Module Expr Str Import alias Import alias Import alias Import alias Import alias Import alias Import alias Import alias Import alias ImportFrom alias Import alias Import alias Import alias ClassDef bases AttributeLoad NameLoad attr body FunctionDef arguments args NameParam defaults body Expr Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body Return SubscriptLoad Call AttributeLoad NameLoad attr NameLoad NameLoad Index Num decorator_list FunctionDef arguments args NameParam NameParam defaults body Return Call SubscriptLoad Dict Str Str Str Str Str Str AttributeLoad NameLoad attr AttributeLoad NameLoad attr AttributeLoad NameLoad attr AttributeLoad NameLoad attr AttributeLoad NameLoad attr AttributeLoad NameLoad attr Index Call AttributeLoad SubscriptLoad NameLoad Index Num attr NameLoad SubscriptLoad NameLoad Slice Num decorator_list FunctionDef arguments args NameParam NameParam defaults body Assign NameStore Call AttributeLoad NameLoad attr Str Return TupleLoad Call NameLoad SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num decorator_list FunctionDef arguments args NameParam NameParam defaults body Assign NameStore Call AttributeLoad NameLoad attr Str Return TupleLoad CompareEq SubscriptLoad NameLoad Index Num Str SubscriptLoad NameLoad Index Num decorator_list FunctionDef arguments args NameParam NameParam defaults body Assign NameStore Call AttributeLoad NameLoad attr Str Return TupleLoad Call NameLoad SubscriptLoad NameLoad Index Num SubscriptLoad NameLoad Index Num decorator_list FunctionDef arguments args NameParam NameParam defaults body Return TupleLoad NameLoad NameLoad decorator_list FunctionDef arguments args NameParam NameParam defaults body Assign TupleStore NameStore NameStore NameStore Call AttributeLoad NameLoad attr Str Return TupleLoad SubscriptLoad NameLoad Slice Num BinOpAdd Call NameLoad NameLoad Num SubscriptLoad NameLoad Slice BinOpAdd Call NameLoad NameLoad Num decorator_list FunctionDef arguments args NameParam NameParam defaults body Assign TupleStore NameStore NameStore NameStore Call AttributeLoad NameLoad attr Str Assign TupleStore NameStore NameStore NameStore TupleLoad Dict NameLoad SubscriptLoad NameLoad Slice Num For NameStore Call NameLoad Num BinOpMult Call NameLoad NameLoad Num body Assign TupleStore NameStore NameStore Call AttributeLoad NameLoad attr NameLoad NameLoad If NameLoad body Assign SubscriptStore NameLoad Index NameLoad NameLoad Assign NameStore NameLoad orelse Assign NameStore NameLoad Return TupleLoad NameLoad SubscriptLoad NameLoad Slice Num decorator_list decorator_list ClassDef bases AttributeLoad NameLoad attr body Assign NameStore ListLoad Str Str Str Assign NameStore NameLoad Assign NameStore NameLoad Assign NameStore Str Assign NameStore Str Assign NameStore NameLoad Assign NameStore Str Assign NameStore NameLoad Assign NameStore Str Assign NameStore ListLoad Assign NameStore ListLoad Assign NameStore ListLoad Assign NameStore Str Assign NameStore Str Assign NameStore Str FunctionDef arguments args NameParam NameParam defaults body Expr Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad If CompareIsNot AttributeLoad NameLoad attr NameLoad body Assign AttributeStore NameLoad attr Call AttributeLoad AttributeLoad NameLoad attr attr Str Assign AttributeStore NameLoad attr AttributeLoad NameLoad attr If CompareIsNot AttributeLoad NameLoad attr NameLoad body Assign AttributeStore NameLoad attr AttributeLoad NameLoad attr Expr Str Assign AttributeStore NameLoad attr CompareIn Call AttributeLoad AttributeLoad NameLoad attr attr TupleLoad Str Str Str Str decorator_list FunctionDef arguments args NameParam defaults