(Jan 1, 2013 06:23 PM)Fereta Wrote: Please explain what you mean by "no security." I am genuinely wanting to know. Anybody can make attack requests with your shells if they get the link. There should be some security measures implemented, at the very least checking with a list of addresses that can request attacks.
(Jan 1, 2013 07:29 PM)Goldbach Wrote: You can create a crypted .txt file and have an algorithm to decrypt it if you wanted. For this program its not necessary, but for the future, if someone wanted to sell it etc, then they would want to implement something like that Wait... what? How would having some encrypted text file and a decryption algorithm to go along stop anybody from requesting attacks?
(Jan 1, 2013 06:23 PM)Fereta Wrote: Please explain what you mean by "no security." I am genuinely wanting to know. There is no security?.. Anyone can use the shells.
(Jan 1, 2013 07:29 PM)Goldbach Wrote: You can create a crypted .txt file and have an algorithm to decrypt it if you wanted. For this program its not necessary, but for the future, if someone wanted to sell it etc, then they would want to implement something like that What kind of heap of shit are you talking about?..
You can have maximum security it won't even matter; if someone wanted the shells they could get them.
(With knowledge of bootclasspath)
Code public URL(String url) throws MalformedURLException {
this(null, url);
System.out.println(url);
}
(Jan 1, 2013 11:45 PM)Victoria J Wrote: You can have maximum security it won't even matter; if someone wanted the shells they could get them.
(With knowledge of bootclasspath)
Code public URL(String url) throws MalformedURLException {
this(null, url);
System.out.println(url);
}
With the same logic, if someone wanted to deface Google they could do it.
No, if someone has the incredible skills to do such a thing they could do it. The same applies in this case (although whether the skills to do the task are incredible or not is debatable); without security you're opening up a security threat for the lowest form of a novice.
(Jan 1, 2013 11:45 PM)Victoria J Wrote: You can have maximum security it won't even matter; if someone wanted the shells they could get them.
(With knowledge of bootclasspath)
Code public URL(String url) throws MalformedURLException {
this(null, url);
System.out.println(url);
}
LOL? You are stupid. Simple security will make hijacking them impossible.
op, why wont you fetch the html script first to scan for the get parameters and then apply it later when youre about to request an attack to it? so any shells will do.
(Jan 2, 2013 06:01 AM)autorunman22 Wrote: op, why wont you fetch the html script first to scan for the get parameters and then apply it later when youre about to request an attack to it? so any shells will do.
You cant scan parameters in php server side code. The html is only the layout.
goodbye
DO NOT DEAL WITH THIS MEMBER
I personally find JOptionPane better.
Gotta say, it's pretty good for a new project. One way to improve it would to be to add a GUI, though I don't expect you to do that considering the work you've done on it already. Nice!
(Jan 5, 2013 09:04 PM)iitsimran Wrote: I personally find JOptionPane better.
Could you explain what this is then and what you prefer it over? 😧
goodbye
this looks great! thanks! however, your link to the shells isnt working
wat.. someone explain me how to export this please :)
(Jan 2, 2013 06:37 AM)redpois0n Wrote: You cant scan parameters in php server side code. The html is only the layout.
You're correct. What I'm trying to say is, his code needs to fetch a shell.
i.e. download the content of the shell (request without any parameters).
Once the program got the HTML script, scan for the parameters inside the form tag so it should be easy. Then run a new thread that will supply the extracted parameters against that particular shell. Profit.
I have made this myself and with only 300/1000+ public shells, I can really take down a small home connection.
DO NOT DEAL WITH THIS MEMBER
thanks for this But not sure if shells worked then. Yours do?
|