syn-flood

README

Syn Flood

This project is developed with the objective of learning low level network operations with Golang. It starts a syn flood attack with raw sockets.

Please do not use that tool with devil needs.

Prerequisites

You need root access to run syn-flood

Configuration

syn-flood can be customized with several command line arguments:

--host                  string      Provide public ip or DNS of the target
--port                  int         Provide reachable port of the target
--payloadLength         int         Provide payload length in bytes for each packet
--floodType             string      Provide the attack type. Proper values are: syn, ack, synack
--floodDurationSeconds  int64       Provide the duration of the attack in seconds, -1 for no limit, defaults to -1

To be able to run syn-flood with unlimited time range, you should also increase your operating system open file limits, you can refer here about how to do that.

Download

Binary

Binary can be downloaded from Releases page.

After then, you can simply run binary by providing required command line arguments:

$ sudo ./syn-flood --host 10.0.0.100 --port 443

Or with DNS:

$ sudo ./syn-flood --host foo.example.com --port 443

Docker

Docker image can be downloaded with below command:

$ docker run bilalcaliskan/syn-flood:latest

Development

This project requires below tools while developing:

• Golang 1.16
• pre-commit
• golangci-lint - required by pre-commit

References

• https://www.devdungeon.com/content/packet-capture-injection-and-analysis-gopacket
• https://www.programmersought.com/article/74831586115/
• https://github.com/rootVIII/gosynflood
• https://golangexample.com/repeatedly-send-crafted-tcp-syn-packets-with-raw-sockets/
• https://github.com/kdar/gorawtcpsyn/blob/master/main.go
• https://pkg.go.dev/github.com/google/gopacket
• https://github.com/david415/HoneyBadger/blob/021246788e58cedf88dee75ac5dbf7ae60e12514/packetSendTest.go
• mac spoofing -> https://github.com/google/gopacket/issues/153
• free proxies -> https://www.sslproxies.org/
• What is an ACK flood DDoS attack? | Types of DDoS attacks
• https://bariskoparmal.com/2021/08/22/spesifik-ddos-saldirilari-ve-saldiri-komutlari/
• https://github.blog/2016-07-12-syn-flood-mitigation-with-synsanity/

License

Apache License 2.0

Documentation

Overview

Copyright © 2022 bilalcaliskan bilalcaliskan@protonmail.com