[SIM-2223238]

DDoS Tutorial | Everything Explained

With using Control+F you can navigate easily trough the thread

Sections

1. DoS/DDoS
   
2. What is DDoS actually?
   
3. Is it illegal? Will I get easily caught?
   
4. How to DDoS?
   
5. Spoofing
   
6. How to prevent a DDoS Attack?
   
7. DDoS Ampflication.
   
8. Layer 4 and Layer 7
   
9. Scripts.
   
10. Websites that allows spoofing.
    

DoS/DDoS

DoS (Denial of Service)
DDoS (Distributed Denial Of Serivce)

They both have a large difference, DoS is sending from one location, and DDoS is sending from multiple locations.

What is DDos actually?

DDoS is basicly sending out packets, and preventing the usert from connecting to the destination.
Basicly the user is trying to connect 1.1.1.1, And the attacker is sending packets to 1.1.1.1 to prevent the user from connecting.

When the host isnt being ddosed :
User > Testing Connection > 1.1.1.1 > Succesfully connected.

When a DDoS attack is active :
User > Testing Connection > Connection failed > Timeout on 1.1.1.1

Is it illegal? Will I get easily caught?

In some ways, DDoS is legal, but mostly DDoS is illegal, DDoS is also called Stress-testing, that means you are testing your server, to see If your server can handle a large amount of bandwith in.
But DDoS is mostly illegal, and for illegal purposes used, like attacking homeconnections without permission.

Is it easy to get caught? No, depends on where you are sending the attack from, you can hide your location with a VPN (Virtual Private Network).

How to DDoS/DoS

A denial of service attack is basicly sending out packets from your location to a destination, to prevent a user connecting to the destination.
You can DoS simply with using Control+R and type in CMD.exe, then type something like ping (host), this is basicly pinging the destination.
Pinging wont do much, So you can buy a server and send packets from that, that will make you getting caught a lower chance, most hosts doesnt allow DDoS attacks, and will simply cancel your dedicated server/VPS.
You need a host that allows spoofing, So your destination doesnt know wher e to send the abuse report to, this will prevent you from getting your server canceled Not all hosts allow spoofing

Spoofing

What is spoofing you ask? Spoofing is basicly hiding your host so the destination doesnt know, where the packets come from, Here is how spoofing looks like :Spoiler (Click to View)
[img]http://upload.wikimedia.org/wikipedia/commons/thumb/7/72/IP_spoofing_en.svg/2000px-IP_spoofing_en.svg.png[/img]

How to prevent DDoS attacks?

Preventing DDoS attacks, isnt that simple you think it is, There are alot of different ways to stop DDoS attacks, You can ask for DDoS Protection by your host, or you can get migation, migation is basicly spreading all the packets to a set of servers so your main server doesnt get too much packets in, a reverse proxy can be used also.

How to block XMLRPC attacks?
Simply block the Wordpress Useragent, and make them redirect to a blank page.

DDoS Ampflication

What is DDoS ampflication you ask? Well its basicly a ampflication of your DDoS attacks, there are alot of different methods to use for ampflication attacks, You double your DDoS attacks using a ampflication method.

Here is a list of different amp (ampflication) methods :
(Click to View)

• NTP
  
• SNMP
  
• MSSQL
  
• DNS
  
• SSDP
  
• tFTP
  
• Chargen
  
• OVH
  
• NETBIOS
  
• QUAKE
  

Layer 4 and Layer 7

What is the difference about Layer 4 and Layer7 you ask?
Layer 4 is basicly sending out data/packets.
Layer 7 is sending out fake users, to a webserver.

List of Layer 4 and Layer 7 methods.
Layer 4 (Click to View)

• NTP
  
• SNMP
  
• MSSQL
  
• DNS
  
• SSDP
  
• tFTP
  
• Chargen
  
• OVH
  
• NETBIOS
  
• QUAKE
  
• UDP
  
• TCP
  

Layer 7 (Click to View)

• ARME
  
• GET
  
• HEAD
  
• POST
  
• Rand
  
• RUDY
  
• XMLRPC
  
• Goldeneye
  
• Pyloris
  

Scripts

Well, you need scripts also before DDoSing, so here is a thread where a large amount of scripts got posted :)

https://hackforums.net/showthread.php?tid=4230629
Compile using chmod 777 (file)

Scanning and Filtering.

Scanning and filtering, is really important for your ampflication methods.
Scanning is basicly searching around the world, for IPs that your ampflication method can use, to double the attack amount.

