I am a student so please don't be rude for I miss something and this project is for research purpose only.
I am willing to perform a denial of service attack(on my own servers) I am not willing to do the script kiddie method of downloading and running some online codes I have programmed my own servers and clients here is the client which sends buffers thereby overflowing the buffers
class BufferOverflow: def overflow(self,host,port): id = 0 while True: print("================================================================") try: client = socket.socket(socket.AF_INET,socket.SOCK_STREAM) print("[*] NetWorker Report: Sockets have been created against the server") except socket.error: print("[*] Adim permission required or port in use") buffer = "\x4e"*3000 print("[*] Connecting to %s on %d"%(host,port)) client.connect((host,port)) print("[*] Connection established") exploit_packet = ("USV "+buffer+"//n//r//r").encode("UTF-8") print("[*] Initializing...") client.send(exploit_packet) print("[*] Initialized!") print("[*] Restarting...") client.close() print("[*] Restarted!") print("[*] Session ID: %d"%id) id+=1
This sends buffers to the server with the desired it, I have implemented my own sniffer which could resolve DNS to I.P so that I can get the I.P.
Here is the code to my own custom servers implementation, https://codereview.stackexchange.com/questions/144661/penetration-testing-in-an-unsuitable-environment
In the screen shot the top left most is the server which displays the buffer like "NNN....3000*N" = > single buffer which is sent by the client, I used multiple clients to overblown the buffer. Finally I got success the top right most one which displayed this message,
Win 10061 error is nothing but the server has stopped or inactive. I know that the service is available for the present clients which I have created, so I have opened a new power shell along with the running clients and connected to the server but the server still responds , I don't know why?
Am I missing something or this is not actually the correct implementation of denial of service attack?
I am a student and I am willing to learn from you please do not be rude I have misunderstood some concepts and provided a wrong implementation