Hey everyone,
I made a free security plugin for aaPanel called ShieldScan. It scans your websites for malware, webshells, and backdoors directly from the panel.
What it does:
- 55+ detection signatures covering PHP webshells (c99, r57, b374k, WSO), backdoors, crypto miners, spam mailers, and obfuscated code
- Real-time file monitoring — detects threats the moment a file is created or modified
- Auto-quarantine — isolates malicious files automatically
- WordPress deep scan — verifies core files against official checksums, checks plugins for known vulnerabilities, scans the database for injected scripts, and detects fake/nulled plugins
- ML-based entropy analysis to tell apart legitimate protected code (ionCube, SourceGuardian) from actual malware
- Scheduled scans, PDF reports, file integrity monitoring, and webhook alerts (Telegram/Discord/Slack)
How to install:
Go to App Store in aaPanel, click Import, upload the zip file. That's it.
It's open source and completely free. No subscriptions, no external servers, everything runs locally on your panel.
I'm actively working on it and would appreciate any feedback — bugs, false positives, feature requests, whatever. Let me know if you give it a try.
GitHub link: Hey everyone,
I made a free security plugin for aaPanel called ShieldScan. It scans your websites for malware, webshells, and backdoors directly from the panel.
What it does:
- 55+ detection signatures covering PHP webshells (c99, r57, b374k, WSO), backdoors, crypto miners, spam mailers, and obfuscated code
- Real-time file monitoring — detects threats the moment a file is created or modified
- Auto-quarantine — isolates malicious files automatically
- WordPress deep scan — verifies core files against official checksums, checks plugins for known vulnerabilities, scans the database for injected scripts, and detects fake/nulled plugins
- ML-based entropy analysis to tell apart legitimate protected code (ionCube, SourceGuardian) from actual malware
- Scheduled scans, PDF reports, file integrity monitoring, and webhook alerts (Telegram/Discord/Slack)
How to install:
Go to App Store, click Import, upload the zip file. That's it.
It's open source and completely free. No subscriptions, no external servers, everything runs locally on your panel.
I'm actively working on it and would appreciate any feedback — bugs, false positives, feature requests, whatever. Let me know if you give it a try.
GitHub link: https://github.com/ayanhackss/ShieldScan
