+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: What is the best DDOS Method out of these Method:SSDP SUDP NTP ESSYN HOME x (/showthread.php?tid=4634099)
What is the best DDOS Method out of these Method:SSDP SUDP NTP ESSYN HOME x - JamesHen - Jan 12, 2015
I bought vDos to stress test my own servers
the first I tried went down easily with 1200 sec of SSDP
now I tried another and it didnt do anything..
out of all these which one is the most powerful for taking down web servers
Method:SSDP SUDP NTP ESSYN HOME xSYN Joomla Quake ICMP TS ACK
* - Alpis - Jan 13, 2015
NTP SSDP :) Layer 7 Joomla in my opinion :pPp
* - iMAD - Jan 13, 2015
SSDP but only if the person running the server has a decent SSDP Amp list
If not it will be as weak as piss.
* - _iiDaxter - Jan 13, 2015
Use Udp for people. Syn for sites.
There ya go
* - WillHackForPizza - Jan 13, 2015
Recursive DNS amplification is always a winner. Just no one talks about it on here. Also seen some cool SNMP/NTP abuses. UDP is good if you can get the volume.
Also dont rule out socket exhaustion based attacks.
* - Tabb - Jan 13, 2015
Considering your goal is webservers and the only HTTP method you listed is joomla, joomla.
* - mfacundo94 - Jan 13, 2015
It depends pretty much on your hardware capabilities, I mean, suppose you are in a network with decent hardware, let's say Juniper Network firewalls, in this case, you will do nearly anything with SSYN, SYN, ESSYN, UDP FLOOD as long as you do not saturate the banwidth, so layer 4 attacks are not an option.
Now, think you've not a good hardware and you're sharing resources for your website, then the most probably effective attack would be a layer 7 attack, such a slowris attack.
We can't say which method is better, it depends on the circumstances mainly.
* - Davy - Jan 13, 2015
Best method is not doing it ofcourse.
* - ρãήžε® - Jan 13, 2015
Joomla is by far the most advanced method out of everything. Ive bypassed ddos mitgation with it and it stays unmitgated.
* - Tabb - Jan 13, 2015
(Jan 13, 2015 10:25 AM)ρãήžε® Wrote: Joomla is by far the most advanced method out of everything. Ive bypassed ddos mitgation with it and it stays unmitgated.
Advanced isnt the term I'd use. It doesn't bypass anything, it just exploits the google map plugin for joomla and is rather easy to mitigate.
* - ρãήžε® - Jan 13, 2015
(Jan 13, 2015 02:06 PM)Tabb Wrote: Advanced isnt the term I'd use. It doesn't bypass anything, it just exploits the google map plugin for joomla and is rather easy to mitigate.
i ran it in short bursts of 60 seconds and looped it and it wasnt able to mitgate it
* - Tabb - Jan 13, 2015
(Jan 13, 2015 02:16 PM)ρãήžε® Wrote: i ran it in short bursts of 60 seconds and looped it and it wasnt able to mitgate it
"it" wasn't able to mitigate it? What?
If you look at the actual attack creating firewall rules for it is not difficult is what I meant.
* - ρãήžε® - Jan 13, 2015
(Jan 13, 2015 02:31 PM)Tabb Wrote: "it" wasn't able to mitigate it? What?
If you look at the actual attack creating firewall rules for it is not difficult is what I meant.
yea im sure it might not be difficult and im sure future attacks using the method on the same host i did wont work as effeciently as they did. I stopped the attack a while ago and their servers are still down. Its been 8 days now 😏