body If CompareIs AttributeLoad NameLoad attr NameLoad body Expr Call AttributeLoad NameLoad attr Str Str Assign NameStore Str Assign AttributeStore NameLoad attr Call AttributeLoad Call AttributeLoad NameLoad attr NameLoad attr TryExcept body Assign AttributeStore NameLoad attr Call AttributeLoad NameLoad attr Call NameLoad AttributeLoad NameLoad attr Assign NameStore Call NameLoad Assign AttributeStore NameLoad attr Call AttributeLoad NameLoad attr Call NameLoad AttributeLoad NameLoad attr handlers ExceptHandler type NameLoad name NameStore body Print Call AttributeLoad Str attr NameLoad orelse If Call AttributeLoad AttributeLoad NameLoad attr attr Str body TryExcept body Assign AttributeStore NameLoad attr Call AttributeLoad NameLoad attr Call NameLoad Call AttributeLoad Call NameLoad Str Str attr Assign NameStore Call NameLoad Assign AttributeStore NameLoad attr Call AttributeLoad NameLoad attr Call NameLoad AttributeLoad NameLoad attr handlers ExceptHandler type NameLoad name NameStore body Print Call AttributeLoad Str attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body Assign NameStore Num Assign NameStore Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr For NameStore AttributeLoad NameLoad attr body Assign NameStore Call AttributeLoad Call NameLoad NameLoad Str Num attr Assign NameStore Call AttributeLoad NameLoad attr Str Str NameLoad Assign NameStore Call AttributeLoad NameLoad attr NameLoad If NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad If CompareIs AttributeLoad NameLoad attr NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Str Assign NameStore Num For NameStore NameLoad body Assign NameStore Call AttributeLoad NameLoad attr NameLoad If NameLoad body Expr Call AttributeLoad NameLoad attr BinOpAdd BinOpAdd BinOpAdd BinOpAdd Str Call AttributeLoad NameLoad attr Str Call NameLoad NameLoad Str AugAssignAdd NameStore Num orelse Expr Call AttributeLoad NameLoad attr BinOpAdd Str Call AttributeLoad NameLoad attr AugAssignAdd NameStore Num Expr Call AttributeLoad NameLoad attr NameLoad NameLoad Expr Call AttributeLoad NameLoad attr Str Str Expr Call AttributeLoad NameLoad attr BinOpAdd BinOpAdd BinOpAdd BinOpAdd Str Call NameLoad NameLoad Str Call NameLoad Call NameLoad AttributeLoad NameLoad attr Str Str decorator_list FunctionDef arguments args NameParam defaults body If UnaryOpNot Call NameLoad NameLoad Str body Assign AttributeStore NameLoad attr ListLoad For TupleStore NameStore NameStore Call AttributeLoad AttributeLoad NameLoad attr attr body If CompareEq NameLoad Str body Continue If CompareIn Str NameLoad body Assign NameStore Call AttributeLoad NameLoad attr Call NameLoad Call AttributeLoad NameLoad attr Str Str Expr Call AttributeLoad AttributeLoad NameLoad attr attr TupleLoad Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr NameLoad NameLoad Return AttributeLoad NameLoad attr decorator_list FunctionDef arguments args NameParam NameParam NameParam defaults body For TupleStore NameStore NameStore Call AttributeLoad NameLoad attr body Assign NameStore Call AttributeLoad NameLoad attr Call AttributeLoad NameLoad attr NameLoad If NameLoad body Expr Call AttributeLoad AttributeLoad NameLoad attr attr ListLoad NameLoad Assign NameStore Call AttributeLoad NameLoad attr Str Assign NameStore Call NameLoad SubscriptLoad Call AttributeLoad NameLoad attr NameLoad Index Num Assign NameStore Str If CompareEq SubscriptLoad NameLoad Index Num Num body Assign NameStore Str orelse If CompareEq SubscriptLoad NameLoad Index Num Num body Assign NameStore Str Assign NameStore BinOpAdd BinOpAdd BinOpAdd SubscriptLoad NameLoad Index Num Str SubscriptLoad