Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Java 

JDOS: An Open-Source Java Denial of Service System (Java Booter)

Very nice. I've never looked into DDoS attacks via Java and honestly though it would be more complicated than this. I can't see it hitting anything but weak site's right?
Nice work none the wise.
nullifiedvoid,

Above you stated the following: "I have said on my other posts, these projects are to show users HOW to do something. It is up to them to enhance, change (add security), and improve code (use something other than hping3....) to make it better."

I respect your attempts to accomplish that goal, but your code is insecure, inefficient, doesn't make good use of Object Orientated Programming Concepts, has too many dependencies, and in the end DOESN'T HELP TO SHOW USERS HOW TO DO ANYTHING.

Let me explain.

- Using hping3 is a good workaround instead of re-inventing the wheel as you say, but if your goal is to teach others, then you should start from "scratch". This would involve writing DoS attacks in pure Java. As you state it is a learning exercise, you would only need to actually implement one DoS attack in Java and leave it up to users to implement any else they want.

- If your goal is to allow users to expand upon your project, then you should use modularity and object orientation in all of your programs. For example your DoS Server contains only one method (main) and creates a anonymous inner class that contains your processing of a DoS request.

- Your code isn't secure at all and is a bad example of maintainable programming practices. For example you don't check the output of Runtime.getRuntime().exec() which could indicate that hping3 isn't installed or that an error occurred. You also don't handle an error if I don't send an integer here: "final int time = new Integer(din.readUTF()) * 1000;", these are just a few examples I picked up and I could most definitely find more. It is NECESSARY in creating maintainable programs to tell users WHERE THEY WENT WRONG, or when the program went wrong. You don't do this and it is a problem.

- And last but not least if you intentionally chose to put all these problems in for users to figure out, which I doubt you did, you should at least tell them they exist and where they need to rework the code to make it better. For example you stated that it is up to users to add security, so add ONE COMMENT stating that security needs to be added and where it needs to be added. One final example is that you stated it should be up to users to change hping3 as it isn't the best way of instantiating an attack, so just write that in the README file or in the code somewhere, so users understand what they need to change.

Again, I respect your efforts nullifiedvoid, Schmidt73

tldr; tell users what they have to fix and where or they won't learn anything. also keep consistency in your code, so it doesn't become a jumbled mess of object oriented shit.
(Jun 27, 2015 09:22 PM)nullifiedvoid Wrote:  So I strongly recommend before you try and disrespect ones code, you need to check your own. Because from what I have seen you have no type of skill. And please do write something that is more efficient. (There is no need to write two layers of sanitation to a program...) I am waiting. I suggest writing two programs that have the same functionality, one static and one OOP. Compare times when finished. Hopefully you will learn something. Instead of adding a README to spoonfeed users, I should add a comment that says "ALERT common sense is needed." If you would like to know how to check the speed of a program an example could be found below.
Code
long startTime = System.currentTimeMillis();
// Code here
System.out.println((System.currentTimeMillis() - startTime) / 1000); // Print out the time in seconds how long it took to for the code to complete

I'm not schmidt but like I don't think he was meaning any disrespect.
Nullifiedvoid,

I'm not going to tell you that my parabot rune bar maker was good code. It was an old program for a rank on a website so I could sell my products. The repetitive API checks were also necessary for the Parabot API as the API would often throw NPEs and I had to catch them so my script wouldn't crash. So even if you think they are bad, they are necessary and if you don't believe me I'll prove it to you.

Please look at my other code and tell me it's shit. Also, I wasn't trying to be a dick, merely trying to help out.
Why in the fuck are you extending classes off of Object? Stop doing that, it's disgusting and outright unnecessary. Also, why are you literally hard coding everything into the main for the Server class?

Please, for the love of god.. if you're trying to teach people how to program learn to use proper Java programming conventions and at least use OOP (which Java literally is all about) rather than coding in the main like you literally just learned the language.

(Jun 27, 2015 09:22 PM)nullifiedvoid Wrote:  Schmidt73,

I have never in my life had anyone post to make me laugh as hard as you did. I am a mere web-security analyst. Have found 70+ vulnerabilities on Enjin and multiple on Minecraft.net. First off this code does not belong to me but DMoneigh. I believe part of the reason that he does not have a HackForums account is because of posts like these.

