Posted 2 years ago #
I just downloaded the Exploit Scanner Plugin. After starting it I got to a page telling me
Exploit Scanner
This script searches through your WordPress install for signs that may indicate that your website has been compromised by hackers. It does NOT remove anything, this is left for the user to do.
And nothing happened afterwards. After one hour there is still nothing telling me, if there are any results, even no sign that there is happening anything at all.
Posted 2 years ago #
Was there any error in your php error log?
Posted 2 years ago #
Hello,
I had the same problem as portenkirchner above and could not find my php error log. I host my own blog and determined that the error log directory parameter in my php.ini was not set correctly. I fixed this and discovered when I ran the Exploit Scanner again that indeed I was getting an out of memory error in my php error log. However, the Exploit Scanner script does not return anything if this error occurs and all I would get is the same result "This script searches through your WordPress install for signs that may"...maybe this can be fixed in a future version to at least tell someone if there was a memory error???
Here is the exact error from my php error log:
"[21-Oct-2009 11:40:42] PHP Fatal error: Allowed memory size of 134217728 bytes exhausted (tried to allocate 51118080 bytes) in /www/xxxxxxx/wp-content/plugins/exploit-scanner/exploit-scanner.php on line 80
"
I corrected this by going into my wp-config.php per the README instructions and added the following:
define( 'WP_MEMORY_LIMIT', '256M' );
After doing this, the error went away but the Exploit Scanner now had a different problem. Now, when I started a scan, the "Please Wait while Loading" animated .gif would display for hours on end. After some painstaking debugging of the Exploit Scanner code, I determined the problem. It seems that the Exploit Scanner does not handle scanning binary files if they are anywhere in the WordPress directory structure. To fix this problem, I simply moved my "files" outside of the WordPress directory structure and voila, the scanner completed properly! Again, this should be fixed in a future version by either telling the user that the scanner does not work with binary files or build in intelligence to skip over these files/scan them in a different way.
Anyone have a similar problem using this script with binary files?
Thanks!
Posted 2 years ago #
Try the development version. It allows you to set the php memory size and file size limit.
Posted 2 years ago #
Hello,
I had the same problem with "define( 'WP_MEMORY_LIMIT', '256M')":
Exploit Scanner
This script searches through your WordPress install for signs that may indicate that your website has been compromised by hackers. It does NOT remove anything, this is left for the user to do.
Where can I find the development version?
thanks
Posted 2 years ago #
Posted 2 years ago #
sweet, the dev version finally worked for me! Found one file hidden in my default theme that was dirty...I'd assumed it just got fixed with an update....
Posted 2 years ago #
I'm having a problem now getting WordPress Exploit Scanner 0.7 to run. I'm only getting the "Please wait while loading..." message. I ran it earlier on WP 2.8.5, but since experiencing some malicious activity, I've since upgraded to 2.8.6 and have also changed the "wp_" prefix for the database.
Are there possibly some additional modifications that I need to make in the database because I did change the "wp_" prefix, and that might be causing WordPress Exploit Scanner not to run now?
I'm just guessing, though. Any ideas on getting this plugin to run? I really need to use it!
Thank you.
Deb Phillips
Posted 2 years ago #
@DebnNCgal
Same problem here. It was working in a prior incarnation, but 0.7 has never worked for me. Just spins its wheels until I pull the plug.
I'm running the latest version of Firefox on my Mac.
Posted 2 years ago #
@BobNolin , #DebNCgal I'll look into this in a bit. Was working fine on my Firefox + Mac and IE8. Do you by any chance have FireBug install so you could give some more details on eventual errors.
Posted 2 years ago #
Something you might want to try. Could you run the "General Infos" scan alone without the other two and let me know if this works. I just tried the script on a fresh install on a shared hosting with Firefox 3.5.5 on a Mac and it worked like a charm. It would be great if you could pass along as many details as possible so I can figure out what fails.
Thanks
Thorsten
Posted 2 years ago #
If I uncheck the box for FILE SCAN and check every other box then it works fine. The moment I check FILE SCAN it just sits there and "rotates" like it is working, but I let it work overnight and in the morning it was still going.
