Skip to content

Instantly share code, notes, and snippets.

@lukeledet
Created December 7, 2010 20:31
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save lukeledet/732357 to your computer and use it in GitHub Desktop.
Save lukeledet/732357 to your computer and use it in GitHub Desktop.
Phishing site spammer
#!/usr/bin/env ruby
# Chum
#
# I got an email saying a craigslist post was flagged for removal with a link
# here: http://home.comcast.net/~bigtruckn/ so I wrote this quick script to
# spam it in hopes of polluting their data in case someone falls for it.
require 'rubygems'
require 'httparty'
require 'ffaker'
CHARACTERS = ('A'..'Z').to_a + ('a'..'z').to_a + ('0'..'9').to_a
options = {:loginType => 'L', :step => 'confirmation', :originalURI => '/', :rt => '', :rp => ''}
500.times do
options[:inputEmailHandle] = Faker::Internet::email
options[:inputPassword] = CHARACTERS.sample(Random.new.rand(8..16)).join
# I like seeing the random usernames and passwords scroll by
print "#{options[:inputEmailHandle]}:#{options[:inputPassword]}: "
begin
HTTParty.post('http://66.220.104.149/.account/.cgi-bin/script.php', options)
rescue HTTParty::UnsupportedURIScheme # The site sends back a bad redirect (relative path)
sleeping = Random.new.rand(15..90)
puts "Sleeping for #{sleeping} seconds"
sleep sleeping
end
end
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment