This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
Product upvotes vs the next 3
Waiting for data. Loading
Product comments vs the next 3
Waiting for data. Loading
Product upvote speed vs the next 3
Waiting for data. Loading
Product upvotes and comments
Waiting for data. Loading
Product vs the next 3
Loading
WPSniffer
Open-source YARA malware scanner for WordPress servers
WPSniffer is a free, open-source CLI that scans WordPress and PHP files for malware using ~5,000 community YARA rules from YARA Forge, powered by the YARA-X engine. Install with pip, run it over SSH, cron or CI, and get CSV, TSV, text or email reports. Multi-process, scans whole files up to 50 MiB, and supports your ownyar rules. No account, license key or telemetry: your files never leave your server. Built for freelancers, agencies and hosts cleaning up hacked sites.
I've cleaned up 180+ hacked WordPress sites in the last year, and I kept wanting a scanner I could just pip install on a client's server over SSH: no account, no license key, nothing phoning home. So I built WPSniffer.
It checks your WordPress and PHP files against ~5,000 community YARA rules from YARA Forge using the YARA-X engine, runs in parallel, and gives you a CSV, TSV or text report (or an email summary). You can add your own .yar rules and run it from cron or CI.
It's free and open source (GPLv3). Feedback I'd love most: false positives you run into, detections you'd want added, and what would make it fit your cleanup workflow.
About WPSniffer on Product Hunt
“Open-source YARA malware scanner for WordPress servers”
WPSniffer was submitted on Product Hunt and earned 0 upvotes and 1 comments, placing #249 on the daily leaderboard. WPSniffer is a free, open-source CLI that scans WordPress and PHP files for malware using ~5,000 community YARA rules from YARA Forge, powered by the YARA-X engine. Install with pip, run it over SSH, cron or CI, and get CSV, TSV, text or email reports. Multi-process, scans whole files up to 50 MiB, and supports your ownyar rules. No account, license key or telemetry: your files never leave your server. Built for freelancers, agencies and hosts cleaning up hacked sites.
On the analytics side, WPSniffer competes within Open Source, Developer Tools, GitHub and Security — topics that collectively have 636.5k followers on Product Hunt. The dashboard above tracks how WPSniffer performed against the three products that launched closest to it on the same day.
Who hunted WPSniffer?
WPSniffer was hunted by christoph. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
For a complete overview of WPSniffer including community comment highlights and product details, visit the product overview.
christoph
Hey Product Hunters 👋
I've cleaned up 180+ hacked WordPress sites in the last year, and I kept wanting a scanner I could just pip install on a client's server over SSH: no account, no license key, nothing phoning home. So I built WPSniffer.
It checks your WordPress and PHP files against ~5,000 community YARA rules from YARA Forge using the YARA-X engine, runs in parallel, and gives you a CSV, TSV or text report (or an email summary). You can add your own .yar rules and run it from cron or CI.
It's free and open source (GPLv3). Feedback I'd love most: false positives you run into, detections you'd want added, and what would make it fit your cleanup workflow.