{"id":8078,"date":"2016-03-01T12:37:37","date_gmt":"2016-03-01T11:37:37","guid":{"rendered":"http:\/\/www.wjst.de\/blog\/?p=8078"},"modified":"2016-03-01T12:40:45","modified_gmt":"2016-03-01T11:40:45","slug":"wordpress-integrity-a-simple-intrusion-detection","status":"publish","type":"post","link":"https:\/\/www.wjst.de\/blog\/sciencesurf\/2016\/03\/wordpress-integrity-a-simple-intrusion-detection\/","title":{"rendered":"WordPress Integrity: A simple intrusion detection"},"content":{"rendered":"<p>As I see so many scripts trying out wordpress vulnerabilities, it is just a matter of time until one bot will succeed. The only chance I see is to remove those unused themes and plugins, autoupdate wordpress and run weekly backups.<\/p>\n<p>Another option is to monitor file integrity with this short php script<\/p>\n<pre class=\"brush: php; title: ; notranslate\" title=\"\">\r\n$cmd='find .\/wordpress -type f -exec md5sum {} \\;&gt; .\/hidden\/wordpress.md5';\r\nexec($cmd,$ret);\r\necho &quot;&lt;pre&gt;&quot;; print_r($ret); echo &quot;&lt;\/pre&gt;&quot;;\r\n<\/pre>\n<p>Results can be seen with<\/p>\n<pre class=\"brush: php; title: ; notranslate\" title=\"\">\r\n$cmd='md5sum -c .\/hidden\/wordpress.md5 | grep -oh &quot;.*FAILED.*&quot;';\r\n<\/pre>\n\n<p>&nbsp;<\/p>\n<div class=\"bottom-note\">\n  <span class=\"mod1\">CC-BY-NC Science Surf , accessed 06.04.2026<\/span>\n <\/div>","protected":false},"excerpt":{"rendered":"<p>As I see so many scripts trying out wordpress vulnerabilities, it is just a matter of time until one bot will succeed. The only chance I see is to remove those unused themes and plugins, autoupdate wordpress and run weekly backups. Another option is to monitor file integrity with this short php script $cmd=&#8217;find .\/wordpress &hellip; <a href=\"https:\/\/www.wjst.de\/blog\/sciencesurf\/2016\/03\/wordpress-integrity-a-simple-intrusion-detection\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">WordPress Integrity: A simple intrusion detection<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[1435,2977,2979,2937,2978,735],"class_list":["post-8078","post","type-post","status-publish","format-standard","hentry","category-computer-software","tag-attack","tag-bot","tag-harden","tag-spam","tag-vulnerability","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/posts\/8078","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/comments?post=8078"}],"version-history":[{"count":3,"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/posts\/8078\/revisions"}],"predecessor-version":[{"id":8081,"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/posts\/8078\/revisions\/8081"}],"wp:attachment":[{"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/media?parent=8078"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/categories?post=8078"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wjst.de\/blog\/wp-json\/wp\/v2\/tags?post=8078"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}