{"id":210,"date":"2023-10-30T17:20:06","date_gmt":"2023-10-30T17:20:06","guid":{"rendered":"https:\/\/www.isi.edu\/people-mirkovic\/?page_id=210"},"modified":"2023-10-30T17:59:01","modified_gmt":"2023-10-30T17:59:01","slug":"ddos-attack-tools","status":"publish","type":"page","link":"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/","title":{"rendered":"DDoS attack tools"},"content":{"rendered":"\n\n\t<table border=\"1\" width=\"80%\" frame=\"BOX\" rules=\"ROW\">\n<tbody>\n<tr>\n<td bgcolor=\"eee8aa\"><b>Attack<\/b><\/td>\n<td bgcolor=\"eee8aa\"><b>Description<\/b><\/td>\n<td bgcolor=\"eee8aa\"><b>DDoS condition<\/b><\/td>\n<\/tr>\n<tr>\n<td colspan=\"3\" bgcolor=\"87ceeb\">Attack tools and worms<\/td>\n<\/tr>\n<tr>\n<td><a href=\"http:\/\/packetstormsecurity.org\/distributed\/trinoo.analysis.txt\" target=\"_blank\" rel=\"noopener\">Trinoo<\/a>\u00a0(UDP Floods)<\/td>\n<td>Bandwidth depletion through coordinated UDP flood via a buffer overflow exploit<\/td>\n\n<\/tr>\n<tr>\n<td><a href=\"http:\/\/www.trendmicro.com\/vinfo\/virusencyclo\/default5.asp?VName=DDOS%5FTRINITY%2EA&amp;VSect=T\" target=\"_blank\" rel=\"noopener\">Trinity<\/a><\/td>\n<td>Launches UDP flood, fragment flood, SYN flood, RST flood, random flags flood, ack flood, establish flood and null flood<\/td>\n<td>End-point resource exhaustion<br \/>\nLink congestion<\/td>\n<\/tr>\n<tr>\n<td>TFN<\/td>\n<td>Launches ICMP flood, SYN flood, UDP flood, and Smurf style attacks<\/td>\n<td>Link congestion<br \/>\nEnd-point resource exhaustion<\/td>\n<\/tr>\n<tr>\n<td>Targa<\/td>\n<td>Sends malformed IP packets with invalid fragmentation, protocol, packet size, header values, options, offsets, tcp segments, routing flags, and other unknown\/unexpected packet values<\/td>\n<td>End-point crash<\/td>\n<\/tr>\n<tr>\n<td>TFN2K<\/td>\n<td>Besides TFN Flooding, TFN2K includes Teardrop and Land attacks that cause end point crashes.<\/td>\n<td>Link congestion<br \/>\nEnd-point resource exhaustion<br \/>\nEnd-point crash<\/td>\n<\/tr>\n<tr>\n<td>Stacheldraht<\/td>\n\n<td>Link congestion<\/td>\n<\/tr>\n<tr>\n<td>Shaft<\/td>\n<td>UDP, TCP SYN, and ICMP flooding<\/td>\n<td>Link congestion<\/td>\n<\/tr>\n<tr>\n<td>Mstream<\/td>\n<td>TCP ACK floods<\/td>\n<td>End-point resource exhaustion (CPU)<\/td>\n<\/tr>\n<tr>\n<td>W-Code Red<\/td>\n<td>Exploits a buffer overflow vulnerability in IIS web servers<\/td>\n<td>End-point crashes due to too excessive number of threads<br \/>\nflood of whitehouse-gov<br \/>\nLink congestion<br \/>\nEnd-point resource exhaustion (CPU, memory)<br \/>\nEnd-point crash<\/td>\n<\/tr>\n<tr>\n<td>Nimda<\/td>\n<td>Exploits vulnerability in IIS Web servers<\/td>\n<td>Link congestion<br \/>\nEnd-point corruption<\/td>\n<\/tr>\n<tr>\n<td>SQL Slammer<\/td>\n<td>Exploits a buffer overflow vulnerability<\/td>\n<td>Flooding<br \/>\nroute instability<br \/>\nEnd-point crashes<\/td>\n<\/tr>\n<tr>\n<td>Agobot<\/td>\n<td>Spreads in multiple ways, opens backdoors, shuts down communication services. It can launch HTTP flood, UDP flood, SYN flood and Ping flood.<\/td>\n<td>Link congestion<br \/>\nEnd-point resource exhaustion<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n","protected":false},"excerpt":{"rendered":"<p>Attack Description DDoS condition Attack tools and worms Trinoo\u00a0(UDP Floods) Bandwidth depletion through coordinated UDP flood via a buffer overflow exploit Trinity Launches UDP flood, fragment flood, SYN flood, RST flood, random flags flood, ack flood, establish flood and null flood End-point resource exhaustion Link congestion TFN Launches ICMP flood, SYN flood, UDP flood, and&hellip;<\/p>\n","protected":false},"author":421,"featured_media":0,"parent":197,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"news_source":"","news_author":"","external_news_link":"","footnotes":""},"class_list":["post-210","page","type-page","status-publish","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>DDoS attack tools - Jelena Mirkovic<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"DDoS attack tools - Jelena Mirkovic\" \/>\n<meta property=\"og:description\" content=\"Attack Description DDoS condition Attack tools and worms Trinoo\u00a0(UDP