neweracracker / loic Goto Github PK

I have compiled version 1.1.1.19 in mono, and I get 17 warnings. My system:

Windows 7 64 bits
Mono 2.8.2
MonoDevelop 2.4.2.1

Warning: Assembly 'log4net, Version=1.2.10.0, Culture=neutral, PublicKeyToken=1b44e1d426115821, processorArchitecture=MSIL' not found. Make sure that the assembly exists in disk. If the reference is required to build the project you may get compilation errors. (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\Channel.cs(88,88): Warning CS0618: 'System.Collections.CaseInsensitiveHashCodeProvider' is obsoleted: 'Please use StringComparer instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\Channel.cs(70,70): Warning CS0618: 'System.Collections.Hashtable.Hashtable(System.Collections.IHashCodeProvider, System.Collections.IComparer)' is obsoleted: 'Please use Hashtable(IEqualityComparer) instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\Channel.cs(88,88): Warning CS0618: 'System.Collections.CaseInsensitiveHashCodeProvider' iis obsoleted: 'Please use StringComparer instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\Channel.cs(70,70): Warning CS0618: 'System.Collections.Hashtable.Hashtable(System.Collections.IHashCodeProvider, System.Collections.IComparer)' is obsoleted: 'Please use Hashtable(IEqualityComparer) instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\Channel.cs(70,70): Warning CS0618: 'System.Collections.Hashtable.Hashtable(System.Collections.IHashCodeProvider, System.Collections.IComparer)' is obsoleted: 'Please use Hashtable(IEqualityComparer) instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Connection\IrcConnection.cs(43,43): Warning CS0618: 'System.Net.Dns.Resolve(string)' is obsoleted: 'Resolve is obsoleted for this type, please use GetHostEntry instead. http://go.microsoft.com/fwlink/?linkid=14202' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Connection\IrcConnection.cs(23,23): Warning CS0168: The variable 'e' is declared but not used (CS0168) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Connection\IrcConnection.cs(23,23): Warning CS0168: The variable 'e' is declared but not used (CS0168) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\IrcClient.cs(102,102): Warning CS0618: 'System.Collections.CaseInsensitiveHashCodeProvider' is obsoleted: 'Please use StringComparer instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\IrcClient.cs(84,84): Warning CS0618: 'System.Collections.Hashtable.Hashtable(System.Collections.IHashCodeProvider, System.Collections.IComparer)' is obsoleted: 'Please use Hashtable(IEqualityComparer) instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\IrcClient.cs(102,102): Warning CS0618: 'System.Collections.CaseInsensitiveHashCodeProvider' is obsoleted: 'Please use StringComparer instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\IrcClient.cs(84,84): Warning CS0618: 'System.Collections.Hashtable.Hashtable(System.Collections.IHashCodeProvider, System.Collections.IComparer)' is obsoleted: 'Please use Hashtable(IEqualityComparer) instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\NonRfcChannel.cs(79,79): Warning CS0618: 'System.Collections.CaseInsensitiveHashCodeProvider' is obsoleted: 'Please use StringComparer instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\NonRfcChannel.cs(61,61): Warning CS0618: 'System.Collections.Hashtable.Hashtable(System.Collections.IHashCodeProvider, System.Collections.IComparer)' is obsoleted: 'Please use Hashtable(IEqualityComparer) instead.' (CS0618) (IRC)
NewEraCracker-LOIC-ec189ab\IRC\Client\IrcClient.cs(34,34): Warning CS0649: The field 'Meebey.SmartIrc4net.IrcClient._PassiveChannelSyncing' is never asigned and its value will always be default false (CS0649) (IRC)

This IP sending issue is becoming more and more critical as the LOIC needs to simulate more vigorous and novel attacks on our servers.

Basically, the LOIC sends an IP address with every packet it sends, which is an UNACCEPTABLE way to test our servers against the new threats of tomorrow. In the future, hackers will use untraceable programs to DDOS servers, and we desperately need a way to simulate it, so we can understand the implications and possible solutions.

Now I'm not a network professional, but no hacker would or should ever send their own IP address with every packet. If it is to be used to simulate server DDOSes, it should only send the requests to the server, not anything else.

Currently, network testers like me are trying to patch up this fatal flaw by using VPNs like Hotspot Shield. However, there is risk of major collateral damage through this quick fix.

Please, find a fix for this burning problem. People are at stake. Some have been crushed, as the LOIC offers no security or privacy.

Also, could you please read up on a new network testing application, the High Orbit Ion Cannon? It seems to have things that the LOIC could learn from.

