Удобный Http брут на Php

Discussion in 'PHP' started by KEZ, 16 Jul 2005.

  1. KEZ

    KEZ Ненасытный школьник

    Joined:
    18 May 2005
    Messages:
    1,604
    Likes Received:
    754
    Reputations:
    397
    #1 KEZ, 16 Jul 2005
    Last edited: 16 Jul 2005
  2. nerezus

    nerezus Banned

    Joined:
    12 Aug 2004
    Messages:
    3,191
    Likes Received:
    729
    Reputations:
    266
    хм, удобный без потоков? (с потоками сам пока не работал)
     
  3. Майор

    Майор Active Member

    Joined:
    24 Oct 2004
    Messages:
    558
    Likes Received:
    112
    Reputations:
    146
    тоже не работал, но даже с теоритической точки зрения с потоками быстрей =)
     
  4. Zadoxlik

    Zadoxlik рояль с сыром

    Joined:
    28 Feb 2005
    Messages:
    758
    Likes Received:
    216
    Reputations:
    257
    Любопытно, что напрмер при успешной авторизации на win.mail.ru код ответа не 200, а 302 причем в современных системах авторзации (в т.ч. мэил.ру) после 200-300 попыток авторизации сервер возвращает код ответа 302, хотя пара логин-пароль неверна. Потому приходится учитывать некоторые другие элементы заголовка возвращаемого ответа.
     
  5. niggerilo

    niggerilo New Member

    Joined:
    17 Mar 2004
    Messages:
    4
    Likes Received:
    0
    Reputations:
    0
    ИМХО брутфорс в один поток это дохлое дело.
     
  6. tester2005

    tester2005 Elder - Старейшина

    Joined:
    17 Jan 2005
    Messages:
    38
    Likes Received:
    2
    Reputations:
    0
    цитирую...

    niggerilo, Че те ещё не понятно??? еси не удовлетворяет, сядь и пиши сам...
     
  7. nerezus

    nerezus Banned

    Joined:
    12 Aug 2004
    Messages:
    3,191
    Likes Received:
    729
    Reputations:
    266
    tester2005, это не недоработка, т.к. пхп вобще не поддерживает потоки(есть только pcntl_fork, но это не потоки) и доработать это нельзя

    P.S. почему-то я думаю, что он спокойно напишет ;)
     
  8. tester2005

    tester2005 Elder - Старейшина

    Joined:
    17 Jan 2005
    Messages:
    38
    Likes Received:
    2
    Reputations:
    0
    не стоило, но благодарю за пояснение )


    пусть пишет ;)
     
    #8 tester2005, 16 Jul 2005
    Last edited: 16 Jul 2005
  9. KEZ

    KEZ Ненасытный школьник

    Joined:
    18 May 2005
    Messages:
    1,604
    Likes Received:
    754
    Reputations:
    397
    Какие вам нахрен потоки на PHP ?

    Не совсем дохлое.

    имеете ввиду что напишу на c для unix c потоками? напишу. особенно если мне поможет нерезус

    при чем тут win.mail.ru? там нет Basic-HTTP Auth
     
  10. nerezus

    nerezus Banned

    Joined:
    12 Aug 2004
    Messages:
    3,191
    Likes Received:
    729
    Reputations:
    266
    >имеете ввиду что напишу на c для unix c потоками? напишу. особенно если мне поможет нерезус

    я niggerilo имел ввиду =)

    но сегодня у меня хорошая новость: приехал друг из москвы и принез мою книгу по с++
    там и про потоки было, пока до них еще не дочитал, т.к. купил эту книгу нечаянно =) однако пригодилась =) учить все-таки решил... из-за ооп...

    Постскриптум: http://nerezus.narod.ru/books/tcpip.rar еще не читал это, т.к. уровень не мой. Но тут возможно есть другие пути ;)
     
  11. KEZ

    KEZ Ненасытный школьник

    Joined:
    18 May 2005
    Messages:
    1,604
    Likes Received:
    754
    Reputations:
    397
    Вот видишь, на на С то ты не такой и программер))

    аааа! ты не прав! при чем тут С++ и потоки? вот если бы ты сказал
    "Книгу по C++ в линукс"!
     
