{"id":2595,"date":"2015-09-23T14:23:08","date_gmt":"2015-09-23T14:23:08","guid":{"rendered":"http:\/\/www.pir8geek.com\/?p=2595"},"modified":"2015-09-23T14:23:08","modified_gmt":"2015-09-23T14:23:08","slug":"wphardening-fortify-the-security-of-any-wordpress-installation","status":"publish","type":"post","link":"https:\/\/www.jameseduard.com\/?p=2595","title":{"rendered":"WPHardening – Fortify the security of any WordPress Installation"},"content":{"rendered":"

Installation:<\/strong>
\nInstalling WPHardening requires you to execute one console command:<\/p>\n

$ pip install -r requirements.txt\n<\/pre>\n
Usage:<\/strong><\/p>\n
$ python wphardening.py -h \n __          _______  _    _               _            _\n \\ \\        \/ \/  __ \\| |  | |             | |          (_)\n  \\ \\  \/\\  \/ \/| |__) | |__| | __ _ _ __ __| | ___ _ __  _ _ __   __ _\n   \\ \\\/  \\\/ \/ |  ___\/|  __  |\/ _` | '__\/ _` |\/ _ \\ '_ \\| | '_ \\ \/ _` |\n    \\  \/\\  \/  | |    | |  | | (_| | | | (_| |  __\/ | | | | | | | (_| |\n     \\\/  \\\/   |_|    |_|  |_|\\__,_|_|  \\__,_|\\___|_| |_|_|_| |_|\\__, |\n                                                                 __\/ |\n        Fortify the security of any WordPress installation.     |___\/\n     Caceria de Spammers - http:\/\/www.caceriadespammers.com.ar\nUsage: python wphardening.py [options]\nOptions:\n  --version             show program's version number and exit\n  -h, --help            show this help message and exit\n  -v, --verbose         Active verbose mode output results\n  --update              Check for WPHardening latest stable version\n  Target:\n    This option must be specified to modify the package WordPress.\n    -d DIRECTORY, --dir=DIRECTORY\n                        **REQUIRED** - Working Directory.\n    --load-conf=FILE    Load file configuration.\n  Hardening:\n    Different tools to hardening WordPress.\n    -c, --chmod         Chmod 755 in directory and 644 in files.\n    -r, --remove        Remove files and directory.\n    -b, --robots        Create file robots.txt\n    -f, --fingerprinting\n                        Deleted fingerprinting WordPress.\n    -t, --timthumb      Find the library TimThumb.\n    --chown=user:group  Changing file and directory owner.\n    --wp-config         Wizard generated wp-config.php\n    --plugins           Download Plugins Security.\n    --proxy=PROXY       Use a HTTP proxy to connect to the target url for\n                        --plugins and --wp-config.\n    --indexes           It allows you to display the contents of directories.\n    --minify            Compressing static file .css and .js\n    --malware-scan      Malware Scan in WordPress project.\n  Miscellaneous:\n    -o FILE, --output=FILE\n                        Write log report to FILE.log\n<\/pre>\n
Examples<\/strong>
\nCheck a WordPress Project Before using the tool, we must ensure that our working directory is WordPress.<\/p>\n
$ python wphardening.py -d \/home\/path\/to\/wordpress -v\n<\/pre>\n
Change permissions:<\/strong>
\nThis option is to add the correct permissions to files and directories.<\/p>\n
$ python wphardening.py -d \/home\/path\/to\/wordpress --chmod -v\n<\/pre>\n
Remove files that are not used<\/strong>
\nPart of the fortification of any system is to remove those files, directories or components required.<\/p>\n
$ python wphardening.py -d \/home\/path\/to\/wordpress --remove -v\\\n<\/pre>\n
Create your robots.txt file<\/strong>
\nWordPress default does not incorporate the robots.txt file with this option poemos customize our robots.txt<\/p>\n
$ python wphardening.py -d \/home\/path\/to\/wordpress --robots -v\n<\/pre>\n
For more information robots.txt
\nRemove all fingerprinting and Version<\/strong><\/p>\n
$ python wphardening.py -d \/home\/path\/to\/wordpress --fingerprinting -v\n<\/pre>\n
Check a TimThumb library<\/strong><\/p>\n
$ python wphardening.py -d \/home\/path\/to\/wordpress --timthumb -v\n<\/pre>\n
Create Index file<\/strong>
\nThis file is created as a way to avoid sailing in a directory.<\/p>\n
$ python wphardening.py -d \/home\/path\/to\/wordpress --indexes -v\n\n<\/pre>\n
Download Plugins security:<\/strong>
\nThe following is a list of the most commonly used security plugins that you can download automatically:<\/p>\n