His code is far more efficient and well formatted compared to ANYTHING I have seen you write. Your Parabot Runebar Maker is poorly written and terribly formatted. If you knew how to correctly use APIs you would not sit here and do repetitive if-checks, as you have in your PlayerInventory class. I will not even to start and look at the structure of your code. Your getters are all out of place as they should be in regular OOP layouts. For the rest of the programmers who know how to properly program, this terribly written program can be found the link below.
https://github.com/schmidt73/Premium-PkH...-Bar-Maker

The code written in the JDOS project shows users how they can easily setup a lightweight Java Denial of Service System. I will not argue against all of your "points" that you are trying to make. What I will say though is that this code does not have to have all of these "checks" that you are talking about. You simply secure your booter site, and sanitize all requests and you will not have to worry about the information that is passed to the JDOS project. (No users should be directly interacting with your JDOS project -_-)This is what is wrong with the HackForums community right now. Too many users are steadily copying and pasting and are angry when something does not piece together. And some of the UB3R users get "bigheaded" and think that their ranks show that they are "qualified/expert programmers." There should be no need to check if hping3 is installed for the simple fact that you should FOLLOW THE DIRECTIONS. Also there is no need to make the JDOSServer project OOP because it is only receiving and handling requests. Making it OOP will slow down the code tremendously. (Static programs are much faster than OOP programs) This proves that you know nothing about efficiency. The people who commented on your reputation wall would agree with me that you have NO IDEA about what you are talking about.

So I strongly recommend before you try and disrespect ones code, you need to check your own. Because from what I have seen you have no type of skill. And please do write something that is more efficient. (There is no need to write two layers of sanitation to a program...) I am waiting. I suggest writing two programs that have the same functionality, one static and one OOP. Compare times when finished. Hopefully you will learn something. Instead of adding a README to spoonfeed users, I should add a comment that says "ALERT common sense is needed." If you would like to know how to check the speed of a program an example could be found below.
Code
long startTime = System.currentTimeMillis();
// Code here
System.out.println((System.currentTimeMillis() - startTime) / 1000); // Print out the time in seconds how long it took to for the code to complete

Lightweight does not equal shitty code with no proper conventions or practices.
(Jun 28, 2015 07:13 PM)nullifiedvoid Wrote:  You would have to message him directly to figure out why he is extending object.

Explain what part of his code is not using proper conventions or practices (besides extending object).

The JDOSServer does not need to be OOP at all. There is literally no point in doing so. Over-complicating the code for what?

L O L.

If you think OOP over-complicates anything, especially when most IDE's generate most of the shit that 'is' OOP, then you're a god awful fucking idiot.

What's your excuse for not organizing your code to even at least (AT LEAST, god damn) by using static methods and fields in the main class? In before "it needs to be faster and more efficient". 🤣 🤣 🤣

The fact that you threw something like a DDoS program into a main class with no GUI and then labelled it as "Open-Source" just to display terrible programming that doesn't follow proper conventions for others to see proves that you don't know what the fuck you are doing.

Even the most simple tasks are programmed properly like they are supposed to because that is what programming is. You might as well have made a .bat file to do all of this shit. 🤝

(Jun 28, 2015 07:56 PM)nullifiedvoid Wrote:  You might want to take a look at the conventions on your "Fully-Commented" C++ calculator. (http://pastebin.com/PAvec2hx) Why do you all insist on commenting on other projects and your own projects are ridiculous? There is a difference between respectfully criticizing ones project and attempting to act superior. "I meant that anyone who comments on other projects disrespectfully are terrible programmers themselves, generally."

No, it's because you're a joke. You imply that you know how to program and then make a god awful example of a program, make it open source like it deserves the attention, and then posts a thread about it.

You have no essential inkling on why the hell the method you are doing for DDoSing is terrible let alone why your code in general does not deserve to be open source and sugar-coated as an "example for others" if it's garbage in general.



To make you shut the fuck up, let me prove that you have no merit to respond to someone with the assumption that YOU know shit about Java:

[Image: ad50df53052cfdb2a15ba82f41d9a513.png]

Thanks for proving you barely know shit about Java. You just stated in the latter image that you barely code in Java anyways, therefore substantiating why you should pack up your ass hurt baggage and leave this section.
(Jun 28, 2015 12:59 PM)nullifiedvoid Wrote:  I am starting to think this is a troll account.

It is fact that statically built programs are faster than OOP built programs. (OOP requires more bytecode instruction execution which equals more time)

No sir, in a real life situation, the booter owner would not give you backend ip addresses. Proceed to obtain them through the site..

