Ssyn.pl

From /i/nsurgency W/i/ki
Revision as of 14:47, 20 April 2009 by >Maxwell (Protected "Ssyn.pl" ([edit=autoconfirmed] (indefinite) [move=autoconfirmed] (indefinite)))
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

syn.pl is a perl-script in the spirit of pyRAEP and Longcat. It does what any normal synflooder does only a bit better. I got bored with the line of "Linuxfags use hping3" - it is very inefficient. For the basic randomize approach, writing a simple code would do the job would be better.

Tech[edit]

Any SYN-flooder trades in half-open tcp connections - those in which the SYN has been received and ACK is sent, but as of yet the SYN-ACK packet hasn't yet been sent in the three-way handshake. The traditional SYN-flooder uses random source-IP:s on the packets, but this is inefficient in as the node in question often receives a "destination unreachable" ICMP from some network router before the half-open connection is timed out.

Ssyn.pl uses nmap to find IP:s which don't reply on ACK - silently drop the packet - due to paranoia and O'Reilly books. This means, each and every packet has to timeout in the OS tcp/ip buffer. This can either be dealt with by ignoring incoming connections or allocating more resources. This has the effect of making the system run essential functions slower, often crashing the machine or an almost total blackout in serving webpages, mail services, etc...

Also, 'ssyn.pl' is a abbreviation of 'sendsyn'

Note: for an eternal run, specify --iteration=-1

Requirements[edit]

Download[edit]