Some months back I was in the need to know if a site was hacked how much code had been modified in a given site. It was not straightforward to install a copy of the site out of the box (it had hardcoded absolute paths and so on).