Floods) Bandwidth depletion through coordinated UDP flood via a buffer overflow exploit Trinity Launches UDP flood, fragment flood, SYN flood, RST flood, random flags flood, ack flood, establish flood and null flood End-point resource exhaustion Link congestion TFN Launches ICMP flood, SYN flood, UDP flood, and&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/\" \/>\n<meta property=\"og:site_name\" content=\"Jelena Mirkovic\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-30T17:59:01+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/ddos-benchmarks\\\/ddos-attack-tools\\\/\",\"url\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/ddos-benchmarks\\\/ddos-attack-tools\\\/\",\"name\":\"DDoS attack tools - Jelena Mirkovic\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/#website\"},\"datePublished\":\"2023-10-30T17:20:06+00:00\",\"dateModified\":\"2023-10-30T17:59:01+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/ddos-benchmarks\\\/ddos-attack-tools\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/ddos-benchmarks\\\/ddos-attack-tools\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/ddos-benchmarks\\\/ddos-attack-tools\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DDoS Benchmarks\",\"item\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/ddos-benchmarks\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"DDoS attack tools\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/#website\",\"url\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/\",\"name\":\"Jelena Mirkovic\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.isi.edu\\\/people-mirkovic\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"DDoS attack tools - Jelena Mirkovic","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/","og_locale":"en_US","og_type":"article","og_title":"DDoS attack tools - Jelena Mirkovic","og_description":"Attack Description DDoS condition Attack tools and worms Trinoo\u00a0(UDP Floods) Bandwidth depletion through coordinated UDP flood via a buffer overflow exploit Trinity Launches UDP flood, fragment flood, SYN flood, RST flood, random flags flood, ack flood, establish flood and null flood End-point resource exhaustion Link congestion TFN Launches ICMP flood, SYN flood, UDP flood, and&hellip;","og_url":"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/","og_site_name":"Jelena Mirkovic","article_modified_time":"2023-10-30T17:59:01+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/","url":"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/","name":"DDoS attack tools - Jelena Mirkovic","isPartOf":{"@id":"https:\/\/www.isi.edu\/people-mirkovic\/#website"},"datePublished":"2023-10-30T17:20:06+00:00","dateModified":"2023-10-30T17:59:01+00:00","breadcrumb":{"@id":"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/ddos-attack-tools\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.isi.edu\/people-mirkovic\/"},{"@type":"ListItem","position":2,"name":"DDoS Benchmarks","item":"https:\/\/www.isi.edu\/people-mirkovic\/ddos-benchmarks\/"},{"@type":"ListItem","position":3,"name":"DDoS attack tools"}]},{"@type":"WebSite","@id":"https:\/\/www.isi.edu\/people-mirkovic\/#website","url":"https:\/\/www.isi.edu\/people-mirkovic\/","name":"Jelena Mirkovic","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.isi.edu\/people-mirkovic\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.isi.edu\/people-mirkovic\/wp-json\/wp\/v2\/pages\/210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.isi.edu\/people-mirkovic\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.isi.edu\/people-mirkovic\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.isi.edu\/people-mirkovic\/wp-json\/wp\/v2\/users\/421"}],"replies":[{"embeddable":true,"href":"https:\/\/www.isi.edu\/people-mirkovic\/wp-json\/wp\/v2\/comments?post=210"}],"version-history":[{"count":0,"href":"https:\/\/www.isi.edu\/people-mirkovic\/wp-json\/wp\/v2\/pages\/210\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/www.isi.edu\/people-mirkovic\/wp-json\/wp\/v2\/pages\/197"}],"wp:attachment":[{"href":"https:\/\/www.isi.edu\/people-mirkovic\/wp-json\/wp\/v2\/media?parent=210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}