Using Firefox 3.55 on Ubuntu KK
I just tried checking FILE SCAN and NOTE only and got the following error:
Fatal error: Out of memory (allocated 167772160) (tried to allocate 334 bytes) in /home/censored/www/wp/wp-content/plugins/exploit-scanner/exploit-scanner.php on line 261
I moved the PHP MEMORY LIMIT up to 500 and now it is just sitting there rotating again (for the past several minutes now.
Posted 2 years ago #
You might have a huge amount of files, or big files. Have you tried adjusting the filesize limit to a lower value?
Posted 2 years ago #
tott, yes, I have Firebug installed and would be happy to help, if I can. BTW, I can successfully run the "General Infos" scan by itself. Let me know how I might help in the troubleshooting process. Thanks very much.
Posted 2 years ago #
DebNCgal, if you can run General Infos I'm afraid Firebug will not help as you already proved that it's not a browser issue related to the ajax call or similar.
Posted 2 years ago #
Sorry about that, tott. I was hoping to be of some direct help. I hope the fix will not be a daunting task.
Posted 2 years ago #
I'm having the same issues as the others. v0.6 was working fine for me, as was v0.5, but I just upgraded to v0.7 and now only the Database scan works.
Update: The File scan works now, but it takes forever to run, and displays virtually every single file I have, which is a lot since my blog is 4 years old and I post often.
Many of the 'Descriptions' are "File owned by apache user _removed_ and writable (-rw-r--r--)" which shouldn't be an issue, and I just find it really difficult to use now... I'm looking forward to v0.8 that hopefully fixes this...
Posted 2 years ago #
As it seems not all all (or in other words - most) web hosting providers seem to have some nasty settings that make all files writeable by the webserver. I will make the file permission check optional which should speed things up and should serve most needs.
Posted 2 years ago #
Fatal error: Allowed memory size of 33554432 bytes exhausted (tried to allocate 65 bytes) in /var/www/web205/html/wp-content/plugins/exploit-scanner/exploit-scanner.php on line 261
What does this tell me and what ought I be doing?
I'm also having a problem running with version 0.7 sitting there spinning it's wheels when "Files" is checked (WP 2.9 beta 2) on a 4 year old blog). I downgraded to version 0.6 just to check and 0.6 runs without a hitch and returns results within 10 seconds. Going back to 0.7 and it just sits there and spins it's wheels again.No errors in error logs.
Sticking with version 0.6 for the time being. Sorry I couldn't provide anymore info than that. Version 0.6 works, 0.7 does not.
Posted 2 years ago #
I just pushed a new version that disables the Ajax functionality for now as it seems to be causing trouble in some constellations. Could those who saw spinning wheels with no results report back if the new version fixed the issue. Please be aware that running all the scans together can take quite a while depending on the amount of plugins/files and posts in your installation. If you run into trouble run the tests one by one.
Posted 2 years ago #
Error message after update from within WP to v0.9 / WP 2.8.6 EN Checksums verified.
Warning: in_array() [function.in-array]: Wrong datatype for second argument in (...)/wp-content/plugins/exploit-scanner/exploit-scanner.php on line 341
Posted 2 years ago #
I am no longer getting the spinning wheel at all. It runs for about a minute with an error showing up soon after starting, but after it finishes, I don't see any other information. This is the final screen:
WordPress Exploit Scanner
Exploit scan
This script searches through your WordPress install for signs that may indicate that your website has been compromised by hackers. It does NOT remove anything, this is left for the user to do.
Scans to execute: General Infos File scan Database scan
Severities to show: Blocker Severe Warning Note
Skip check: File permission scan
Warning: in_array() [function.in-array]: Wrong datatype for second argument in /home/angelwood/www/wp/wp-content/plugins/exploit-scanner/exploit-scanner.php on line 1116
/>
PHP Memory Limit: MB (Max memory used by PHP.)
Upper File size Limit: KB (Skip files larger than this. Skipped files are listed at the end of scan.)
If you run into memory problems, increase the PHP memory limit or reduce the file size limit.
Custom search
You can also search the files and database on your site for a custom string:
Posted 2 years ago #
That's weird...
After about the 5th run through, that error went away and it is now finally working right!
