Denial of Service Methods - Revision history

>CrackRabbit at 03:57, 22 April 2013

2013-04-22T03:57:57Z

← Older revision	Revision as of 03:57, 22 April 2013
(No difference)

>AnonUser: Reverted edits by Shitshit (talk) to last revision by BABYZOR

2010-11-17T05:56:51Z

Reverted edits by Shitshit (talk) to last revision by BABYZOR

Show changes

>Shitshit: Protected "Denial of Service Methods" ([edit=sysop] (indefinite) [move=sysop] (indefinite))

2010-11-12T15:17:44Z

Protected "Denial of Service Methods" ([edit=sysop] (indefinite) [move=sysop] (indefinite))

← Older revision	Revision as of 15:17, 12 November 2010
(No difference)

>Shitshit at 15:17, 12 November 2010

2010-11-12T15:17:11Z

Show changes

>BABYZOR: Third step of handshake is ACK, not RST.

2010-10-23T08:38:56Z

Third step of handshake is ACK, not RST.

← Older revision		Revision as of 08:38, 23 October 2010
Line 61:		Line 61:
	On the internet, this is done with a process called the "TCP Handshake." This involves several "packets" of data being exchanged between your computer and the server, illustrated below.		On the internet, this is done with a process called the "TCP Handshake." This involves several "packets" of data being exchanged between your computer and the server, illustrated below.

	[[File:~~Tcphandshakebe8~~.gif]]		[[File:Tcphandshakebe9.gif]]

	Afterwards, you are connected and can request a web page, etc.		Afterwards, you are connected and can request a web page, etc. Additonally, RST = STFU, FIN = DONE SENDING.

	===Exploiting the TCP Handshake===		===Exploiting the TCP Handshake===
Line 99:		Line 99:
	This attack method involves using a machine as an unwitting proxy in the attack on another server. This works by sending ICMP packets (ping ICMP echo to be precise) to the 'proxy' machine, but spoofing the source address to that of the target machine. The unwitting proxy computer then floods the target with replies.		This attack method involves using a machine as an unwitting proxy in the attack on another server. This works by sending ICMP packets (ping ICMP echo to be precise) to the 'proxy' machine, but spoofing the source address to that of the target machine. The unwitting proxy computer then floods the target with replies.

	A more common (and more effective) form of this attack is to send SYN or SYN/ACK packets with spoofed source addresses. In the case of SYN packets with spoofed addresses, the "mirror" machine will send multiple SYN/ACK packets at the target for each SYN it receives. If SYN/ACK packets are sent, the "mirror" machine will merely blast the target with ~~RST~~ packets. This is called a "Reflective" DoS attack.		A more common (and more effective) form of this attack is to send SYN or SYN/ACK packets with spoofed source addresses. In the case of SYN packets with spoofed addresses, the "mirror" machine will send multiple SYN/ACK packets at the target for each SYN it receives. If SYN/ACK packets are sent, the "mirror" machine will merely blast the target with ACK packets. This is called a "Reflective" DoS attack.

	If UDP Packets are used, it is called a "FRAGGLE Attack"		If UDP Packets are used, it is called a "FRAGGLE Attack"

>Extrapolate: rearranged lists @ the bottom

2010-07-24T03:05:01Z

rearranged lists @ the bottom

← Older revision		Revision as of 03:05, 24 July 2010
Line 155:		Line 155:

	* Windows		* Windows
			** [[DoS 5.5]] (>1)
	** [[Longcat Flooder]] (HTTP, UDP, SYN Flood)		** [[Longcat Flooder]] (HTTP, UDP, SYN Flood)
			** [[Low Orbit Ion Cannon]] (TCP Flood)
	** [[rok/i/ts]] (UDP Flood)		** [[rok/i/ts]] (UDP Flood)
	** [[Sinflood]] (SYN Flood, Reflective SYN Flood)		** [[Sinflood]] (SYN Flood, Reflective SYN Flood)
	** [[Mt_pulse.pl]] (UDP Flood)
	** [[Low Orbit Ion Cannon]] (TCP Flood)
	** [[Untitled]] (TCP Flood)		** [[Untitled]] (TCP Flood)
	** [[DoS 5.5]] (>1)