Full report here:

http://www.simpleweb.org/reports/loic-report.pdf

I think there is a need for peer2peer option....
I am willing to help.

booting can be performed from irc and then peers could comunicate between them self.
Commands can be distributed using PKI

Look for:
apt-get install monodevelop liblog4net-cil-dev

Replace:
sudo apt-get install monodevelop liblog4net-cil-dev

Channel name shouldn't be compared with case sensitivity, in order to work around that the following variables have to be ToLower()

channel
e.Channel
e.Data.Channel

See this commits:
729e443

a61d501

093a7c1

faed5f5

I have noticed that LOIC doesn't exit after wtf form showing up.

Workaround.
Open cmd and run:
taskkill /IM LOIC.exe

Will be reworked in version 1.1.1.6

Is there a way make this program to not be detected as a virus?

Thanks

Needs to be documented.

Would be nice to use LOIC DoS (or Stress-test =P) algorithms (like ReCoil, SlowLoic) as libraries, for non-IRC based DDoS.

Hello,

Tray icon gets extremely buggy while flooding server with requests.

I tested with 127.0.0.1 (nginx server that I installed in localhost) and when flooding, tray ballot refreshes make impossible to restore LOIC after minimized. This doesn't happen while waiting for target.

BeSquare please fix this in beta branch as I don't use 2010 version of Visual C# express and I can't edit or compile project with Visual Studio 2008.

Kind regards,
NewEraCracker.

LOIC.exe /hivemind irc.server.address
will connect to irc://irc.server.adress:6667/LOIC

Adding two optional parameters for port and channel would be nice.

Example:
LOIC.exe /hivemind irc.server.address 1234
will connect to irc://irc.server.adress:1234/LOIC
and if a channel was specified it would connect to that channel instead of #LOIC :)

Adding slow HTTP DoS attacks would be nice. I'll open a pull request if/when I manage to get it done on my local repo.

This must have been caused by some recent change.

Needs to be looked into ASAP.

Issue #40 proposed adding SSL support.

It should be possible when IRC Library is updated. A new version is available here:
https://github.com/meebey/SmartIrc4net

This issue will now be used to track progress on changes.

what about "new" type of attacks - slow http connections
content-length header is large
but client sends it terrible slow
server become overloaded with lots of "comet" threads and crashes

Hello, I'm trying to run the "mono LOIC.exe" and get the following message:

libgluezilla not found. To have webbrowser support, you need libgluezilla installed

Unhandled Exception:
System.NullReferenceException: Object reference not set to an instance of an object
at System.Windows.Forms.WebBrowser.Refresh (WebBrowserRefreshOption opt) <0x41632cf0 + 0x00090> in :0
at System.Windows.Forms.WebBrowser.Refresh () <0x41632cc0 + 0x00013> in :0
at System.Windows.Forms.Control.SetVisibleCore (Boolean value) <0x415fe400 + 0x0020c> in :0
at System.Windows.Forms.Control.set_Visible (Boolean value) <0x415fe380 + 0x00032> in :0
at (wrapper remoting-invoke-with-check) System.Windows.Forms.Control:set_Visible (bool)
at LOIC.frmMain.InitializeComponent () <0x7f0c3a1684f0 + 0x05797> in :0
at LOIC.frmMain..ctor () <0x7f0c3a167010 + 0x00015> in :0
at (wrapper remoting-invoke-with-check) LOIC.frmMain:.ctor ()
at LOIC.Program.Main () <0x7f0c3a16efd0 + 0x00025> in :0
[ERROR] FATAL UNHANDLED EXCEPTION: System.NullReferenceException: Object reference not set to an instance of an object
at System.Windows.Forms.WebBrowser.Refresh (WebBrowserRefreshOption opt) <0x41632cf0 + 0x00090> in :0
at System.Windows.Forms.WebBrowser.Refresh () <0x41632cc0 + 0x00013> in :0
at System.Windows.Forms.Control.SetVisibleCore (Boolean value) <0x415fe400 + 0x0020c> in :0
at System.Windows.Forms.Control.set_Visible (Boolean value) <0x415fe380 + 0x00032> in :0
at (wrapper remoting-invoke-with-check) System.Windows.Forms.Control:set_Visible (bool)
at LOIC.frmMain.InitializeComponent () <0x7f0c3a1684f0 + 0x05797> in :0
at LOIC.frmMain..ctor () <0x7f0c3a167010 + 0x00015> in :0
at (wrapper remoting-invoke-with-check) LOIC.frmMain:.ctor ()
at LOIC.Program.Main () <0x7f0c3a16efd0 + 0x00025> in :0

Someone can help me, please?

