Offensive Security Tool: UFONet DDoS Toolkit

by | Feb 22, 2020 | Tools

68747470733a2f2f75666f6e65742e303363382e6e65742f75666f6e65742f75666f6e65742d74696d65776172732d7368656c6c315f736d616c6c2e706e67

Reading Time: 4 Minutes

Offensive Security Tool: UFONet DDoS Toolkit

Github Link

UFONet by epsylon, is P2P and cryptographic -disruptive toolkit- that allows to perform DoS and DDoS attacks; on the Layer 7 (APP/HTTP) through the exploitation of Open Redirect vectors on third-party websites to act as a botnet and on the Layer3 (Network) abusing the protocol.

This type of attack is very aggressive and powerful, the way it works is by having a built in blackhole, which is a P2P daemon to share ‘zombies’ with other UFONet ‘masters’, a lot of such blackholes are available in the darknet, and even publicly after recon, you then can cumulate all these, with delivery through webservers, against a target. Making the attack get resources from zombie devices, and redirect all the packages from thousands of machines, to one target machine, knocking the services and the status of that target completely down.

Web: https://ufonet.03c8.net

FAQ: https://ufonet.03c8.net/FAQ.html

UFONet – is a toolkit designed to launch DDoS and DoS attacks.

See these links for more info:

CWE-601:Open Redirect: https://cwe.mitre.org/data/definitions/601.html

OWASP:URL Redirector Abuse: https://www.owasp.org/index.php/OWASP_Periodic_Table_of_Vulnerabilities_-_URL_Redirector_Abuse2

Installing:

UFONet runs on many platforms. It requires Python (>2.7.9) and the following libraries:

python-pycurl - Python bindings to libcurl python-geoip - Python bindings for the GeoIP IP-to-country resolver library python-whois - Python module for retrieving WHOIS information - Python 2 python-crypto - Cryptographic algorithms and protocols for Python python-requests - elegant and simple HTTP library for Python2, built for human beings python-scapy - Packet generator/sniffer and network scanner/discovery

You can automatically get all required libraries using (as root):

sudo python setup.py install

For manual installation, on Debian-based systems (ex: Ubuntu), run:

sudo apt-get install python-pycurl python-geoip python-whois python-crypto python-requests python-scapy

On other systems such as: Kali, Ubuntu, ArchLinux, ParrotSec, Fedora, etc… also run:

pip install geoip pip install requests pip install pycrypto pip install scapy

Source libs:

Python: https://www.python.org/downloads/

PyCurl: http://pycurl.sourceforge.net/

PyGeoIP: https://pypi.python.org/pypi/GeoIP/

PyWhois: https://pypi.python.org/pypi/whois

PyCrypto: https://pypi.python.org/pypi/pycrypto