{"id":634,"date":"2019-10-25T17:22:22","date_gmt":"2019-10-25T21:22:22","guid":{"rendered":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/?p=634"},"modified":"2020-06-07T08:41:54","modified_gmt":"2020-06-07T12:41:54","slug":"solving-hashes-x-x-x-php-missing","status":"publish","type":"post","link":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/2019\/solving-hashes-x-x-x-php-missing\/","title":{"rendered":"Solving hashes-x.x.x.php missing"},"content":{"rendered":"\n<p>I had to clean up a hacked WordPress site recently and one of the steps I took was to scan the entire site with <a href=\"https:\/\/wordpress.org\/plugins\/exploit-scanner\/\" target=\"_blank\" rel=\"noreferrer noopener\">Automattic&#8217;s Exploit Scanner<\/a>.<\/p>\n\n\n\n<p>It needs a hash file for the version of WP you&#8217;re scanning and since it hasn&#8217;t been updated in 2 years or so, it doesn&#8217;t have them. WordPress has had several security updates since, so the plugin doesn&#8217;t even have the hash files for older versions of WP. This is easy enough to solve since the plugin itself comes with a hashes-generator.php.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p>You can call that page in your browser and it&#8217;ll show you all the hashes: thewebsite.com\/wp-content\/plugins\/exploit-scanner\/hashes-generator.php or thewebsite.com\/wordpressfolder\/wp-content\/plugins\/exploit-scanner\/hashes-generator.php depending on where your WordPress files live.<\/p>\n\n\n\n<p>Save the document it shows you, straight from the browser to your computer somewhere convenient, as hashes-x.x.x.php in which x.x.x represents the version number of that WordPress install. And by someplace convenient I mean someplace where you&#8217;ll easily be able to upload it to the right folder later.<\/p>\n\n\n\n<p>Open the file in an editor of some kind and remove the opening en closing &lt;pre&gt;-tags from the file.<\/p>\n\n\n\n<p>Upload to ..\/wp-content\/plugins\/exploit-scanner\/. Now you can run the scan and see relevant results!<\/p>\n\n\n\n<hr class=\"wp-block-separator is-style-dots\"\/>\n\n\n\n<div class=\"_3bJ2H CHExY\">Photo by <a rel=\"noreferrer noopener\" href=\"https:\/\/unsplash.com\/@ludo_pics?utm_source=unsplash&amp;utm_medium=referral&amp;utm_content=creditCopyText\" target=\"_blank\">Ludovic Charlet<\/a> on <a rel=\"noreferrer noopener\" href=\"https:\/\/unsplash.com\/s\/photos\/scan?utm_source=unsplash&amp;utm_medium=referral&amp;utm_content=creditCopyText\" target=\"_blank\">Unsplash<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>I had to clean up a hacked WordPress site recently and one of the steps I took was to scan the entire site with Automattic&#8217;s Exploit Scanner. It needs a hash file for the version of WP you&#8217;re scanning and since it hasn&#8217;t been updated in 2 years or so, it doesn&#8217;t have them. WordPress &#8230; <\/p>\n<p class=\"read-more-container\"><a title=\"Solving hashes-x.x.x.php missing\" class=\"read-more button\" href=\"https:\/\/www.blindemanwebsites.com\/today-i-learned\/2019\/solving-hashes-x-x-x-php-missing\/#more-634\" aria-label=\"Read more about Solving hashes-x.x.x.php missing\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[78,79,68,80,41],"class_list":["post-634","post","type-post","status-publish","format-standard","hentry","category-new-things","tag-automattic","tag-exploit-scanner","tag-plugin","tag-security","tag-wordpress","infinite-scroll-item"],"_links":{"self":[{"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/posts\/634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/comments?post=634"}],"version-history":[{"count":2,"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/posts\/634\/revisions"}],"predecessor-version":[{"id":1001,"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/posts\/634\/revisions\/1001"}],"wp:attachment":[{"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/media?parent=634"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/categories?post=634"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.blindemanwebsites.com\/today-i-learned\/wp-json\/wp\/v2\/tags?post=634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}