Corporate Site Hack Cleanup
Budget: ₹1,500 – ₹12,500 INR
My corporate website runs on a hand-coded stack—pure HTML, CSS and JavaScript stored on a Linux server. It was recently compromised; malicious files were injected and a few shady third-party elements crept into the codebase. I have pulled the site offline and backed up the original repository, and now I need an experienced security-minded developer to step in and help me bring it back safely.
Here’s what I need from you:
• Examine the current backup, identify every foreign or obfuscated script that shouldn’t be there, and remove it.
• Redeploy a clean, fully working copy to the server (Apache/Nginx configuration is available).
• Patch common front-end vulnerabilities, tighten file permissions, and set up basic hardening measures—HTTP security headers, updated SSL/TLS configuration, and, if you recommend, a lightweight Web Application Firewall rule set.
• Provide a brief after-action report outlining what was removed, how the attacker likely gained access, and the steps you implemented so the same vector cannot be exploited again.
The goal is simple: restore full functionality while eliminating the backdoor and leaving the site better protected for the future. If you’ve cleaned custom sites before and can turn this around quickly, let’s get started.
Here’s what I need from you:
• Examine the current backup, identify every foreign or obfuscated script that shouldn’t be there, and remove it.
• Redeploy a clean, fully working copy to the server (Apache/Nginx configuration is available).
• Patch common front-end vulnerabilities, tighten file permissions, and set up basic hardening measures—HTTP security headers, updated SSL/TLS configuration, and, if you recommend, a lightweight Web Application Firewall rule set.
• Provide a brief after-action report outlining what was removed, how the attacker likely gained access, and the steps you implemented so the same vector cannot be exploited again.
The goal is simple: restore full functionality while eliminating the backdoor and leaving the site better protected for the future. If you’ve cleaned custom sites before and can turn this around quickly, let’s get started.