php curl 偽造IP來來源程式實現代碼

定義偽造使用者瀏覽器資訊HTTP_USER_AGENT

代碼如下

複製代碼

$binfo =array('Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; InfoPath.2; AskTbPTV/5.17.0.25589; Alexa Toolbar)','Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0','Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; Alexa Toolbar)','Mozilla/4.0(compatible; MSIE 6.0; Windows NT 5.1; SV1)',$_SERVER['HTTP_USER_AGENT']); //123.125.68.* //125.90.88.*

定義偽造IP來源段，這裡我找的是百度的IP地址

代碼如下	複製代碼
$cip = '123.125.68.'.mt_rand(0,254); $xip = '125.90.88.'.mt_rand(0,254); $header = array( 'CLIENT-IP:'.$cip, 'X-FORWARDED-FOR:'.$xip, );

利用curl開始向伺服器發送偽造資訊

代碼如下

複製代碼

function getimgs( $url,$userinfo,$header) {  $ch = curl_init();  $timeout = 5;  curl_setopt ($ch, CURLOPT_URL, "$url");  curl_setopt ($ch, CURLOPT_HTTPHEADER, $header);  curl_setopt ($ch, CURLOPT_REFERER, "http://www.baidu.com/");  curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);  curl_setopt ($ch, CURLOPT_USERAGENT, "$userinfo");  curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, $timeout);   $contents = curl_exec($ch);  curl_close($ch);  return $contents; }

擷取到資料我們再儲存

代碼如下	複製代碼
function saveimgs( $handle ) {  $fp = fopen('a.jpg',"w");  fwrite($fp,$handle);  unset($fp);  unset($handle); }

測試偽造IP執行個體

代碼如下	複製代碼
$url ='yun_qi_img/logo.jpg'; $u = $binfo[mt_rand(0,3)]; saveimgs(getimgs($url,$u,$header));

這樣就在你目前的目錄儲存成功了一個檔案a.jpg檔案，我現可以查看伺服器日誌是不是我們自定的使用者資訊呢

192.168.1.108 - - [22/Jul/2013:10:29:37 +0800] "GET /test.php HTTP/1.1" 200 1244 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; InfoPath.2; AskTbPTV/5.17.0.25589; Alexa Toolbar)"
192.168.1.108 - - [22/Jul/2013:10:29:37 +0800] "GET / HTTP/1.1" 200 40538 "http://www.baidu.com/" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; Alexa Toolbar)"
192.168.1.108 - - [22/Jul/2013:10:29:37 +0800] "GET /test.php HTTP/1.1" 200 1244 "-" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; InfoPath.2; AskTbPTV/5.17.0.25589; Alexa Toolbar)"
192.168.1.108 - - [22/Jul/2013:10:29:37 +0800] "GET / HTTP/1.1" 200 40538 "http://www.baidu.com/" "Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0"

看出來了吧，完全正確啊，只是IP地址我怎麼沒測試出來，這個使用php擷取ip地址時會是顯示我偽造IP地址了