Uncovering PHP Web Shells with Grep and Regex

In this video, I'll provide step-by-step instructions on how to use grep and regex to detect PHP web shells, as well as cover best practices for digital forensics and incident response.
Whether you're a seasoned cybersecurity professional or just starting out in the field, this video will equip you with the skills and knowledge you need to stay ahead of the curve and protect your systems from web shell attacks.
So join me as we uncover PHP web shells with grep and regex - it's time to take your digital forensics and incident response skills to the next level. Don't forget to subscribe to our channel for more cybersecurity and information security content.
Command:
sudo grep -RPn "(passthru|shell_exec|system|phpinfo|base64_decode|chmod|mkdir|fopen|fclose|readfile|php_uname|eval|preg_replace|exif_read_data) *\(" /var/www
You can find me here:
Twitter▶ / machevalia
LinkedIn▶ / nick-berrie
GitHub▶ github.com/machevalia
Blog▶ machevalia.blog

[@electrowizard2658]

a great video fora cybersceurity student would surely apply it

[@0xrohit54]

Its a Useful Video sir and thank you for mentioning the command in the description sir

[@AbbyStrongNPC]

Audio and video is great. Great formatting. Look forward to what's next in the series.

[@Alex-xb8yo]

Looks & sounds great - the font in kali is a bit small though. Looking forward to more content!

[@machevalia]

Thanks for the feedback!!