這篇文章是講如何做一個(gè)論壇灌水機(jī),針對(duì)某個(gè)大型房地產(chǎn)論壇測(cè)試通過(guò),那是一個(gè)基于jive3的論壇,假如論壇加入了圖片認(rèn)證登陸,本程序?qū)⑹プ饔谩?br />
本程序使用了HTTPClient包,下載地址:
http://www.innovation.ch/java/HTTPClient/
灌水機(jī)原理很簡(jiǎn)單,就是分析論壇的表單,用自己的程序模擬提交就可以了,
本文的目的在于介紹HTTPClient這個(gè)開(kāi)源工具,比jdk的.net包強(qiáng)何止百倍,
HTTPClient的特點(diǎn)是多個(gè)操作可以復(fù)用同一個(gè)連接,設(shè)置連接超時(shí)(基于socket),使用代理驗(yàn)證。具體可以到innovation網(wǎng)站看看對(duì)比數(shù)據(jù)。
如下是灌水程序的簡(jiǎn)單程序,僅供參考
import java.net.*;
import java.io.*;
import java.util.*;
import HTTPClient.*;
class WebRequester{
private static InputStream istr = null;
private static OutputStream ostr = null;
private static NVPair form_data[];
private static HTTPConnection httpCon;
private static HTTPResponse rsp;
private static String host;
private static WebRequester instance;
private WebRequester(){
}
public static WebRequester getInstance(){
if(instance==null){
instance = new WebRequester();
}
return instance;
}
public static String request(HTTPConnection connection,String pathName,String method,NVPair form_data[]) {
try{
httpCon = connection;
if(method.toLowerCase().equals("get")){
if(form_data!=null)
rsp = httpCon.Get(pathName, form_data);
else
rsp = httpCon.Get(pathName);
}
else{
if(form_data!=null)
rsp = httpCon.Post(pathName, form_data);
else
rsp = httpCon.Post(pathName);
}
istr = rsp.getInputStream();
BufferedReader reader = new BufferedReader(new InputStreamReader(istr));
String line;
StringBuffer result = new StringBuffer();
while ((line = reader.readLine()) != null) {
result.append(line + System.getProperty("line.separator"));
}
return result.toString();
} catch(Exception e){
}
return "";
}
}
public class Flood
{
private HTTPConnection connection;
public Flood(){
getConnection("sitename.com",80);
}
public void releaseConnection(){
if(connection!=null){
connection.stop();
connection = null;
}
}
public HTTPClient.HTTPConnection getConnection(String hostName,int port){
if(connection==null){
try{
connection = new HTTPClient.HTTPConnection(hostName,port);
HTTPClient.Module.setPolicyHandler(null);
connection.addDefaultModule(Class.forName("HTTPClient.Module"), 1);
connection.addModule(Class.forName("HTTPClient.RedirectionModule"),2);
}catch(Exception e){
e.printStackTrace();
}
}
return connection;
}
public void post(String subject,String body){
NVPair[] form_data = new NVPair[5];
form_data[0] = new NVPair("forumID","87");
form_data[1] = new NVPair("subject",subject);
form_data[2] = new NVPair("classifier","-1");
form_data[3] = new NVPair("body",body);
form_data[4] = new NVPair("doPost"," 發(fā) 表 ");
WebRequester.getInstance().request(connection,"post!post.jspa","post",form_data);
}
public void reply(String thread,String subject,String body){
//提交表單需要多少項(xiàng),查看回復(fù)頁(yè)面表單可以獲得
NVPair[] form_data = new NVPair[7];
form_data[0] = new NVPair("forumID","87");
form_data[1] = new NVPair("subject",subject);
form_data[2] = new NVPair("classifier","-1");
form_data[3] = new NVPair("body",body);
form_data[4] = new NVPair("reply","true");
form_data[5] = new NVPair("threadID",thread);
