It’s been a common issue for PHP sites especially unpatched CMS like WordPress / Magento becoming a victim of web defacement,
where hackers have uploaded malicious codes into the application, hidden in the PHP / CSS / JS / HTML files.
AI-Bolit is a great tool to scan and locate those code, make developers life easier to clean them up,
in case if there’s no clean backup available.
[shell]
# Download the Unix zip from https://www.revisium.com/ai/
# unzip, put ai-bolit.php one level up from your web files, eg. /var/www/ai-bolit.php
unzip ai-bolit.zip
mv ai-bolit/ai-bolit.php /var/www
#run it, a report in HTML format will be generating once the scanning is completed:
php /var/www/ai-bolit.php
[/shell]
