RutCode DB Scan searches Joomla databases for suspicious code

RutCode DB Scan is an administrator component that reads Joomla's connected database and reports values matching suspicious-code patterns for manual review.

This job arises because compromised sites can contain injected payloads in article text, configuration data, extension tables, or other stored fields. Joomla core provides access control, updates and ordinary database-driven content management, but it does not provide a general-purpose database malware scanner. A template override cannot solve this either: overrides change presentation, not the data stored in the database. Administrators commonly use hosting security tools, a security extension, direct database searches, or a separate incident-response service. According to the listing, RutCode DB Scan goes beyond core by heuristically examining accessible tables and text, JSON, XML and binary values, then producing location-based CSV or Excel reports. It does not scan server files, assess extension vulnerabilities or remove anything.

The likely audience is a site owner, agency or maintenance team investigating a suspected compromise or adding a database-focused check to an existing security process. It may be relevant to sites with many extensions or custom tables. A small, lightly edited site with established host-level monitoring and no need for database forensics has little reason to install it.

Before installing, note that the listing marks it as a free download under GPL-2.0-or-later, with Joomla 4, 5 and 6 compatibility shown. The developer is webratunek; the listing has no reviews, so it offers little public track record to assess. The listing leaves the detection rules, expected scan duration and resource requirements unanswered. It also warns that findings can be false positives, scans can be incomplete after table-read errors, and the browser tab must remain open.

Listed on the Joomla Extensions Directory.