The idea was not so much DOS just to 'hide' the real data in a sea of rubbish. The idea of the sleep was so say you ran it for a day or two every 60 seconds (load and bandwith use is very small so it does not annoy you). Even if target analyse the logs all they see is a steady trickle so all data becomes suspect over an extended period. If lots of people did just a few there would also be lots of IPs.

Not taking sides here. But if you want to make it harder for them to spot it in logs, add some random element (included tachyons fixes as well).


#!/usr/bin/perl

use LWP::UserAgent;
my $ua  = LWP::UserAgent->new;
my $MAX_SLEEP = 5;     # max seconds to sleep
my $DEBUG = 1;
my $LOG_FILL = 20000;  # how many entries will we add to the scam log?

while(1) {
    my $IE   = sprintf "%.1f", ( 5.0, 5.1, 5.5, 6.0, 6.1 )[rand(5)];
    my $WIN  = sprintf "%.1f", ( 4.0, 4.1, 5.1 )[rand(3)];
    my $bs   = join '', map{ ('a'..'z')[rand(26)] }1..(rand(5)+3); 
    my $agent = "Mozilla/4.0 (compatible; MSIE $IE; Windows NT $WIN; $
++bs)";
    $ua->agent( $agent );
    $DEBUG && print $agent, $/;
    my $user = sprintf "%08d", rand(99999999);
    my $pass = sprintf "%05d", rand(99999);
    my $name = ucfirst join '', map{ ('a'..'z')[rand(26)] }1..(rand(5)
++3);
    my $word = join '', map{ ('a'..'z')[rand(26)] }1..(rand(3)+5);  
    my $url = "http://barcl.pisem.net/obr2.html?name=$name&user=$user&
+pass=$pass&word=$word&go=hm&loginButton=%20%20Verify%20%20";
    $DEBUG && print $url, $/;
    my $request = HTTP::Request->new( 'GET', $url );
    my $response = $ua->request( $request );
    $DEBUG && print $response->content;
    sleep (int(rand ($MAX_SLEEP))+1);
    $LOG_FILL--;
  die "Done!\n" if $LOG_FILL == 0;
}
[download]