Main/WordPress Fullstack/Blueprints/Security & API/WordPress Malware Cleanup & Remediation Post-Breach
Back to «Security & API» cards
Security & API(ТЗ 6 из 54)
Spec: WordPress Malware Cleanup & Remediation Post-Breach
Security & API6 шагов • +30 XP

Spec: WordPress Malware Cleanup & Remediation Post-Breach

Step-by-step technical guide for isolating compromised infrastructure, replacing core system binaries, auditing persistent backdoors in themes and uploads, database disinfection, and credential rotation.

+5 XP за шаг
Выполнено 0 из 6 шагов (0%)
Трудозатраты~8 рабочих часов
Фриланс вилка~$360 – $600 (€320 – €560)
Оценка веб-студии~$760 – $1,280 (€720 – €1200)

ТЗ заказчика (исходный бриф):

“We need zero downtime during remediation, and a 100% guarantee that no hidden shells remain in the uploads folder or database.”
Ключевые требования:
  • •Complete site and database backup prior to remediation
  • •Full core files replacement from pristine WordPress.org binaries
  • •Heuristic and signature scan across wp-content with Wordfence / Sucuri
  • •Removal of rogue admin users and backdoor cron jobs in MySQL wp_options
  • •Re-issuing all authentication keys and salts in wp-config.php
Ограничения проекта:
  • •Preserve all legitimate media uploads and customer database records
  • •Maintain SEO rankings and indexation standing
Критерии приёмки (KPI):
  • Zero malware flags on Google Safe Browsing and VirusTotal
  • Removal from hosting quarantine and spam blacklists
  • 0 re-infection incidents within 90 days

Пошаговое практическое руководство по ТЗ

Подробный разбор архитектуры, код реализации и советы эксперта по каждому этапу:

1
Этап 1 из 6

Step 1: Website Isolation & Pre-Cleanup Backup

Практическое руководство:

Immediately put the site into maintenance mode via .htaccess or Nginx config, restricting access strictly to your administrative IP address. Dump the full database using wp db export or mysqldump, and create an archive of wp-content.

Важные технические нюансы и подводные камни:

Backing up a compromised website is mandatory! If an essential file is inadvertently deleted during manual remediation, the site will crash irreversibly without a backup.

2
Этап 2 из 6

Step 2: Deep System Scan (Wordfence / Sucuri / ClamAV)

3
Этап 3 из 6

Step 3: Complete WordPress Core Replacement

4
Этап 4 из 6

Step 4: Manual Theme & Uploads Audit

5
Этап 5 из 6

Step 5: Database Inspection & Injected Script Removal

6
Этап 6 из 6

Step 6: Rotation of Security Salts, Passwords & Hardening

Инструменты экосистемы Fullstack AI Lab для этого ТЗ

Интеграция

AI-Собеседование

Пройти голосовое или текстовое интервью по технологиям ТЗ

Архитектурные Воркфлоу

43 пошаговых сценария с командами CLI и готовыми конфигами