Welcome, Guest. Please login or register.

ShoutBox!

 

Ken

2021 Mar 19 03:46:54
 

Skhilled

2021 Mar 14 14:19:39
 :2funny:
 

Ken

2021 Mar 14 11:04:40
 

Skhilled

2021 Feb 02 11:44:35
YEAH!
 

Ken

2021 Feb 01 08:17:28
Black History Month
Starts today!
 

Ken

2021 Jan 21 12:38:16
 

Ken

2021 Jan 13 08:33:33
 

Skhilled

2021 Jan 02 10:25:49
I didn't realized that I was still logged in here. LOL
 

Ken

2021 Jan 02 08:06:53
Happy New Years!!!  laughing7
 

Skhilled

2021 Jan 01 02:24:34
Happy New Years, sleepy head! ;D

Recent Topics

Author Topic: Code Scanner  (Read 1545 times)

0 Members and 1 Guest are viewing this topic.

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 6641
  • Gender: Male
  • Once you stop trying to learn, you stop living!
  • View Gallery
    • Buildz Hosting
Code Scanner
« on: November 15, 2016, 08:39:09 AM »
I get a newsletter from The Admin Zone and it contained this topic about Hostgator having bad security:

https://theadminzone.com/threads/hostgator-is-security-bad.142308/

In it, I found this "Malicious Code Scanner". You can use it to scan your website for malicious code if you suspect or have been hacked to help clean it.

https://github.com/mikestowe/Malicious-Code-Scanner

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 10000
  • Gender: Male
  • View Gallery
Re: Code Scanner
« Reply #1 on: November 15, 2016, 12:13:50 PM »
Thanks for this one... gonna run it just for testing purposes. :)
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 10000
  • Gender: Male
  • View Gallery
Re: Code Scanner
« Reply #2 on: November 15, 2016, 12:33:26 PM »
 shocked003

Ran the scanner on my test site and got this:
Quote
== MALICIOUS CODE FOUND ==

The following files appear to be infected:
  -  /home/ourfamil/public_html/beta-test/Sources/Load.php
  -  /home/ourfamil/public_html/beta-test/Sources/Load.php~
  -  /home/ourfamil/public_html/beta-test/Sources/Subs-List.php
  -  /home/ourfamil/public_html/beta-test/Sources/TPSubs.php
  -  /home/ourfamil/public_html/beta-test/Themes/ShelfLife-1/Profile.template.php
  -  /home/ourfamil/public_html/beta-test/Themes/default/Profile.template.php
  -  /home/ourfamil/public_html/beta-test/Themes/default/Profile.template.php~
  -  /home/ourfamil/public_html/beta-test/Themes/default/Register.template.php
  -  /home/ourfamil/public_html/beta-test/Themes/default/Register.template.php~
  -  /home/ourfamil/public_html/beta-test/Themes/modernstyle102_20/Profile.template.php
  -  /home/ourfamil/public_html/beta-test/Themes/modernstyle103_20/Profile.template.php
  -  /home/ourfamil/public_html/beta-test/Themes/shelflife203/Profile.template.php
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 10000
  • Gender: Male
  • View Gallery
Re: Code Scanner
« Reply #3 on: November 15, 2016, 12:39:53 PM »
And here on the live forum:

Quote
== MALICIOUS CODE FOUND ==

The following files appear to be infected:
  -  /home/ourfamil/public_html/FamilyForum/Sources/Load.php
  -  /home/ourfamil/public_html/FamilyForum/Sources/Load.php~
  -  /home/ourfamil/public_html/FamilyForum/Sources/Subs-List.php
  -  /home/ourfamil/public_html/FamilyForum/Sources/TPSubs.php
  -  /home/ourfamil/public_html/FamilyForum/Themes/Apocalypse_TK2/Profile.template.php
  -  /home/ourfamil/public_html/FamilyForum/Themes/default/Profile.template.php
  -  /home/ourfamil/public_html/FamilyForum/Themes/default/Profile.template.php~
  -  /home/ourfamil/public_html/FamilyForum/Themes/default/Register.template.php
  -  /home/ourfamil/public_html/FamilyForum/Themes/default/Register.template.php~
  -  /home/ourfamil/public_html/FamilyForum/Themes/modernstyle102_20/Profile.template.php
  -  /home/ourfamil/public_html/FamilyForum/Themes/modernstyle103_20/Profile.template.php
  -  /home/ourfamil/public_html/FamilyForum/Themes/modernstyle104_20/Profile.template.php
  -  /home/ourfamil/public_html/FamilyForum/Themes/shelflife203/Profile.template.php
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 6641
  • Gender: Male
  • Once you stop trying to learn, you stop living!
  • View Gallery
    • Buildz Hosting
Re: Code Scanner
« Reply #4 on: November 16, 2016, 09:01:03 AM »
I checked a few of your files but did not see anything out of the ordinary. I check the files with Notepad++ and RJ TextED but did not see anything stranger. Usually, you'll see very strange looking code if something is wrong. I'm not a coder by any stretch of the imagination but I couldn't see anything.

Since some of the files in question are TP and Bloc's themes you might want to ask him if he can see anything.

EDIT: I totally forgot about asking Illori...

I haven't run it on mine yet. Another thing to do is download them or if you already have the same files on your PC you can run a scan on them to see if anything turns up. It could be that the scanner is detecting the JS script portions of the files...
« Last Edit: November 16, 2016, 09:18:11 AM by Skhilled »

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 10000
  • Gender: Male
  • View Gallery
Re: Code Scanner
« Reply #5 on: November 17, 2016, 09:40:11 AM »
Not knowing how to analyze the code for bits that do not belong I'm not going to get to excited about this.  :oops!
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 6641
  • Gender: Male
  • Once you stop trying to learn, you stop living!
  • View Gallery
    • Buildz Hosting
Re: Code Scanner
« Reply #6 on: November 18, 2016, 07:39:21 AM »
You will "usually" see something very strange/different near the beginning or end of the file that doesn't look like the rest of the code. You may also see a link or redirect to another site that should not be there.

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 10000
  • Gender: Male
  • View Gallery
Re: Code Scanner
« Reply #7 on: November 18, 2016, 11:28:45 AM »
I'm gonna take a look to see if anything jumps out.
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 6641
  • Gender: Male
  • Once you stop trying to learn, you stop living!
  • View Gallery
    • Buildz Hosting
Re: Code Scanner
« Reply #8 on: November 19, 2016, 06:03:13 AM »
You can also download fresh files and mods...after deleting the old and re-install your files and mods. Just to be sure. I do it every so often just to kill any bad code if nothing else.

Haven't done it lately and need to do it soon. Another reason why I haven't redone my site site...just been putting it off. But I am backing everything up for all of my domains as I might be changing hosting soon.