This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
WPSniffer
Open-source YARA malware scanner for WordPress servers
WPSniffer is a free, open-source CLI that scans WordPress and PHP files for malware using ~5,000 community YARA rules from YARA Forge, powered by the YARA-X engine. Install with pip, run it over SSH, cron or CI, and get CSV, TSV, text or email reports. Multi-process, scans whole files up to 50 MiB, and supports your ownyar rules. No account, license key or telemetry: your files never leave your server. Built for freelancers, agencies and hosts cleaning up hacked sites.
I've cleaned up 180+ hacked WordPress sites in the last year, and I kept wanting a scanner I could just pip install on a client's server over SSH: no account, no license key, nothing phoning home. So I built WPSniffer.
It checks your WordPress and PHP files against ~5,000 community YARA rules from YARA Forge using the YARA-X engine, runs in parallel, and gives you a CSV, TSV or text report (or an email summary). You can add your own .yar rules and run it from cron or CI.
It's free and open source (GPLv3). Feedback I'd love most: false positives you run into, detections you'd want added, and what would make it fit your cleanup workflow.
No comment highlights available yet. Please check back later!
About WPSniffer on Product Hunt
“Open-source YARA malware scanner for WordPress servers”
WPSniffer was submitted on Product Hunt and earned 0 upvotes and 1 comments, placing #249 on the daily leaderboard. WPSniffer is a free, open-source CLI that scans WordPress and PHP files for malware using ~5,000 community YARA rules from YARA Forge, powered by the YARA-X engine. Install with pip, run it over SSH, cron or CI, and get CSV, TSV, text or email reports. Multi-process, scans whole files up to 50 MiB, and supports your ownyar rules. No account, license key or telemetry: your files never leave your server. Built for freelancers, agencies and hosts cleaning up hacked sites.
WPSniffer was featured in Open Source (69.1k followers), Developer Tools (523k followers), GitHub (41.5k followers) and Security (3k followers) on Product Hunt. Together, these topics include over 152.5k products, making this a competitive space to launch in.
Who hunted WPSniffer?
WPSniffer was hunted by christoph. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how WPSniffer stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
christoph
Hey Product Hunters 👋
I've cleaned up 180+ hacked WordPress sites in the last year, and I kept wanting a scanner I could just pip install on a client's server over SSH: no account, no license key, nothing phoning home. So I built WPSniffer.
It checks your WordPress and PHP files against ~5,000 community YARA rules from YARA Forge using the YARA-X engine, runs in parallel, and gives you a CSV, TSV or text report (or an email summary). You can add your own .yar rules and run it from cron or CI.
It's free and open source (GPLv3). Feedback I'd love most: false positives you run into, detections you'd want added, and what would make it fit your cleanup workflow.