Re: [Full-disclosure] Examples with Nemesis to test DoS & DDoS?

On Mon, 5 Dec 2005 17:49:35 -0800
Mark Sec <mark.sec@xxxxxxxxx> wrote:

> Alo folks,
>
>
> Well im testing attacks to DoS and DDoS to my servers e.g:
>
> nemesis tcp -v -S 192.168.1.1 -D 192.168.2.2 -fSA -y 22 -P foo
> nemesis udp -v -S 10.11.12.13 -D 10.1.1.2 -x 11111 -y 53 -P bindpkt
> nemesis icmp redirect -S 10.10.10.3 -D 10.10.10.1 -G 10.10.10.3 -qR
> nemesis arp -v -d ne0 -H 0:1:2:3:4:5 -S 10.11.30.5 -D 10.10.15.1
>
>
> does anyone have more tricks, tips , pappers , shell scripts to perform
> attacks DoS and DDoS?
>
>
> -Mark
> CISSP

nmap could be helpfull if you're using the -f and -T5 option and e.g.
-sF to use FIN-Packets.
But that's just to stress the Stack a littlebit.

Another usefull tool would be hping where you could create packets by
yourself. Tools like isic and sing are maybe also helpfull for you.

Kind regards,
Rembrandt
--
God did a bless on me,
So accapt the dark side in you.
Hate leads me to victory, so give me a war.

Attachment:pgpaCU0YUtTTj.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Relevant Pages

  • RE: Limited vs full blown testing
    ... >I'm trying to understand the significance of DDOS testing and importance. ... >vector of attack that we live with, a risk level we hope to avoid. ... Ron - I think the difference here is DoS vs. DDoS. ... throwing packets at a target to fill all available bandwidth and I can't see ...
    (Pen-Test)
  • RE: Limited vs full blown testing
    ... He SPECIFICALLY excluded DDOS. ... about doing a DOS in a penetration test or vulnerability ... > We accept a brief excluding DoS attacks, ... vector of attack that we live with, a risk level we hope to avoid. ...
    (Pen-Test)
  • Re: [fw-wiz] Firewalls that generate new packets..
    ... Three types of DOS ... protect others from themselves. ... connection packets to an apache web server, ... can be used to defend against a DOS (or DDOS) attack. ...
    (Firewall-Wizards)