ToolWar | Information Security (InfoSec) Tools: DDoS

GoldenEye (DoS Testing) :: Tools

<div class="separator" style="clear: both; text-align: center;">
<img alt="ddos icon" border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJOQnS__a36My3QgFrkkZZnKbMa2sQ5wymnzD-TYPn2-Hi3HzwaqF7hyphenhyphenimikRz5C7uJ3EQc2UHSYhjBNDc4TDogFEdp8zIL-ab7q41TBZPSowkU6qXuTkKbYPg3QOuCHEa5gb1WjXFL0js/s1600/ddos+logo.jpg" title="ddos icon" width="400" /></div>
<div style="text-align: justify;">
<b>GoldenEye</b> is a <b>HTTP DoS test tool</b>. This software is distributed under the <i>GNU General Public License</i> version 3 (GPLv3). <b>GoldenEye</b> is a <b><acronym title="HyperText Transfer Protocol">HTTP</acronym>/S
 Layer 7 <a href="http://www.toolwar.com/search/label/DDoS" target="_blank">Denial-of-Service</a> Testing Tool</b>. It uses KeepAlive (and 
Connection: keep-alive) paired with Cache-Control options to persist 
socket connection busting through caching (when possible) until it 
consumes all available sockets on the <acronym title="HyperText Transfer Protocol">HTTP</acronym>/S server.</div>
<div style="text-align: justify;">
This project started by the influence of Barry Shteiman who created HULK, a Proof-of-concept <a href="http://www.toolwar.com/search/label/Tools" target="_blank">tool</a> that I decided to improve which later became <b>GoldenEye</b>. Kudos for you Barry! This software is written in purely<a href="http://www.toolwar.com/search/label/Python" target="_blank"> Python</a>.</div>
<h3 style="text-align: justify;">
Tutorial ::</h3>
<div style="text-align: justify;">
<b>Usages :: </b></div>
<pre><span style="font-family: "Courier New",Courier,monospace;"><code> USAGE: ./goldeneye.py <url> [OPTIONS]

OPTIONS:
     Flag           Description                     Default
     -t, --threads      Number of concurrent threads                (default: 500)
     -m, --method       HTTP Method to use 'get' or 'post'  or 'random'         (default: get)
     -d, --debug        Enable Debug Mode [more verbose output]         (default: False)
     -h, --help         Shows this help</code></span></pre>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Download ::</h3>
<div style="text-align: justify;">
<b><span style="font-size: small;"><span style="font-weight: normal;">Python :: <a href="https://github.com/jseidl/GoldenEye/archive/master.zip" target="_blank">GoldenEye</a><b> (.py)</b></span></span></b></div>
<div style="text-align: justify;">
<b>Source Website ::</b>  <a href="https://github.com/jseidl/GoldenEye">https://github.com/jseidl/GoldenEye</a></div>

GoldenEye (DoS Testing) :: Tools

GoldenEye is a HTTP DoS test tool . This software is distributed under the GNU General Public License version 3 (GPLv3). GoldenEye is ...

HULK (Web Server DDoS) :: Tools

<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<img alt="hulk ddos tool" border="0" height="212" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmkIpDIrPxvWHtvaai_4lmV1eyCCUucwGOrd8aUni-ylFt1wNOuMbrXPPPrtc8hntwhyphenhyphenoPGGfY1vutVU40iKl62ewiHoIVJpoPAVQxG0fGoJuJYywjG5L1Kwvzl-NBExPpV23vg0rSOtoY/s320/hulk+web+server+logo.jpg" title="hulk ddos tool" width="320" /></div>
<b>HULK</b> is a <i>web server denial of service tool (DDoS Tool)</i> written for research 
purposes. It is designed to generate volumes of unique and obfuscated 
traffic at a webserver, bypassing caching engines and therefore hitting 
the server's direct resource pool.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
The <b>Hulk Web server</b> is a brainchild of Barry Shteiman. This<i> DDoS attack 
tool </i>distinguishes itself from many of the other tools out in the wild. 
According to its creator, the Hulk Web server was born of his conclusion
 that most available DDoS attack tools produced predictable repeated 
patterns that could easily be mitigated. The principle behind the Hulk 
Web server is that a unique pattern is generated at each and every 
request, with the intention of increasing the load on the servers as 
well as evading any intrusion detection and prevention systems. </div>
<h3 style="text-align: justify;">
Some Techniques</h3>
<ul style="text-align: justify;">
<li>Obfuscation of Source Client – this is done by using a list of known
 User Agents, and for every request that is constructed, the User Agent 
is a random value out of the known list</li>
<li>Reference Forgery – the <i>referer</i> that points at the request is obfuscated and points into either the host itself or some major prelisted websites.</li>
<li>Stickiness – using some standard Http command to try and ask the 
server to maintain open connections by using Keep-Alive with variable 
time window</li>
<li>no-cache – this is a given, but by asking the HTTP server for <i>no-cache</i> , a server that is not behind a dedicated caching service will present a unique page.</li>
<li>Unique Transformation of URL – to eliminate caching and other 
optimization tools, I crafted custom parameter names and values and they
 are randomized and attached to each request, rendering it to be Unique,
 causing the server to process the response on each event.</li>
</ul>
<div style="text-align: justify;">
<b>Video Tutorial :: </b><a href="https://www.youtube.com/watch?v=dYjx2VoXjEA" target="_blank">Click Here</a></div>
<div style="text-align: justify;">
<b>Download Here :: </b><a href="http://packetstormsecurity.com/files/download/112856/hulk.zip" target="_blank">Hulk.zip</a><b><a href="http://packetstormsecurity.com/files/download/112856/hulk.zip" target="_blank"> </a></b></div>
<div style="text-align: justify;">
<b>Official Website :: </b>http://www.sectorix.com/ </div>

HULK (Web Server DDoS) :: Tools

HULK is a web server denial of service tool (DDoS Tool) written for research purposes. It is designed to generate volumes of unique an...

