License and NOTICE
WPSniffer is free software. You can run it on any number of servers, read and change its source, and redistribute it under the terms of the GNU General Public License, version 3. This page summarises what that means and credits the projects WPSniffer builds on.
GNU General Public License v3
WPSniffer is licensed under the GNU General Public License, version 3 (GPLv3). In plain terms:
- Use it anywhere. Personal sites, client sites, hosting platforms, commercial services. There is no seat limit, server limit or paid tier.
- Read and modify it. The full source is in the GitHub repository.
- Share it. You may redistribute WPSniffer, modified or not, as long as you pass on the same freedoms and the license text, and make the corresponding source available to recipients.
- No warranty. The software is provided as is. A scan that reports nothing is not a guarantee that a site is clean, and a match is not proof that a file is malicious; review results before acting on them.
The complete license text is distributed with the source code in the repository's LICENSE file and is also available from the Free Software Foundation.
NOTICE
WPSniffer bundles no third-party code of its own beyond its Python dependencies, but it depends on two external projects at run time and credits them here and in its output.
YARA Forge rules
Detections come from rule packages published by YARA Forge, which collects, tests and repackages public YARA rules from many researchers. The rules remain the work of their individual authors and are distributed under the licenses those authors chose; YARA Forge preserves the author, reference and license information in each rule's meta section. WPSniffer downloads the packages unmodified, does not claim authorship of any rule, and credits the author of every matching rule in its reports through the rule_author and rule_reference columns. If you redistribute rule packages, keep that metadata intact.
YARA-X engine
Scanning is performed by YARA-X, the Rust implementation of YARA developed by VirusTotal and released under the BSD 3-Clause License. YARA-X is used as a library and is not modified by WPSniffer.
Trademarks
WordPress is a registered trademark of the WordPress Foundation. WPSniffer is an independent project and is not affiliated with or endorsed by the WordPress Foundation, Automattic, VirusTotal or YARA Forge.
This website
The source of this website is maintained alongside the project. Issues and corrections are welcome through the GitHub issue tracker.