__ __ __ __ _____ _ _ _____ _ _ _ | \/ | \ \ / / | __ \ (_) | | / ____| | | | | | \ / |_ __\ V / | |__) | __ ___ ____ _| |_ ___ | (___ | |__ ___| | | | |\/| | '__|> < | ___/ '__| \ \ / / _` | __/ _ \ \___ \| '_ \ / _ \ | | | | | | |_ / . \ | | | | | |\ V / (_| | || __/ ____) | | | | __/ | | |_| |_|_(_)_/ \_\ |_| |_| |_| \_/ \__,_|\__\___| |_____/|_| |_|\___V 2.1 if you need WebShell for Seo everyday contact me on Telegram Telegram Address : @jackleetFor_More_Tools:
Demonstrations of dddos.py, the Linux eBPF/bcc version. This tracks ip_rcv function (using kprobe) and elapsed time between received packets to detect potential DDOS attacks. The following steps illustrates the usage of dddos : 1 - Start dddos.py : # ./dddos.py DDOS detector started ... Hit Ctrl-C to end! TIME(s) MESSAGE 2 - Launch hping3 (or any other flooder) in another terminal as shown below: # hping3 localhost -S -A -V -p 443 -i u100 3 - dddos.py triggers alerts and reports a DDOS attack: DDOS detector started ... Hit Ctrl-C to end! TIME(s) MESSAGE 2019-01-16 11:55:12.600734 DDOS Attack => nb of packets up to now : 1001 2019-01-16 11:55:12.600845 DDOS Attack => nb of packets up to now : 1002 2019-01-16 11:55:12.600887 DDOS Attack => nb of packets up to now : 1003 2019-01-16 11:55:12.600971 DDOS Attack => nb of packets up to now : 1004 2019-01-16 11:55:12.601009 DDOS Attack => nb of packets up to now : 1005 2019-01-16 11:55:12.601062 DDOS Attack => nb of packets up to now : 1006 2019-01-16 11:55:12.601096 DDOS Attack => nb of packets up to now : 1007 2019-01-16 11:55:12.601195 DDOS Attack => nb of packets up to now : 1008 2019-01-16 11:55:12.601228 DDOS Attack => nb of packets up to now : 1009 2019-01-16 11:55:12.601331 DDOS Attack => nb of packets up to now : 1010 2019-01-16 11:55:12.601364 DDOS Attack => nb of packets up to now : 1011 2019-01-16 11:55:12.601470 DDOS Attack => nb of packets up to now : 1012 2019-01-16 11:55:12.601505 DDOS Attack => nb of packets up to now : 1013 2019-01-16 11:55:12.601621 DDOS Attack => nb of packets up to now : 1014 2019-01-16 11:55:12.601656 DDOS Attack => nb of packets up to now : 1015 2019-01-16 11:55:12.601757 DDOS Attack => nb of packets up to now : 1016 2019-01-16 11:55:12.601790 DDOS Attack => nb of packets up to now : 1017 2019-01-16 11:55:12.601892 DDOS Attack => nb of packets up to now : 1018 2019-01-16 11:55:12.601925 DDOS Attack => nb of packets up to now : 1019 2019-01-16 11:55:12.602028 DDOS Attack => nb of packets up to now : 1020 Remark : Use Ctrl-C to stop dddos.py
| Name | Type | Size | Permission | Actions |
|---|---|---|---|---|
| CMakeLists.txt | File | 276 B | 0644 |
|
| biolatpcts.py | File | 3.23 KB | 0755 |
|
| biolatpcts_example.txt | File | 650 B | 0644 |
|
| bitehist.py | File | 1.36 KB | 0755 |
|
| bitehist_example.txt | File | 1.18 KB | 0644 |
|
| dddos.py | File | 3.73 KB | 0755 |
|
| dddos_example.txt | File | 2.06 KB | 0644 |
|
| disksnoop.py | File | 1.9 KB | 0755 |
|
| disksnoop_example.txt | File | 1.55 KB | 0644 |
|
| hello_fields.py | File | 679 B | 0755 |
|
| hello_perf_output.py | File | 1.24 KB | 0755 |
|
| hello_perf_output_using_ns.py | File | 1.8 KB | 0755 |
|
| kvm_hypercall.py | File | 1.48 KB | 0755 |
|
| kvm_hypercall.txt | File | 1.74 KB | 0644 |
|
| mallocstacks.py | File | 1.9 KB | 0755 |
|
| mysqld_query.py | File | 1.66 KB | 0755 |
|
| mysqld_query_example.txt | File | 499 B | 0644 |
|
| nflatency.py | File | 6.07 KB | 0755 |
|
| nodejs_http_server.py | File | 1.34 KB | 0755 |
|
| nodejs_http_server_example.txt | File | 276 B | 0644 |
|
| stack_buildid_example.py | File | 3.03 KB | 0755 |
|
| stacksnoop.py | File | 3.18 KB | 0755 |
|
| stacksnoop_example.txt | File | 2.8 KB | 0644 |
|
| strlen_count.py | File | 1.3 KB | 0755 |
|
| strlen_hist.py | File | 1.81 KB | 0755 |
|
| strlen_hist_ifunc.py | File | 3.71 KB | 0755 |
|
| strlen_snoop.py | File | 1.35 KB | 0755 |
|
| sync_timing.py | File | 1.36 KB | 0755 |
|
| task_switch.c | File | 499 B | 0644 |
|
| task_switch.py | File | 486 B | 0755 |
|
| tcpv4connect.py | File | 2.36 KB | 0755 |
|
| tcpv4connect_example.txt | File | 1.04 KB | 0644 |
|
| trace_fields.py | File | 589 B | 0755 |
|
| trace_perf_output.py | File | 1.56 KB | 0755 |
|
| undump.py | File | 3.52 KB | 0755 |
|
| undump_example.txt | File | 886 B | 0644 |
|
| urandomread-explicit.py | File | 1.48 KB | 0755 |
|
| urandomread.py | File | 1.01 KB | 0755 |
|
| urandomread_example.txt | File | 675 B | 0644 |
|
| vfsreadlat.c | File | 896 B | 0644 |
|
| vfsreadlat.py | File | 1.3 KB | 0755 |
|
| vfsreadlat_example.txt | File | 3.53 KB | 0644 |
|