sussyfinder

A self-contained PHP webshell scanner that uses token analysis, hash filtering, and entropy-based anomaly detection to hunt for backdoors — supports legacy PHP

What is sussyfinder?

A self-contained PHP webshell scanner that uses token analysis, hash filtering, and entropy-based anomaly detection to hunt for backdoors — supports legacy PHP 4.3 to the very recent PHP 8, no dependencies required