Hyenae (Network Packet Generator) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBMOLR2ZTa5RSR8Ux4czLsXWaN9-LIIMiXjO7bHfNrMnqzxEK_pH_fwpipilVGQ9N-wcK531BpSUSESlvGQb9JJZTY7zskNPggwFuJQGEQCdlqHYq6-Potb1RxU6O1kCfmV5GsbTWu1dek/s1600/hyenae+screenshot.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hyenae logo" border="0" height="230" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBMOLR2ZTa5RSR8Ux4czLsXWaN9-LIIMiXjO7bHfNrMnqzxEK_pH_fwpipilVGQ9N-wcK531BpSUSESlvGQb9JJZTY7zskNPggwFuJQGEQCdlqHYq6-Potb1RxU6O1kCfmV5GsbTWu1dek/s400/hyenae+screenshot.jpg" title="Hyenae logo" width="400" /></a></div>
<div style="text-align: justify;">
<b>Hyenae</b> is a highly flexible platform independent <b>network packet  generator</b>. It allows you to reproduce several MITM, DoS and DDoS attack  scenarios, comes with a clusterable remote daemon and an interactive  attack assistant.</div>
<div style="text-align: justify;">
<br /></div>
<br />
<br />
<header>                 <div style="text-align: left;">
<span style="font-size: large;">Features :-</span></div>
</header>                              <br />
<ul class="features">
<li class="feature">ARP-Request flooding</li>
<li class="feature">ARP-Cache poisoning</li>
<li class="feature">PPPoE session initiation flooding</li>
<li class="feature">Blind PPPoE session termination</li>
<li class="feature">ICMP-Echo flooding</li>
<li class="feature">ICMP-Smurf attack</li>
<li class="feature">ICMP based TCP-Connection reset</li>
<li class="feature">TCP-SYN flooding</li>
<li class="feature">TCP-Land attack</li>
<li class="feature">Blind TCP-Connection reset</li>
<li class="feature">UDP flooding</li>
<li class="feature">DNS-Query flooding</li>
<li class="feature">DHCP-Discover flooding</li>
<li class="feature">DHCP starvation attack</li>
<li class="feature">DHCP-Release forcing</li>
<li class="feature">Cisco HSRP active router hijacking</li>
<li class="feature">Pattern based packet address configuration</li>
<li class="feature">Intelligent address and address protocol detection</li>
<li class="feature">Smart wildcard-based randomization</li>
<li class="feature">Daemon for setting up remote attack networks</li>
<li class="feature">HyenaeFE QT-Frontend support</li>
</ul>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/uQsNb88coa4?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
<b><br /></b></div>
<div style="text-align: left;">
<b>Download Here :: </b><a href="http://sourceforge.net/projects/hyenae/files/latest/download" target="_blank">Hyenae 0.36 (for Windows)</a><b><br /></b></div>
<div style="text-align: left;">
<b>Source ::</b> http://sourceforge.net/projects/hyenae/</div>
<ul class="features">
</ul>
<div style="text-align: justify;">
</div>
</div>

Hyenae (Network Packet Generator) :: Tools

Hyenae is a highly flexible platform independent network packet generator . It allows you to reproduce several MITM, DoS and DDoS atta...

BoNeSi (DDoS Botnet Simulator) :: Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<img alt="botnet image" border="0" height="267" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb2QJrXDxPXxucvDRBpPq9Z0JXDanBCAptS0_mEXCfxC8HUvUncdsBgLZvtOinpVWo7fsxlPIlk6KnwB9UJQiV-A7VQ-2chiZLnXC9t4T9ZVXVWV9kcB5EqMRnQbHQVE4J7zd60XDXOJHz/s640/botnet.jpg" title="botnet image" width="640" /></div>
<div style="text-align: justify;">
<b>BoNeSi</b>, the <i>DDoS Botnet Simulator</i> is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study the effect of DDoS attacks. <br />
<br />
<b>BoNeSi</b> generates ICMP, UDP and TCP (HTTP) flooding attacks from a defined botnet size (different IP addresses). BoNeSi is highly configurable and rates, data volume, source IP addresses, URLs and other parameters can be configured. <br />
<br />
There are plenty of other tools out there to spoof IP addresses with UDP and ICMP, but for TCP spoofing, there is no solution. BoNeSi is the first tool to simulate HTTP-GET floods from large-scale bot networks. BoNeSi also tries to avoid to generate packets with easy identifiable patterns (which can be filtered out easily). <br />
<br />
We highly recommend to run BoNeSi in a closed testbed environment. However, UDP and ICMP attacks could be run in the internet as well, but you should be carefull. HTTP-Flooding attacks can not be simulated in the internet, because answers from the webserver must be routed back to the host running BoNeSi. <br />
<br />
<b>BoNeSi</b> sniffs for TCP packets on the network interface and responds to all packets in order to establish TCP connections. For this feature, it is necessary, that all traffic from the target webserver is routed back to the host running BoNeSi </div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<b>Download Here ::</b> <a href="http://bonesi.googlecode.com/files/bonesi-0.2.0.tar.gz" target="_blank">BoNeSi 0.2.0.tar.gz</a></div>
<div style="text-align: justify;">
<b>Source ::</b> http://code.google.com/p/bonesi/</div>
</div>

BoNeSi (DDoS Botnet Simulator) :: Tools

BoNeSi , the DDoS Botnet Simulator is a Tool to simulate Botnet Traffic in a testbed environment on the wire. It is designed to study t...