
Closed
Posted
Paid on delivery
My production Linux server was compromised and the corporate WordPress sites that used to live there have vanished from the usual directories. I am currently running PhotoRec to carve the disk, but I’m out of my depth interpreting the results and rebuilding a working WordPress installation from whatever fragments turn up. There are no usable backups; anything you can salvage from the server itself is all we have. What I need from you • Make a full, forensically-sound image of the affected disk (or guide me through it if you prefer working remotely). • Identify and recover every recoverable WordPress file and MySQL database table related to the corporate sites. • Reassemble each site so it loads correctly on a clean staging environment—plugins, themes, media, and database content. • Provide a brief post-mortem explaining the breach vector and concrete hardening steps so this doesn’t happen again. Acceptance criteria 1. Each recovered site loads in a browser without PHP or database errors. 2. Admin logins function with reset credentials you provide in a sealed document. 3. A summary report (PDF or Markdown) details the recovery process and security recommendations. The server is Linux (Ubuntu 20.04), running Apache with PHP-FPM and MySQL 8. If you prefer TestDisk, ddrescue, or other forensic tools over PhotoRec, feel free—just document what you do so I can follow later. SSH access and single-user physical access can be arranged immediately. If you have solid experience rescuing hacked WordPress installations from bare metal and you can start right away, I’d love to hear how you would approach it and an estimated timeline for first results.
Project ID: 40411040
169 proposals
Remote project
Active 3 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
169 freelancers are bidding on average €409 EUR for this job

I can take this on. First I’ll create a full forensic disk image to preserve evidence, then use ddrescue/TestDisk/PhotoRec to recover WordPress files and MySQL data. After extraction, I’ll rebuild each site in a clean staging environment and validate full functionality (themes, plugins, DB, media). Finally, I’ll deliver a short incident report covering breach vector and hardening steps. Initial recovery visibility within 24–48 hours, full rebuild timeline depends on data integrity. Hafiz Anas
€710 EUR in 2 days
8.4
8.4

Hi, Could you provide me with SSH access details to the server? I can help recover your compromised WordPress sites effectively. I’ll start by creating a forensically-sound image of the affected disk, then identify and recover all relevant files and MySQL tables. Once I’ve salvaged the necessary components, I’ll reassemble each site in a clean staging environment, ensuring everything loads correctly without errors. Additionally, I’ll provide a detailed report outlining the recovery process and security hardening steps to prevent future breaches. With extensive experience in rescuing hacked WordPress installations, I’m confident I can deliver results quickly. Let me know when we can discuss this further. Best Regards, Priyanka
€250 EUR in 2 days
8.5
8.5

Hi, I am an experienced WordPress and Linux server specialist, and I can help you recover and rebuild your hacked corporate WordPress sites by creating a full disk image, extracting recoverable WordPress files and MySQL data, and reconstructing the sites on a clean staging environment with working themes, plugins, media, and databases. I will also identify the breach vector, remove malicious code, and provide clear security hardening recommendations to prevent future attacks. Please send a message so we can go through the details, decide on the timeline and deliverables. Best regards.
€250 EUR in 7 days
8.4
8.4

Hi, To recover your compromised WordPress sites, I'll create a forensically-sound image of the disk and identify all recoverable files and database tables. This will include: - Making a full disk image for recovery. - Recovering all relevant WordPress files and MySQL tables. - Reassembling each site on a clean staging environment. - Providing a post-mortem report with security recommendations. I will use a structured approach with forensic tools like TestDisk or ddrescue, ensuring everything is documented for your reference. Ready to start once you provide SSH access and any necessary details. Thanks!
€450 EUR in 5 days
8.3
8.3

Hi there, I will image the disk with ddrescue to preserve every sector, then recover WordPress files and MySQL tables from the carved fragments — reassembling each corporate site on a clean staging environment with working themes, plugins, media, and database content. Before touching anything, I will work from the forensic image only — never the original disk — so evidence of the breach vector stays intact for the post-mortem. For MySQL recovery, I will parse InnoDB tablespace files directly with undrop-for-innodb, which reconstructs table data far more reliably than PhotoRec alone when .frm files are missing. Questions: 1) Do you know if MySQL was using innodb_file_per_table, or was everything in a shared ibdata1 file? 2) How many corporate sites were hosted — and do you recall approximate total media size? Looking forward to discussing further. Best regards, Kamran
€283 EUR in 13 days
8.4
8.4

Hello, "Ready to start work now" I have worked on recovering compromised WordPress servers on Ubuntu, including rebuilding sites from disk artifacts when no backups were available. I would start with a forensically safe disk image (via ddrescue), then recover WordPress files and MySQL data from the image—not the live system. After that, I will rebuild each site on staging, fix configs, and ensure clean admin access. I will also provide a brief post-mortem with clear hardening steps. Quick questions: Is /var/lib/mysql still intact? Approx how many sites were hosted? I can start immediately once access is shared. Regards, Smile Mittal
€250 EUR in 2 days
8.1
8.1

