Detect and contain WordPress compromises, then harden the install against re-entry. Covers webshell detection across the Sid Gifari, WSO, FilesMan, b374k and c99 families, backdoored mu-plugins, malicious admin accounts, and shared-hosting lateral-movement defense. Invoke when a WordPress site shows unexpected files, suspicious admin accounts, defaced pages, or when hardening a fresh install on sh
1 email curto, só com as skills novas de Segurança. 4 minutos de leitura, sem spam, cancela com 1 clique.
Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.
Ler descrição completaRecolher descrição
WordPress Hardening
A defensive-security skill for diagnosing and hardening WordPress installations, with a focus on shared-hosting environments where one compromised sub can pivot across the whole account.
When to invoke
Trigger this skill when any of these signals appear:
wp-content/uploads/**/*.php exists (uploads should never contain PHP)
Admin users you do not recognize, or wp_users entries with creation dates that don't match the site history
wp-config.php modified
[Description truncada. Veja o README completo no GitHub.]
