Plugin clean detect on VirusTotal but Namecheap ModSecurity triggered

Zakch93 said:

It's wp-robot plugin from this thread: https://www.blackhatworld.com/seo/req-wp-robot.1302309/#post-14786460

I can ask Namecheap support to whitelist it but is it 100% safe?

Click to expand...

C4rnage569 said:

cant remember where i downloaded it from tbh

Click to expand...

xReminisce said:

He mentions that he doesn't even remember the source he downloaded it, how could you trust it's 100% safe?


Virus total doesn't "detect" everything either. @Gogol explained that awhile back

Click to expand...

Zakch93 said:

I read about Virus total on the forum quite a bit, and it seems it's the most comprehensive detection tool around.

You can send Gogol thread just so I can see if there are some Virustotal alternatives mentioned in the thread and check it on there.

Click to expand...

Zakch93 said:

Great info by Gogol, thanks for sharing.

The question is, for a churn-and-burn site, is it worth it getting malware from using nulled themes if we can avoid paying some exorbitant prices for plugins whose ROI could be 0?

Secondly, I think developers are starting to put backdoors themselves into the latest versions of their plugins as protection against nulling.

Click to expand...

xReminisce said:

1. Why not just buy @Festinger vault (lifetime sale going right now) or equivalent, and be pretty much done with 95% of your WordPress needs?
2. Yes, this was proven awhile back, can't remember which thread it was but one of the caching plugins did it flyingpress or something

Click to expand...

Zakch93 said:

Unfortunately, Festinger couldn't procure nulling for WP Robot so it's not available on his vault.

Click to expand...

hence why i said 95%
There a few things i want festinger doens't have either
Also, this is probably even more of a reason why I wouldn't trust that file linked in the other thread

As for your original question then, no, I still wouldn't shove a plugin that is potentially infested by malware on your site.
What happens if they start hijacking your visitors into another site
what happens if they start injecting malware into your user's PCs
what happens if they start doing excessive popunders or google flags it dangerous and doens't even load for the vistors?
is your Footprints covered, you never know what google will do...

(assuming that your database and everything is locked down so it won't spread, pws are all unique etc)

xReminisce said:

hence why i said 95%
There a few things i want festinger doens't have either
Also, this is probably even more of a reason why I wouldn't trust that file linked in the other thread

As for your original question then, no, I still wouldn't shove a plugin that is potentially infested by malware on your site.
What happens if they start hijacking your visitors into another site
what happens if they start injecting malware into your user's PCs
what happens if they start doing excessive popunders or google flags it dangerous and doens't even load for the vistors?
is your Footprints covered, you never know what google will do...

(assuming that your database and everything is locked down so it won't spread, pws are all unique etc)

Click to expand...

Zakch93 said:

Secondly, I think developers are starting to put backdoors themselves into the latest versions of their plugins and trigger this as protection against nulling.

Click to expand...

C4rnage569 said:

im surprised so many ppl are worried about a nulled plugin.
none of the files are obfuscated.
you can literally check the codes to see any malware ya lazy bastards
if u dont know how to open an .ini file, then the interweb is way above ur usage

Click to expand...

terrycody said:

I think this is very possible, but when this is happening, even you paid the plugin, you got backdoor lol, wtf, I think we need to find the telemetry code to remove the fuckers.

Click to expand...

Zakch93 said:

Which .ini file, I don't see any in the plugin files?

Pay $89 a year to use on three sites (I just need it for one site Mr. developer, to check if it's even gonna make me a ROI!), get a backdoor for FREE!

Click to expand...