NameLoad Index Num Str Expr Call AttributeLoad NameLoad attr BinOpAdd BinOpAdd BinOpAdd Str Call NameLoad NameLoad Str NameLoad Str decorator_list FunctionDef arguments args NameParam defaults body Expr Str decorator_list FunctionDef arguments args NameParam NameParam defaults body Assign TupleStore NameStore NameStore NameStore NameStore NameStore NameStore NameStore NameStore NameStore NameStore Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr BinOpAdd Str NameLoad Expr Call AttributeLoad NameLoad attr BinOpAdd Str Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad Expr Call AttributeLoad NameLoad attr BinOpAdd BinOpAdd BinOpAdd Str Call NameLoad NameLoad Str Call NameLoad NameLoad Expr Call AttributeLoad NameLoad attr BinOpAdd Str SubscriptLoad Call NameLoad NameLoad Slice Num Expr Call AttributeLoad NameLoad attr BinOpAdd Str Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr BinOpAdd Str Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr BinOpAdd Str Call AttributeLoad NameLoad attr NameLoad Expr Call AttributeLoad NameLoad attr Str decorator_list FunctionDef arguments args NameParam NameParam defaults body For NameStore ListLoad Str Str Str Str Str body If CompareLt NameLoad Num body Return BinOpMod Str TupleLoad NameLoad NameLoad AugAssignDiv NameStore Num decorator_list FunctionDef arguments args NameParam defaults body TryExcept body Assign NameStore SubscriptLoad AttributeLoad NameLoad attr Index Str handlers ExceptHandler type NameLoad body Assign NameStore Num TryExcept body Assign NameStore Call AttributeLoad Call AttributeLoad NameLoad attr Str attr handlers ExceptHandler type NameLoad body Assign NameStore Num If CompareEq NameLoad Num body Expr Call AttributeLoad NameLoad attr Str Str orelse If CompareLt NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr Str Str TryExcept body Assign NameStore Call AttributeLoad Call AttributeLoad NameLoad attr Str attr handlers ExceptHandler type AttributeLoad NameLoad attr body Assign NameStore Num If CompareEq NameLoad Num body Expr Call AttributeLoad NameLoad attr Str Str orelse If CompareLt NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr Str Str decorator_list FunctionDef arguments args NameParam defaults body Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr BinOpAdd Str Call NameLoad Call NameLoad AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr BinOpAdd BinOpAdd Str Call NameLoad Call NameLoad AttributeLoad NameLoad attr Str decorator_list FunctionDef arguments args NameParam defaults body For TupleStore NameStore NameStore NameStore Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr body For NameStore AttributeLoad NameLoad attr body For NameStore Call AttributeLoad NameLoad attr NameLoad BinOpAdd Str NameLoad body Expr Call AttributeLoad AttributeLoad NameLoad attr attr Call AttributeLoad AttributeLoad NameLoad attr attr NameLoad NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam defaults body Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str decorator_list FunctionDef arguments args NameParam defaults body Expr Call AttributeLoad NameLoad attr Str Expr Call AttributeLoad NameLoad attr Str Str Expr Call AttributeLoad NameLoad attr Str Str Expr Call AttributeLoad NameLoad attr Str Str Expr Call AttributeLoad NameLoad attr Str Str Expr Call AttributeLoad NameLoad attr Str Str Expr Call AttributeLoad NameLoad attr Str decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam NameParam NameParam defaults Str Str NameLoad NameLoad body Assign NameStore SubscriptLoad Dict Str Str Str Str Str Str Str Str Str Str Str Str Index NameLoad If CompareIs Call AttributeLoad