	* Mac		* Mac
			** [[Hping]] (Everything)
			** [[UDP.pl]] (UDP Flood)
	** [[Zap Attack]] (UDP Flood)		** [[Zap Attack]] (UDP Flood)
	** [[Hping]] (Everything)
	** [[Mt_pulse.pl]] (UDP Flood)

	* Linux		* Linux
			** [[Hping]] (Everything)
	** [[Ssyn.pl]] (UDP Flood)		** [[Ssyn.pl]] (UDP Flood)
	** [[Hping]] (Everything)
	** [[Mt_pulse.pl]] (UDP Flood)
	** Ping (ICMP Flood, as root 'ping -f -s 65507 <target IP address>')		** Ping (ICMP Flood, as root 'ping -f -s 65507 <target IP address>')
			** [[UDP.pl]] (UDP Flood)


	[[Category:Tutorials]]		[[Category:Tutorials]]

	[[Category:Methods]]		[[Category:Methods]]

>Xyz: removed bwrape

2010-05-28T01:16:03Z

removed bwrape

@@ Line 173: / Line 173: @@
 ** [[Mt_pulse.pl]] (UDP Flood)
 ** Ping (ICMP Flood, as root 'ping -f -s 65507 <target IP address>')
 [[Category:Tutorials]]
 [[Category:Methods]]

>Nightcrawler: /* Exploiting the TCP Handshake */

2010-05-21T22:22:12Z

Exploiting the TCP Handshake

← Older revision		Revision as of 22:22, 21 May 2010
Line 69:		Line 69:
	The internet spans many continents, with all sorts of different ways to get from one place to another. Sometimes packets get lost. If one of the packets in the above handshake does get lost, the connection fails. Packets get lost quite often, but most of the time, your attempts to view web pages succeed.		The internet spans many continents, with all sorts of different ways to get from one place to another. Sometimes packets get lost. If one of the packets in the above handshake does get lost, the connection fails. Packets get lost quite often, but most of the time, your attempts to view web pages succeed.

	Why? Because ~~comptuers~~ send MULTIPLE packets, not just one, greatly increasing the chance that one will get through at each of the three steps, completing the handshake and getting you connected. Or, rather, web servers send multiple "SYN/ACK" packets (LOL YES) when the receive a "SYN" (HAY R U THAR?) packet. If the computer that started the handshake doesn't respond, the following occurs.		Why? Because computers send MULTIPLE packets, not just one, greatly increasing the chance that one will get through at each of the three steps, completing the handshake and getting you connected. Or, rather, web servers send multiple "SYN/ACK" packets (LOL YES) when the receive a "SYN" (HAY R U THAR?) packet. If the computer that started the handshake doesn't respond, the following occurs.

	[[File:Tcphandshakebrokehs5.gif‎]]		[[File:Tcphandshakebrokehs5.gif‎]]

>Oldmirror: /* TL;DR */

2010-05-07T11:23:34Z

TL;DR

← Older revision		Revision as of 11:23, 7 May 2010
Line 181:		Line 181:

	DoS is the process of beating the target's webserver senseless, until it stops working.		DoS is the process of beating the target's webserver senseless, until it stops working.
			DDoS dont werk a long time. 2-3days later noone remeber it.

			[[File:Cat-flood.jpg]]
			tip: (the boring way)
			1. /whois the server <br>
			2. found the hoster and read teh TOS<br>
			3. writt a e-mail the hoster Topic: cp/warz/other non TOS things hosting on this site xyz.<br>
			4. ???<br>
			5. Profit <br>

	Also, THE GAME		Also, THE GAME

	~~You fucking nigger, well I just lost.~~

	[[Category:Tutorials]]		[[Category:Tutorials]]

	[[Category:Methods]]		[[Category:Methods]]

207.62.155.240 at 05:22, 22 April 2009

2009-04-22T05:22:02Z

← Older revision	Revision as of 05:22, 22 April 2009
(No difference)