What is it?

The repo contains a collection of MD5 hashes for various malware files to help others to scan their systems.

How to use ?

find /home/*/public_html -name '*.php*' -type f -exec md5sum {} \; | grep -f signatures.db

Sample output

26473e6886a58fa5135af00dfb6c660f  /home/userA/public_html/.cpanelinfo.php
d5fdb6a2ac9d32b14b1c64edf2ab981c  /home/userA/public_html/m/maxo0o.php
5b0cdae3abd2f95a0e278f608c662dfd  /home/userB/public_html/wp-content/themes/flipfolio/inc.php
016650123088967d6796ae291283a17f  /home/userC/public_html/wb.php
53ee03615a5b385292ede85b8bb668a5  /home/userC/public_html/page.php
504105253ce1d265ad640cfbf48c7cf0  /home/userD/public_html/login.testmicrosft.com/nextstep.php
2d48dd3ce05c647ceef0cbbd687a431d  /home/userD/public_html/login.testmicrosft.com/Finishs.php
bb74aa1f6030dc0e77b14b52f856ed75  /home/userD/public_html/login.testmicrosft.com/Mr-Brain.php
504105253ce1d265ad640cfbf48c7cf0  /home/userD/public_html/login.testmicrosft.com/ouym/nextstep.php
2d48dd3ce05c647ceef0cbbd687a431d  /home/userD/public_html/login.testmicrosft.com/ouym/Finishs.php
bb74aa1f6030dc0e77b14b52f856ed75  /home/userD/public_html/login.testmicrosft.com/ouym/Mr-Brain.php
ad66db746ec191d23a819d2079ca955d  /home/userE/public_html/cms/application/modules/admin/views/pages/htaccess.php
0a9ab3ad4266cb8b43c8657920d67116  /home/userF/public_html/wp-content/plugins/soundy-background-music/include.php.suspected
26473e6886a58fa5135af00dfb6c660f  /home/userG/public_html/.cpanelinfo.php
d5ac783eeea63c90f01ba79ee32c7475  /home/userH/public_html/catalog/rem.php