ScrapeBox Forum
How To Locate Hacked WP Sites - Printable Version

+- ScrapeBox Forum (https://www.scrapeboxforum.com)
+-- Forum: ScrapeBox Main Discussion (https://www.scrapeboxforum.com/Forum-scrapebox-main-discussion)
+--- Forum: Scrapebox Footprints (https://www.scrapeboxforum.com/Forum-scrapebox-footprints)
+--- Thread: How To Locate Hacked WP Sites (/Thread-how-to-locate-hacked-wp-sites)



How To Locate Hacked WP Sites - Altstatten - 01-18-2015

I want to locate WORDPRESS sites that have been hacked and are currently down. I would appreciate some assistance in creating a step-by-step process for doing this within Scrapebox.


RE: How To Locate Hacked WP Sites - loopline - 01-18-2015

You would just need a footprint, and then scrape with that footprint.


RE: How To Locate Hacked WP Sites - Altstatten - 01-18-2015

Hehe...Yessir, I gathered that! Can you show me what that would look like?


RE: How To Locate Hacked WP Sites - loopline - 01-19-2015

Well you would first need a footprint. To get that you need to look at several example pages and build it. So can you list out a dozen hacked pages that we can look at to get an idea of a footprint?

I suppose I would start with something maybe like

"hacked by" "powered by wordpress"

I mean that returns some pages, but Im not sure that its really what your after. In other words your question is too broad, which is why I gave a broad example. Can you be more specific with specific examples of what it is you are trying to get?

This video of mine should be a help as well

https://www.youtube.com/watch?v=sAf-h9FisGU

and it also links to another video that might be helpful.


RE: How To Locate Hacked WP Sites - Altstatten - 01-20-2015

I offer managed hosting and security services. If I had an ever-renewing list of people whose websites had been rendered inoperable by some young, misguided genius of a hacker, I'd have a very receptive audience when I contact them (after it's back up, of course!).

I was hoping that I could enter a lengthy list of urls, then have Scrapebox go take a "look" at each one and, if the Home Page for a url rendered as anything other than http(s)://(domainname).(tld), it would register that site as "non-functioning" which means it stands a good chance of having either been hacked, or the site no longer exists.

Hopefully this explanation makes it clear what I'm trying to do and makes your reply that much simpler! Thanks for your help, Loopline (do your friends just call you, "Loop"?).


RE: How To Locate Hacked WP Sites - loopline - 01-20-2015

Im actually more confused now then before. Smile lol

If you already have the list of urls, then it sounds like you want to use the page scanner addon. It will qualify pages based on whatever footprint you want.

Even if a site is hacked, why would that change how the home page url renders?

I mean I have had mulitple sites hacked in the past, due to me failing to update wordpress or whatever, and the domains always loaded fine, the url was the same, but the content was either partially or completely replaced with some dark image and some "hacked by XYZ" type person.

So you don't want to scrape these pages, you want to qualify them if you already have the list of pages?

Can you give me any examples?