V1.0

Author: Coldwave96

check.py

@@ -85,7 +85,7 @@ def check_webshell(dir):
                 other += 1
 
             if y_pred[0] == 1:
-                print "%s is webshell" % fulpath
+                print "%s may be a webshell file" % fulpath
                 webshell += 1
 
     print "Scan %d files(%d php files, %d asp files, %d jsp files, %d other files),%d files is webshell" % (all, all_php, all_asp, all_jsp, other, webshell)

train_asp.py

@@ -12,8 +12,8 @@
 
 max_features = 50000
 
-webshell_dir = "Data2/WebShell/asp/"
-normal_dir = "Data2/normal/asp/"
+webshell_dir = "Data/WebShell/asp/"
+normal_dir = "Data/normal/asp/"
 
 white_count = 0
 black_count = 0

train_jsp.py

@@ -12,8 +12,8 @@
 
 max_features = 50000
 
-webshell_dir = "Data2/WebShell/jsp/"
-normal_dir = "Data2/normal/jsp/"
+webshell_dir = "Data/WebShell/jsp/"
+normal_dir = "Data/normal/jsp/"
 
 white_count = 0
 black_count = 0
@@ -32,7 +32,7 @@ def load_files(dir):
     g = os.walk(dir)
     for path, d, filelist in g:
         for filename in filelist:
-            if filename.endswith('.jsp'):
+            if filename.endswith('.jsp') or filename.endswith('txt'):
                 fulpath = os.path.join(path, filename)
                 print "Load %s" % fulpath
                 t = load_str(fulpath)

train_php.py

@@ -12,8 +12,8 @@
 
 max_features = 50000
 
-webshell_dir = "Data2/WebShell/php/"
-normal_dir = "Data2/normal/php/"
+webshell_dir = "Data/WebShell/php/"
+normal_dir = "Data/normal/php/"
 
 white_count = 0
 black_count = 0