Hi there, I’ve read your brief on rescuing hacked WordPress sites from bare-metal, and I’m confident I can guide you through a forensically-sound recovery and hardening plan that restores functionality while closing the breach. I bring 15+ years of full-stack and security-focused development across Linux servers, WordPress, MySQL, Apache, and incident response. I’ll start with a clean forensic image of the affected disk, then identify recoverable WordPress files and databases, and reassemble each site on a staging environment with clean plugins, themes, media, and a tested DB import. The approach emphasizes verifiable integrity, minimal downtime, and clear post-incident hardening. I’ve shared an initial estimate based on your description, and once we go over a few technical or functional details, I’ll confirm the exact cost and delivery schedule. I propose 6-7 days for the first staging rebuilds, with a transparent progress report at each milestone. The process will include: - Forensic imaging (dd, testdisk, or preferred tool) with documented steps so you can reproduce - Recovery of WordPress core, themes, plugins, media, and MySQL data fragments - Rebuild on a clean Ubuntu 20.04 server with Apache + PHP-FPM and MySQL 8, ready for browser testing - A concise post-mortem detailing breach vectors and concrete hardening steps - A sealed document with admin credentials and a secure reset workflow What is your preferred time window for staging access and do you have any specifi
€250 EUR in 10 days
8.3
8.3

SURE-----I will Recover Hacked Corporate WordPress Sites I am highly appreciative to work on this specific task I can do my best. I am an Innovative PHP/Full stack developer having rich experience with so many successful Tasks. I have some queries to give you accurate time and price Let’s connect on chat for further discussion and start quickly. Thanks!!
€500 EUR in 7 days
8.1
8.1

Hello, It's great to speak with you about your new project..!! I understand issue on website and server malware's effect, for clear this issue we have to perform following actions please review carefully 1. Changes all password (Website and server) 2. Remove all backdoor, no one can access server and there files without permission 3. Scan entire server/code files and database 4. effect files repair and update with system 5. unused php extn and any other content remove form server 6. create logs to proper tracking and make sure same type of issue not comes again 7. handover project to you back Ping us for more better discussion Best Deva
€250 EUR in 2 days
7.8
7.8

✅WORDPRESS DESIGNER/DEVELOPER EXPERT Hi, I have read the description carefully and give you 100% assistance as a WordPress Developer. Skills- WordPress, AWS, Woocommerce, Genesis, AVADA, DIVI, LMS, Buddypress, Plugin/Theme Customization, PSD to HTML/WordPress, JQUERY, AJAX, HTML5, CSS3, Bootstrap, Customization as per client requirement. Due to NDAs, links aren’t public—but once you open the chat, I’ll share live demos and walkthroughs. I can start right now and look forward to your response and hope to see the beginning of a wonderful partnership with you. Please keep the budget flexible for now. Thanks, Srishti
€500 EUR in 7 days
7.9
7.9

Hi, I can help you with the full recovery of your compromised Linux server and WordPress sites, including forensic-level disk imaging, file/database recovery, and rebuilding the sites on a clean staging environment. I have experience with Linux server recovery, WordPress restoration, MySQL reconstruction, and security hardening after breaches. I can start immediately and will work with tools like ddrescue/TestDisk/PhotoRec (as needed) to: * Create a safe disk image * Recover WordPress files + MySQL data * Rebuild working staging sites * Restore admin access securely * Provide post-incident security report + hardening steps I will also document every step so the process is fully transparent and reproducible. I am available to start right now. Please share SSH access or server details so I can begin the recovery process immediately. Thanks
€500 EUR in 7 days
8.2
8.2

WordPress recovery from a compromised Linux server is a race against further data loss — every hour PhotoRec runs without a clean strategy risks overwriting the very sectors you need. I specialize in exactly this: forensic WordPress recovery from live and imaged Ubuntu/Debian servers. Here's my recovery approach for your situation: 1. Forensic disk image first — using ddrescue or dd to create a full sector-level image before any further writes, preserving the current state 2. File carving with PhotoRec + Scalpel in tandem, cross-referencing carved fragments against MySQL's InnoDB structure to reconstruct database tables 3. WordPress file reassembly: wp-content (themes, plugins, uploads), wp-config reconstruction from carved PHP fragments, .htaccess rebuild 4. Staging environment setup: clean WordPress install with recovered files, database restore via mysqlcheck + ibd2sdi for InnoDB recovery 5. Post-mortem report: breach vector analysis (access logs, malware artifacts, modified files), and hardening recommendations to prevent recurrence Acceptance delivery: - Sites loading cleanly in browser, no PHP/DB errors - Admin credentials in a sealed document - PDF recovery + security report I can start within the hour. What's your current SSH access status — is the server still reachable?
€500 EUR in 7 days
8.2
8.2

