr": "\u0041\u0074\u0074\u0072\u0069\u0062\u0075\u0074\u0069\u006f\u006e \u0064\u0075 \u0072ô\u006c\u0065 \u0061\u0064\u006d\u0069\u006e\u0069\u0073\u0074\u0072\u0061\u0074\u0065\u0075\u0072 \u0070\u0061\u0072 \u006c\u0065 \u0063\u006f\u0064\u0065 : \u006cé\u0067\u0069\u0074\u0069\u006d\u0065 \u0064\u0061\u006e\u0073 \u0075\u006e \u0069\u006e\u0073\u0074\u0061\u006c\u006c\u0061\u0074\u0065\u0075\u0072, \u0073\u0075\u0073\u0070\u0065\u0063\u0074 \u0064\u0061\u006e\u0073 \u0075\u006e \u0074\u0068è\u006d\u0065 \u006f\u0075 \u0075\u006e \u0066\u0069\u0063\u0068\u0069\u0065\u0072 \u0069\u006e\u0061\u0074\u0074\u0065\u006e\u0064\u0075.",
				"en": "\u0041\u0064\u006d\u0069\u006e\u0069\u0073\u0074\u0072\u0061\u0074\u006f\u0072 \u0072\u006f\u006c\u0065 \u0067\u0072\u0061\u006e\u0074\u0065\u0064 \u0062\u0079 \u0063\u006f\u0064\u0065: \u006c\u0065\u0067\u0069\u0074\u0069\u006d\u0061\u0074\u0065 \u0069\u006e \u0061\u006e \u0069\u006e\u0073\u0074\u0061\u006c\u006c\u0065\u0072, \u0073\u0075\u0073\u0070\u0069\u0063\u0069\u006f\u0075\u0073 \u0069\u006e \u0061 \u0074\u0068\u0065\u006d\u0065 \u006f\u0072 \u0061\u006e \u0075\u006e\u0065\u0078\u0070\u0065\u0063\u0074\u0065\u0064 \u0066\u0069\u006c\u0065."
			}
		},
		{
			"id": "wp_hide_users_query",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0070\u0072\u0065_\u0075\u0073\u0065\u0072_\u0071\u0075\u0065\u0072\u0079.{\u0030,\u0033\u0030\u0030}\u0075\u0073\u0065\u0072_\u006c\u006f\u0067\u0069\u006e\\\u0073*!=",
			"flags": "is",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"wordpress"
			],
			"description": {
				"fr": "\u0046\u0069\u006c\u0074\u0072\u0065 \u0071\u0075\u0069 \u006d\u0061\u0073\u0071\u0075\u0065 \u0075\u006e \u0063\u006f\u006d\u0070\u0074\u0065 \u0064\u0065 \u006c\u0061 \u006c\u0069\u0073\u0074\u0065 \u0064\u0065\u0073 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072\u0073 : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0075\u0074\u0069\u006c\u0069\u0073é\u0065 \u0070\u006f\u0075\u0072 \u0063\u0061\u0063\u0068\u0065\u0072 \u0075\u006e \u0061\u0064\u006d\u0069\u006e\u0069\u0073\u0074\u0072\u0061\u0074\u0065\u0075\u0072 \u0070\u0069\u0072\u0061\u0074\u0065.",
				"en": "\u0046\u0069\u006c\u0074\u0065\u0072 \u0068\u0069\u0064\u0069\u006e\u0067 \u0061\u006e \u0061\u0063\u0063\u006f\u0075\u006e\u0074 \u0066\u0072\u006f\u006d \u0074\u0068\u0065 \u0075\u0073\u0065\u0072\u0073 \u006c\u0069\u0073\u0074: \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0075\u0073\u0065\u0064 \u0074\u006f \u0068\u0069\u0064\u0065 \u0061 \u0072\u006f\u0067\u0075\u0065 \u0061\u0064\u006d\u0069\u006e\u0069\u0073\u0074\u0072\u0061\u0074\u006f\u0072."