I just gave 0.92 a try and the end result was the same as for 0.7. If I just check "General info" the plugin returns results within 6 seconds. If I check either Files or Database or both the plugin locks up my site both front end and admin with no results returned (same as with version 0.7).
No errors in any of my WP install error logs but I saw one on the main server log which showed up with version 0.7 as well. I wasn't sure at the time if it applied to my site or not as it contains no identifying info. Still, it happened twice so...
[Mon Dec 14 13:20:39 2009] [warn] (103)Software caused connection abort: mod_fcgid: ap_pass_brigade failed in handle_request function
I then deleted 0.92 and reinstalled 0.6 for comparison and running the scan with 0.6 returned the expected results within 7 seconds with no errors or lockups.
Is there a difference in the functions and the way the scan is run in 0.6 as compared to version 0.7 and above besides being able to select the scan type? Is it correct to assume that version 0.6 runs all the scans seen in 0.7 and above? Does 0.6 not check the core files and DB as thoroughly?
Quick question: Why is there no change log to be found anywhere? Not even in the "readme.txt" file that comes with the plugin? Change logs help save asking a lot of questions that could otherwise be answered by reading the change log beforehand.
Just wondering. :)
BTW, I forgot to include some basic data in my last post:
PHP version: 5.2.11
MySQL version: 5.0.81-community-log
No permission restrictions and a well maintained install and DB.
End result in my case is that 0.6 runs fine and versions 0.7 and 0.92 do not. Any other test I can run, please don't hesitate to let me know.
Posted 2 years ago #
Just replying to say that I'm still having the same issue as Kirk described above, only I'm now using v0.93.
This is a great plugin, I just wish it worked as well as it did in v0.6...
Yup, I tried Version 0.93 too with the same results as with versions 0.7 though 0.92. Still no errors found. Kind of difficult to dig out a problem when there's nothing in the error logs to go on. Maybe I need to have a talk with it? ;)
After testing all sorts of combinations of settings in WordPress Exploit Scanner 0.93 I finally got it to present the list of problems along with an error callout for the plugin itself. Up until now no combination of settings or having plugins activated or deactivated did anything but have the scan run approx. 9 minutes with a return to the default settings page, no list and a bit of text under the settings stating:
"Are you sure you want to do this?"
[link] "Try again"
Now, with all plugins deactivated except for Exploit Scanner and only "Filescan" under "Scans to execute" and "Severe" under "Severities to show" checked the scanner ran for approx. 2.5 minutes, returned a list of (supposed) severities plus an error callout under "Skip check":
Warning: in_array() [function.in-array]: Wrong datatype for second argument in /home3/longmead/public_html/outofdate/wp-content/plugins/exploit-scanner/exploit-scanner.php on line 1116
/>
If I check "File Permissions Scan" then run the scan, the error isn't returned.
Not the main problem I've been having (see my above comments) but I just thought you might want to know.
I'm beginning to believe the problem with version .7 and above is a conflict with one or more plugins but I haven't had time to ferret which one(s) is the culprit. I don't run any "exotic" plugins, just a few of the popular ones. I'll do more testing as I get time.
Posted 2 years ago #
Just an update to those who were experiencing the same issues as me, I just upgraded to v0.95 which appears to have fixed the timeout issues due to file scanning by scanning 50 (or x amount) of files at a time now, however it appears to always scan the files even if I deselect the files checkbox, and there is no confirmation that it scanned the database... also it always seems to scan by 50 even if change that number to 0...
...so an improvement, but there are still some bugs left.
This thing was nothing but a headache for me. I had to change the files from 50 to 40 to avoid memory problems. After spending several hours scanning 18,000 files, there was silence. Nothing say good or bad.
On top of that, it increased my database options table from 1 mb to 800 mb. Yes you read that right. 1 mb to 800 mb by adding records that don't get deleted even when the plugin is deativated. I only noticed it when I tried to backup my database for upgrade to WP3.0. I had to use phpMyadmin to search for all the records and delete them and then repair the database to regain the empty space. It's not something for the faint of heart.
If you're going to try this, backup your database first and check the size afterwards.
This topic has been closed to new replies.
