Okay, so we're just gonna continue from where we left off. Yep, I
still have the terminal up and running. And, now we need to go on the net, so
here's the address. Okay, so you no longer need this one.
You just need http://ha.ckers.org/slowloris/. You need to
go ahead and visit this website. This is the official website for this exploit,
for this Perl script. There isn't that much information on it but
there is enough for a script of this kind. I would strongly recommend that you
just, you don't necessarily need to read through all of this, but skim it. Just go
and skim it. See what's in there, see what the developers have written, see how it
works, what it is for, in addition to what I've already stated. You might get some
deeper insights into how this attack actually works. One of the bright sides
of this attack is it doesn't actually require, it
doesn't actually require a lot of bandwidth. Not necessarily, anyway, but the
more you have the better. Okay, so let's scroll down. This is the
part that you really should take a look at. These are the servers, web servers,
that are affected by this sort of an attack. And down below, these are the
servers that should not be vulnerable to this type of attack. Okay, change here, I
have a slight correction for myself here, these are not the servers
that are vulnerable to this type of an attack, but rather instead that are
probably vulnerable, or that are likely to be susceptible to this.
Same applies here, on these servers it is not likely that
this type of an attack will work. Same for these two, it's actually verified by the user
community that it doesn't work. You can still go ahead and try it if you have
the permission, but it is unlikely that it will work. Anyway, here
have Apache 2 point something. That's important because a large amount of
servers out there run on Apache. And what I'm pleased to see here is that lightpd
doesn't seem to be affected by this, and nginx also doesn't seem to be
affected by this. More importantly, nginx. If you don't know what
nginx is, it's spelled, for some strange reason it's spelled, nginx.
It's an alternative to Apache. It hasn't been quite around for that
long, like Apache, but definitely long enough, and people have been using it as
a substitute for Apache. It's said to be faster, but I can't really confirm this.
Anyway, that's a bit of extra information that I've just dumped in there somehow,
it doesn't really matter. It says here, also, that there are some sort of
requirements for this script to actually run. But if you're running it on Kali
Linux, in the latest version as I am, you shouldn't need to install anything
extra. If you do, refer to the site and see what else is missing. But, I don't
know, I've tried it, I have tried it on the Kali Linux that I'm running, and you are
running the same system back at your place. You shouldn't need to install
anything of a kind. Anyway, if you just keep on scrolling
down. Just a key note here for anybody out there that wants to do this
on Windows, you can but you need to set up Cygwin. Yeah, I mean it is
definitely doable, but I wouldn't really recommend it. Anyway, you go down further
and it says download. It's Slowloris.pl, you will need to download this
particular, you will need to download this particular script. Or, if you want to
perform this DoS attack on an ipv6 protocol, you can also download this
script. I wouldn't say that there is that high of a percentage of
the world is using ipv6, not yet, anyway, but slowly but surely they are switching
to ipv6. Let me tell you why. You have about 4 billion
ipv4 addresses, and you have exponentially more ipv6 addresses.
Because there is a shortage of IP addresses they switched over to ipv6
protocol, they made it available, but, I don't know why exactly, but nothing not
that high of a percentage of people have switched to ipv6. Not yet, anyway.
But, in the future, sure, why not. Anyway, for the time being, you're gonna
use this particular script that I said, just go ahead and click on it, and you
see this is not your average download link. This is basically a script on the
net that you're gonna ctrl + A to select everything, and then ctrl + C to
copy it. Normally, I wouldn't advise doing this, but I trust the site to a good
extent, and you are doing this in a virtual machine. So, yeah. If you're
doing it in a virtual machine it's not that dangerous, but if you're doing it in
a physical machine it could present problems. Anyway, let's just go ahead, I'm
gonna, I have two of the files which I've previously created. So, I'm just gonna
delete both of them, and I'm gonna create a new one, nano slowloris. You can
name this whatever you want, by the way, .pl, but this just makes sense, and you
do need the extension pl. That is an absolute must-have here. Press ENTER to
open up the file in nano, paste the contents. Don't
close it and save it immediately, it takes a while for everything to
load. You have the code here, down below is explanations on behalf of the
developers have placed there. So, you got some things here, you can go through the
script if you wish, if you know how to read Perl scripts. Ctrl + O to save, press
enter, ctrl + X to exit. Do the chmod to make the file executable, +x, slowloris.pl.
Clear the screen. And now we're gonna, I'm sure I have the command here somewhere
because I really don't feel like typing it in now. I'm bound to make mistakes
doing tutorials when I type them in. So you have this
standard script execution command, ./, to execute pretty much any
executable script on Linux. Then you type in the name of the script or the
path to the script. Then you have this argument -dns, and you have the IP address,
and you have -port 80, and I do believe that this is the number of
threads, or should I say socks that are opened. Anyway, go ahead, I have
typed in the IP address of my router of course on which I'm gonna be performing
this, I have done the nmap scan for this particular IP address, so go ahead and
press ENTER, and this is going to run. Let's open up a browser, it's 192.168.1.1.
Now it might load, it might not load, okay, it doesn't load. It says the connection was
reset, I am unable to access it. So, let's go ahead into Kali, stop this attack, go
back to Firefox. Let's try reloading the site now, try
again, no. Why? I have stopped the script?
Excellent, There we go. So, I didn't press try
again, I just pressed Ctrl + R on my keyboard to reload the site. And you can see that
now I can type in, as opposed to before you can see that the connection was
reset. So, let's just go ahead and cancel this. And while I'm running the tutorial let
me just go ahead and do this, ping google, so you know that I have internet
connectivity, that I am not disconnected from the net completely. Not Q but Ctrl + C.
So, pretty simple to execute, you don't need to invest that much thought into it. If
you just conduct the scan, if you see that it's vulnerable, then you can
perform an attack. If you see that it's not vulnerable then, of
course, you won't be able to do it. Now a key reminder before I finish this, all of
these tests I'm doing on my router. So, on this particular web server
that I'm running on this router. As you can see, it does have a list of
servers on which it is likely to run, but if you do try it on some other servers
that you, of course, have a permission to do so, it might not run. Also, it might
actually slow the site down, increase the loading time, or some increase to the
loading time to a couple of minutes, as I do believe I have stated before. So, it can be a
full DoS attack or a partial DoS attack. If it's a partial one don't be
discouraged, it's pretty much just as effective as the real one. Primarily
because, nobody's gonna wait around for five minutes for their site to load, or
rarely anyone will. Just try putting yourself in such a position. Anyway,
I bid you farewell here, and I hope to see you in the next tutorial.