利用 PyInotify 来监控 Web 目录 WebShell

---

源码 : https://github.com/seb-m/pyinotify
文档 : http://seb.dbzteam.org/pyinotify/
参考脚本 : https://github.com/WangYihang/Attack_Defense_Framework/blob/master/watch.py

---

#!/usr/bin/env python
# encoding:utf-8

import sys
import pyinotify
import os

def detect_waf(pathname):
    try:
        with open(pathname) as f:
            content = f.read()
            # tags
            black_list = ["