Hello, We at Doomshell Software Pvt Ltd specialize in advanced WordPress recovery and server-level forensics. We understand the urgency of restoring your compromised sites and can start immediately to recover and rebuild them securely. Our approach: • Create a forensically sound disk image and recover maximum data using advanced tools • Restore WordPress core files, themes, plugins, and media assets • Recover and reconstruct MySQL databases (users, content, structure) • Reassemble each site on a clean staging environment • Fix PHP/database errors and ensure full functionality • Restore secure admin access with reset credentials • Analyze breach vectors and identify vulnerabilities • Implement security hardening to prevent future attacks • Provide a detailed recovery and security report We focus on precision, security, and fast recovery. Let’s restore your sites and secure your infrastructure.
€500 EUR in 7 days
7.4
7.4

Greetings! I can help you with the current requirements. Lets catch up and done. Thank you Shivam K.
€250 EUR in 1 day
6.8
6.8

Based on my 8 years of experience in hacking websites repairing , I strongly believe I can restore your hacked corporate WordPress sites with utmost efficiency and precision. From Linux to MySQL, PHP to web security, I have honed my skills in every aspect of your project needs. My extensive knowledge of WordPress customization and deep understanding of server management will allow me to recover every single piece of your lost data. Beyond restoration, I'll work diligently to ensure the sites load without errors, the admin logins function flawlessly, and your site's security is fortified through post-mortem steps. My commitment to quality, performance, and client success aligns perfectly with your project's desires. Choose me for this project, and I'll provide you with a comprehensive post-recovery report encompassing all the necessary details including security recommendations. With my organized approach and strict adherence to timelines, I'm confident in delivering meaningful results within the timeframe we establish for this important recovery. Let’s start restoring your corporate WordPress sites today!
€250 EUR in 1 day
6.7
6.7

Hi! My name is Marjan and I'm here to offer you my services as a skilled applicant with over a decade of experience working on Freelancer.com. l believe I am the best fit candidate for this project due to my extensive experience; I would like to have a discussion to get to know that we both are on the same page. Once the scope will be locked, I will start working on it right away.
€250 EUR in 7 days
6.7
6.7

I understand the severity of your situation recovering compromised WordPress sites from a Linux server without backups requires careful forensic handling and structured rebuilding I have experience working with WordPress recovery, server-level debugging, and rebuilding sites from partial data including database fragments and file recovery For your project I will first guide or create a full disk image using ddrescue to preserve evidence then extract recoverable WordPress files and MySQL data reconstruct databases repair wp-config connections and rebuild each site on a clean staging environment One suggestion is to avoid writing anything further to the affected disk to prevent overwriting recoverable data I’ve handled similar recovery cases where sites were restored from incomplete data and brought back to a working state I can start immediately with first recovery results in 2 to 4 days depending on disk condition Quick question do you already have root SSH access with enough space available for a full disk image Regards Khurshid Ahmed
€250 EUR in 5 days
6.8
6.8

Hello, I’ve gone through your project details and this is something I can definitely help you with. With over 10 years of experience in server administration and web security, I have successfully assisted numerous clients in recovering compromised WordPress installations. I understand how critical it is to restore your corporate sites while ensuring that we protect against future breaches. To address your needs, I will start by creating a forensic image of the affected disk, ensuring we preserve all data for recovery. I will then identify and recover every file and MySQL database table necessary to reassemble the sites onto a clean staging environment. Once everything is operational, I will provide a comprehensive post-mortem, detailing the breach vector and concrete steps to enhance your security moving forward. Here is my portfolio for your review: https://www.freelancer.in/u/ixorawebmob. I’m interested in your project and would love to understand more details to ensure the best approach. Could you clarify: What is your desired timeline for the recovery process, and are there any specific sites or databases that are of highest priority? Let’s discuss over chat! Regards, Arpit
€250 EUR in 25 days
7.1
7.1

Hello, I understand you need to recover your compromised WordPress sites from a Linux server. I can help by creating a disk image, salvaging WordPress files and database tables, and rebuilding your sites. I'll ensure they load correctly and provide security recommendations. I have experience with these kinds of recoveries and can start promptly. Regards, Parvesh M.
€250 EUR in 3 days
6.4
6.4

Hi, I will recover your hacked corporate WordPress sites with forensically sound methods, ensuring every file and database table is restored for seamless functionality. I will guide you through or handle the full disk image process, assembling each site on a clean staging environment with detailed post-mortem security recommendations. Your sites will load error-free with reset admin logins provided securely. I am experienced in salvaging hacked WordPress installations and will prioritize your project immediately. How do you prefer to handle the breach vector analysis? Let's chat further so I can give you a proper timeline and get things moving.
€250 EUR in 7 days
6.4
6.4

Athens, Greece
Payment method verified
Member since Mar 10, 2012
€50-60 EUR
€8-30 EUR
€30-250 EUR
€30-250 EUR
€8-30 EUR
₹600-1500 INR
$50-100 USD
₹750-1250 INR / hour
₹600-1500 INR
$2-8 USD / hour
₹750-1250 INR / hour
$15-25 USD / hour
$25-50 USD / hour
$750-1500 AUD
₹150000-250000 INR
₹750-1250 INR / hour
₹600-1500 INR
$10-30 USD
$750-1500 USD
$15-25 USD / hour
₹400-750 INR / hour
₹600-1500 INR
₹400-750 INR / hour
$8-15 USD / hour
$15-25 CAD / hour