DDoS Tools 273
Tools for Creating Botnets
Various tools are used to create botnets, including the following:
■ Shark
■ Plugbot
■ Poison Ivy
■ Low Orbit Ion Cannon (LOIC)
DoS Tools
The following is a list of DoS tools:
DoSHTTP DoSHTTP is an HTTP flood DoS tool. It can target URLs, and it uses port
designation.
UDP Flood This utility generates UDP packets at a specified rate and to a specific
network.
Jolt2 This IP packet fragmentation DoS tool can send large numbers of fragmented pack-
ets to a Windows host.
Ta r ga This 8-in-1 tool can perform DoS attacks using one or many of the included
options. Attacks Targa is capable of land, WinNuke, and teardrop attacks.
DDoS Tools
The following is a list of DDoS tools:
Trinoo This DDoS tool uses UDP flooding. It can attack single or multiple IPs.
LOIC Low Orbit Ion Cannon (LOIC) has become popular because of its easy one-button
operation. Some people suspect that groups such as Anonymous, which use DDoS attacks
as their primary weapon, use LOIC as their main tool. (See Exercise 11.2.)
TFN2K This DDoS attack tool is based on TFN (Tribe Flood Network) and can perform
UDP, SYN, and UDP flood attacks.
Stacheldraht This DDoS tool has similar attack capabilities as TFN2K. Attacks can be
configured to run for a specified duration and to specific ports.
The exam will expect you to be familiar with the tools listed in this chapter
and throughout the book, which means you must know what each tool
does and how it’s used. Memorizing the details and nuances of each tool is
not required.