7 ms·

Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerab

by lossolo 10y ago

Website that we were running was under DDOS couple of years ago, what we did is we took ips of servers that made ddos. Then we scanned the ports, found vulnerability in the application that was running on it then get into the server using this vulnerability. We checked open connections and found one used for command and control server (irc server) then we listened to irc channel. DDOSers were talking private things on that channel... Then we entered their channel and disabled all their bots using their own software that we got source from link pasted on their channel. Then we confronted them, period of silence after they have read what we wrote was priceless. They never ddosed us again.

armandososa 10y ago
I wish HN had a `save` feature so I don't lose gems like these.
- eddyg 10y ago
  Just up-vote the stories and comments you want to save. When you view your profile on HN, you can see a list of your up-votes.
- gryphonshafer 10y ago
  When I use a desktop browser, I just right-click on the post age data and select "Save link as..." or "Bookmark This Link" or whatever.
- GFK_of_xmaspast 10y ago
  Most modern browsers still have bookmarking ability.
- reitanqild 10y ago
  Use bookmarks feature. At least Chrome and FF allows you to sync it between different instances. (Personally I use pinboard.in and would happily recommend it but I don't think everyone need it.)
  - ZenoArrow 10y ago
    There's no need. If you upvote the story you can find it again under 'upvoted stories' in your HN profile. That said, pinboard.in is a decent service, and it's useful to have all your bookmarks in a central location.
themartorana 10y ago
This is brilliant. Hack the hackers! Heheh.
kowdermeister 10y ago
Nicely done! This would make a great scene in Mr. Robot :)
kuschku 10y ago
I’ve had a very similar experience – I’m surprised I’m not the only one who did that. I’d have expected the DDoSers to have better security
- sp0rk 10y ago
  Botnets have notoriously bad security. Many of the people running them have no technical knowledge and/or are using "cracked" versions of paid botnet software that are backdoored or intentionally left unsecured. A lot of the software is heavily modified or even left incomplete by the person that leaked it, leading to vulnerabilities open to anybody with some technical competence and the time to poke around a little.
  - 6stringmerc 10y ago
    Unrelated to this discussion, I must compliment you on your chosen handle. I used a variation of that back in the day during Half-Life and early Counter-Strike. Zero and everything hehe. Cheers.
- nyolfen 10y ago
  Pretty much everyone is very bad at security
- nv-vn 10y ago
  Why? DDOSers are mostly dumb skids who rent botnets.
- meowface 10y ago
  Serial DDoSers tend to have about the same level of computer knowledge as your parents. They just buy/rent botnets or pre-made software and templates to spread botnets. And that's for the people actually hosting the botnet or "booter" (which seems to be what the parent poster found). Most of the time, it's one more layer down: just some kids paying for the right to enter an IP to DDoS temporarily.
cosarara97 10y ago
> found vulnerability in the application that was running on it Could you give more a more detailed explanation on how you did that?
- 13of40 10y ago
  Go to http://sectools.org http://sectools.org and look under "vuln scanners" on the left side menu.
seanp2k2 10y ago
These days I'd be worried about CFAA or otherwise getting V& for this. In the "good old days", it was possible to get away with and laugh about this type of vigilante justice. These days though, you're more likely to wind up in prison. No longer worth it for lulz. Sad times now, but good memories.
- meowface 10y ago
  What they did at the time would still have definitely been illegal. Probably not any more illegal than it is now. I doubt they'd be prosecuted, but breaking into any system is illegal.
  - itslennysfault 10y ago
    I'd just be afraid I'd have rotten luck and wind up on the wrong person's computer (government, big business, etc) because they happened to be part of a bot net. (I'm not ready to move to Moscow quite yet)
    - iopq 10y ago
      > I'm not ready to move to Moscow quite yet Me neither, it's damn expensive
      - SEJeff 10y ago
        Well I'm sure they'll let you vacation for free... In the Siberian Gulags :)
        ambivalence 10y ago
        Watch out. You laugh at this as if it's some Marvel Universe pop culture thing. In fact, some of the readers here have families that were sent to Siberia during or shortly after WW2. You wouldn't joke about concentration camps. I hope.
andai 10y ago
are you Steve? I read a similar story a while back!

