Security Tools/Windows

PacketStorm

NEORAY 2008. 6. 30. 21:48
No, 29
FileSize: 108 KB
Homepage: http://www.hackersnews.org
OS: All Win
Licence: Freeware
Language: English
Country: Usa
Hit: 11
Rating:
PacketStorm1.3.zip (110KB, DN:5)
PacketStorm  



Educational Use Only


For those of you that know about the bandwith limits most hosts put on webspace (angelfire geocities) you'll understand this.
Basically this program allows you to build your own Headers and sends to use against webservers.

Eg. someone on a limited bandwith has a large file on their webserver.
you enter the location of the file in the target address box as Http://www.somedumbsite.com/somebigfile.zip
Then you build the header which would be as follows

GET ? HTTP/1.1
Host:
Accept: */*
Content-type: application/x-www-form-urlencoded

The and are variables as explained in the program those will be replaced as follows.

= Http://www.somedumbsite.com/somebigfile.zip
= Some random number between 1 - 5000

The use of the ? in the header means that each request is treated as a different file thereby bypassing any caching features used on some proxy servers.

The program can also be used for POST floods. Most online forms such as the ones used on forums use the post command to relay data back and forth between the client and server. The program allows you to recreate these post sends and then flood the server with the custom built sends incorporating the variables to maximise the impact.

Post Flood
Target address would of course be the processing file  
http://www.somedumbsite.com/cgi-bin/post.cgi

Header would be as follows:-

POST HTTP/1.1
Host:
Accept: */*
Content-type: application/x-www-form-urlencoded
Content-length:

Post would contain the data you need to transfer.
eg.

function=post&parent=&id=1056265&top_id=&nos_parent=&sender=&member_id=&c=&name= &email=&header=&text=¬ify_sender=yes&SUBMIT=Post



The easiest way to determine what information needs to be sent in the packet use a packet sniffer such as CommView by Tamosoft and to filter outgoing packets to port 80.


Thats the post info i used for the forum below.
http://pub.alxnet.com/forum?id=1056265
Example of the post flood
Sorry Thelma and Louise, gossips gets you in trouble sometimes ;o)