Welcome to HBH! If you have tried to register and didn't get a verification email, please using the following link to resend the verification email.

DoS in PhP


ghost's Avatar
0 0

I was reading this acrticle http://www.hackthissite.org/articles/read/285

and was wandering would this work? Or am I totaly out of the ball parkā€¦ I'm new to PhP

<?
while($i=1; i++; $i<9484574343){
system('ping http://www.domain.com');
system('ping http://www.domain.com');
}
while($a=1; a++; $a<8937593843){
fopen("../../DOS.php");
fopen("../../DOS.php");
}
?>

[edited by grindordie]removed smileys[/edit]


n3w7yp3's Avatar
Member
0 0

ICMP flooding is not really that effective unless you're on a faster connection than your target.

but still DoSing is not a good idea


ghost's Avatar
0 0

while($a=1; a++; $a<8937593843){ fopen("../../DOS.php"); fopen("../../DOS.php"); }

I was hoping that it would run the php X amounts of times increasing the prob of success


ghost's Avatar
0 0

mcph0rk3r wrote: [quote] while($a=1; a++; $a<8937593843){ fopen("../../DOS.php"); fopen("../../DOS.php"); }

I was hoping that it would run the php X amounts of times increasing the prob of success[/quote]

For starters, fopen is File IO, so it would merely open the file to be edited or something to that effect. If you sued System, Passthru, or Exec, maybe. Just for the record, PHP pretty much doesn't allow any of this. In essence, that's a forkbomb.

Ping flooding and ICMP flooding are also different. Remember, all squares are rectangles but not all rectangles are squares, and all circleds are elipses but not all elipses are circles.

To put it simply, no, it would not work. Also, it wouldn't even suck your own bandwidth. You can do some extremely fun things otherwise. Please realize that PHP scripts have a timeout and maximum memory usage.

I've run IRC bots and such on other peoples servers, written in PHP, and they really eat up bandwidth. If I get my RTB server going, I'll do a controlled experiment with bandwidth suckers.

Thanks for reading my article by the way!