form_data[6] = new NVPair("doPost"," 發(fā) 表 ");
WebRequester.getInstance().request(connection,"post!post.jspa","post",form_data);
}
public void finish(){
releaseConnection();
}
public void login(){
WebRequester wr = WebRequester.getInstance();
NVPair[] form_data = new NVPair[4];
//對(duì)應(yīng)登陸需要的表單字段填寫(xiě)
form_data[0] = new NVPair("formUsername","user");
form_data[1] = new NVPair("formPassword","pass");
form_data[2] = new NVPair("formLogins cript","sitename.com/loginuser.jsp");
form_data[3] = new NVPair("forumLogin","Y");
//提交到指定登陸頁(yè)面
wr.request(connection,"cgi-bin/gzhome/registration/LoginUser1.jsp","post",form_data);
//假如重定向,必須用該鏈接再次請(qǐng)求新的頁(yè)面
wr.request(connection,"loginuser.jsp","get",null);
wr.request(connection,"index.jspa","get",null);
}
public static void main(String[] args)
{
try{
Flood f=new Flood();
f.login();
//post一個(gè)新主題,id由系統(tǒng)自己產(chǎn)生
//f.post("friends","劇本");
//得到某個(gè)主題id,進(jìn)行指定數(shù)量的跟帖
for(int i=0;i<50;i++){
f.reply("67145","Re: 警告:在線(xiàn)朋友發(fā)言又少了,望奔走相告","洪水來(lái)了");
}
/*如下是讀取某個(gè)文件每一行文字作為回帖進(jìn)行灌水
BufferedReader br = new BufferedReader(new FileReader("E:""movie""101-105""Friends - 1x04 - TOW George Stephanopoulos.CHN.srt"));
StringBuffer sb = new StringBuffer();
String t = null;
int counter=0;
while((t=br.readLine())!=null){
if(t.length()==0){
//System.out.println(sb.toString());
//System.out.println("====");
counter++;
f.reply("66617","" + counter,sb.toString());
sb.delete(0,sb.length());
}
sb.append(t + ""n");
}*/
f.finish();
}catch(Exception e){
e.printStackTrace();
}
}
}
OKOK~大家自己研究
我做好了
本程序使用了HTTPClient包,下載地址:
http://www.innovation.ch/java/HTTPClient/
灌水機(jī)原理很簡(jiǎn)單,就是分析論壇的表單,用自己的程序模擬提交就可以了,
本文的目的在于介紹HTTPClient這個(gè)開(kāi)源工具,比jdk的.net包強(qiáng)何止百倍,
HTTPClient的特點(diǎn)是多個(gè)操作可以復(fù)用同一個(gè)連接,設(shè)置連接超時(shí)(基于socket),使用代理驗(yàn)證。具體可以到innovation網(wǎng)站看看對(duì)比數(shù)據(jù)。
如下是灌水程序的簡(jiǎn)單程序,僅供參考
import java.net.*;
import java.io.*;
import java.util.*;
import HTTPClient.*;
class WebRequester{
private static InputStream istr = null;
private static OutputStream ostr = null;
private static NVPair form_data[];
private static HTTPConnection httpCon;
private static HTTPResponse rsp;
private static String host;
private static WebRequester instance;
private WebRequester(){
}
public static WebRequester getInstance(){
if(instance==null){
instance = new WebRequester();
}
return instance;
}
public static String request(HTTPConnection connection,String pathName,String method,NVPair form_data[]) {
try{
httpCon = connection;
if(method.toLowerCase().equals("get")){
if(form_data!=null)
rsp = httpCon.Get(pathName, form_data);
else
rsp = httpCon.Get(pathName);
}
else{
if(form_data!=null)
rsp = httpCon.Post(pathName, form_data);
else
rsp = httpCon.Post(pathName);
}
istr = rsp.getInputStream();
BufferedReader reader = new BufferedReader(new InputStreamReader(istr));
String line;
StringBuffer result = new StringBuffer();
while ((line = reader.readLine()) != null) {
result.append(line + System.getProperty("line.separator"));
}
