Check my WP site for base64 code?

David Beroff

David Beroff

Well-known member
Registered
Joined
Jun 14, 2016
Messages
1,501
Points
63
Is there a way to scan my WordPress site for potentially malicious code? I read a few articles and they said that I need to check my WP site for base64 code but where and how then they didn't say in details. Can you guide me?
Your help would be appreciated.
 
mobin

mobin

Well-known member
Registered
Joined
Jun 22, 2017
Messages
234
Points
28
If you are a website owner, the common and useful security plugin for WP nowadays I am hearing is wordfence. That also has a feature that actively protecting your installation. But I don't have any previous experience with it and cannot recommend; please check user reviews and see if that is useful for you.

Another easy technique is to download your files locally, scan with an updated anti-virus , clean the reported code and upload back to the server. Finally, if you can get hold on your technical support team, check whether the server is loaded with scanner software, so that you can use it to scan.
 
Sean101

Sean101

Member
Registered
Joined
Apr 15, 2016
Messages
60
Points
8
As my experience, base64 code can in included in your Wordpress file and databases.
Download your files and databases to your PC and using a tool and starting search with base64 or eval. It is better if you can manually check your files and find any suspicious codes because hackers tend to encrypt their codes to protect from viewing.
 
VirtuBox

VirtuBox

Well-known member
Registered
Joined
May 3, 2016
Messages
1,622
Points
83
VirtuBox
My opinion = no wordfence ...
Here some command to check your wordpress instance :

Code: 
# If the hack was recent, check lastly modified files
$ find . -mtime 0

# Some hacks are nice enough to include a comment for when a block starts/ends  (ex: //istart)
$ find . -type f -name "*.php" | xargs grep -H "istart"

# Normally files with hacks use base64 encoded data in an attempt to hide code
$ find . -type f -name "*.php" | xargs grep -H "base64_decode"

# Eval-ing of code is usually a sign of something naughty (allthough lots of plugins etc use this)
$ find . -type f -name "*.php" | xargs grep -H "eval("

# Sometimes php files are "hidden" inside the javascript assets folder
$ find wp-includes/js -type f -name "*.php"
Source : https://gist.github.com/andersevenrud/63b567e3489aafde64a6
 
You must log in or register to reply here.
Older Threads
David Beroff
Best Ad Networks for Web Hosting?
Replies
3
Views
3,188
overcast
David Beroff
Best paid SSL certificate providers?
Replies
14
Views
7,525
VirtuBox
mcottle
Is Zoho mail safe?
Replies
3
Views
5,035
Denis // trabia
mcottle
Mailgun vs Sparkpost
Replies
1
Views
3,430
hostproton
mcottle
What hosting offers are you looking for?
Replies
3
Views
1,912
HostBastic
Newer Threads
Mujkanovic
Generating SSL Certificate using cPanel or using Cloudflare.com?
Replies
1
Views
3,670
VirtuBox
W
What is Google's Fred Update?
Replies
3
Views
1,999
dina
W
Why it is necessary to submit website to Google?
Replies
9
Views
3,084
jenniferravon
paivadaniel
How to promote web hosting offers with ppc/ppv campaigns??
Replies
2
Views
3,242
overcast
Medhahosting
Looking for New Website desgin for hosting business
Replies
9
Views
2,855
LarsJ
Latest Threads
J
How do I periodically back up Fail2Ban configuration files?
Replies
0
Views
24
jtti
R
How much bandwidth is enough for a growing website?
Replies
1
Views
38
FerdieQO
J
How does Jtti Server Defend against DDoS attacks?
Replies
0
Views
227
jtti
J
What are the performance differences between DNS load Balancing and reverse proxy?
Replies
1
Views
222
FerdieQO
hostiko
What Features Do You Value Most in a Hosting Provider?
Replies
1
Views
49
FerdieQO
Recommended Threads
DavidLux
Have you ever made money online ?
2 3
Replies
50
Views
19,866
Diosa
denvercardonations
will multile 301 redirects add strength to a single page?
Replies
3
Views
2,347
coolmadhav
KrisR
CSS Media Queries
Replies
3
Views
3,307
PluginForage
energizedit
How do you monitor email usage?
Replies
5
Views
4,051
LJSHost
Jovani
  • Locked
WTB Facebook Groups Auto Poster
Replies
5
Views
3,832
mazee.jiten
Similar Threads
Cheerag Nundlall
Checking Memcached Usage on WordPress Site?
Replies
12
Views
3,421
Mjlivera
L
Please check out my website
Replies
3
Views
1,641
Require
David Beroff
How to check new uploaded files to my websites recently?
Replies
6
Views
2,644
NoFrillsCloud
Gmeister4
How to check if my site uses HTTP/2 or HTTP/1.1 ?
Replies
8
Views
4,116
Mujkanovic
DiamondIM
How to Monitor, Check, Remove, and Prevent Malware from Your WordPress Site?
Replies
4
Views
2,850
AlbaHost

Latest postsNew threads

Latest Hosting OffersNew Reviews

Popular Contributors - Past 30 Days

Sponsors

Tag Cloud

You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
  • cpanel
  • dedicated
  • free
  • hello
  • hosting
  • hosting services
  • marketing
  • offers
  • seo
  • server
  • services
  • vps
  • web
  • web hosting
  • website
  • wordpress
    • Top