NTP DDoS Amplification Vector - Printable Version

NTP DDoS Amplification Vector - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Networking (https://sinister.ly/Forum-Networking)
+--- Thread: NTP DDoS Amplification Vector (/Thread-NTP-DDoS-Amplification-Vector)

Pages: 1 2

RE: NTP DDoS Amplification Vector - 3SidedSquare - 03-13-2014

(03-12-2014, 09:37 PM)Adorapuff Wrote: A sample attack script is https://github.com/vpnguy/ntpdos/blob/master/ntpdos.py
and to find servers you can use the nmap module ntp-monlist http://nmap.org/nsedoc/scripts/ntp-monlist.html.
Great tutorial, I don't DDos, but I might post some IPs later.

A python 2.x implementation?! Not on my watch!

Edit:
Bam

RE: NTP DDoS Amplification Vector - Reiko - 03-13-2014

(03-12-2014, 04:46 AM)Cipher Wrote: Here is the monlist command payload:

Code:
23, 0, 3, 42, 0, 0, 0, 0

Code:
\x17\x00\x03\x2a\x00\x00\x00\x00

RE: NTP DDoS Amplification Vector - 3SidedSquare - 03-13-2014

(03-13-2014, 08:34 PM)Starfall Wrote:
Code:
\x17\x00\x03\x2a\x00\x00\x00\x00

Code:
>>> payload = [23, 0, 3, 42, 0, 0, 0, 0]
>>> bytes(payload)
b'\x17\x00\x03*\x00\x00\x00\x00'
>>> bpayload = b'\x17\x00\x03\x2a\x00\x00\x00\x00'
>>> print(str(bpayload))
b'\x17\x00\x03*\x00\x00\x00\x00'
>>>

There's nothing wrong here.

RE: NTP DDoS Amplification Vector - Reiko - 03-13-2014

(03-13-2014, 08:39 PM)3SidedSquare Wrote:
Code:
>>> payload = [23, 0, 3, 42, 0, 0, 0, 0] >>> bytes(payload) b'\x17\x00\x03*\x00\x00\x00\x00' >>> bpayload = b'\x17\x00\x03\x2a\x00\x00\x00\x00' >>> print(str(bpayload)) b'\x17\x00\x03*\x00\x00\x00\x00' >>>

There's nothing wrong here.

Yeah I know they're the same, generally people will use the hex representation from what I've seen, though.

RE: NTP DDoS Amplification Vector - 3SidedSquare - 03-13-2014

(03-13-2014, 08:44 PM)Starfall Wrote: Yeah I know they're the same, generally people will use the hex representation from what I've seen, though.

Ah, my bad

RE: NTP DDoS Amplification Vector - Infinity - 03-14-2014

Amazing tutorial and very informative, thank you for the share!

RE: NTP DDoS Amplification Vector - Cyber_old - 03-20-2014

Pretty sure most servers are patched against this, am I right?

NTP DDoS Amplification Vector - Adorapuff - 03-20-2014

(03-20-2014, 09:21 AM)Cyber Wrote: Pretty sure most servers are patched against this, am I right?

There's still a good amount left.