Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Possible Duplicate:
How to simulate DDoS attacks from the Internet?

I want to conduct a DDoS attack. Can anyone please tell how can i conduct it? What are the latest DDos attacks? What are the tools available for it?. I dont want to conduct any real time attack but as a part of my academics i have to show demo of it. So it would be helpful to me if anyone can help.

share|improve this question

marked as duplicate by AviD Mar 25 '12 at 20:17

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
This feels a lot like security.stackexchange.com/questions/8072/…. Tempted to close as duplicate. –  Rory Alsop Mar 24 '12 at 23:07
    
ankur, welcome to Information Security. As @RoryAlsop said, this was already asked, with some good answers there. Also dont forget to check the FAQ some time... –  AviD Mar 25 '12 at 20:18

2 Answers 2

One has many possibilities to DDoS. I can't think of any tools that work with a click of a button.

Some possibilities:

  1. Network congestion (just limit a server upstream to 10 Mbit and set up 10 clients that each download at 100 mbit)
  2. Request fload for a webserver (You can use apachebenchmark for this on different clients)
  3. TCP SYN flood (just write a simple script that opens TCP connections but never replies to the server's SYN/ACK, multi thread it)
  4. ICMP flood (multi threaded script on lots of clients that ping your demoserver)

Another idea for a simulation might be (my friends did this one last year as a project):

  • Use a demo-machine with a vulnerable version of proftpd to rootkit a guest machine and install kaiten.c on it (u will need multiple guests though)
  • Let them join an IRC channel so you can send commands (botnet)
  • let them all start executing one of the previously discussed scripts
share|improve this answer
    
can you please give more insight into the second option ? If any link is there for it then it will also be fine. –  ankur.trapasiya Mar 24 '12 at 17:29
    
Added the kaiten.c link,I hope you are not just looking for a click and ddos application :p –  Lucas Kauffman Mar 24 '12 at 17:30
    
Definitely i am not expecting that. Anyways thanks for reply. Let me try this solution.. –  ankur.trapasiya Mar 24 '12 at 17:36
    
@Lucan Kauffman: is there any other alternative to IRC channels for using kaitan.c to conduct DDoS? –  ankur.trapasiya Mar 24 '12 at 23:53
    
If you write it yourself there can be. –  Lucas Kauffman Mar 24 '12 at 23:57

Since your purposes here are strictly academic, you probably don't need to generate an overwhelming amount of traffic - just enough to demonstrate a grasp of the concept. With that said, I'd do two things:

  1. Download the following: http://sourceforge.net/projects/loic/ It's the tool that's most likely to be used for this kind of attack "in the wild", so you might as well use it.
  2. Install the same on whatever trash hardware you've got laying around. You really just enough hardware to make a noise on the network, so you're not going to need high-spec machines for this.

Note that these instances can be coordinated via IRC as Lucas Kauffman suggested (I think that feature is called "Hivemind" or something), if you want to go that far. Otherwise, just manually point them at your target and let 'em rip.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.