Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

DDoS [What] [How]

Hey guys,

Today im gonna teach u guys everything I know about DDoS. This is a guide for newbs to learn about DDoS and for them to stop opening threads about what it is.

To start everything off let me give you guys a good idea of what DDoS stands for,how it works, and methods of DDoS. Hope you guys enjoy!

DDoS stands for Distributed Denial Of Service there is also DoS which is Denial Of Service. This is used to take internet's with a IP Address (Internet Protocol Address). DDoS is a bunch of computers attacking a specific target while DoS is just 1 computer.

DDoS and DoS pretty much just send packets or memory to a internet connection then the connection cant take it and cant load any legitimate packets. Think of it as opening utorrent and torrenting a ton of stuff while watching tons of movies and having tons of links open, they take up space and over load your router. DDoS is usually performed with booters, stressers, botnets, or just a lot of people attacking with a DoS tool.

There are many unique and well known attack methods they all take down internets/websites using various methods. For example the most known and used method is UDP which is just you sending a huge amount of packets overloading the server and taking it down. Also theres SYN which just uses all the resources of a connection so no resources are left for legitimate traffic. And another well known attack method is SLOWLORIS, which is used to fake a bunch of connections to a website which hogs all the resources. The methods can also be spoofed which means it will be sending forged requests so the attack will be harder to blacklist. Most common spoofed attacks are SUDP and SSYN. All these attacks are categorized in the groups Layer 7 and Layer 4 attacks.

Layer 7 Attacks:
Spoiler (Click to View)

Layer 4 Attacks:
Spoiler (Click to View)

To DDoS you can buy a booter/stresser or make a botnet. And to DoS you can find a program that will attack.

WARNING: DoSing from your internet connection might get you into major trouble! USE A VPN!
Note: I do not encourage DDoS or DoS this is for educational purposes only!


Hope you guys enjoy if I missed or messed something wrong please post and ill fix it.
Nice tutorial man, it can help some people here
Nice explanation for the "newbies" :)
Quote:Layer 7 Attacks:
Spoiler (Click to Hide)
ARME - Exploits apache and perl exhausts the memory of servers denying server to users
RUDY - Like ARME but slower mimics user with slow internet
SLOWLORIS - Makes connections on a site and hogs ports
GET - Uses get protocol to flood site
POST - Uses post protocol to flood site
HEAD - Floods page views (f5 over and over)
And many more these attacks. Layer 7 attacks are used to take down websites. Layer 7 attacks are actually application level attacks.

Layer 4 Attacks:
Spoiler (Click to Hide)
UDP - Sends huge amounts of udp packets
UDP is spoofed. Otherwise it will get automatically blocked. That's why things like LOIC only work if you have a strong enough connection to take down the target before you get blocked. You're thinking of DrDos, which is an ICMP flood (ie pinging over and over)
UDP-Lag - Like UDP except short bursts to lag the target
SSYN - Same as SYN except distributed
SYN - Sends a request, doesn't reply to ack. Wastes resources
And others these attacks are network based attacks.

Come on lol. Half that shit wasn't true :P
(Apr 27, 2013 01:17 PM)Envy8 Wrote:  Come on lol. Half that shit wasn't true :P
Then send me the attack methods and how they work.
Which method is the best to take down websites?
(Apr 27, 2013 03:34 PM)"The Anonymous" Wrote:  Which method is the best to take down websites?
As stated in the thread layer 7 attacks are mainly for websites but UDP and SSYN work just as well.
You need to improve on your grammar and punctuation for people to take you seriously. And some of this info is not properly explained and only partially true. So, you do need to improve on a few things, but otherwise, it's pretty good. I'm sure it'll help some of the n00bs out there :P. Thanks for posting!
Okay. Thanks for the advise. Great and HQ tutorial.
(Apr 27, 2013 03:44 PM)Zabuza… Wrote:  You need to improve on your grammar and punctuation for people to take you seriously. And some of this info is not properly explained and only partially true. So, you do need to improve on a few things, but otherwise, it's pretty good. I'm sure it'll help some of the n00bs out there :P. Thanks for posting!
Looked through it and the grammar seems fine, also if somethings wrong please tell me what's wrong and whats right.
SSYN will take down any website stronger than udp if they have ddos mitigation. if not, use udp. If you know any weakness or its apache version, use a l7 that works
(Apr 27, 2013 04:56 PM)Envy8 Wrote:  SSYN will take down any website stronger than udp if they have ddos mitigation. if not, use udp. If you know any weakness or its apache version, use a l7 that works
I updated with the SYN. But wat about my other "errors"?
read the post I made. I bolded the corrections.
Thanks for the tutorial, now I know what the attack types are. :)


But you didn't list TCP? What's the difference between duo and tcp?
(Apr 27, 2013 07:18 PM)SouqlRS Wrote:  Thanks for the tutorial, now I know what the attack types are. :)


But you didn't list TCP? What's the difference between duo and tcp?
Im pretty sure TCP is SYN or is similar to SYN