Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Difficulty with Layer 7 Attacks, and Layer 4 mitigation.

Layer 7:
No they don't hit a specific port. The script everyone uses doesn't require a port, even though on the panel of the tool there is a port text field, the variable isn't taken in and used in the usage statement.

Usage statement:
Invalid parameters!
Usage: ./ghp <target url> <method (GET or HEAD or POST)> <number threads to use> <proxy list> <time> [manual ip (0 to disable)] [post parameters (%RANDOM% will be replaced with random shit)]

Layer 4:
Try to attack on an open port, by default 80.
But you can do 53 21 22, whatever. It really depends on what ports are open, I would just use 80.

For me personally,
I use http://network-tools.com/ to lookup the DNS records of the domain to obtain the IP address then I would go onto http://ip-lookup.net/ enter the IP address and see who owns the IP address, it should show you what datacenter owns the certain ipv4 range.

I'm not entirely sure on how to find out the IP through a proxy/vpn as the only way I think is possible is to check the traffic coming in/out using tcpdump or something similar.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ProcessorFeb 5, 2022 10:37 PM 0 150 Feb 5, 2022 10:37 PM
Last Post: Processor
by schiz0idJul 29, 2020 01:54 PM 2 246 Jul 29, 2020 01:54 PM
Last Post: tux1
by blacksmithMay 29, 2020 04:43 PM 4 237 May 29, 2020 04:43 PM
Last Post: blacksmith