by lossolo 10y ago

armandososa 10y ago

I wish HN had a `save` feature so I don't lose gems like these.

eddyg 10y ago
Just up-vote the stories and comments you want to save. When you view your profile on HN, you can see a list of your up-votes.
gryphonshafer 10y ago
When I use a desktop browser, I just right-click on the post age data and select "Save link as..." or "Bookmark This Link" or whatever.
GFK_of_xmaspast 10y ago
Most modern browsers still have bookmarking ability.
reitanqild 10y ago
Use bookmarks feature. At least Chrome and FF allows you to sync it between different instances. (Personally I use pinboard.in and would happily recommend it but I don't think everyone need it.)
- ZenoArrow 10y ago
  There's no need. If you upvote the story you can find it again under 'upvoted stories' in your HN profile. That said, pinboard.in is a decent service, and it's useful to have all your bookmarks in a central location.

themartorana 10y ago

This is brilliant. Hack the hackers! Heheh.

kowdermeister 10y ago

Nicely done! This would make a great scene in Mr. Robot :)

kuschku 10y ago

I’ve had a very similar experience – I’m surprised I’m not the only one who did that. I’d have expected the DDoSers to have better security

sp0rk 10y ago
Botnets have notoriously bad security. Many of the people running them have no technical knowledge and/or are using "cracked" versions of paid botnet software that are backdoored or intentionally left unsecured. A lot of the software is heavily modified or even left incomplete by the person that leaked it, leading to vulnerabilities open to anybody with some technical competence and the time to poke around a little.
- 6stringmerc 10y ago
  Unrelated to this discussion, I must compliment you on your chosen handle. I used a variation of that back in the day during Half-Life and early Counter-Strike. Zero and everything hehe. Cheers.
nyolfen 10y ago
Pretty much everyone is very bad at security
nv-vn 10y ago
Why? DDOSers are mostly dumb skids who rent botnets.
meowface 10y ago
Serial DDoSers tend to have about the same level of computer knowledge as your parents. They just buy/rent botnets or pre-made software and templates to spread botnets. And that's for the people actually hosting the botnet or "booter" (which seems to be what the parent poster found). Most of the time, it's one more layer down: just some kids paying for the right to enter an IP to DDoS temporarily.

cosarara97 10y ago

> found vulnerability in the application that was running on it Could you give more a more detailed explanation on how you did that?

13of40 10y ago
Go to http://sectools.org http://sectools.org and look under "vuln scanners" on the left side menu.

seanp2k2 10y ago

These days I'd be worried about CFAA or otherwise getting V& for this. In the "good old days", it was possible to get away with and laugh about this type of vigilante justice. These days though, you're more likely to wind up in prison. No longer worth it for lulz. Sad times now, but good memories.

meowface 10y ago
What they did at the time would still have definitely been illegal. Probably not any more illegal than it is now. I doubt they'd be prosecuted, but breaking into any system is illegal.
- itslennysfault 10y ago
  I'd just be afraid I'd have rotten luck and wind up on the wrong person's computer (government, big business, etc) because they happened to be part of a bot net. (I'm not ready to move to Moscow quite yet)
  - iopq 10y ago
    > I'm not ready to move to Moscow quite yet Me neither, it's damn expensive
    - SEJeff 10y ago
      Well I'm sure they'll let you vacation for free... In the Siberian Gulags :)
      - ambivalence 10y ago
        Watch out. You laugh at this as if it's some Marvel Universe pop culture thing. In fact, some of the readers here have families that were sent to Siberia during or shortly after WW2. You wouldn't joke about concentration camps. I hope.

andai 10y ago

are you Steve? I read a similar story a while back!