You're right when you say that perfectly built static programs are built are faster than non optimized OOP programs. However, just because a program is written in OOP form doesn't mean it won't get compiled down to non OOP code (think inline methods in C for example) and the code is often even further optimized by the JVM. So object oriented code can be ran exactly the same as a static program as you say. Also, Java code isn't actually static regardless of if it exists in one method as it isn't a native language and runs on the JVM.

Finally, all the code you have is in a while loop so the 10 ms delay at the very beginning of your code to create an object wouldn't change your program a bit and would make it drastically more maintainable. Don't use java if you hate OOP.
(Jun 28, 2015 08:33 PM)nullifiedvoid Wrote:  @Sparta,

You are pretty ignorant. From the get-go it has been mentioned that these projects do not belong to me. I do not use Github. You are speaking to me as I have wrote it. There is ZERO reason for something so simple to be "organized." (Creating more classes for what??? Creating more methods for what???)

You have no proof as to whether I know little about Java or not lol. Just because I do not program in it much, does not mean I have not written programs more complex than what you are complaining about. As seen from your posts you have not written anything advanced at all. No skill shown in any of your posts. Real developers no matter what language, would not complain about programs that are so simple. They merely laugh and move on over terribly written code. But the fact that you are taking the time out to complain and cry to someone who has not written the code is quite sad. Shows how much skill you have. If it is so terrible do not say anything.

You don't know what a "real" developer is because you just proved that you don't know shit about Java.

Leave this section and let your friend respond for you next time, otherwise shut the fuck up. Thanks.

Quote:Please find a new hobby or get a job.

Don't need to, especially when I'll soon get paid $90K-100K a year for what I'll be doing. ;)
(Jun 29, 2015 12:31 AM)JavaProphet Wrote:  I'm enjoying reading this thread very much! Please keep the interesting discussion going.
I'd like to add in that everything in moderation seems to be the best approach. Don't over OOP, don't over proceduralize, etc.

I'm sorry, what? I've not read most of this thread but I really hope your last comment wasn't regarding to Java (or C for that matter).
"don't over OOP" - KK. You realize Java's default and only programming model is object orientated, right? You can't actually do proper procedural at all hence why Looka coined the term "POOP" - procedural object orientated programming.

Also, since you're moving to C, if you really want to continue with POOP, consider C++ - you can still use C libs with it. You can mix and match all the OOP and procedural code you'd ever desire.
(Jun 29, 2015 01:38 PM)JavaProphet Wrote:  I POOP in Java, I POOP in C, but I agree with Linus Torvald about C++.
Wilde, I love you. You make me laugh and really brighten my day. Thank you.

I'm glad m8 gud luk w/ future developementss.
(Jun 29, 2015 01:03 AM)nullifiedvoid Wrote:  Fl0werP0wer_,

I would not doubt if it is implemented in any new stressers in the near future.

No one is using your friend's shitty source code to create a booter. Absolutely terrible.

(Jun 29, 2015 12:59 AM)nullifiedvoid Wrote:  Lol JavaProphet, your comments always have me dying. I have nothing more to say. For now and on stupid comments will not get any responses. I must say I like the conditional statement that was given to me.

As if something is going to happen if I do not? I am just wondering what the repercussions are...

Ironic considering you are responding to criticism that doesn't apply to you, but to your "friend". You proved that you are ignorant by responding to criticism that is directly for your FRIEND, not YOU. You already proved that you don't know shit about Java and I substantiated that in a previous post.

Repercussions? Here, I'll list the repercussions here:

1. People now think you are ignorant as fuck.
2. People now think you are delusional and somewhat incapable of programming.
3. Back to 1.
(Jun 29, 2015 01:03 AM)nullifiedvoid Wrote:  I would not doubt if it is implemented in any new stressers in the near future.

If you think that's gonna happen, the inside of your head must be a nullified void.
Thanks for having a descriptive username. Fun fact: those who make stressers don't know Java - they know basic PHP most of the time; also, those who run stressers know nothing except how to send money on paypal.


Possibly Related Threads...
Thread / Author Replies Views Last Post
[C#] by alizer0Jul 23, 2021 10:47 AM 2 422 Jul 23, 2021 10:47 AM
Last Post: tux1
[Python] by unixJul 11, 2020 10:36 PM 0 289 Jul 11, 2020 10:36 PM
Last Post: unix
[C] by PhizoAug 14, 2017 07:23 PM 13 630 Aug 14, 2017 07:23 PM
Last Post: WOLGA