linux下查找php木马

find ./ -name "*.php" | xargs grep 'eval($_POST'

find ./ -name "*.php" | xargs grep 'phpspy'