Login Register


NTP DDoS Amplification Vector filter_list
Author
Message
RE: NTP DDoS Amplification Vector #11
(03-12-2014, 09:37 PM)Adorapuff Wrote: A sample attack script is https://github.com/vpnguy/ntpdos/blob/master/ntpdos.py
and to find servers you can use the nmap module ntp-monlist http://nmap.org/nsedoc/scripts/ntp-monlist.html.
Great tutorial, I don't DDos, but I might post some IPs later.

A python 2.x implementation?! Not on my watch!

Edit:
Bam
[Image: jWSyE88.png]

Reply

RE: NTP DDoS Amplification Vector #12
(03-12-2014, 04:46 AM)Cipher Wrote: Here is the monlist command payload:

Code:
23, 0, 3, 42, 0, 0, 0, 0

Code:
\x17\x00\x03\x2a\x00\x00\x00\x00
PGP
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47

Reply

RE: NTP DDoS Amplification Vector #13
(03-13-2014, 08:34 PM)Starfall Wrote:
Code:
\x17\x00\x03\x2a\x00\x00\x00\x00

Code:
>>> payload = [23, 0, 3, 42, 0, 0, 0, 0] >>> bytes(payload) b'\x17\x00\x03*\x00\x00\x00\x00' >>> bpayload = b'\x17\x00\x03\x2a\x00\x00\x00\x00' >>> print(str(bpayload)) b'\x17\x00\x03*\x00\x00\x00\x00' >>>

There's nothing wrong here.
[Image: jWSyE88.png]

Reply

RE: NTP DDoS Amplification Vector #14
(03-13-2014, 08:39 PM)3SidedSquare Wrote:
Code:
>>> payload = [23, 0, 3, 42, 0, 0, 0, 0] >>> bytes(payload) b'\x17\x00\x03*\x00\x00\x00\x00' >>> bpayload = b'\x17\x00\x03\x2a\x00\x00\x00\x00' >>> print(str(bpayload)) b'\x17\x00\x03*\x00\x00\x00\x00' >>>

There's nothing wrong here.
Yeah I know they're the same, generally people will use the hex representation from what I've seen, though.
PGP
Sign: F202 79C9 76F7 40BB 54EC 494F 5DEF 1D70 14C1 C4CC
Encrypt: A5B3 1B21 55E1 80AF 4C6E DE83 467B 8EFC 3DEE 681C
Auth: CD55 E8A5 1A08 2933 8BA6 BC88 D81F 1943 739A 3C47

Reply

RE: NTP DDoS Amplification Vector #15
(03-13-2014, 08:44 PM)Starfall Wrote: Yeah I know they're the same, generally people will use the hex representation from what I've seen, though.

Ah, my bad
[Image: jWSyE88.png]

Reply

RE: NTP DDoS Amplification Vector #16
Amazing tutorial and very informative, thank you for the share!
"Whether you think you can or you think you can’t, you’re right."
Contact: inf0x00(a)unseen.is

Infinite.

Reply

RE: NTP DDoS Amplification Vector #17
Pretty sure most servers are patched against this, am I right?

Reply

NTP DDoS Amplification Vector #18
(03-20-2014, 09:21 AM)Cyber Wrote: Pretty sure most servers are patched against this, am I right?

There's still a good amount left.
#MakeSinisterlySexyAgain

Reply







Users browsing this thread: