What is WPSniffer?
WPSniffer is a free, open-source command-line utility crafted for detecting malware that specifically targets WordPress and other PHP-based sites. It functions by scanning files on the local system where it is deployed, using YARA-X alongside community-contributed rule packages from YARA Forge to detect potentially malicious code, including webshells. Users are given the flexibility to either use existing rules or develop their own .yar/.yara files, with options to choose from core, extended, or comprehensive rule sets, and they can even pin specific rule versions to ensure consistent scanning outcomes. This Python-based tool scans specified directories, accepts input from standard sources, offers a variety of filtering options, and can be seamlessly integrated into scheduled tasks or continuous integration pipelines. To enhance efficiency during extensive scans, it includes features like caching, file-size limits, and timeouts for individual files. The scan outcomes can be generated in user-friendly formats such as CSV or TSV, providing options for selecting specific columns and even facilitating email delivery of the reports. Particularly beneficial for system administrators, developers, hosting providers, and security teams involved in investigating compromised sites or routinely checking server files for malware, WPSniffer ensures that all scans are conducted locally, meaning files are not sent to any external services. Furthermore, users can tailor the scanning process to meet their specific requirements, making it a versatile solution for upholding website security. This adaptability makes WPSniffer an invaluable asset in the ongoing battle against web-based threats.
Pricing
Price Starts At:
$0
Price Overview:
Free to use under GPLv3, with no paid tier or usage limit.
Free Version:
Free Version available.
Integrations
Similar Software to WPSniffer
Building Logistics is a robust solution designed to manage incoming packages for buildings, offices, universities, and hotels, offering a streamlined process for tracking, scanning, sorting, and notifying recipients. PackageX’s AI-powered scanning technology ensures perfect package intake by accurately capturing text, QR codes, and barcodes, facilitating seamless package management. It also incorporates data validation, automatic contact matching, customizable notifications, and detailed chain of custody tracking, ensuring that each package is delivered securely and efficiently. By reducing the risk of lost packages and increasing tracking accuracy, PackageX provides a highly reliable solution for high-volume environments. The platform’s automatic contact matching and advanced notification system increase delivery efficiency by two times, making package distribution quicker and more efficient. With its 99% accuracy and advanced tracking capabilities, PackageX allows businesses to manage their delivery workflows with greater speed, precision, and fewer errors. Whether you're managing a corporate office, a hotel, or a university campus, PackageX ensures a seamless delivery experience and enhances operational efficiency with its powerful features.
Learn more
Feroot Security is a global authority in AI-driven website and web application compliance, security, and digital risk management. Feroot AI helps organizations gain continuous visibility into how data moves across their websites and applications, protecting users from hidden threats while enforcing compliance with PCI DSS 4.0.1, HIPAA rules governing online tracking technologies, CCPA/CPRA, GDPR, CIPA, and more than 50 international laws.
The Feroot AI Platform transforms compliance and security from a manual, reactive process into an automated, always-on control layer. Tasks that traditionally require months of coordination between engineering, legal, privacy, and security teams can be activated in minutes, producing real-time protection and audit-ready evidence without disrupting development workflows.
Feroot consolidates essential capabilities into a single unified platform, including advanced JavaScript behavior analysis, continuous website compliance scanning, third-party script oversight, consent and preference enforcement, and data privacy posture management. The platform is purpose-built to detect, prevent, and eliminate modern web threats such as Magecart, formjacking, e-skimming, and unauthorized data collection, especially on sensitive surfaces like checkout pages, authentication flows, embedded iframes, and healthcare portals. By monitoring runtime behavior rather than static code alone, Feroot ensures that every script and data interaction aligns with regulatory and security requirements at all times.
Trusted by Fortune 500 enterprises, healthcare organizations, retailers, SaaS providers, payment service providers, utilities, universities, and public sector institutions, Feroot safeguards hundreds of millions of users across web and mobile environments worldwide.
Feroot AI solutions include PaymentGuard AI, HealthData Shield AI, AlphaPrivacy AI, CodeGuard AI, and MobileGuard AI.
Visit feroot for more information.
Learn more
Cerber Security
Cerber Security provides robust protection for WordPress against various threats including hacking attempts, spam, and malware. Its design is both fast and dependable, utilizing a series of specialized algorithms to analyze incoming requests for patterns indicative of harmful code and unusual traffic behavior. The bot detection system is effective in identifying and countering automated attacks. It helps diminish both code injection attempts and brute force assaults while implementing GEO country rules to limit access. It restricts both REST API and standard user numbers, and access to the REST API and XML-RPC is tightly controlled. Additionally, it employs a worldwide database of IP addresses associated with malicious activities. The technology utilizes both heuristic and content-based methods to identify bots, continuously comparing IP addresses against an up-to-date list linked to spamming, phishing, and other nefarious actions. Furthermore, every file and folder on your site undergoes a rigorous scan for trojans, malware, and viruses, with the capability to automatically eliminate any detected threats. It also keeps a vigilant watch over any suspicious, newly added, or altered files, ensuring comprehensive security for your WordPress site. This proactive approach guarantees a safer environment for website owners and their visitors alike.
Learn more
THOR
THOR distinguishes itself as the premier and most versatile instrument for conducting compromise assessments. In the wake of cyber incidents, teams often find themselves sifting through a multitude of compromised devices alongside a wider spectrum of potentially affected systems, which renders the manual analysis of countless forensic images an overwhelming endeavor. By utilizing THOR, the forensic analysis process is significantly enhanced due to its formidable collection of over 12,000 expertly designed YARA signatures, 400 Sigma rules, various anomaly detection methods, and a myriad of indicators of compromise (IOCs). This powerful tool is specifically engineered to highlight suspicious activities, alleviate the workload on analysts, and speed up the forensic examination process during critical instances when swift results are essential. Additionally, by focusing on aspects frequently neglected by conventional antivirus solutions, THOR boasts an expansive signature library that includes a diverse array of YARA and Sigma rules, IOCs, as well as checks for rootkits and anomalies, effectively tackling a broad spectrum of threats. Beyond merely detecting backdoors and tools utilized by attackers, THOR also captures outputs, temporary files, system configuration changes, and other remnants of malicious activities, thereby providing a comprehensive view of the incident landscape. The all-encompassing nature of THOR not only enhances detection but also fosters a deeper understanding of threats, establishing it as an indispensable tool in the cybersecurity field. Ultimately, its ability to adapt and evolve with emerging threats ensures that security teams are better equipped to respond effectively.
Learn more
Screenshots and Video
Company Facts
Company Name:
Kerger
Date Founded:
2026
Company Location:
United States
Company Website:
wpsniffer.com
Product Details
Deployment
Linux
On-Prem
Training Options
Documentation Hub
Support
Web-Based Support
Product Details
Target Company Sizes
Individual
1-10
11-50
51-200
201-500
501-1000
1001-5000
5001-10000
10001+
Target Organization Types
Mid Size Business
Small Business
Enterprise
Freelance
Nonprofit
Government
Startup
Supported Languages
English