Post: PHP Signature Rotation Tutorial + Browser & IP Logging
05-10-2011, 04:32 PM #1
(adsbygoogle = window.adsbygoogle || []).push({}); The following idea was conceptualized by myself, and the code was collected from all over the internet, although parts of it are coded by me. This is one of my first tutorials, so I apologize in advance for any missing information.

What is a rotating signature?
Most everyone knows what a "rotating signature" is, but just in case you do not: A rotating signature is an image that changes to a random image (from a pool of your choice) every time you load or refresh the page.
Example: Refresh the page a couple of times, and you will see that my signature image will have changed.

What is this browser and IP logging thing you speak of?
This method makes it possible to log someones IP and what browser they are using when they load up an image. Practical Application: This could prove to be very useful if you are trying to attain someone's IP address. If your target was on a forum, you could send them a personal message with the image in 'img' tags, and when they view it, you will have their IP address safely logged. Not many people would suspect viewing a picture in their browser as a danger of any sort.

How does it work?
Very simple PHP. The link to the image will actually be a link to directory containing the images, disguised as an image file so that forum board will load it. For example the link to the image would look like this:
You must login or register to view this content.
^^Notice the trailing slash at the very end indicating a directory^^ No forum board I have seen notice this trailing slash when it is within image tags. Inside the directory you should have the picture(s) you want to be displayed (any amount from 1-∞Winky Winky, the php file which load the picture, and the log file (optional).

What you will need:
-A Web Server with PHP -- [size=x-small]**If you google "free web hosting", I'm sure it wouldn't be too hard to find and sign up for, one of these services.**[/size]
-The script. The code is below, OR to download (much easier):

Virus Scans:
NoVirusThanks:
File Info

Report date: 2011-01-31 00:14:18 (GMT 1)
File name: phprotatingsignaturefiles-zip
File size: 333071 bytes
MD5 Hash: aa92c646f307af257572b2fc2e3ced92
SHA1 Hash: e29c3c12ded4c86a1aea48aa05434d545781aab6
Detection rate: 0 on 16 (0%)
Status: CLEAN

Detections

a-squared -
Avast -
AVG -
Avira AntiVir -
BitDefender -
ClamAV -
Comodo -
Dr.Web -
F-PROT6 -
Ikarus T3 -
Kaspersky -
NOD32 -
Panda -
TrendMicro -
VBA32 -
VirusBuster -

Scan report generated by
You must login or register to view this content.

VirusTotal:
File name:
PHPRotatingSignatureFiles.zip
Submission date:
2011-01-30 23:13:25 (UTC)
Current status:
queued (#85) queued analysing finished
Result:
0/ 43 (0.0%)

VT Community

not reviewed
Safety score: -
Compact
Print results
Antivirus Version Last Update Result
AhnLab-V3 2011.01.27.01 2011.01.27 -
AntiVir 7.11.2.32 2011.01.30 -
Antiy-AVL 2.0.3.7 2011.01.28 -
Avast 4.8.1351.0 2011.01.30 -
Avast5 5.0.677.0 2011.01.30 -
AVG 10.0.0.1190 2011.01.30 -
BitDefender 7.2 2011.01.30 -
CAT-QuickHeal 11.00 2011.01.30 -
ClamAV 0.96.4.0 2011.01.30 -
Commtouch 5.2.11.5 2011.01.30 -
Comodo 7544 2011.01.30 -
DrWeb 5.0.2.03300 2011.01.30 -
Emsisoft 5.1.0.1 2011.01.30 -
eSafe 7.0.17.0 2011.01.30 -
eTrust-Vet 36.1.8126 2011.01.28 -
F-Prot 4.6.2.117 2011.01.30 -
F-Secure 9.0.16160.0 2011.01.30 -
Fortinet 4.2.254.0 2011.01.30 -
GData 21 2011.01.30 -
Ikarus T3.1.1.97.0 2011.01.30 -
Jiangmin 13.0.900 2011.01.30 -
K7AntiVirus 9.78.3680 2011.01.29 -
Kaspersky 7.0.0.125 2011.01.30 -
McAfee 5.400.0.1158 2011.01.30 -
McAfee-GW-Edition 2010.1C 2011.01.30 -
Microsoft 1.6502 2011.01.30 -
NOD32 5832 2011.01.30 -
Norman 6.06.12 2011.01.30 -
nProtect 2011-01-18.01 2011.01.18 -
Panda 10.0.3.5 2011.01.30 -
PCTools 7.0.3.5 2011.01.29 -
Prevx 3.0 2011.01.31 -
Rising 23.42.04.06 2011.01.28 -
Sophos 4.61.0 2011.01.30 -
SUPERAntiSpyware 4.40.0.1006 2011.01.30 -
Symantec 20101.3.0.103 2011.01.30 -
TheHacker 6.7.0.1.122 2011.01.30 -
TrendMicro 9.120.0.1004 2011.01.30 -
TrendMicro-HouseCall 9.120.0.1004 2011.01.30 -
VBA32 3.12.14.3 2011.01.29 -
VIPRE 8255 2011.01.30 -
ViRobot 2011.1.29.4282 2011.01.30 -
VirusBuster 13.6.172.2 2011.01.30 -
Additional information
Show all
MD5 : aa92c646f307af257572b2fc2e3ced92
SHA1 : e29c3c12ded4c86a1aea48aa05434d545781aab6
SHA256: 3da0a8eccd4d9fac9cd8693818af4954c14955e63e2b3c6afd56c611f39899ea

[size=medium]
[url=https://filebeam.com/aa92c646f307af257572b2fc2e3ced92]DOWNLOAD HERE[/url]
or
[url=https://localhostr.com/file/ndIfiw0/PHPRotatingSignatureFiles.zip]HERE (mirror)[/url]
or
[url=https://qooy.com/files/GLKKG75WNZ/PHPRotatingSignatureFiles.zip]HERE (mirror)[/url]
[/size]

Last edited by CodingNation ; 05-10-2011 at 04:36 PM.

Copyright © 2024, NextGenUpdate.
All Rights Reserved.

Gray NextGenUpdate Logo