It would be great to be able to see how many LOIC are in the hive. People are always spamming !botnum in the main chat. So people really like to see this. But for the OP's this is spam. And the script that does the !botnum usually runs from one OP and if he is not there no one knows how many there are. Today we had 3400 people in the chan and 2000 LOIC in the hive. So people were very exited. www.mastercard.com completely down :) Grtz from an old OP friend.

[--delete--]

If for some reason LOIC does not detect an internet connection when starting, it pops up an image saying that I screwed up. This is wrong. It should just retry, until it connects. Windows 7 some times delay network connection.

Also, what is up with all the profanities? First time in my life I see a program using the word fuck so many times. Is there a reason for that? I like to believe that the creator of this program is not a 17 year old.

as said in title :P

LOIC on Linux:
You need:
* monodevelop (non debian) or mono-runtime (on debian based distro)
* liblog4net
* latest LOIC version

1. sudo apt-get install monodevelop liblog4net-cli-dev
2. go to source dir and run mdtool build
3. wget http://github.com/downloads/NewEraCracker/LOIC/loic_version.zip
4. go to 'source/bin/debug' and run mono LOIC.exe

Note: If you can't find the liblog4net package, try to build it anyways. i.e. archlinux works without it.

./loic.sh run
/usr/bin/mono

Unhandled Exception: System.InvalidOperationException: List has changed.
at System.Collections.ArrayList+SimpleEnumerator.MoveNext () [0x00000] in :0
at System.Windows.Forms.XplatUIX11.NextTimeout (System.Collections.ArrayList timers, DateTime now) [0x00000] in :0
at System.Windows.Forms.XplatUIX11.UpdateMessageQueue (System.Windows.Forms.XEventQueue queue, Boolean allowIdle) [0x00000] in :0
at System.Windows.Forms.XplatUIX11.UpdateMessageQueue (System.Windows.Forms.XEventQueue queue) [0x00000] in :0
at System.Windows.Forms.XplatUIX11.GetMessage (System.Object queue_id, System.Windows.Forms.MSG& msg, IntPtr handle, Int32 wFilterMin, Int32 wFilterMax) [0x00000] in :0
at System.Windows.Forms.XplatUI.GetMessage (System.Object queue_id, System.Windows.Forms.MSG& msg, IntPtr hWnd, Int32 wFilterMin, Int32 wFilterMax) [0x00000] in :0
at System.Windows.Forms.Application.RunLoop (Boolean Modal, System.Windows.Forms.ApplicationContext context) [0x00000] in :0
at System.Windows.Forms.Application.Run (System.Windows.Forms.ApplicationContext context) [0x00000] in :0
at System.Windows.Forms.Application.Run (System.Windows.Forms.Form mainForm) [0x00000] in :0
at LOIC.Program.Main (System.String[] cmdLine) [0x00000] in :0

Native stacktrace:

./loic.sh: line 78: 1243 Falha de segmentação mono bin/Debug/LOIC.exe

the crash happens when setting value more then 1000 threads in http method using monodevelop 2.4.2

I was looking at the http request if it were sent to port 443 and the request were shown as unencrypted
so i was assuming since a lot of sites are getting SSL on their server then adding HTTPS would be a great idea.

I was also thinking maybe you should add like a proxy settings for the HTTP methods
that would be cool.

What about update feature for loic?

Files HTTPFlooder.cs and frmMain.cs

ADDED >
http://1337day.com/exploits/16729
Apache httpd Remote Denial of Service (memory exhaustion)

fixed some issues.. and some coded cleaned..

http://pastebin.com/73nws5Hj

NOT TESTED

P

I have having problems getting LOIC to connect to my IRC channel.

Are there certain requirements that the channel/server needs?

Can you perhaps add a feature that allows LOIC to fire automatically from hivemind, as to sync up the times of "testing" perfectly? This would allow the IRC to remotely initiate firing.

Something along the lines of:
While (isFiring = true)
{
fire();
}

Thanks and good work so far.

runing TCP-Z and Proxyfinder

updated everything but windows can't run it

why?

This issue is located at "frmMain.cs" at " void CheckParams(List pars)"

Should be worked out at version 1.1.1.5.

We got an option for random strings and that could be used in query strings, unfortunately "=" doesn't get parsed because it is used to split parameters from arguments.

Possible fixes:
a) Implement some escape char.
b) Implement a code that represents "=" and perform replace in subsite parameter.

