full-disclosure - [FD] New Release: UFONet v1.4 - "T|M3WaRS!"...

Open Source and information security mailing list archives

Message-ID: <a4efb844-8b4f-f2c6-adbe-4e16595b853c@riseup.net>
Date: Fri, 7 Feb 2020 14:08:03 +0100
From: psy <epsylon@...eup.net>
To: fulldisclosure@...lists.org
Subject: [FD] New Release: UFONet v1.4 - "T|M3WaRS!"...

Hi Community,

I am glad to present a new release of this tool:

  - https://ufonet.03c8.net

"UFONet is a free software, P2P and cryptographic -disruptive toolkit-
that allows to perform DoS and DDoS attacks; on the Layer 7 (APP/HTTP)
through the exploitation of Open Redirect vectors on third-party
websites to act as a botnet and on the Layer3 (Network) abusing the
protocol."

See these links for more info:

  - UFONet schema (WebAbuse Single DDoS attack) [1]
  - UFONet (v1.2 "HackRon") slides [2]

---------

Main options are:

  * DDoS (botnet) + DoS
  * Auto-update
  * Clean code
  * Documentation with examples
  * Web/GUI Interface
  * Proxy to connect to 'zombies' (ex: tor)
  * Change HTTP Headers (User-Agent, Referer, Host...)
  * Configure requests (Timeout, Retries, Delay, Threads...)
  * Search for 'zombies' on different search engines
  * Test vulnerabilities on 'zombies'
  * Download/Upload 'zombies' from/to others
  * Inspect a target (HTML objects sizes)
  * Set a place to 'bite' on a target (ex: big file)
  * Control number of rounds to attack
  * Apply cache evasion techniques
  * Advanced queries (ex: Verb tunneling exploitation)
  * Supports GET/POST
  * Multithreading
  * Order 'zombies' to attack you for benchmarking
  * Geomapping / Visual data
  * [...]

This release (v1.4) called "T|M3WaRS!" has added this new features:

  * Ported to: Python3.x
  * Bugfixing
  * Re-factorized: Remote streams, Main()...
  * Added: NTP "Monlist" [DDoS] attack
  * Added: Exclude search engines when massive searching
  * Updated: Dorking/Search engines
  * Updated: Inspector
  * Modified/Updated WebGUI
  * Updated Requirements
  * Updated Documentation
  * Updated FAQ (online)
  * Updated Website
  * [...]

---------

FAQ:

  - https://ufonet.03c8.net/FAQ.html

---------

Packages:

  * [source]:

  - https://code.03c8.net/epsylon/ufonet

  * [mirror]:

  - https://github.com/epsylon/ufonet

  * [.zip]:

  - https://ufonet.03c8.net/ufonet/ufonet-v1.4.zip

  * [.tar.gz]:

  - https://ufonet.03c8.net/ufonet/ufonet-v1.4.tar.gz

-------------------------

Media/Contribution:

  * VIDEO: v1.4 - "UFONet - T|M3WaRS!":

  - https://ufonet.03c8.net/ufonet/ufonet-timewars.ogv

-------------------------

[1] - https://ufonet.03c8.net/ufonet/ufonet-schema.png
[2] - https://ufonet.03c8.net/ufonet/UFONet-v1.2-slides.pdf

Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives