RegExp to find specific string with random characters in between

Question

I'm not even hopeful that this is possible. I'm looking for the string "base64_decode" in PHP files (yes this is to clean up a site that has been hacked). The problem is that this hacker has "hidden" the string like so:

'ba'.'se'.(32*2).'_d'.'eco'.'de'
or
'b'.'as'.'e6'.'4_d'.'ec'.'ode';

And a few other ways.

Therefore I would like to search for the string "decode" or "base" ignoring all the characters in between each letter. I understand this would be very CPU intensive (especially when you have a few hundred MB of files to go through (yes, he hide the code in other files like a GIF image).

Is that even possible?

I know about Sucuri for online website, but if you have other suggestion of tools to scan the files and discover other hacks I'm interested.

vks · Accepted Answer · 2015-06-02 16:05:36Z

1

(?:b[^a-zA-Z]*?a[^a-zA-Z]*?s[^a-zA-Z]*?e)|(?:d[^a-zA-Z]*?e[^a-zA-Z]*?c[^a-zA-Z]*?o[^a-zA-Z]*?d[^a-zA-Z]*?e)

You can try this.See demo.

https://regex101.com/r/pG1kU1/17

answered Jun 2, 2015 at 16:05

vks

68.1k11 gold badges96 silver badges132 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

RegExp to find specific string with random characters in between

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related