I am getting a project file missing error when installing on ubuntu linux

LOIC.exe /hidden targetip=127.0.0.1 method=tcp random=false

WRONG!

hidden feature allows to hide hivemind client

Ubuntu installation

1.download source http://github.com/NewEraCracker/LOIC/downloads
2.install some tools: “sudo apt-get monodevelop liblog4net-cil-dev”
3.in source directory: “mdtool build”
4.run: “./bin/Debug/LOIC.exe”
5.ATTENTION to run with arguments
“./bin/Debug/LOIC.exe /hivemind irc.server.address 1234 #secret”. You must add “\” in front of “#”, or linux will think its a comment and it will ignore the rest of the line beyond it.

I also added it in the FAQ

Hey its Only Requesting when i start Flooding and it keeps requesting and nothing is happening to the site..

Will be done on version 1.1.1.5 in mean time check frmMain.cs if you understand c# and look for void CheckParams(List pars)

Thank you.

can you add an option to setup LOIC with a TOR?. is for privacy reasons!

Could be solved by crafting a raw TCP packet and using your own headers as opposed to using the higher level API.

http://pastebin.com/zickygRb
it will be good to make support for it into LOIC

I'm thinking that it would be useful for the LOIC to have integrated SSL support, so that outsiders are less likely to be able to spy on users.

This is especially the case in France, as they are going to try and cut off internet access to "network security auditors". It is going to be more important to at least make it impractical for ISPs to monitor usage. Compared to an "out in the open" connection, a feature for SSL connections will keep these efforts in check.

The port for SSL is 6697 for AnonOps.

Another possibility is a connection to an IRC in I2P. I2P makes it much more difficult to discover the location of a server, making takedowns impractical.

I2P automatically encrypts all connections with garlic routing, obscuring the user from the server and spying nodes, keeping them safe even if the server was raided.

We need to do some research on these things. Any comments?

When using HTTP in a "test" of a webserver the IP of the PC running LOIC is logged in the logfiles of the webserver. However, by inserting an extra header in the GET request the server can be tricked into thinking the request came through a proxy (the PC running LOIC) and instead of this IP it will log the IP of the "original" requestor.

For example: when adding the following header:

X-Forwarded-For: 70.106.34.24

This IP will be stored in the logfiles.

Perhaps LOIC could add this functionality? A checkbox saying "Fake proxy server" and a freeform field for an IP, or even perhaps have LOIC generate a different IP for every request sent.

Would it be possible to get a full list of usable vars to be set?

I noticed how targetip (as in example) wasn't strait forward as targethost (for the URL). So, I was hoping if you could give some more usable variables to be set.

Thanks :)

Hi, thanks a lot for this wonderful tool.
Here is a idead it may be useful, when too many (N loic clients) are able to take down a target, the N+1 client is getting requested status as 0.

Can LOIC be able to retrieve a 2ndary target from a target priority list to redirect the N+x people that are waiting to help requesting data?

Thanks.

Hey, the argument parsing in LOIC is currently inefficient an seems to be dependent on the order of arguments.

I'd like to add libArgument support to LOIC, which would allow parsing arguments in a really nice and effortless way. I am the author of libArgument and I released it to the public domain, so I could integrate its source into LOIC without introducing more external dependencies. I could also add the nuget package as a dependency instead of integrating the source into LOIC.

Just tell me what you think. I should be able to provide a pull request within two days.

I've tried to use the executable on XP (also the one from SourceForge), but it just says, "Application failed to initialize...". I was going to use it to stress test my servers :)

how do i make my own #loic for the hivemind mode? (i have an irc server just need to know what to do in #loic)

I'll introduce a small delay in v1.1.1.6 to avoid such cases.

wondering if it would be possible to see this with possibilities to carry out tests utilizing the recent flaws documented for apache

http://1337day.com/exploits/16729
Apache httpd Remote Denial of Service (memory exhaustion)

http://1337day.com/exploits/17112
Apache Server 2.3.14 Denial of Service

(Sorry, I didn't mean to close my last thread. They put the button to close to the Post message.)

I own the server so I don't see why there would be any connection issues. I use IRCXpro (OfficeIRC).

I also have a policy server setup.

Are there certain permissions the channel needs for it to connect?

There is an ongoing lack of Tor network support for this package.

Use of the Tor net needs to be a viable second option, and improve the product's flexibility as a test tool.

A user in IRC has given me this suggestion.

Just writing it here so I don't forget :)

frmMain.cs

tbSpeed.Value = 20; //that means a delay of 20ms :o
Changed to:
tbSpeed.Value = 0; //delay 0ms + 1ms harcoded in 1.1.1.6 flooders

Here for reference only.