+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: DNS Amplification Attack In a N00B Friendly way? (/showthread.php?tid=5331785)
DNS Amplification Attack In a N00B Friendly way? - Mr.Wolfie - Jul 8, 2016
This is a few questions. NOT A how to.
But first little story time from a recent event.
So this kid DDoSed me later i got in contact with him asked him for some stuff seemed like a genuine guy i asked him how he DDoSed me he said something about DNS spamming or whatever which got me thinking so hours of searching later i came to the conclusion that it was a DNS Amplification type of attack:
Because he said "The attack will continue for 24hrs. Good Night." which means it probably doesn't require a large ammount of power. Later he mentioned around 300 GB/s load ( Which is A LOT ) so this is what lead me to this conclusion it's an amplified attack. I didn't ask how he got my IP or anything tried to not be too nosy.
Now for my many questions :
1. How did he achive that size of an attack without a botnet he said he used "his own" network/computers
2. How did he get a hold of my IP when our only connection was via skype trough IM not Voice.
2.1. How Can I get someone's IP?
3. Am I correct about the method he used on the attack?
4. How can i protect myself against such attacks if attacker already has my IP.
5. How do I launch such attack??
I am very intrigued to figure this out.
I am very much an eye for eye kind of guy but i want to know how to launch such attack because i'm always trying to improve myself and learn new things. So far i have NO hacking or DDoSing experience and very minimal experience with Networking like in general management / port forwarding / server making. And have little to no experience with coding except some very minor with batch.
PS.- If you need any additional info post a reply i'll get back to you as soon as possible and as i said i have no hacking experience and am also using Windows 8.1 So if there any programs with a graphical interface that can achive that that would be ideal if not Thanks anyways.
PSS.- I read trough plenty of threads on HF but couldn't manage to find one explained a little more in depth
TL;DR - I got DDoSed i want to know how he got my IP and How can i DDoS someone.
If you read all this and got this far. Thank you so much.
Any suggestions and help is greatly appreciated.
👍
* - Tarek1338 - Jul 8, 2016
He can still get your IP by just using a skyperesolver. He need just to type in your skypename then your IP is there.
* - spooky hacker - Jul 8, 2016
Probably was using a web booter and if you had him added he probably deobed you or Wireshark through the connections if that still works.
* - Tarek1338 - Jul 8, 2016
(Jul 8, 2016 10:00 AM)$avage Wrote: Probably was using a web booter and if you had him added he probably deobed you or Wireshark through the connections if that still works.
What is deobed? :o
* - Mr.Wolfie - Jul 8, 2016
(Jul 8, 2016 10:00 AM)$avage Wrote: Probably was using a web booter and if you had him added he probably deobed you or Wireshark through the connections if that still works.Deobed? What does that mean?
Also yes I added him.
* - Z3r0C0d3 - Jul 8, 2016
1 - I guess he used Web Booter , its impossible to make 300GBp/s with your own PC
2 - he used Skype Reslover
2.1 - there is a lot of ways to get someone's IP
3 - I am not sure , You have to analys the traffic ( if the attack occurs again)
4 - if its DDOS its hard , because the attack comes from multiple places
5 - You need to have botnet or use Web Booter
DNS Amplification is a attack that send multiple spoofed DNS requests (With your IP) and the responds come to your PC , You need to have big Botnet to make the attack effective
I want to ask one thing .. why did he DDOSed your ? I believe noone DDOS you for no reason
* - Mr.Wolfie - Jul 8, 2016
(Jul 8, 2016 10:42 AM)Z3r0C0d3 Wrote: 1 - I guess he used Web Booter , its impossible to make 300GBp/s with your own PC
2 - he used Skype Reslover
2.1 - there is a lot of ways to get someone's IP
3 - I am not sure , You have to analys the traffic ( if the attack occurs again)
4 - if its DDOS its hard , because the attack comes from multiple places
5 - You need to have botnet or use Web Booter
DNS Amplification is a attack that send multiple spoofed DNS requests (With your IP) and the responds come to your PC , You need to have big Botnet to make the attack effective
I want to ask one thing .. why did he DDOSed your ? I believe noone DDOS you for no reason
I did not mention it on purpose it's because he was butthurt because we had enough people and didn't need or want him to play with us. Also any suggestions for web booters?
Thanks for the reply :)
* - Z3r0C0d3 - Jul 8, 2016
(Jul 8, 2016 11:16 AM)Mr.Wolfie Wrote: I did not mention it on purpose it's because he was butthurt because we had enough people and didn't need or want him to play with us. Also any suggestions for web booters?I dont use web booters so i cant recommend you one
Thanks for the reply :)
* - THC - Jul 8, 2016
(Jul 8, 2016 10:16 AM)Mr.Wolfie Wrote: Deobed? What does that mean?
Also yes I added him.
Deob = deobfuscated
Quote:Obfuscation is usually done to secure software from attackers, making it hard for those with malicious intentions to understand its inner functionality. Similarly, obfuscation may also be used to conceal malicious content in software. A deobfuscating tool is used to reverse-engineer such programs.
* - Mr.Wolfie - Jul 13, 2016
(Jul 8, 2016 09:03 PM)Sl0th. Wrote: 1. he might have used web based stressed or his own vps or dedi
2. Skype resolvers or wireshark
2.1. resolve their ip with skype, send them ip logger such as
3. yes I think so
4. change your ip
5. what is your skype i will teach you how
Hey thanks for your Response!
Maybe you can PM me with your skype i'd just like to keep it somewhat private and not post it publicly that is all
* - Remorseless - Jul 13, 2016
1.This idiot did not hit 300Gbps of DNS. That's pretty hard to do.
2.He could've used deobfuscated skype to acquire your ip - or your have a static ip stored on skype resolvers.
2.1. Deobfuscated skype, hyperlinked ip loggers in webskype.
3. Probably.
4. Get a new ip - although this won't really matter if the attacker has as much power as he said, he could just hit your edge off. In my opinion, best way to hide your ip is by using load balancing proxies (use proxifier for this). Basically, it changes your ip to a different proxy with every request you send or receive.
5. Purchase spoofing server, purchase dns list. ./50x ip port threads list time or whatever I haven't done it in a while.
* - Mr.Wolfie - Jul 13, 2016
(Jul 13, 2016 08:10 AM)Remorseless Wrote: 1.This idiot did not hit 300Gbps of DNS. That's pretty hard to do.
2.He could've used deobfuscated skype to acquire your ip - or your have a static ip stored on skype resolvers.
2.1. Deobfuscated skype, hyperlinked ip loggers in webskype.
3. Probably.
4. Get a new ip - although this won't really matter if the attacker has as much power as he said, he could just hit your edge off. In my opinion, best way to hide your ip is by using load balancing proxies (use proxifier for this). Basically, it changes your ip to a different proxy with every request you send or receive.
5. Purchase spoofing server, purchase dns list. ./50x ip port threads list time or whatever I haven't done it in a while.
I do have a dnslist and i've also found some DDoS scripts but honestly i have no clue how to run them / use them.