实时精准侦测站点目录中的各类 webshell

#!/bin/bash
# author by klion
# 2017.12.25
# Delete webshell auto 
webshell_log="/var/log/webshell.log"
upload_shell="/var/log/modify.tmp"
# 只要一检测到有新事件发生就立马打包上传检测
[ -s $webshell_log ] &&{
    awk -F " " '{print $3}' $webshell_log |grep -E ".php$"| sort -u > $upload_shell
    cat $upload_shell |xargs zip ./maybeshell.zip
    echo `curl https://scanner.baidu.com/enqueue -F archive=@maybeshell.zip` | mail -s "webshell detect url api" klion@protonmail.com 
    sleep 5
    > $webshell_log && > $upload_shell && rm -fr ./maybeshell.zip
}