Launching today
WPSniffer
Open-source YARA malware scanner for WordPress servers
2 followers
Open-source YARA malware scanner for WordPress servers
2 followers
WPSniffer is a free, open-source CLI that scans WordPress and PHP files for malware using ~5,000 community YARA rules from YARA Forge, powered by the YARA-X engine. Install with pip, run it over SSH, cron or CI, and get CSV, TSV, text or email reports. Multi-process, scans whole files up to 50 MiB, and supports your ownyar rules. No account, license key or telemetry: your files never leave your server. Built for freelancers, agencies and hosts cleaning up hacked sites.
Free
Launch Team
CloudflareYour next app belongs on Cloudflare Workers. Deploy for free
Promoted
Hey Product Hunters 👋
I've cleaned up 180+ hacked WordPress sites in the last year, and I kept wanting a scanner I could just pip install on a client's server over SSH: no account, no license key, nothing phoning home. So I built WPSniffer.
It checks your WordPress and PHP files against ~5,000 community YARA rules from YARA Forge using the YARA-X engine, runs in parallel, and gives you a CSV, TSV or text report (or an email summary). You can add your own .yar rules and run it from cron or CI.
It's free and open source (GPLv3). Feedback I'd love most: false positives you run into, detections you'd want added, and what would make it fit your cleanup workflow.