Bonesi http does not ACK the SYN ACKs from victim , or does in bunches

Markus-Go / bonesi

BoNeSi - the DDoS Botnet Simulator

Apache License 2.0

659 stars 198 forks source link

Bonesi http does not ACK the SYN ACKs from victim , or does in bunches #43

Open tbstad opened 3 years ago

tbstad commented 3 years ago

Have used bonesi on ubuntu 16.04 and other OS ok. When trying to use on Ubuntu 20.04 server , bonesi does not normally answer syn acks coming back from victim when attacking with http. Resets not sent either. Looks like bonesi is listening , but bunching up the replies or just doing nothing.

Markus-Go commented 3 years ago

Can you please make sure that:

nf_conntrack module is not loaded
no firewall rules are set
syn-cookies are disabled?

Thanks!

tbstad commented 3 years ago

Markus, Not much should have changed since the 16.04 setup I use , unless there is some 20.04 defaults that have changed. Just in case:

lsmod|grep conntrack ---> no results sudo ufw status -- > status inactive sudo iptables -S -P INPUT ACCEPT -P FORWARD ACCEPT -P OUTPUT ACCEPT sysctl -n net.ipv4.tcp_syncookies ---> 0

Thanks for taking a look at this, I really like the tool!