NameLoad attr NameLoad body Print BinOpAdd BinOpAdd NameLoad NameLoad Str orelse Print NameLoad If CompareIs NameLoad NameLoad body Expr Call AttributeLoad NameLoad attr NameLoad NameLoad NameLoad decorator_list FunctionDef arguments args NameParam defaults body Expr Str Assign NameStore AttributeLoad NameLoad attr Assign NameStore BoolOpAnd CompareNotEq NameLoad Str BoolOpOr CompareNotEq NameLoad Str CompareIn Str AttributeLoad NameLoad attr Assign NameStore BoolOpAnd Call NameLoad AttributeLoad NameLoad attr Str Call AttributeLoad AttributeLoad NameLoad attr attr If BoolOpOr UnaryOpNot NameLoad UnaryOpNot NameLoad body Return NameLoad Return NameLoad decorator_list FunctionDef arguments args NameParam NameParam NameParam NameParam defaults Str NameLoad body If CompareIs NameLoad NameLoad body AugAssignAdd AttributeStore NameLoad attr BinOpAdd BinOpAdd BinOpAdd BinOpAdd Str NameLoad Str NameLoad Str orelse AugAssignAdd AttributeStore NameLoad attr NameLoad decorator_list FunctionDef arguments args NameParam defaults body If CompareIs AttributeLoad NameLoad attr NameLoad body Print Str Assign NameStore Call AttributeLoad Call AttributeLoad NameLoad attr attr AttributeLoad NameLoad attr Assign NameStore Call NameLoad NameLoad Str Num Str Expr Call AttributeLoad NameLoad attr AttributeLoad NameLoad attr decorator_list decorator_list Assign NameStore Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr Str Str keyword Str keyword Str keyword Str Expr Call AttributeLoad NameLoad attr Str Str keyword NameLoad keyword Str Expr Call AttributeLoad NameLoad attr Str Str keyword Str keyword Str Expr Call AttributeLoad NameLoad attr Str Str keyword Str keyword Str Assign TupleStore NameStore NameStore Call AttributeLoad NameLoad attr If CompareEq Call NameLoad AttributeLoad NameLoad attr Num body Expr Call AttributeLoad NameLoad attr Expr Call AttributeLoad NameLoad attr orelse Assign NameStore Call NameLoad NameLoad Expr Call AttributeLoad NameLoad attr
N/A N/A 
 Shell Detector  v1.0 
 Shell Detector is released under the MIT License <http://www.opensource.org/licenses/mit-license.php>

 Special thanks to JetBRAINS for PyCharm license

 https://github.com/emposha/PHP-Shell-Detector
 N/A threading N/A sys N/A re N/A os N/A optparse N/A base64 N/A stat N/A fnmatch N/A time hashlib md5 N/A urllib2 N/A cgi N/A datetime PhpSerializer N/A N/A threading Thread N/A __init__ N/A N/A self N/A N/A N/A N/A N/A N/A threading Thread __init__ self N/A unserialize N/A N/A self s N/A N/A N/A N/A N/A N/A PhpSerializer _unserialize_var self s N/A 0 N/A _unserialize_var N/A N/A self s N/A N/A N/A N/A N/A N/A i b d n s a N/A PhpSerializer _unserialize_int N/A PhpSerializer _unserialize_bool N/A PhpSerializer _unserialize_double N/A PhpSerializer _unserialize_null N/A PhpSerializer _unserialize_string N/A PhpSerializer _unserialize_array N/A N/A N/A N/A s N/A 0 lower self N/A s N/A 2 N/A _unserialize_int N/A N/A self s N/A N/A N/A x N/A N/A s partition ; N/A N/A N/A int N/A x N/A 0 N/A x N/A 2 N/A _unserialize_bool N/A N/A self s N/A N/A N/A x N/A N/A s partition ; N/A N/A N/A N/A x N/A 0 1 N/A x N/A 2 N/A _unserialize_double N/A N/A self s N/A N/A N/A x N/A N/A s partition ; N/A N/A N/A float N/A x N/A 0 N/A x N/A 2 N/A _unserialize_null N/A N/A self s N/A N/A N/A N/A None s N/A _unserialize_string N/A N/A self s N/A N/A N/A N/A l _ s N/A N/A s partition : N/A N/A N/A s N/A 1 N/A N/A int l 1 N/A s N/A N/A N/A int l 3 N/A _unserialize_array N/A N/A self s N/A N/A N/A N/A l _ s N/A N/A s partition : N/A N/A a k s N/A N/A None N/A s N/A 1 N/A i N/A range 0 N/A N/A int l 2 N/A N/A N/A v s N/A N/A PhpSerializer _unserialize_var self s N/A k N/A N/A N/A a N/A k v N/A k None N/A N/A k v N/A N/A a N/A s N/A 1 N/A N/A ShellDetector N/A N/A threading Thread N/A N/A _extension N/A php asp txt N/A _command_line True N/A _showlinenumbers True N/A _dateformat H:i:s d/m/Y N/A _directory . N/A _scan_hidden True N/A _report_format shelldetector_%d-%m-%Y_%H%M%S.html N/A _remotefingerprint False N/A _output N/A _files N/A N/A _badfiles N/A N/A _fingerprints N/A N/A _title Shell Detector N/A _version 1.1 N/A _regex (?si)(preg_replace.