Metasploitable/TorsHammer - Revision history

Admin: Redirected page to Tors Hammer

2016-08-29T04:40:01Z

Redirected page to Tors Hammer

← Older revision		Revision as of 04:40, 29 August 2016
Line 1:		Line 1:
			#REDIRECT [[Tors Hammer]]

			<!--

	=Tor's Hammer Slow Body DoS Attack=		=Tor's Hammer Slow Body DoS Attack=

Line 162:		Line 166:

	{{MSFlag}}		{{MSFlag}}

			-->

2016-08-29T04:39:39Z

2016-03-29T04:48:52Z

Memory Squeeze

← Older revision		Revision as of 04:48, 29 March 2016
Line 148:		Line 148:

	[[Image:TorsHammer_OfflineMemSqueeze.png\|500px]]		[[Image:TorsHammer_OfflineMemSqueeze.png\|500px]]

			=pwn=

			To be sure: this attack can pwn a server.

	=Flags=		=Flags=

	{{MSFlag}}		{{MSFlag}}

2016-03-29T04:48:13Z

Memory Squeeze

← Older revision		Revision as of 04:48, 29 March 2016
Line 145:		Line 145:
	Turns out, the machine ran out of memory, and the network device began dropping packets:		Turns out, the machine ran out of memory, and the network device began dropping packets:

	This attack '''completely''' knocked the server offline.		This attack '''completely''' knocked the server offline, and it had to be rebooted.

	[[Image:TorsHammer_OfflineMemSqueeze.png\|500px]]		[[Image:TorsHammer_OfflineMemSqueeze.png\|500px]]

2016-03-29T04:47:40Z

Tor's Hammer Slow Body DoS Attack

← Older revision		Revision as of 04:47, 29 March 2016
Line 7:		Line 7:
	We'll test this tool out on the [[Metasploitable]] machine, which is running Apache 2.2.8, and see if it is vulnerable to the Tor's Hammer DoS attack. If so, we'll mount the attack.		We'll test this tool out on the [[Metasploitable]] machine, which is running Apache 2.2.8, and see if it is vulnerable to the Tor's Hammer DoS attack. If so, we'll mount the attack.

	<font size="+3">NOTE: This will completely knock out the target server. The web server will run out of memory and will begin to drop packets from the device. It must be rebooted to fix.~~</font>~~		<font size="+3">NOTE: This will completely knock out the target server.</font> The web server will run out of memory and will begin to drop packets from the device. It must be rebooted to fix. Use wisely.

	==Python Script==		==Python Script==

2016-03-29T04:47:22Z

← Older revision		Revision as of 04:47, 29 March 2016
Line 6:		Line 6:

	We'll test this tool out on the [[Metasploitable]] machine, which is running Apache 2.2.8, and see if it is vulnerable to the Tor's Hammer DoS attack. If so, we'll mount the attack.		We'll test this tool out on the [[Metasploitable]] machine, which is running Apache 2.2.8, and see if it is vulnerable to the Tor's Hammer DoS attack. If so, we'll mount the attack.

			<font size="+3">NOTE: This will completely knock out the target server. The web server will run out of memory and will begin to drop packets from the device. It must be rebooted to fix.</font>

	==Python Script==		==Python Script==

2016-03-29T04:46:12Z

Tor's Hammer Slow Body DoS Attack

← Older revision		Revision as of 04:46, 29 March 2016
Line 1:		Line 1:
	=Tor's Hammer Slow Body DoS Attack=		=Tor's Hammer Slow Body DoS Attack=

	Tor's Hammer (https://sourceforge.net/projects/torshammer/) is a tool that uses the slow body attack to swamp Apache servers and cause a denial of service (DoS). It does this by sending a POST request with a large declared content-length, then ~~sending data~~ one ~~bit at~~ a ~~time~~.		Tor's Hammer (https://sourceforge.net/projects/torshammer/) is a tool that uses the slow body attack to swamp Apache servers and cause a denial of service (DoS). It does this by sending a POST request with a large declared content-length (like 1000 MB), then performing the following, ad infinitum: send one letter through the open connection; take a nap.

	Tor's Hammer, in particular, provides a Python script that enables running the slow body attack through a web proxy like Tor, to provide anonymity. It also implements other disguising elements like a slew of User Agent headers.		Tor's Hammer, in particular, provides a Python script that enables running the slow body attack through a web proxy like Tor, to provide anonymity. It also implements other disguising elements like a slew of User Agent headers.

2016-03-29T04:02:17Z

Bringing Down Ping

← Older revision		Revision as of 04:02, 29 March 2016
Line 77:		Line 77:
	However, these don't seem to affect the attack, as the web server is inaccessible even while the error messages are being printed out.		However, these don't seem to affect the attack, as the web server is inaccessible even while the error messages are being printed out.

	==Bringing Down Ping==		==Bringing Down The Server==

			===Ping Down===

	At some point during the attack, the machine stopped responding to ping:		At some point during the attack, the machine stopped responding to ping:
Line 137:		Line 139:
	</pre>		</pre>

	This attack completely knocked the server offline.		===Memory Squeeze===

			Turns out, the machine ran out of memory, and the network device began dropping packets:

			This attack '''completely''' knocked the server offline.

			[[Image:TorsHammer_OfflineMemSqueeze.png\|500px]]

	=Flags=		=Flags=

	{{MSFlag}}		{{MSFlag}}

2016-03-29T04:00:46Z

Results

@@ Line 76: / Line 76: @@
 However, these don't seem to affect the attack, as the web server is inaccessible even while the error messages are being printed out.
 =Flags=
 {{MSFlag}}

2016-03-29T03:55:26Z

Results

← Older revision		Revision as of 03:55, 29 March 2016
Line 40:		Line 40:
	==Results==		==Results==

	This works like a charm:		This works like a charm, bringing the target 10.0.0.27 to its knees:

	[[Image:TorsHammer.png\|500px]]		[[Image:TorsHammer.png\|500px]]