Thursday, November 18, 2010

Application Layer DDoS Simulator - ddosim v0.2

ddosim is a tool to simulate a distributed denial of service (DDOS) attack against a target server. The objective is to analyze the  immunity of the server to handle application specific DDOS attacks. It simulates several zombie hosts (having random IP addresses) which create full TCP connections to the target server. After completing the connection, ddosim starts the conversation with the listening application (e.g. HTTP server).


ddosim is written in C++ and runs on Linux. Its current functionalities include:
  • HTTP DDoS with valid requests
  • HTTP DDoS with invalid requests (similar to a DC++ attack)
  • SMTP DDoS
  • TCP connection flood on random port
    There are a lot of options that make the tool  quite flexible:

    DDOS options
    Usage: ./ddosim
    -d IP                   Target IP address
    -p PORT            Target port
    [-k NET]             Source IP from class C network (ex. 10.4.4.0)
    [-i IFNAME]      Output interface name
    [-c COUNT]       Number of connections to establish
    [-w DELAY]       Delay (in milliseconds) between SYN packets
    [-r TYPE]             Request to send after TCP 3-way handshake. TYPE can be HTTP_VALID or HTTP_INVALID or SMTP_EHLO
    [-t NRTHREADS]   Number of threads to use when sending packets (default 1)
    [-n]                       Do not spoof source address (use local address)
    [-v]                       Verbose mode (slower)
    [-h]                       Print this help message

No comments:

Post a Comment