search

649 / Memcrashed-DDoS-Exploit

DDoS attack tool for sending forged UDP packets to vulnerable Memcached servers obtained using Shodan API
1.33k stars 465 forks source link

IP Substitution #1

Closed 065191 closed 6 years ago

065191 commented 6 years ago

Hi my friend! Prompt please. This script will work if the proxy suppresses the IP substitution. When I try to send a packet with the changed IP. he does not reach the addressee. Met with this problem?

649 commented 6 years ago

So with scapy, what you're doing is forging the UDP packet, your ISP might be correcting those packets (this is just a guess).

Now to correctly use scapy it's like this:

from scapy.all import *

send(IP(src='x', dst='y') / UDP(dport=11211)/Raw(load='z'), count=1)

Where "x" is the source (where it comes from) "y" is the destination (where you want it to go) and "z" is the data you want "y" to receive.

Use wireshark and the filter: "udp.port == 11211" (without the quotes) to see the traffic being sent from your machine, and if the server still does not receive anything but you see it on wireshark, your ISP is messing with the UDP packets.