Callback/Null Script checker

Hi folks. Is there any way to check online if a plugin has callbacks in it? I'm sure I read it in a thread here ages ago but for the love of all things shiny I can't find it. Any ideas?

 

TAC (theme authenticity checker) will do a check of your theme (you'll find it via the WP plugins repository), but not 100% sure if it checks plugin files also.

There's also an Antivirus for WP (again, from general repository), which, afaik, checks ALL of your WP files for virii or malware.

 

Thanks. Needed to know as I keep wondering if some of the nulled software I acquire is doing anything dubious.

 

This is probably complicated but you'll be sure.

Install the script on your localhost and use a http sniffer to monitor the requests.

 

Excuse my ignorance, but what does a callback actually do?

 

One way would be to search all files for these functions (one at a time):

PHP:

file_get_contents
http_get
curl_exec
base64_decode
exec


 

Exactly. Also look for http://
I use FileSeek from

Code:

http://www.fileseek.ca/

, nice freeware with extra functions, looking for lines in all files and listing them for further editing.

 

Thanks loads folks. I will check out your suggestions. No harm in a bit of healthy paranoia

 

When the software calls back its home website to monitor if we are using their software.

 

Some plugins are licensed by domain or for a limited number of domains so the plugin communicates the serial number to the developer. This way he knows if it's being used where it shouldn't.

 

exploit scanner

Code:

http://wordpress.org/extend/plugins/exploit-scanner/

 

and "eval" as money people are using javascript eval() function to hide something

 

If they encrypted the files , so how do we find it?
I think most of them are encrypted..

 

@kkvsam

Try this link:

HTML:

http://ottodestruct.com/decoder.php

 

So what does a 'callback' script looks like;

For example, I just searched the entire folder for "curl_exec" and i found the following;

Is this some sort of call back in this case? Please advise. Thanks