			}
		},
		{
			"id": "include_ico_file",
			"category": "backdoor",
			"type": "regex",
			"pattern": "@?\\\u0062(\u0069\u006e\u0063\u006c\u0075\u0064\u0065|\u0072\u0065\u0071\u0075\u0069\u0072\u0065)(_\u006f\u006e\u0063\u0065)?\\\u0073*\\(?\\\u0073*[\\'\"][^\\'\"]+\\.\u0069\u0063\u006f[\\'\"]",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0049\u006e\u0063\u006c\u0075\u0073\u0069\u006f\u006e \u0064'\u0075\u006e \u0066\u0069\u0063\u0068\u0069\u0065\u0072 .\u0069\u0063\u006f \u0063\u006f\u006d\u006d\u0065 \u0064\u0075 \u0063\u006f\u0064\u0065 \u0050\u0048\u0050 : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0074\u0072è\u0073 \u0072é\u0070\u0061\u006e\u0064\u0075\u0065 \u0070\u006f\u0075\u0072 \u0063\u0061\u0063\u0068\u0065\u0072 \u0075\u006e\u0065 \u0070\u006f\u0072\u0074\u0065 \u0064é\u0072\u006f\u0062é\u0065 \u0064\u0061\u006e\u0073 \u0075\u006e\u0065 \u0066\u0061\u0075\u0073\u0073\u0065 \u0069\u0063ô\u006e\u0065.",
				"en": "\u0041\u006e .\u0069\u0063\u006f \u0066\u0069\u006c\u0065 \u0069\u006e\u0063\u006c\u0075\u0064\u0065\u0064 \u0061\u0073 \u0050\u0048\u0050 \u0063\u006f\u0064\u0065: \u0076\u0065\u0072\u0079 \u0063\u006f\u006d\u006d\u006f\u006e \u0074\u0072\u0069\u0063\u006b \u0074\u006f \u0068\u0069\u0064\u0065 \u0061 \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072 \u0069\u006e \u0061 \u0066\u0061\u006b\u0065 \u0069\u0063\u006f\u006e."
			}
		},
		{
			"id": "obf_include_encoded_path",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\\\u0062(\u0069\u006e\u0063\u006c\u0075\u0064\u0065|\u0072\u0065\u0071\u0075\u0069\u0072\u0065)(_\u006f\u006e\u0063\u0065)?\\\u0073*\\(?\\\u0073*[\\'\"](?:[^\\'\"]{\u0030,\u0038}(?:\\\\\u0078[\u0030-\u0039\u0061-\u0066]{\u0032}|\\\\[\u0030-\u0037]{\u0033})){\u0034,}",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0049\u006e\u0063\u006c\u0075\u0073\u0069\u006f\u006e \u0064'\u0075\u006e \u0066\u0069\u0063\u0068\u0069\u0065\u0072 \u0064\u006f\u006e\u0074 \u006c\u0065 \u0063\u0068\u0065\u006d\u0069\u006e \u0065\u0073\u0074 \u0065\u006e\u0063\u006f\u0064é \u0065\u006e \u0068\u0065\u0078\u0061\u0064é\u0063\u0069\u006d\u0061\u006c \u006f\u0075 \u0065\u006e \u006f\u0063\u0074\u0061\u006c : \u0064\u0069\u0073\u0073\u0069\u006d\u0075\u006c\u0061\u0074\u0069\u006f\u006e \u0074\u0079\u0070\u0069\u0071\u0075\u0065 \u0064'\u0075\u006e \u006c\u006f\u0067\u0069\u0063\u0069\u0065\u006c \u006d\u0061\u006c\u0076\u0065\u0069\u006c\u006c\u0061\u006e\u0074.",
				"en": "\u0046\u0069\u006c\u0065 \u0069\u006e\u0063\u006c\u0075\u0064\u0065\u0064 \u0074\u0068\u0072\u006f\u0075\u0067\u0068 \u0061 \u0070\u0061\u0074\u0068 \u0065\u006e\u0063\u006f\u0064\u0065\u0064 \u0069\u006e \u0068\u0065\u0078 \u006f\u0072 \u006f\u0063\u0074\u0061\u006c: \u0074\u0079\u0070\u0069\u0063\u0061\u006c \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u0063\u006f\u006e\u0063\u0065\u0061\u006c\u006d\u0065\u006e\u0074."