return result.toString();
} catch(Exception e){
}
return "";
}
}
public class Flood
{
private HTTPConnection connection;
public Flood(){
getConnection("sitename.com",80);
}
public void releaseConnection(){
if(connection!=null){
connection.stop();
connection = null;
}
}
public HTTPClient.HTTPConnection getConnection(String hostName,int port){
if(connection==null){
try{
connection = new HTTPClient.HTTPConnection(hostName,port);
HTTPClient.Module.setPolicyHandler(null);
connection.addDefaultModule(Class.forName("HTTPClient.Module"), 1);
connection.addModule(Class.forName("HTTPClient.RedirectionModule"),2);
}catch(Exception e){
e.printStackTrace();
}
}
return connection;
}
public void post(String subject,String body){
NVPair[] form_data = new NVPair[5];
form_data[0] = new NVPair("forumID","87");
form_data[1] = new NVPair("subject",subject);
form_data[2] = new NVPair("classifier","-1");
form_data[3] = new NVPair("body",body);
form_data[4] = new NVPair("doPost"," 發(fā) 表 ");
WebRequester.getInstance().request(connection,"post!post.jspa","post",form_data);
}
public void reply(String thread,String subject,String body){
//提交表單需要多少項(xiàng),查看回復(fù)頁(yè)面表單可以獲得
NVPair[] form_data = new NVPair[7];
form_data[0] = new NVPair("forumID","87");
form_data[1] = new NVPair("subject",subject);
form_data[2] = new NVPair("classifier","-1");
form_data[3] = new NVPair("body",body);
form_data[4] = new NVPair("reply","true");
form_data[5] = new NVPair("threadID",thread);
form_data[6] = new NVPair("doPost"," 發(fā) 表 ");
WebRequester.getInstance().request(connection,"post!post.jspa","post",form_data);
}
public void finish(){
releaseConnection();
}
public void login(){
WebRequester wr = WebRequester.getInstance();
NVPair[] form_data = new NVPair[4];
//對(duì)應(yīng)登陸需要的表單字段填寫(xiě)
form_data[0] = new NVPair("formUsername","user");
form_data[1] = new NVPair("formPassword","pass");
form_data[2] = new NVPair("formLogins cript","sitename.com/loginuser.jsp");
form_data[3] = new NVPair("forumLogin","Y");
//提交到指定登陸頁(yè)面
wr.request(connection,"cgi-bin/gzhome/registration/LoginUser1.jsp","post",form_data);
//假如重定向,必須用該鏈接再次請(qǐng)求新的頁(yè)面
wr.request(connection,"loginuser.jsp","get",null);
wr.request(connection,"index.jspa","get",null);
}
public static void main(String[] args)
{
try{
Flood f=new Flood();
f.login();
//post一個(gè)新主題,id由系統(tǒng)自己產(chǎn)生
//f.post("friends","劇本");
//得到某個(gè)主題id,進(jìn)行指定數(shù)量的跟帖
for(int i=0;i<50;i++){
f.reply("67145","Re: 警告:在線(xiàn)朋友發(fā)言又少了,望奔走相告","洪水來(lái)了");
}
/*如下是讀取某個(gè)文件每一行文字作為回帖進(jìn)行灌水
BufferedReader br = new BufferedReader(new FileReader("E:""movie""101-105""Friends - 1x04 - TOW George Stephanopoulos.CHN.srt"));
StringBuffer sb = new StringBuffer();
String t = null;
int counter=0;
while((t=br.readLine())!=null){
if(t.length()==0){
//System.out.println(sb.toString());
//System.out.println("====");
counter++;
f.reply("66617","" + counter,sb.toString());
sb.delete(0,sb.length());
}
sb.append(t + ""n");
}*/
f.finish();
}catch(Exception e){
e.printStackTrace();
}
}
}
OKOK~大家自己研究
我做好了