How do you filter you ask me?
Here are some filter scripts, made by QuezzStresser.
http://quez-stresser.com/joomlafilter.txt
http://quez-stresser.com/mssqlfilter.txt
http://quez-stresser.com/xmlrpcfilter.txt
http://quez-stresser.com/chargenfilter.txt

Use them with installing PHP.

Filtering is testing the timeout on the IPs you scanned, the lower the timeout the higher your amp rate is.

Websites that allow spoofing.

http://www.ecatel.info
https://www.slaskdatacenter.pl
http://blazingfast.io | Layer 7 only.
use OVH for scanning.

Did you like my tutorial thread? Please leave a thanks, Give me some other subjects, I should write a tutorial about.

[XPRMX]

I dont believe ddos is hacking......

[Delevingne]

wow please dont hack me with the ddos exploit.

OT: seems like a nice thread.

[Ƥerfectionist]

Nice thread, but could you make the spoofing image a bit smaller?

[Comedic]

Very well written thread, Aggron. 🤝

[Luciferum]

Good tutorial, but this is not "Hacking", good though! 👍

[Katie Stevens]

really nice TUT OP!! <3 Cheers

[imcullenm]

This was very detailed man! Stay High quality. Great job.

[Atharva]

Informative thread.
Thanks for the share.

---

Can you make a tutorial on scanning and filtering?
Thanks.

[hahdbwoannniabs]

How to DDoS/DoS

A denial of service attack is basicly sending out packets from your location to a destination, to prevent a user connecting to the destination.
You can DoS simply with using Control+R and type in CMD.exe, then type something like ping (host), this is basicly pinging the destination.
Pinging wont do much, So you can buy a server and send packets from that, that will make you getting caught a lower chance, most hosts doesnt allow DDoS attacks, and will simply cancel your dedicated server/VPS.
You need a host that allows spoofing, So your destination doesnt know wher e to send the abuse report to, this will prevent you from getting your server canceled Not all hosts allow spoofing

Spoofing

What is spoofing you ask? Spoofing is basicly hiding your host so the destination doesnt know, where the packets come from, Here is how spoofing looks like :Spoiler (Click to View)
[img]http://upload.wikimedia.org/wikipedia/commons/thumb/7/72/IP_spoofing_en.svg/2000px-IP_spoofing_en.svg.png[/img]

You have no idea what you're talking about. The entire point of spoofing is the fact that without spoofing, DoS wouldn't be possible in the first place. TCP/UDP/SSYN/XSYN/etc DoS is achieved when the server receives a packet from an IP that doesn't actually exist, then the server attempts to respond to the packet by sending a packet to the nonexistent IP and waits for a response. This means that the server will be waiting for something that doesn't even exist. So many of these packets are sent that it blocks actual people from accessing the server.

[SIM-2223238]

You have no idea what you're talking about. The entire point of spoofing is the fact that without spoofing, DoS wouldn't be possible in the first place. TCP/UDP/SSYN/XSYN/etc DoS is achieved when the server receives a packet from an IP that doesn't actually exist, then the server attempts to respond to the packet by sending a packet to the nonexistent IP and waits for a response. This means that the server will be waiting for something that doesn't even exist. So many of these packets are sent that it blocks actual people from accessing the server.

Why the hell wouldnt be DoS possible, without spoofing?
Spoofing is basicly hiding the source.

DoS is basicly sending traffic to a location, If I would ping you now, and you monitor all incoming traffic, You would see my IP right?
Spoofing is to hide the source.

[moonlimer]

nice tut, precise and easy to understand. thanks

[hahdbwoannniabs]

Why the hell wouldnt be DoS possible, without spoofing?
Spoofing is basicly hiding the source.

DoS is basicly sending traffic to a location, If I would ping you now, and you monitor all incoming traffic, You would see my IP right?
Spoofing is to hide the source.

Sigh... I'm doing my best to explain this to you without being vulgar. You can't DoS with hosts that don't allow spoofing, and the reason isn't because you'll get tracked, it's because DoS is not achievable without packet spoofing. Sending "traffic" to a location isn't DoS at all, otherwise I'd be DoS'ing HF right now according to your definition because I'm connecting to it.

Don't make threads attempting to explain things you don't even know yourself.

[Crory]

Vouch for Aggron. Nice Tutorial foor beginner.

Regards,
~Crory

[NerdNational]

Well written so that even the most simple can understand. I just wondering why there isn't a example on how to create one for the people who wouldn't know. but other then that 10/10