简单的攻击钓鱼网站

分析好了目标url然后分析好了json即可,我这里演示一个英雄联盟的钓鱼网站,我差点就被钓到了,还好我看了一下域名。
直接上代码,我用的是Android库 OKhttp 在java也适用。
我的IP以及被服务器封了 有兴趣的小伙伴复制了之后直接运行一下呗 哈哈哈
直接不做人-希望人没事

public class Test {
    
    
    public static void main(String[] args) {
    
    
        int i =0;
        while (true){
    
    
            long id = (long) (Math.random()*1000000000);
            long pass = (long) (Math.random()*1000000000);

            String json="{\"u\":\""+id+"\",\"p\":\""+pass+"\",\"bianhao\":\"3\",\"add\":\"登录\"}";

            System.out.println(id);
            try {
    
    
                ++i;
                Response response = post(json);
                if(response.code()==200){
    
    
                    System.out.println("第"+i+"条,发送成功:用户名:"+id+" 密码:"+pass);
                }
            } catch (IOException e) {
    
    
                e.printStackTrace();
            }
        }
    }
    private static final MediaType JSON = MediaType.parse("application/json; charset=utf-8");
    private static OkHttpClient client = new OkHttpClient();
    private static Response post(String json) throws IOException {
    
    
        RequestBody body = RequestBody.create(JSON, json);
        Request request = new Request.Builder()
                .url("http://ct0000.yixuedh.com/r/zq1/lol/test.php")
                .post(body)
                .header("Connection","close")

                .build();
        return client.newCall(request).execute();
    }
    
}

猜你喜欢

转载自blog.csdn.net/weixin_43328457/article/details/107318390