*\/e|`.*?\$.*?`|\bpassthru\b|\bshell_exec\b|\bexec\b|\bbase64_decode\b|\beval\b|\bsystem\b|\bproc_open\b|\bpopen\b|\bcurl_exec\b|\bcurl_multi_exec\b|\bparse_ini_file\b|\bshow_source\b) __init__ N/A N/A self options N/A N/A N/A N/A N/A N/A threading Thread __init__ self N/A N/A N/A options extension None N/A N/A N/A self _extension N/A N/A N/A options extension split , N/A N/A self _showlinenumbers N/A options linenumbers N/A N/A N/A options directory None N/A N/A N/A self _directory N/A options directory N/A if options.dateformat is not None:
            self._dateformat = options.dateformat

        if options.format is not None:
            self._report_format = options.format N/A N/A self _remotefingerprint N/A N/A N/A N/A options remote lower N/A yes true t 1 N/A remote N/A N/A self N/A N/A N/A N/A N/A self _remotefingerprint True N/A N/A N/A N/A self alert Please note we are using remote shell database yellow N/A url https://raw.github.com/emposha/PHP-Shell-Detector/master/shelldetect.db N/A N/A self _fingerprints N/A N/A N/A N/A urllib2 urlopen url read N/A N/A N/A N/A self _fingerprints N/A N/A base64 decodestring N/A bytes N/A self _fingerprints N/A serial N/A PhpSerializer N/A N/A self _fingerprints N/A N/A serial unserialize N/A str N/A self _fingerprints N/A N/A N/A IOError N/A e N/A N/A N/A N/A ({}) format e N/A N/A N/A N/A N/A os path isfile shelldetect.db N/A N/A N/A N/A N/A self _fingerprints N/A N/A base64 decodestring N/A str N/A N/A N/A open shelldetect.db r read N/A serial N/A PhpSerializer N/A N/A self _fingerprints N/A N/A serial unserialize N/A str N/A self _fingerprints N/A N/A N/A IOError N/A e N/A N/A N/A N/A ({}) format e N/A start N/A N/A self N/A N/A N/A N/A N/A self header N/A N/A N/A self remote N/A N/A N/A self version N/A N/A N/A self filescan N/A N/A N/A self anaylize N/A N/A N/A self footer N/A None N/A anaylize N/A N/A self N/A N/A N/A _counter 0 N/A _regex N/A N/A re compile N/A self _regex N/A _filename N/A self _files N/A N/A _content N/A N/A N/A open _filename rt -1 read N/A _filename N/A N/A re sub .# _filename N/A _match N/A N/A _regex findall _content N/A _match N/A N/A N/A N/A self getfileinfo _filename N/A N/A N/A self _showlinenumbers True N/A N/A _lines N/A N/A _content split N/A _linecounter 1 N/A _line _lines N/A N/A _match_line N/A N/A _regex findall _line N/A _match_line N/A N/A N/A N/A self alert N/A N/A N/A N/A    Suspicious function used:  N/A N/A _match_line __str__ (line:  N/A str _linecounter ) N/A _linecounter 1 N/A N/A N/A N/A self alert N/A    Suspicious functions used:  N/A N/A _match __str__ N/A _counter 1 N/A N/A N/A self fingerprint _filename _content N/A N/A N/A self alert ======================================================= yellow N/A N/A N/A self alert N/A N/A N/A N/A Status:  N/A str _counter  suspicious files and  N/A str N/A len N/A self _badfiles  shells red N/A _get_precomputed_fingerprints N/A N/A self N/A N/A N/A N/A N/A hasattr self _precomputed_fingerprints N/A N/A N/A self _precomputed_fingerprints N/A N/A N/A fingerprint shellname N/A N/A N/A self _fingerprints iteritems N/A N/A N/A fingerprint