gsmcnamara/wordpress-counterespionage-firewall

Floodspark Counterespionage Firewall (CEF) plugin for WordPress

Floodspark Counterespionage Firewall plugin for WordPress

The CEF WordPress plugin is free and open source. So far it can:

• Fake out WPScan and bots by hiding your real usernames, instead supplying them with fake ones they will never be able to log in with.

• Fake out WPScan's aggressive plugin scan, also causing early scan termination

• Fake out WPScan's aggressive theme scan, also causing early scan termination

...and detect and block:

• Tor browser, with minor delay
• Chrome Incognito, with minor delay, over HTTPS
• Firefox Private Browsing, with minor delay
• Chrome-Selenium in its default configuration, with minor delay
• cURL in its default configuration
• Wget in its default configuration
• HTTP methods other than GET, POST, and HEAD
• Proxy probing

Download the plugin here or simply search for "Floodspark" where you install new plugins on your site

Our Cyber Intent Blog is a living demonstration of the plugin hosted intentionally on cheap, shared hosting to prove that it works in even the most resource constrained environment.

Floodspark Counterespionage Firewall (CEF) – full version has additional capabilities.
More info and FAQs
Email: [email protected]
Twitter
Facebook

wordpress-counterespionage-firewall's Issues

Ensure compatible with newest WP

Filter password reset message for non-existent accounts

Move option update

Commit wordpress option update after the unset look during cron, not during each iteration.

Credential stuffing

Log creds sent to wp-login.php

xml-rpc auth handling

Update validate url for blogs not at / root

Deal with this case
register_rest_route( 'floodspark/v1/cef', '/blog/validate', array(

Doubletap issue

Reprioritize first request from blacklisted IP that takes place after expiration time so it is not blocked and require a page refresh.