DDOS attack with top open sources tools: Hpin3

I made it easy to understand for beginners and advanced

DISCLAIMER 👉👉👉🔥⭕🚫 This is only for educational purposes, if you use this in real life to hurt someone business, I bet you that if they succeed to catch you, it’s direct JAIL. remember this, with great power comes great resposabilities. hacker, be responsible!!!! 💀💀💀☠

First off, what’s a DoS attack? Imagine a single person standing in front of a door, blocking everyone else from getting through. That’s a DoS attack (it stands for Denial of Service). It’s when one computer tries to flood a server or another computer with so much stuff that it can’t handle anything else.

It’s not the same as a DDoS(Distributed Denial of Service) attack, which is like having a whole crowd of people blocking the door instead of just one. Hope you are getting the point , what is more damaging outside here is DDOS, when a hacker sets an army of 100,1000,10000 etc computer shooting to the same target IP.

But when It comes to One single computer shooting to a target, It’s called ,DoS(Denial of Service). Though in some case with only this DoS, there are some way to make it efficiant in order to slowdown or shutdown a server , Game over… we will learn It here .

Let’s talk about hping3, which is one of the tool you can use to do this kind of thing. But don’t worry, we’re not planning any attacks — just learning about them!

Welcome back, everyone! Today, we’re diving into the world of DoS attacks and a nifty tool called hping3. Ready to have some fun while learning? Let’s get started!

What’s a DoS Attack, Anyway?

Imagine your favorite coffee shop is suddenly flooded with customers who all want free Wi-Fi, and they’re all ordering lattes like there’s no tomorrow. Now, the baristas are overwhelmed, and the shop’s Wi-Fi is slower than a snail on a lazy Sunday. That’s a bit like a Denial of Service (DoS) attack. In technical terms, a DoS attack happens when one computer (the “attacker”) tries to overload a server or another computer with so much junk that it can’t do its normal job. Think of it as a digital traffic jam!

Enter hping3

Now, meet hping3 — a cool tool that’s kind of like a Swiss Army knife for network traffic. With hping3, you can create and send your own custom network packets. What does that mean? It means you can send fake or crafted data to a server, just like if you were sending prank letters to your friends, when they open they find this such a joke writing >>> kpe029!@&(vhi9&#⁵⁰⁹⁰⁰³⁸b2kfnfyhqqenvjl<<<<< . This tool can do lots of things like scanning networks, probing for vulnerabilities, and, yes, launching DoS attacks.

SYN Flooding: The Sneaky Traffic Jam

Today, we’re going to focus on one specific type of DoS attack called a SYN flood. Here’s how it works: imagine a server is a very polite but overworked receptionist. When a computer wants to connect, it sends a “Hi, I’d like to connect” request, and the server says, “Sure thing, hold on a sec.” The server then waits for the final confirmation before completing the connection, jam , no answer from the you…...😅😄 In a SYN flood, we bombard the server with so many of these “Hi” requests that it’s like a thousand people trying to shake the receptionist’s hand at once. The server’s resources get exhausted, and it can’t handle real requests from actual users. You remember , of the principe of 3 hands shake to establish any TCP connexion with a server. Now what a SYN FLOOD does is to break it on the way. lol

SYN FLOOD Packets attack

Why We Need to Be Sneaky

Here’s the catch: when we’re sending all these requests to the server, it knows our IP address (like a return address on a letter , hahha 💀💀💀💀). If the server’s admin looks at their logs, they’ll see our address and can report us to the authorities faster than you can say “Oops! you know the rest of the story” So, if we don’t want to end up in a bit of trouble, we have to do something called IP spoofing. This is like putting someone else’s return address on our prank letters so they don’t know who’s really behind them, for example you can spoof your IP by putting that for your Ex Boy/Girl friend , or for a former employer that f*ck8d up … lol don’t take me serious. 😎

Let’s Wrap It Up

Before we dive into actually launching a SYN flood with hping3 and spoofing our IP address, it’s important to understand what we’re doing and why. Always remember, while it’s fun to learn how these attacks work, using them for anything other than educational purposes or authorized testing can get you into serious trouble. It’s not a Joke.

So,firt like usually before starting using a tool always go to its manual or help part to understand Its parameters and options.

help menu of hping3

Alright, let’s break it down like this: To carry out our SYN flood, we’ll need to use the following flags: -flood, -interface, -S, and -rand-source. These flags are quite straightforward. -Flood puts hping3 into flood mode, which is an essential part of our SYN flood. Then we use -interface to select the network interface for sending our packets. Finally, -rand-source will randomize the source address of each packet. This not only prevents the source from pointing back to us but also creates the appearance that the packets are coming from a wide range of addresses, making it harder to trace. Now that we’ve identified the flags to use, it’s time to launch our attack. I’m setting up and launching the attack against a VM called Metasploitable 2. Before launching the attack, let’s first ping the Metasploitable VM to ensure it’s up and running. Then we’ll ping it again during the attack to observe the impact. Let’s start by pinging it now.

basic ping to check if the server is up

NEXT PUT THIS COMMAND 👉👉hping3 -S — flood — Interface wlan0 — rand-source <target ip>

Remember that wlan0 is optional when it’s a target which is outside of our server.

ok, now our attack is going , Now we’re flooding the target. To see our spoofed packets in action, let’s open up one of the best network sniffers out there, wireshark(I will write another article how to use this). We should be able to see packets from multiple addresses being flooded towards the same address in port 0 . Let’s take a look at the packets the wireshark has captured:

Now for the best practice , you have to use this combinaison of command : hping3 -S — flood -p 80 — rand-source <target ip>

Make sure you have a very good internet, otherwise this attack won’t go , It will stop your wifi router. and you have good processors(At least 4 hearts) dedicated to your VM.

Now if you want to overwhelm the server with huge of flood all you need to do is to open 5 to 10 windows on your Terminal and launch this same attack.

what next ? Go and check your server … either slowing or totaly off-service. Game over!!!

CONCLUSION

we have learnt how easy it is to launch a DoS attack with a powerfull tool in kali linux ie hping3. Go and practice it with great reponsability mindset. If you have any question, let me know in the comments session.

please Follow me and share my articles to help many.

See you in next article

It was your friend

Bonny lesage