version N/A N/A N/A N/A bb: fingerprint N/A N/A fingerprint N/A N/A base64 decodestring N/A bytes N/A N/A fingerprint replace bb: N/A N/A N/A N/A self _precomputed_fingerprints append N/A N/A N/A re compile N/A N/A re escape fingerprint shellname N/A N/A self _precomputed_fingerprints N/A fingerprint N/A N/A self _filename _content N/A N/A N/A N/A _regex shellname N/A N/A self _get_precomputed_fingerprints N/A N/A _match N/A N/A _regex findall N/A N/A base64 b64encode _content N/A _match N/A N/A N/A N/A N/A self _badfiles append N/A _filename N/A _regex_shell N/A N/A re compile ^(.+?)\[(.+?)\]\[(.+?)\]\[(.+?)\] N/A _match_shell N/A list N/A N/A N/A _regex_shell findall shellname N/A 0 N/A _shell_note N/A N/A N/A _match_shell N/A 2 1 N/A N/A _shell_note please note it`s a malicious file not a shell N/A N/A N/A N/A _match_shell N/A 2 2 N/A N/A _shell_note please note potentially dangerous file (legit file but may be used by hackers) N/A _shellflag N/A N/A N/A N/A _match_shell N/A 0 ( N/A _match_shell N/A 3 ) N/A N/A N/A self alert N/A N/A N/A    Fingerprint: Positive, it`s a  N/A str _shellflag _shell_note red N/A unpack N/A N/A self N/A N/A N/A  Need to work on it N/A getfileinfo N/A N/A self _file N/A N/A N/A N/A mode ino dev nlink uid gid size atime mtime ctime N/A N/A os stat _file N/A N/A N/A self alert N/A N/A N/A self alert ======================================================= yellow N/A N/A N/A self alert N/A N/A N/A self alert N/A    Suspicious behavior found in:  _file N/A N/A N/A self alert N/A    Full path:      N/A N/A N/A os path abspath _file N/A N/A N/A self alert N/A N/A N/A    Owner:          N/A str uid : N/A str gid N/A N/A N/A self alert N/A    Permission:     N/A N/A oct mode N/A -3 N/A N/A N/A self alert N/A    Last accessed:  N/A N/A time ctime atime N/A N/A N/A self alert N/A    Last modified:  N/A N/A time ctime mtime N/A N/A N/A self alert N/A    Filesize:       N/A N/A self sizeof_fmt size N/A N/A N/A self alert N/A sizeof_fmt N/A N/A self num N/A N/A N/A x N/A bytes KB MB GB TB N/A N/A N/A num 1024.0 N/A N/A N/A %3.1f %s N/A num x N/A num 1024.0 N/A version N/A N/A self N/A N/A N/A N/A N/A _version N/A N/A self _fingerprints N/A version N/A N/A N/A ValueError N/A N/A _version 0 N/A N/A N/A _server_version N/A N/A N/A N/A urllib2 urlopen https://raw.github.com/emposha/PHP-Shell-Detector/master/version/db read N/A N/A N/A ValueError N/A N/A _server_version 0 N/A N/A _server_version 0 N/A N/A N/A N/A self alert Cant connect to server! Version check failed! red N/A N/A N/A _server_version _version N/A N/A N/A N/A self alert New version of shells signature database found. Please update! red N/A N/A N/A _app_server_version N/A N/A N/A N/A urllib2 urlopen https://raw.github.com/emposha/Shell-Detector/master/version/app read N/A N/A N/A N/A urllib2 HTTPError N/A N/A _app_server_version 0 N/A N/A _app_server_version 0 N/A N/A N/A N/A self alert Cant connect to server! Application version check failed! red N/A N/A N/A _server_version _version N/A N/A N/A N/A self alert New version of application found. Please update! red N/A filescan N/A N/A self N/A N/A N/A N/A N/A self alert Starting file scanner, please be patient file scanning can take some time. N/A N/A N/A self alert N/A Number of known shells in database is:  N/A str N/A len N/A self _fingerprints N/A N/A N/A self listdir N/A N/A N/A self alert N/A N/A File scan done, we have:  N/A str N/A len N/A self _files  files to analyze N/A listdir N/A N/A self N/A N/A N/A N/A root dirnames filenames N/A N/A os walk N/A self _directory N/A N/A extension N/A self _extension N/A N/A filename N/A N/A fnmatch filter