How to make sure a nulled theme is really clean?

D

DreamBigWorkHard

Registered Member

Nov 20, 2012

92

11

• Mar 20, 2013

• #1

Just came across a site called themelock, and I noticed you could almost find any premium theme there. But the problem is, I'm not sure if all the themes are actually safe to use, because some might have malicious codes injected. So how do you make sure a theme is clean? And where do malicious codes always hide? Is there a way or tool to check it out after installation?

Thanks a lot!

 

Conor

Elite Member

Nov 7, 2012

3,621

6,217

• Mar 20, 2013

• #2

They hide in the "Malicious Code" folder obviously ^^

Seriously though, no way to find out but by doing your homework. Google the site to check if it's legit. Run the theme on a local Wordpress installation (I'm assuming these are WP themes but the info applies to any big CMS I suppose), and there are a few plugins to check the authenticity and stuff of your files. Just play around a bit and see what you can find!

 

Last edited: Mar 20, 2013

B

BooBoo1982

Newbie

Mar 17, 2013

1

1

• Mar 20, 2013

• #3

WP plugin Theme Authenticity Checker (TAC); WP plugin AntiVirus; WP plugin ExploitScanner

 

S

sysfailure

Junior Member

Jul 24, 2009

108

58

• Mar 20, 2013

• #4

there was checkers plugin like those:

Code:

[URL]http://wordpress.org/extend/plugins/tac/[/URL]
[URL]http://wordpress.org/extend/plugins/wp-plugin-security-check/[/URL]

but my method is:
1.download the theme on the desktop and unzip it
2. use wingrep or fgrep (depend if i am on win or linux box) to find: "mail(" and "eval(" strings.
check this call if exist and remove it. sure that is better check all files manual and look at code.
hope this helps.

 

Last edited: Mar 20, 2013

ija61

Senior Member

Mar 2, 2011

976

644

• Mar 20, 2013

• #5

Take a look at this thread...

http://www.blackhatworld.com/blackh...78-amazing-tools-detecting-hacked-themes.html

 

dog-tag

BANNED

Oct 19, 2010

822

925

• Mar 20, 2013

• #6

I use the wordpress TAC checker, reviews and sucuri.net to scan my folders.

 

manima

Newbie

Jan 12, 2015

2

1

• Jul 24, 2016

• #7

Hi guys
sorry for bringing up an old topic (I didn't want to create a separate topic for my question)
my question is:
Can I scan themes with essential tools (like TAC, exploit scanner ...) on a local sever (say wamp server) and after cleaning potentially malicious codes, I can move it to real server, is it possible?
thanks

 

Jobdollarr

Elite Member

Dec 12, 2014

1,793

292

• Jul 24, 2016

• #8

Usually only backlinks implanted into the theme.
If you aim to membangu large websites then my advice is just buy a premium theme.

 

manima

Newbie

Jan 12, 2015

2

1

• Jul 24, 2016

• #9

Jobdollarr said:

Usually only backlinks implanted into the theme.
If you aim to membangu large websites then my advice is just buy a premium theme.

Click to expand...

actually I just asked out of curiosity, I'm gonna lunch a simple site
as you said "usually" , then there will maybe more than backlinks, like trojans ...
so I can clean themes locally, then copy/move it's directory to my actual website, right?

 

Bleght

BANNED

Feb 18, 2016

548

184

• Jul 24, 2016

• #10

You can if you are sure you have cleaned them successfully. But if you want to be absolutely sure, just buy the theme and have piece of mind about your sites security and use the saved time to make more money than the theme cost you.

 

Jobdollarr

Elite Member

Dec 12, 2014

1,793

292

• Jul 25, 2016

• #11

I do not know the shape of the actual trojan.

If the business site as sript connected with paypal.
Then there will be dorkway aimed at stealing money.
Or create a page redirects to a site owner theme