			}
		},
		{
			"id": "obf_long_hex_string",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "(\\\\\u0078[\u0030-\u0039\u0061-\u0066]{\u0032}){\u0034\u0030,}",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u004c\u006f\u006e\u0067\u0075\u0065 \u0063\u0068\u0061î\u006e\u0065 \u0065\u006e\u0063\u006f\u0064é\u0065 \u0065\u006e \u0068\u0065\u0078\u0061\u0064é\u0063\u0069\u006d\u0061\u006c : \u0073\u006f\u0075\u0076\u0065\u006e\u0074 \u0075\u0074\u0069\u006c\u0069\u0073é\u0065 \u0070\u006f\u0075\u0072 \u0063\u0061\u0063\u0068\u0065\u0072 \u0064\u0075 \u0063\u006f\u0064\u0065 \u006d\u0061\u006c\u0076\u0065\u0069\u006c\u006c\u0061\u006e\u0074.",
				"en": "\u004c\u006f\u006e\u0067 \u0068\u0065\u0078-\u0065\u006e\u0063\u006f\u0064\u0065\u0064 \u0073\u0074\u0072\u0069\u006e\u0067: \u006f\u0066\u0074\u0065\u006e \u0075\u0073\u0065\u0064 \u0074\u006f \u0068\u0069\u0064\u0065 \u006d\u0061\u006c\u0069\u0063\u0069\u006f\u0075\u0073 \u0063\u006f\u0064\u0065."
			}
		},
		{
			"id": "obf_chr_chain",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "(\u0063\u0068\u0072\\\u0073*\\(\\\u0073*\\\u0064+\\\u0073*\\)\\\u0073*\\.\\\u0073*){\u0031\u0030,}",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0054\u0065\u0078\u0074\u0065 \u0072\u0065\u0063\u006f\u006e\u0073\u0074\u0072\u0075\u0069\u0074 \u0063\u0061\u0072\u0061\u0063\u0074è\u0072\u0065 \u0070\u0061\u0072 \u0063\u0061\u0072\u0061\u0063\u0074è\u0072\u0065 \u0061\u0076\u0065\u0063 \u0063\u0068\u0072() : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0064'\u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e.",
				"en": "\u0054\u0065\u0078\u0074 \u0072\u0065\u0062\u0075\u0069\u006c\u0074 \u006f\u006e\u0065 \u0063\u0068\u0061\u0072\u0061\u0063\u0074\u0065\u0072 \u0061\u0074 \u0061 \u0074\u0069\u006d\u0065 \u0077\u0069\u0074\u0068 \u0063\u0068\u0072(): \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065."
			}
		},
		{
			"id": "obf_globals_call",
			"category": "obfuscation",
			"type": "regex",
			"pattern": "\\$\u0047\u004c\u004f\u0042\u0041\u004c\u0053\\\u0073*\\[\\\u0073*[\\'\"][^\\'\"]+[\\'\"]\\\u0073*\\]\\\u0073*\\[\\\u0073*\\\u0064+\\\u0073*\\]\\\u0073*\\(",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0046\u006f\u006e\u0063\u0074\u0069\u006f\u006e \u0061\u0070\u0070\u0065\u006cé\u0065 \u0076\u0069\u0061 \u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0064\u0075 \u0074\u0061\u0062\u006c\u0065\u0061\u0075 $\u0047\u004c\u004f\u0042\u0041\u004c\u0053 : \u006d\u006f\u0074\u0069\u0066 \u0074\u0079\u0070\u0069\u0071\u0075\u0065 \u0064\u0065\u0073 \u006f\u0075\u0074\u0069\u006c\u0073 \u0064'\u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u0069\u006f\u006e \u0064\u0065 \u006d\u0061\u006c\u0077\u0061\u0072\u0065\u0073.",
				"en": "\u0046\u0075\u006e\u0063\u0074\u0069\u006f\u006e \u0063\u0061\u006c\u006c\u0065\u0064 \u0074\u0068\u0072\u006f\u0075\u0067\u0068 \u0061\u006e \u0065\u006e\u0074\u0072\u0079 \u006f\u0066 \u0074\u0068\u0065 $\u0047\u004c\u004f\u0042\u0041\u004c\u0053 \u0061\u0072\u0072\u0061\u0079: \u0074\u0079\u0070\u0069\u0063\u0061\u006c \u0070\u0061\u0074\u0074\u0065\u0072\u006e \u006f\u0066 \u006d\u0061\u006c\u0077\u0061\u0072\u0065 \u006f\u0062\u0066\u0075\u0073\u0063\u0061\u0074\u006f\u0072\u0073."