filenames N/A *. extension N/A N/A N/A N/A N/A self _files append N/A N/A N/A os path join root filename N/A None N/A header N/A N/A self N/A N/A N/A N/A N/A self alert ************************************************************************************************* N/A N/A N/A self alert *                                                                                               * N/A N/A N/A self alert *                                Welcome to Shell Detector Tool 1.1                             * N/A N/A N/A self alert *                                More information can be found here                             * N/A N/A N/A self alert *                                   http://www.shelldetector.com                                * N/A N/A N/A self alert *                                                                                               * N/A N/A N/A self alert ************************************************************************************************* N/A N/A N/A self alert N/A footer N/A N/A self N/A N/A N/A N/A N/A self alert N/A N/A N/A self alert ************************************************************************************************* green N/A N/A N/A self alert *                                                                                               * green N/A N/A N/A self alert *                  In case you need help email us at support@shelldetector.com                  * green N/A N/A N/A self alert *                                                                                               * green N/A N/A N/A self alert ************************************************************************************************* green N/A N/A N/A self alert N/A alert N/A N/A self _content _color _class _html _flag N/A info False False N/A N/A _color_result N/A N/A red green yellow purple blue [91m [92m [93m [95m [94m N/A _color N/A N/A N/A N/A self supports_color True N/A N/A N/A N/A _color_result _content [0m N/A N/A _content N/A N/A _flag True N/A N/A N/A N/A self output _content _class _html N/A supports_color N/A N/A self N/A N/A N/A 
        --- Taken from Django ---
        Returns True if the running system's terminal supports color, and False
        otherwise.
         N/A plat N/A sys platform N/A supported_platform N/A N/A plat Pocket PC N/A N/A plat win32 N/A ANSICON N/A os environ N/A is_a_tty N/A N/A hasattr N/A sys stdout isatty N/A N/A N/A sys stdout isatty N/A N/A N/A supported_platform N/A is_a_tty N/A N/A False N/A True N/A output N/A N/A self _content _class _html N/A info True N/A N/A N/A _html True N/A N/A N/A self _output N/A N/A N/A N/A <div class=" _class "> _content </div> N/A N/A N/A self _output _content N/A flush N/A N/A self N/A N/A N/A N/A N/A self _command_line False N/A N/A Flush N/A filename N/A N/A N/A N/A datetime now strftime N/A self _report_format N/A file N/A open filename w -1 utf-8 N/A N/A N/A file write N/A self _output N/A N/A N/A parser N/A N/A optparse OptionParser N/A N/A N/A parser add_option --extension -e type string default php,txt,asp help file extensions that should be scanned, comma separated N/A N/A N/A parser add_option --linenumbers -l default True help show line number where suspicious function used N/A N/A N/A parser add_option --directory -d type string help specify directory to scan N/A N/A N/A parser add_option --remote -r default False help get shells signatures db by remote N/A N/A options args N/A N/A parser parse_args N/A N/A N/A len N/A sys argv 1 N/A N/A N/A N/A parser print_usage N/A N/A N/A parser print_help N/A N/A shell N/A ShellDetector options N/A N/A N/A shell start