How to find a spamming script?

You can use the below scripts to find out the php script used for spamming

find /home/xyz/ -name '*.php'|xargs grep -w "mail("

This will search for any PHP files containing the mail() function. From there, you can get an idea of which scripts are sending emails out.

If there is on going spamming via a php script issue below command to find the running scripts at the moment

watch 'ps -ef| grep php'

No comments:

Post a Comment