  12. nerezus

    nerezus Banned

    Joined:
    12 Aug 2004
    Messages:
    3,191
    Likes Received:
    729
    Reputations:
    266
    Code:
    NAME
        threads - Perl extension allowing use of interpreter based threads from
        perl
    
    SYNOPSIS
            use threads;
    
            sub start_thread {
                print "Thread started\n";
            }
    
            my $thread  = threads->create("start_thread","argument");
            my $thread2 = $thread->create(sub { print "I am a thread"},"argument");
            my $thread3 = async { foreach (@files) { ... } };
    
            $thread->join();
            $thread->detach();
    
            $thread = threads->self();
            $thread = threads->object( $tid );
    
            $thread->tid();
            threads->tid();
            threads->self->tid();
    
            threads->yield();
    
            threads->list();
    
    DESCRIPTION
        Perl 5.6 introduced something called interpreter threads. Interpreter
        threads are different from "5005threads" (the thread model of Perl
        5.005) by creating a new perl interpreter per thread and not sharing any
        data or state between threads by default.
    
        Prior to perl 5.8 this has only been available to people embedding perl
        and for emulating fork() on windows.
    
        The threads API is loosely based on the old Thread.pm API. It is very
        important to note that variables are not shared between threads, all
        variables are per default thread local. To use shared variables one must
        use threads::shared.
    
        It is also important to note that you must enable threads by doing "use
        threads" as early as possible in the script itself and that it is not
        possible to enable threading inside an "eval """, "do", "require", or
        "use". In particular, if you are intending to share variables with
        threads::shared, you must "use threads" before you "use threads::shared"
        and "threads" will emit a warning if you do it the other way around.
    
        $thread = threads->create(function, LIST)
            This will create a new thread with the entry point function and give
            it LIST as parameters. It will return the corresponding threads
            object, or "undef" if thread creation failed. The new() method is an
            alias for create().
    
        $thread->join
            This will wait for the corresponding thread to join. When the thread
            finishes, join() will return the return values of the entry point
            function. If the thread has been detached, an error will be thrown.
    
            The context (scalar or list) of the thread creation is also the
            context for join(). This means that if you intend to return an array
            from a thread, you must use "my ($thread) = threads-"new(...)>, and
            that if you intend to return a scalar, you must use "my $thread =
            ...".
    
            If the program exits without all other threads having been either
            joined or detached, then a warning will be issued. (A program exits
            either because one of its threads explicitly calls exit(), or in the
            case of the main thread, reaches the end of the main program file.)
    
        $thread->detach
            Will make the thread unjoinable, and cause any eventual return value
            to be discarded.
    
        threads->self
            This will return the thread object for the current thread.
    
        $thread->tid
            This will return the id of the thread. Thread IDs are integers, with
            the main thread in a program being 0. Currently Perl assigns a
            unique tid to every thread ever created in your program, assigning
            the first thread to be created a tid of 1, and increasing the tid by
            1 for each new thread that's created.
    
            NB the class method "threads->tid()" is a quick way to get the
            current thread id if you don't have your thread object handy.
    
        threads->object( tid )
            This will return the thread object for the thread associated with
            the specified tid. Returns undef if there is no thread associated
            with the tid or no tid is specified or the specified tid is undef.
    
        threads->yield();
            This is a suggestion to the OS to let this thread yield CPU time to
            other threads. What actually happens is highly dependent upon the
            underlying thread implementation.
    
            You may do "use threads qw(yield)" then use just a bare "yield" in
            your code.
    
        threads->list();
            This will return a list of all non joined, non detached threads.
    
        async BLOCK;
            "async" creates a thread to execute the block immediately following
            it. This block is treated as an anonymous sub, and so must have a
            semi-colon after the closing brace. Like "threads->new", "async"
            returns a thread object.
    
    WARNINGS
        A thread exited while %d other threads were still running
            A thread (not necessarily the main thread) exited while there were
            still other threads running. Usually it's a good idea to first
            collect the return values of the created threads by joining them,
            and only then exit from the main thread.
    
    TODO
        The current implementation of threads has been an attempt to get a
        correct threading system working that could be built on, and optimized,
        in newer versions of perl.
    
