--- title: "Malcure WP CLI Integration & Cheatsheet" date: 2023-08-12 author: "Shiv" featured_image: "https://malcure.com/wp-content/uploads/2019/09/malcure-malware-removal-documentation.png" --- # Malcure WP CLI Integration & Cheatsheet ![malcure malware removal documentation](https://malcure.com/wp-content/uploads/2019/09/malcure-malware-removal-documentation-1024x682.png "using Malcure WP Malware Removal via WP CLI")MalCure WordPress plugin comes with some serious powers under the hood. With such tremendous feature-set and agility it’s only reasonable that you take a minute to read what’s available and how to use it. Here’s the information you need to get started with it. ## Malcure WP CLI Integration [Malcure Advanced Edition](https://malcure.com/malware-removal-plugin/) integrates excellently with [WP CLI](https://wp-cli.org/) and comes in handy on broken WordPress installs or in case where the website is disabled by the webhost or even large sites where the web-interface could take exceptionally long or simply terminate because of the website firewall etc. Here are some commands to get you started. Documentation valid as of **Malcure Malware Scanner** v 15.2 ``` ``` ### Getting ready to scan with Malcure WP CLI Using Malcure with WP CLI is a premium feature. It allows comprehensive automation and large-scale / enterprise deployment. In order to use Malcure with WP CLI, you first need to activate Malcure with premium features. ``` wp malcure activate licensekeyhere ``` ### Basic Malcure Malware Scanner WP CLI Commands Show Malcure command-line help. ``` wp malcure help ``` Show WordPress system information. ``` wp malcure info ``` List hidden files and directories. ``` wp malcure hidden ``` ### Managing License & premium features ``` ``` Activate Malcure with premium features. ``` wp malcure activate licensekeyhere ``` Display license status. ``` wp malcure status ``` Deactivate your license key. If no license key is provided, attempts to deactivate the saved one. ``` wp malcure deactivate ``` ### Malcure scan from WP CLI To be able to run a proper scan, you need to have the latest malware signatures. Please run the previous command first. Definition updates are only available to registered users. ``` wp malcure sync ``` Force a sync. ``` wp malcure sync --mcforce ``` Start malware scan. ``` wp malcure scan ``` Set how many files to scan per batch. Default is 50. ``` wp malcure scan --mcbatchsize=10 ``` Skip database scan. ``` wp malcure scan --mcskipdb ``` Skip file-scan. ``` wp malcure scan --mcskipfiles ``` Skip scanning for redirects. ``` wp malcure scan --mcskipredirects ``` Don’t show suspicious files. Shows suspicious files by default. Equivalent to the “paranoia” mode in the web GUI. ``` wp malcure scan --mcsuspicious=false ``` Skip all directories with the name **mu-plugins** and `backups` ``` wp malcure scan --mcskipdirs="mu-plugins,backups" ``` Match for custom regex pattern in files. (Files with correct checksum are never match against any signatures). ``` wp malcure scan --mcregex="/find_.*_me/is" ``` Match for custom regex pattern in database. The following example queries the database for all posts, post\_meta, options table for `%script%` sql query and matches the string `href=malware` ``` wp malcure scan --mcdbquery="%script%" --mcdbregex="/href=\/malware/" ``` Create a JSON scan-log and save it to file. For security reasons, .php will be added to the file extension. ``` wp malcure scan --log= ``` Extract a log file. ``` wp malcure extractlog --from=source_file --to=target_file ``` Scan some specific file. ``` wp malcure scan --mcfiles= ``` Scan some specific directory. ``` wp malcure scan --mcscanonlydirs= ``` ## Extra Commands That Come In Handy Reset the plugin. ``` wp malcure reset ``` Reset plugin as well as logs. ``` wp malcure reset --mcresetlogs ``` Force reset without confirmation. ``` wp malcure reset --mcforce ``` Show status of each file. ``` wp malcure scan --mcdebug=true ``` Save scan output to a log file. Requires the `expect` package ``` unbuffer wp malcure scan |& tee rootedts.log ``` Download file to local directory over ssh ``` scp your_username@example.com:foobar.txt /local/dir ``` ### Legacy Commands Register Malcure Malware Scanner for free to get definition updates. ``` wp malcure register --mc-email=myemail@example.com --mc-fname="Firstname" --mc-lname="Lastname" ``` ## Summary [Malcure malware scanner](https://wordpress.org/plugins/wp-malware-removal/) is a free toolset for WordPress malware removal. It is a robust WordPress plugin which detects infections, security threats and vulnerabilities. Malcure Advanced Edition is a pro version of the plugin with the following premium features: - Single click repair, clean and whitelisting of files. - Real-time malware definition updates. - **WP CLI support** for scanning via command line. - Use custom definitions and patterns to scan for new virus strains. - Skip / Scan specific files and directories to save time. - [Automatic periodic scan via WP CLI](https://malcure.com/blog/utilities/malcure-advanced-edition-with-cron-wp-cli-for-automatic-periodic-scans/) **Note:** WP CLI support is available in [Malcure Advanced Edition](https://malcure.com/malware-removal-plugin/) only. Upgrade Malcure Malware Scanner to pro version to detect and remove malware like a pro! [Get Malcure Advanced Edition →](https://malcure.com/malware-removal-plugin/)