Hey everyone, back with another interesting and crazy blog. In this blog I’m going to tell you how I DDOS attacked my high school’s (KPIS)/(vrec) website, just with a simple python script. So let’s get started.🤓
⚠️Disclaimer : This blog does not promote or encourage any Illegal activities, all information provided by this blog is meant for educational purpose only. The contributors do not assume any responsibility for the use of this tool.
Required Knowledge:
▪ What is DDOS?
▪ How DDOS Attack work?
▪ How to identify a DDOS attack?
▪ Python Script writing and understanding any python script.
▪ Networking Knowledge.
◾ What is DDOS?
➡DDOS Attack means “Distributed Denial-of-Service Attack” in which the attacker floods a server with internet traffic to prevent users from accessing connected online services and sites.
◾ How does this attack work?
➡The main motive of this attack is to overwhelm the devices, services, and network of its intended target with fake internet traffic, rendering them inaccessible to or useless for legitimate users.
◾ How to identify this kind of attack?
1. Certain IP addresses send too many connection requests over a short time.
2. Your server responds with a 503 unavailable error due to service outages. This error is usually gone when the traffic volume decreases. If it doesn’t disappear after a while, something is wrong.
3. Certain traffic source addresses keep querying for the same set of data long after the TTL for the site has passed. Authentic traffic isn’t supposed to behave so.
4. When your employees start reporting slow site performance due to using the same connection for internal software.
5. You can see unusual spikes in traffic in your GA reports and can’t come up with any viable reasons to explain them.
◾ Issue with identifying DDOS attack:
➡One of the biggest issues with identifying a DDOS attack is that the symptoms are not unusual. Many of the symptoms are similar to what technology users encounter every day, including slow upload or download performance speeds, the website becoming unavailable to view, a dropped internet connection, unusual media and content, or an excessive amount of spam.
◾Python Script:
‘DeadlyBooring_DOS’ is Python based Denial of Service attack script based on Slow Loris.
The attack method is actually really simple: For all sockets, we send a get request with the X-a header field, keeping the request open and making the server wait for the rest of the data. After each sent request, we wait for a short period of time before sending the next one, with making sure that every socket sends data at least once every couple of seconds so that the connection is not lost. Every lost socket is immediately replaced with a new one taking its place, guaranteeing that free server threads are populated again.
Comments
Post a Comment