UFONet is a tool designed to launch Layer 7 (HTTP/Web Abuse) DDoS attacks, using ‘Open Redirect’ vectors, generally located on third part-y web applications (a botnet) and other powerful DoS attacks, some including different OSI model layers, as for example the TCP/SYN flood attack, which is perform on Layer 3 (Network).
There is a large list of possible DoS and DDoS attack with this tool:
- The tool allow to inspect your target to have more information and vulnerabilities.
- Stress database on target by requesting random valid strings
- Exploits XML-RPC Pingback Vulnerability, generating callback requests and increasing processing required by target.
- Connect LOIC (with proxy support), to make a determinate number of recursive requests directly to your target.
- Connect LORIS to make requests leave open threads on the target and make the web server work slower
- Connect UFOSYN to start a powerful TCP/SYN flood attack
- Make a SPRAY attack to launch a Distributed ‘Reflection’ Denial of Service (DrDoS)
- A SMURF attack to send Distributed ICMP ‘Broadcast’ packets
- XMAS attack that will flood your target with ‘Christmas Tree’ packets
- A STARVATION attack that will knock down your target in seconds, if it does not have a minimum level of protection
- All ways could be combined, so UFONet can attack DDoS and DoS, at the same time.
- The last but not least is Generating Blackhole where user may connect the system with P2P options to share/keep ‘zombies’ with other ‘motherships’. Some of them are shared on the darknet.
UFONet runs on many platforms. It requires Python (>2.7.9) and the following libraries:
python-pycurl - Python bindings to libcurl python-geoip - Python bindings for the GeoIP IP-to-country resolver library python-whois - Python module for retrieving WHOIS information - Python 2 python-crypto - Cryptographic algorithms and protocols for Python python-requests - elegant and simple HTTP library for Python2, built for human beings python-scapy - Packet generator/sniffer and network scanner/discovery
You can automatically get all required libraries using (as root):
sudo python setup.py install
For manual installation, on Debian-based systems (ex: Ubuntu), run:
sudo apt-get install python-pycurl python-geoip python-whois python-crypto python-requests python-scapy
On other systems such as: Kali, Ubuntu, ArchLinux, ParrotSec, Fedora, etc… also run:
pip install geoip pip install requests pip install pycrypto pip install scapy
- Python: https://www.python.org/downloads/
- PyCurl: http://pycurl.sourceforge.net/
- PyGeoIP: https://pypi.python.org/pypi/GeoIP/
- PyWhois: https://pypi.python.org/pypi/whois
- PyCrypto: https://pypi.python.org/pypi/pycrypto
- PyRequests: https://pypi.python.org/pypi/requests
- PyScapy: https://pypi.org/project/scapy/
- Leaflet: http://leafletjs.com/ (provided)
You can read more and download this tool over here: https://github.com/epsylon/ufonet