DDos atacks?

[LillDev!l]

Ello people, a friend off mine has been getting DC ed by DDos atacks lately (as the one doing it said it).
Im sure this forum has enough people who (unlike me) do know stuff about things like this... so i'dd like to ask, is there any way you can defend yourself against stuff like that ?

Any help would be apreciated ^^ thnx in advance

[Crumpets]

A Successful DDoS attack usually cannot be done by 1 single pc. The person would need quite a few to bring down a single pc. So unless your mate raped and killed this guys family .. I doubt the guy is telling the truth.

But if it is ... then there's no real way to protect yourself against one.

I still say it's not a DDoS though, as going through all that trouble for a single user .. ;s

[LillDev!l]

A Successful DDoS attack usually cannot be done by 1 single pc. The person would need quite a few to bring down a single pc. So unless your mate raped and killed this guys family .. I doubt the guy is telling the truth.

But if it is ... then there's no real way to protect yourself against one.

I still say it's not a DDoS though, as going through all that trouble for a single user .. ;s

Mh... the guy DC ed my friend, and even told how long it'dd take till DC...
And its not like hes doing it to a random user, the guy doing it does have experience with hacking kinda stuff aswell...

How many pc's do you think it'dd take to take down one ? i mean... if its like 5, maybe 6 pc's its still (easely) possible right?
It'dd surely suck if there's NOTHING you can do about it ... O.o

[ImmortalKiller]

A Successful DDoS attack usually cannot be done by 1 single pc. The person would need quite a few to bring down a single pc. So unless your mate raped and killed this guys family .. I doubt the guy is telling the truth.

But if it is ... then there's no real way to protect yourself against one.

I still say it's not a DDoS though, as going through all that trouble for a single user .. ;s

Mh... the guy DC ed my friend, and even told how long it'dd take till DC...
And its not like hes doing it to a random user, the guy doing it does have experience with hacking kinda stuff aswell...

How many pc's do you think it'dd take to take down one ? i mean... if its like 5, maybe 6 pc's its still (easely) possible right?
It'dd surely suck if there's NOTHING you can do about it ... O.o

If each one of those PCs had a different IP connected to it...

It might be enough for a DDos...

But trust me. Your friend isn't being DDos'ed. Not over silkroad ~,~

[LillDev!l]

A Successful DDoS attack usually cannot be done by 1 single pc. The person would need quite a few to bring down a single pc. So unless your mate raped and killed this guys family .. I doubt the guy is telling the truth.

But if it is ... then there's no real way to protect yourself against one.

I still say it's not a DDoS though, as going through all that trouble for a single user .. ;s

Mh... the guy DC ed my friend, and even told how long it'dd take till DC...
And its not like hes doing it to a random user, the guy doing it does have experience with hacking kinda stuff aswell...

How many pc's do you think it'dd take to take down one ? i mean... if its like 5, maybe 6 pc's its still (easely) possible right?
It'dd surely suck if there's NOTHING you can do about it ... O.o

If each one of those PCs had a different IP connected to it...

It might be enough for a DDos...

But trust me. Your friend isn't being DDos'ed. Not over silkroad ~,~

Its something personal, which just happens to be annoying on Silkroad >.<

Would there be other possible ways to just DC someone when you want to then ?...

[Burningwolf]

My friend also had one of DDos attacks.
He fixed it by going to the attackers home and throwing a brick thru his window...lol.

[LillDev!l]

My friend also had one of DDos attacks.
He fixed it by going to the attackers home and throwing a brick thru his window...lol.

Lmfao xD nice and effective ^^

[cpinney]

all u need is a botnet and you can control as many pcs as you want, so he could have control from 10 to 1,000 pcs if he really wanted, if he does have a botnet. so yes its possible.

[LillDev!l]

all u need is a botnet and you can control as many pcs as you want, so he could have control from 10 to 1,000 pcs if he really wanted, if he does have a botnet. so yes its possible.

and there IS no way to protect yourself against it ?...

[cpinney]

yeah i am sure there are, just need to google for something that works for you, i am on cisco and found a few things, but idk if they will work for you, heres the link gives an explanation on how they work and how to try and defend against them.

http://www.cisco.com/en/US/tech/tk59/te ... 4a5b.shtml

[izmeister]

all u need is a botnet and you can control as many pcs as you want, so he could have control from 10 to 1,000 pcs if he really wanted, if he does have a botnet. so yes its possible.

and there IS no way to protect yourself against it ?...

I'm pretty sure a good firewall would protect you suffeciently...

[BloodyBlade]

whats DDos?

[piootr]

whats DDos?

(Distributed)Denial of service attack

[BloodyBlade]

whats DDos?

(Distributed)Denial of service attack

uhh..explain?

[cpinney]

whats DDos?

(Distributed)Denial of service attack

uhh..explain?

click the link i have a few posts above, it explains it.

[piootr]

whats DDos?

(Distributed)Denial of service attack

uhh..explain?

As partyvan so eloquently put it:

Spoiler!

TCP Handshake

First off, you need some technical information. Remember IP addresses? They have a use other than getting your ass backraided for posting a Personal Army request. An IP address identifies your computer as the recipient of data. In the case of browsing the internet, the web sites you ask to see are sent to your IP address by the web server.

