Denial of Service Attack[TUT]

Genesis [Fromwarriors]
12 years ago | edited 11 years ago

0

DISCLAIMER: I am not responsible for what you do with this information!! You could possibly go to prison if you attempt this on a website. Use for ethical purposes only!

I am using Backtrack 5R3 for this tutorial, but if you are using windows or mac, you might need to download and install some extra programming languages like Python and Perl.

A Denial of Service attack or DoS, is a way to shutdown a server by overloading it rendering it useless.

The tools we are going to need:
1. PyLoris
2. Slowloris
3. Tor
4. Catchy music, preferably dubstep
5. Common sense

Getting set up[SLOWLORIS]:

Before you get started with this: Slowloris is effective on most apache websites but can be protected against. So if you know that website is vulnerable to slowloris, then attack it :) But if it doesn’t, find an alternative(ex. PyLoris).

Download Tor from torproject.org [Choose your operation system]

Once you have installed Tor, open it up and it should connect to the Tor network.

After that is complete, download slowloris.pl from here: https://mega.co.nz/#!O9QUQYLZ!T7A-kgJYr_rC15PX7a9OzGfV1xFztHmY2p6buKyArU4

OPTIONAL: if you have Mac or PC, download perl from here(it’s used to run slowloris.pl): http://www.activestate.com/activeperl
Install that.

Once you got that stuff set up move on:

Open your terminal(CMD for windows) and cd to the destination of slowloris.pl.

example:
cd Desktop

Finding your target:

find the ip address or, god forbid, a websites DNS that you want to attack.

Once you have found “the one”, go back to your terminal(or CMD) and type the following command:

perl slowloris.pl -dns 1.1.1.271 -options (The ip address was a fake one.)

Turn on your music, and watch your target burn!

Getting set upPYLORIS:

Download Tor from torproject.org [Choose your operation system]

Once you have installed Tor, open it up and it should connect to the Tor network.

After that is complete, download PyLoris: http://sourceforge.net/projects/pyloris/

–SORRY Windows pplz, the file is tar.gz. Use WinRAR to extract the file and use Pyloris–

OPTIONAL: if you have Mac or PC, download python from here(it’s used to run pyloris.py): http://www.python.org/download/
Install that.

Once you got that stuff set up move on:

Open your terminal(CMD for windows) and cd to the destination of slowloris.pl.

example:
cd Desktop user@bt:~/Desktop$ cd pyloris-3.2

Then open Tor again, and in the vidalia control panel, go to settings > Advanced> Choose password and deselect randomly generate.

Go back to your terminal and type this command:
user@bt:~/Desktop/pyloris-3.2$ python tor_switcher.py

A box should pop up. Type in the password you just set in Tor.
Click Start.
(This masks you when you’re attacking using Tor)

Finding your target:

find the ip address or, god forbid, a websites DNS that you want to attack.

Now, open a second terminal and go to the folder you have pyloris.py in.
Run Pyloris.py

user@bt:~/Desktop/pyloris-3.2$ python pyloris.pl

The main box should pop up and you are on your way to attacking servers :)

Configure it as follows; Proxy Type, Host 127.0.0.1, and Proxy Port 9050. Your target goes in general as does the port its usually 80. You can raise the limits depending on how fast your computer is. Once its all set up, fire!

Don’t forget the dubstep you have in your playlist, it makes it a LOT more fun! :)

When you are done, just close all the shit you just did. Have fun!!

Oh, and comment your critisism on how well the tutorial is made.

Sail Safe.
Donations if possible: 1Cv4FrNBBF3LLjg6ceBBQQomKRTmzPNPFJ

daMage
12 years ago

0

PC users suck, eh? Including most of the linux users?
[quote=Fromwarriors]if you have Mac or PC, download python from here(it’s used to run slowloris.pl)[/quote]

I seriously doubt that you should run .pl files with python :p

daMage

daMage
12 years ago

0

Damn, forgot the most important thing: The slowloris attack affects only some servers and for example IIS and lighttpd are unaffected. See more in wikipedia.

Naturally since apache is in the list of affected servers, it is a quite common vulnerability, but it can be mitigated by compiling the apache with Event MPM enabled or with load balancers etc..

daMage

Genesis [Fromwarriors]
11 years ago

0

Whoops! I fixed it. Thanks for catching the typo :) I was tying this too fast :P

Sail Safe.
Donations if possible: 1Cv4FrNBBF3LLjg6ceBBQQomKRTmzPNPFJ

R2boot3r
11 years ago

0

Hello guys i’m new to this and i did everything correctly except when i start Tor switcher it give me this error

[18:07:18] TOR Switcher starting.
[18:07:18] There was an error: [Errno 111] Connection refused.
[18:07:18] Quitting.

if anyone could help me thanks

Genesis [Fromwarriors]
11 years ago

0

Dear R2boot3r,

I have this problem every time also. it has to do with the password you set. Try setting another passcode after this happens:
[18:07:18] TOR Switcher starting. [18:07:18] There was an error: [Errno 111] Connection refused. [18:07:18] Quitting.
and it should work. Hopefully it works! :)

Sail Safe.
Donations if possible: 1Cv4FrNBBF3LLjg6ceBBQQomKRTmzPNPFJ

Gninja
11 years ago

0

BT5 love it

![Image](/files/media/images/articles/0/0/up_bac59c3405ec8a1a28d6347c0b6ed62c.jpg)

nik849
11 years ago

0

Good work, Good tutorial!

? [djsimon21]
11 years ago

0

Very nice keep them coming :) Works nice

When solving problems, dig at the roots instead of just hacking at the leaves.