+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: PDoSing (Permanent Denial of Service) | Linksys Routers (/showthread.php?tid=3947144)
PDoSing (Permanent Denial of Service) | Linksys Routers - Niggz - Dec 23, 2013
[img]http://sadpanda.us/images/1845387-W76L1JO.png[/img]
I am not going to make this a nice and neat, spiffied up tutorial with nice GFX because I feel that the information in the tutorial is good enough to get a positive feedback.
So, I was looking around HF and I couldn't seem to come up with one tutorial on PDoS'ing. Maybe it's because not a lot of people are familiar with the technique. But that is why I am making a tutorial for you guys.
What is PDoS'ing?
PDoS Stands for (Permanent Denial of Service). Like the famous DDoS Attack (Distributed Denial of Service), PDoS'ing causes the victim to get kicked offline. But a DDoS attack doesn't last very long at all. If you want to really punish your victim then you will need to go with PDoS'ing him/her as it will last permanently.
You will need
- Remote Administration Tool
- Background knowledge of routers
- Victim as a Slave
Before we get started you will need to download my Bricked Firmware File. http://www.mediafire.com/download/egqa951cjc73ebd/dd-wrt.v24_voip_generic.bin
Step 1
Open up your RAT and start remote administrating your Victim.
Step 2
Go to their CMD and type in this:
Code
ipconfig | findstr "Gateway"You should receive an output like this:
Code
Default Gateway . . : 10.0.0.1Step 3
Go into Google Chrome or whatever their web browser is and type in their default gateway.
You will be brought to Linksys's website if you have done everything correctly.
Step 4
Enter the Saved Credentials to the site.
Now go over to the Administration Tab and under that click Firmware Upgrade.
Click on choose file click on the my Bricked Firmware File.
Now you have completed your first PDoS!
* - еlixir - Dec 23, 2013
Wheb I read the title I got a little excited. I thought you knew how to fry a remote host's hardware.
* - Goodies - Dec 23, 2013
Sl0w go look up something called Sockstram. It can DEFINITELY result in PDOS.
Basically, you know the normal TCP handshake?
SYN
SYN/ACK
ACK
?
Well, the "window size" in the TCP ACK packet dictates the amount of data that can be sent/received. Sockstream actually sets this to 0 so the connection stays open, it allocates space in RAM for it, and doesn't use it. I've taken down servers with 8GB RAM and it can DEFINITELY affect hardware beyond repair :D
(Dec 23, 2013 01:54 PM)Dr. Caspers Wrote: Wheb I read the title I got a little excited. I thought you knew how to fry a remote host's hardware.
Read my post below yours but above this one :)
* - Mafὶa - Dec 23, 2013
Bookmarked this for later use, currently I have no one who pisses me off to this point.
* - еlixir - Dec 23, 2013
(Dec 23, 2013 01:55 PM)Goodies Wrote: Sl0w go look up something called Sockstram. It can DEFINITELY result in PDOS.
Basically, you know the normal TCP handshake?
SYN
SYN/ACK
ACK
?
Well, the "window size" in the TCP ACK packet dictates the amount of data that can be sent/received. Sockstream actually sets this to 0 so the connection stays open, it allocates space in RAM for it, and doesn't use it. I've taken down servers with 8GB RAM and it can DEFINITELY affect hardware beyond repair :D
Read my post below yours but above this one :)
Can this be done to a home connection with an open port? It seems like a program needs to be listening on said port in order for this to work.
* - That_Guy120 - Dec 23, 2013
what if they just restart their router? or get a new one?
* - Niggz - Dec 23, 2013
(Dec 23, 2013 02:00 PM)That_Guy120 Wrote: what if they just restart their router? or get a new one?
1. Restarting there Router won't do anything.
2. They won't realize that they would have to buy a new router for a long time.
* - Goodies - Dec 23, 2013
(Dec 23, 2013 01:57 PM)Dr. Caspers Wrote: Can this be done to a home connection with an open port? It seems like a program needs to be listening on said port in order for this to work.
Absoulely.
The thing is, this attack is old (2008) but is only now starting to be used and therefore does not have any security measures. It's as simple as dropping packets with a 0 window size.
The problem with that is TCP's built-in flow control and congestion control uses that, but it's VERY rare anyways :P
* - aaronq46 - Dec 23, 2013
Nice tutorial :D Is there any routers this works on other than linksys?
* - Elite Hacker 69 - Dec 23, 2013
This is pretty sweet but does it only work for Linksys routers?
I might make myself blackhat just to do this to someone if I can find out how to infect them, assuming I had a good enough reason.
Cool tutorial.
* - Goodies - Dec 23, 2013
(Dec 23, 2013 02:02 PM)Sl0w Wrote: 1. Restarting there Router won't do anything.
2. They won't realize that they would have to buy a new router for a long time.
This.... lol once you flash the firmware, they're fucked xD
I know some routers that start a TFTP demon that can allow you to flash via TFTP (FTP that uses UDP rather than TCP... T = Trivial).
But something tells me people dumb enough to run a RAT aren't the best and brightest when it comes to router re-flashing...
Gj Sl0w :D I enjoyed.
* - Niggz - Dec 23, 2013
(Dec 23, 2013 02:05 PM)Bliss n Eso Wrote: This is pretty sweet but does it only work for Linksys routers?
I might make myself blackhat just to do this to someone if I can find out how to infect them, assuming I had a good enough reason.
Cool tutorial.
No, it probably works on some other routers as well. I just have only tested the attack out on Linksys Routers.