Nothing to See Here: How to find a backdoor in a hacked WordPress