			}
		},
		{
			"id": "backdoor_eval_decoded_input",
			"category": "backdoor",
			"type": "regex",
			"pattern": "\u0065\u0076\u0061\u006c\\\u0073*\\(\\\u0073*[\u0061-\u007a_\u0030-\u0039]+\\\u0073*\\(\\\u0073*\\$_(\u0047\u0045\u0054|\u0050\u004f\u0053\u0054|\u0052\u0045\u0051\u0055\u0045\u0053\u0054|\u0043\u004f\u004f\u004b\u0049\u0045)",
			"flags": "i",
			"severity": "danger",
			"targets": [
				"php"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u0045\u0078é\u0063\u0075\u0074\u0069\u006f\u006e \u0064\u0065 \u0063\u006f\u0064\u0065 \u0064é\u0063\u006f\u0064é à \u0070\u0061\u0072\u0074\u0069\u0072 \u0064'\u0075\u006e\u0065 \u0065\u006e\u0074\u0072é\u0065 \u0075\u0074\u0069\u006c\u0069\u0073\u0061\u0074\u0065\u0075\u0072 (\u0065\u0078 : \u0065\u0076\u0061\u006c(\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065($_\u0050\u004f\u0053\u0054[...]))) : \u0070\u006f\u0072\u0074\u0065 \u0064é\u0072\u006f\u0062é\u0065.",
				"en": "\u0043\u006f\u0064\u0065 \u0064\u0065\u0063\u006f\u0064\u0065\u0064 \u0066\u0072\u006f\u006d \u0075\u0073\u0065\u0072 \u0069\u006e\u0070\u0075\u0074 \u0061\u006e\u0064 \u0072\u0075\u006e (\u0065.\u0067. \u0065\u0076\u0061\u006c(\u0062\u0061\u0073\u0065\u0036\u0034_\u0064\u0065\u0063\u006f\u0064\u0065($_\u0050\u004f\u0053\u0054[...]))): \u0062\u0061\u0063\u006b\u0064\u006f\u006f\u0072."
			}
		},
		{
			"id": "seo_hidden_links",
			"category": "spam",
			"type": "regex",
			"pattern": "<\u0064\u0069\u0076[^>]+\u0073\u0074\u0079\u006c\u0065\\\u0073*=\\\u0073*[\\'\"][^\\'\"]*(\u0064\u0069\u0073\u0070\u006c\u0061\u0079\\\u0073*:\\\u0073*\u006e\u006f\u006e\u0065|\u006c\u0065\u0066\u0074\\\u0073*:\\\u0073*-\\\u0064{\u0033,}\u0070\u0078)[^>]*>\\\u0073*(<[^>]+>\\\u0073*)?<\u0061\\\u0073+\u0068\u0072\u0065\u0066",
			"flags": "i",
			"severity": "warning",
			"targets": [
				"php",
				"html"
			],
			"platforms": [
				"joomla",
				"wordpress"
			],
			"description": {
				"fr": "\u004c\u0069\u0065\u006e\u0073 \u0063\u0061\u0063\u0068é\u0073 \u0064\u0061\u006e\u0073 \u0075\u006e \u0062\u006c\u006f\u0063 \u0069\u006e\u0076\u0069\u0073\u0069\u0062\u006c\u0065 : \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0064\u0065 \u0073\u0070\u0061\u006d \u0053\u0045\u004f \u0069\u006e\u006a\u0065\u0063\u0074é\u0065 \u0070\u0061\u0072 \u0064\u0065\u0073 \u0070\u0069\u0072\u0061\u0074\u0065\u0073.",
				"en": "\u004c\u0069\u006e\u006b\u0073 \u0068\u0069\u0064\u0064\u0065\u006e \u0069\u006e \u0061\u006e \u0069\u006e\u0076\u0069\u0073\u0069\u0062\u006c\u0065 \u0062\u006c\u006f\u0063\u006b: \u0053\u0045\u004f \u0073\u0070\u0061\u006d \u0074\u0065\u0063\u0068\u006e\u0069\u0071\u0075\u0065 \u0069\u006e\u006a\u0065\u0063\u0074\u0065\u0064 \u0062\u0079 \u0061\u0074\u0074\u0061\u0063\u006b\u0065\u0072\u0073."
			}
		}
	],
	"encoding_note": "Signature patterns and descriptions use JSON \\u escapes so that antivirus software does not mistake this data file for malware. json_decode() restores them."
}