The server has to know your IP address in order to send you anything, though, and your computer needs to know, after you tell it to go to a web page, whether or not the server responded.

On the internet, this is done with a process called the "TCP Handshake." This involves several "packets" of data being exchanged between your computer and the server, illustrated below



Afterwards, you are connected and can request a web page.

Exploiting the TCP Handshake

The internet spans many continents, with all sorts of different ways to get from one place to another. Sometimes packets get lost. If one of the packets in the above handshake does get lost, the connection fails. Packets get lost quite often, but most of the time, your attempts to view web pages succeed.

Why? Because comptuers send MULTIPLE packets, not just one, greatly increasing the chance that one will get through at each of the three steps, completing the handshake and getting you connected. Or, rather, web servers send multiple "SYN/ACK" packets (LOL YES) when the receive a "SYN" (HAY R U THAR?) packet. If the computer that started the handshake doesn't respond, the following occurs.

More importantly, the server has a limited number of connections it can maintain at once. When the server receives a SYN (HAY R U THAR?) packet from you, it takes up one slot sending SYN/ACK (LOL YES) packets back to you.

If someone else tries to connect while you're talking to the server, they just go to a different port.

If the TCP Handshake is completed, with your computer responding with a RST (KTHXBAI) packet, then the server is ready to process further requests from you, and it frees up the port that it was using to talk with you.

What if you send a bunch of SYN packets, though?


CPURaep

However, once you stop sending SYN packets, the server will send SYN/ACKs to all the ones that it's received, your computer will send RST packets back, and the server will free up all its ports again. Thus, Crapflooding only keeps a site down while the flood continues.

If, however, the network hardware on the server is significantly better than the CPU, or the flood's dataforce has been doubled over 9000 times, the following can occur:



SMURF Attack

This attack method involves using a machine as an unwitting proxy in the attack on another server. This works by sending ICMP packets (ping [ICMP echo] to be precise) to the 'proxy' machine, but spoofing the source address to that of the target machine. The unwitting proxy computer then floods the target with replies.

A more common (and more effective) form of this attack is to send SYN or SYN/ACK packets with spoofed source addresses. In the case of SYN packets with spoofed addresses, the "mirror" machine will send multiple SYN/ACK packets at the target for each SYN it receives. If SYN/ACK packets are sent, the "mirror" machine will merely blast the target with RST packets. This is called a "Reflective" DoS attack.

If UDP Packets are used, it is called a "FRAGGLE Attack"



UDP Flooding

This is a very simple type of flood, consisting of simply sending large numbers of UDP packets to the target to use up resources. For instance, the UPD flood works by opening lots of UDP connections on lots of random ports. The server must then check for a listening program for each port, and then send a reply packet to the flooder (unless the flooder spoofs his ip).

DDoS

DDoS (with two Ds) refers to a Distributed Denial-of-Service attack. Literally, this means more than one computer attacking the target. In practice, this generally refers to use of a botnet to obtain the multiple computers to attack with.

You cannot DDoS with your home computer. Because it is only one computer. You can, however, DoS. If you DoS at the same time lots of other people are launching DoS attacks, you are part of a DDoS attack.

EDIT: too slow =(

[LillDev!l]

lol, last spoiler explains it really well for the dummies xD
but yea, should be able to just block / ignore those packets sent to you x__x.
Anyhow, DDoS is illegal pretty much anywhere?
Can always threaten with lawsuits then (or actualy start one, that'dd be upto my friend, lol).

Anyhow thnx for the help / explenation ppl ^^

[pr0klobster]

lol, last spoiler explains it really well for the dummies xD
but yea, should be able to just block / ignore those packets sent to you x__x.
Anyhow, DDoS is illegal pretty much anywhere?
Can always threaten with lawsuits then (or actualy start one, that'dd be upto my friend, lol).

Anyhow thnx for the help / explenation ppl ^^

blocking ALL the packets...?

Thus the reason for both a hardware firewall (router) and a software firewall (on the pc). Large corporations take this route:

BLOCK all traffic EXCEPT those specifically allowed in FROM a specific IP address.

Most home PC's take this route:

ALLOW all traffic EXCEPT those IP's known to be bad.

All you can really do is reduce your risk. There will always be a very small chance of a DDOS.

If I had to guess, your bud got a trojan, rootkit, or a worm or something like that that allows the "hacker" access to the pc. Once you have access to the pc it becomes a lot easier (note that rootkits run as System, so those are the toughest to find, and easiest for hackers to use to gain access).

In everyday use, it's simply not practical for a home user to disable ALL his ports except those they really want. For example, Unreal Tournament needs a range of ports - like 20 - in order for you to play online. SRO is similar (dunno the ports, though I've been looking). Block the port that SRO communicates over, and you'll probably get a C9 error, or it just will not run.

There are 65535 IP ports available and a lot of them are defined to have a specific function. For example, FTP uses ports 21 and 23. Block those, and you reduce your risk a little, but you also restrict yourself from downloading files from FTP servers. You can set your router to prevent most incoming traffic and allow outgoing, but even that isn't 100% reliable.

http://en.wikipedia.org/wiki/List_of_TC ... rt_numbers

Also, most consumer routers don't have a lot of features that the high-end Cisco's do (probably can't set up a VLAN or a VPN, for example).

[mitchellsrf]

im pretty sure you cant get ddos attacked in sro but then again what do i know?