Skip to content

Instantly share code, notes, and snippets.

@bhowe

bhowe/Commands to clean a Wordpress site

Created December 24, 2020 15:39
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bhowe/e0750688c843436540a2350058990087 to your computer and use it in GitHub Desktop.
Save bhowe/e0750688c843436540a2350058990087 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Commands to clean a Wordpress site
Some basic commands to get you started if you are familiar with ssh.
Find common problems in wordpress hacks
Finds eval or base64 decode
grep -ri "eval" [path]
grep -ri "base64_decode" [path]
Recently modified files
find -type f -ctime -0 | more
The -type looks for files, and -ctime scans last 24 hours. Subtract days by number (-1 24 hours) or -2
(48 hours) , See man find for more info
Find PHP files in uploads directory
find uploads -name "™*.php" -print
Find a string of hex digits
grep -rP “(?:\\Wx[A-FO-9]{2}){5}" *
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment