[SSH] Search in PHP for Backdoors

         _____ _____ _ _____ _____         _____ _____ _____ _____
     ___|     | __  |_|  _  |_   _|___ ___|_   _|   __|  _  |     |
    |_ -|   --|    -| |   __| | | |- _|___| | | |   __|     | | | |
    |___|_____|__|__|_|__|    |_| |___|     |_| |_____|__|__|_|_|_|
    |s C R i P T z - T E A M . i N F O|████████████████████████████

                             - iNfO -

[SSH] Search in PHP for Backdoors

                             - NOtIcE -
LOGiN TO SSH:

Use Unix / Linux grep command to search c99 or r57 shell (replace /var/www/html/ with your path!):

grep -iR 'c99' /var/www/html/
grep -iR 'r57' /var/www/html/
find /var/www/html/ -name \*.php -type f -print0 | xargs -0 grep c99
grep -RPn "(passthru|shell_exec|system|base64_decode|fopen|fclose|eval)" /var/www/html/