        Currently the overhead of creating a thread is rather large, also the
        cost of returning values can be large. These are areas were there most
        likely will be work done to optimize what data that needs to be cloned.
    
    BUGS
        Parent-Child threads.
            On some platforms it might not be possible to destroy "parent"
            threads while there are still existing child "threads".
    
            This will possibly be fixed in later versions of perl.
    
        tid is I32
            The thread id is a 32 bit integer, it can potentially overflow. This
            might be fixed in a later version of perl.
    
        Returning objects
            When you return an object the entire stash that the object is
            blessed as well. This will lead to a large memory usage. The ideal
            situation would be to detect the original stash if it existed.
    
        Creating threads inside BEGIN blocks
            Creating threads inside BEGIN blocks (or during the compilation
            phase in general) does not work. (In Windows, trying to use fork()
            inside BEGIN blocks is an equally losing proposition, since it has
            been implemented in very much the same way as threads.)
    
        PERL_OLD_SIGNALS are not threadsafe, will not be.
            If your Perl has been built with PERL_OLD_SIGNALS (one has to
            explicitly add that symbol to ccflags, see "perl -V"), signal
            handling is not threadsafe.
    
    AUTHOR and COPYRIGHT
        Arthur Bergman <sky at nanisky.com>
    
        threads is released under the same license as Perl.
    
        Thanks to
    
        Richard Soderberg <perl at crystalflame.net> Helping me out tons, trying
        to find reasons for races and other weird bugs!
    
        Simon Cozens <simon at brecon.co.uk> Being there to answer zillions of
        annoying questions
    
        Rocco Caputo <troc at netrus.net>
    
        Vipul Ved Prakash <mail at vipul.net> Helping with debugging.
    
        please join [email][email protected][/email] for more information
    
    SEE ALSO
        threads::shared, perlthrtut,
        <http://www.perl.com/pub/a/2002/06/11/threads.html>, perlcall,
        perlembed, perlguts
    
    
    
     
  13. Zadoxlik

    Zadoxlik рояль с сыром

    Joined:
    28 Feb 2005
    Messages:
    758
    Likes Received:
    216
    Reputations:
    257
    Просто к слову о HTTP брутофорсинге
     
  14. KEZ

    KEZ Ненасытный школьник

    Joined:
    18 May 2005
    Messages:
    1,604
    Likes Received:
    754
    Reputations:
    397
    Странно... Я вообще его писал для брута РОЛ ... а чето на РОЛе не работает... ща будем смотреть че такое
     
  15. niggerilo

    niggerilo New Member

    Joined:
    17 Mar 2004
    Messages:
    4
    Likes Received:
    0
    Reputations:
    0
    На пхп можно сообразить некое подобие потоков, к примеру popen().
    Вилосипед я изобретать не буду лучше возьму гидру.
     
  16. Майор

    Майор Active Member

    Joined:
    24 Oct 2004
    Messages:
    558
    Likes Received:
    112
    Reputations:
    146
    Вопрос про http брут

    есть скрипт-брут, прописал в скрипте set_time_limit(0); но скрипт работает некоторое время, а потом прекращает работу(на разных серверах по разному )
     
  17. Zadoxlik

    Zadoxlik рояль с сыром

    Joined:
    28 Feb 2005
    Messages:
    758
    Likes Received:
    216
    Reputations:
    257
    safe mod мешает. Сет_тайм_лимит(0) при сэйф моде не работает
     
  18. bul666

    bul666 Banned

    Joined:
    21 Apr 2005
    Messages:
    280
    Likes Received:
    8
    Reputations:
    -1
    Тоже рантше сделал скипт на ПХП для расшифровки МД5 хеша... (Числа).. Скипт "жил" 30 секунд...
     
  19. KEZ

    KEZ Ненасытный школьник

    Joined:
    18 May 2005
    Messages:
    1,604
    Likes Received:
    754
    Reputations:
    397
    Его наверное долго делал, учитываю что есть ф-ия md5() ? ))

    Так, я выложил IPB Bruteforce.
    http://forum.antichat.ru/showthread.php?p=60271