9 ms·
1: Small website with simple JS to ddos a list of russian gov and propaganda websites. Works anywhere where those are not blocked (e.g. Ukraine). Link - https:/
by neonsunset 5y ago
1: Small website with simple JS to ddos a list of russian gov and propaganda websites. Works anywhere where those are not blocked (e.g. Ukraine). Link - https://stop-russian-desinformation.near.page/ https://stop-russian-desinformation.near.page/
2. Console tool for unplanned load testing
Link - https://github.com/codesenberg/bombardier/releases/tag/v1.2.5 https://github.com/codesenberg/bombardier/releases/tag/v1.2....
Example usage - ./bombardier-linux-amd64 --duration=240h --connections=1000 --latencies https://lenta.ru https://lenta.ru
UPD: For some of the sites, you may need to run Chrome with CORS disabled: https://alfilatov.com/posts/run-chrome-without-cors/ https://alfilatov.com/posts/run-chrome-without-cors/
Windows: Right click on desktop, add new shortcut, Add the target as "[PATH_TO_CHROME]\chrome.exe" --disable-web-security --disable-gpu --user-data-dir=~/chromeTemp , Click OK.
OSX: open -n -a /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --args --user-data-dir="/tmp/chrome_dev_test" --disable-web-security ,
Linux: google-chrome --disable-web-security
- urbandw311er 5y agoConstantly errors by triggering cross-origin / access control checks in browser: is this intended and is the tool still effective in spite of this?
- Nextgrid 5y agoThe preflight requests themselves consume a small amount of bandwidth, so at scale I guess it could work?
- neonsunset 5y agoThank you for feedback! In order to work effectively vs some sites, you may need to run Chrome with CORS disabled: https://alfilatov.com/posts/run-chrome-without-cors/ https://alfilatov.com/posts/run-chrome-without-cors/ Windows: Right click on desktop, add new shortcut, Add the target as "[PATH_TO_CHROME]\chrome.exe" --disable-web-security --disable-gpu --user-data-dir=~/chromeTemp , Click OK. OSX: open -n -a /Applications/Google\ Chrome.app/Contents/MacOS/Google\ Chrome --args --user-data-dir="/tmp/chrome_dev_test" --disable-web-security Linux: google-chrome --disable-web-security
- cute_boi 5y agoNo. What you clearly teaching is utmost harmful for the security. Are you going to be responsible if someone lose money from their bank account? And please don't expect all hackernews reader to understand the meaning of cors. Not all of us are fronted developer right? The best way is to create some node or binaries (rust/go/c++) and run them.
- european321 5y agoI wonder why Chrome even has such setting, like what's the use case for it?
- hutzlibu 5y agoWhen you do local web developement, I enabled it for example. But of course never browse the web with this instance of disabled security.
- e7b9 5y agohttps://pastebin.com/preUNcNR https://pastebin.com/preUNcNR
- marius_k 5y agoDoes CORS security work on the client side response data? The server should still receive the load, right?
- XaYSKkN7EVlx5tv 5y ago
- endymi0n 5y ago
- financetechbro 5y agoRight. Easier to just surrender to our Russian overlords
- tjpnz 5y agoFrankly they deserve a taste of their own medicine.
- deleted 5y ago[deleted]
- baybal2 5y agoSomebody just hacked a TV station in Vladivostok, and put a documentary about Putin's golden toilet on loop
- culopatin 5y agoAre there any links to a recording?
- exikyut 5y agoForget the recording, I wanna see a video of it playing on an actual TV showing that it's actually displaying free-to-air signal.
- baybal2 5y agoNot in Vladivostok, but it seems that all satellite uplinks of Russian TV channels are hacked now https://twitter.com/a_latkovskis/status/1497627592677117952 https://twitter.com/a_latkovskis/status/1497627592677117952 . It means that all of remote Russian regions relying of satellite feeds for local TVs are now watching documentaries on Putin's golden loo, and Ukraine war feeds.
- jl6 5y agoReally, how much defensive value does this have for Ukraine? DDOSing Russian news websites just allows them to cry victim - “look, they don’t want you to hear the truth!”. Disrupting the Russian internet in general also harms any anti-war protesters trying to organize.
- amcoastal 5y agoIt is the job of the Russian people to stand up and refuse to participate in this conflict. Anything that makes their lives harder so they are more likely to do that, as opposed to just sitting around on their ass, is a good thing. The Russians need to band together and topple their dictator state, they are acting unethically and there needs to be a groundswell of support to oust someone like Putin. Simple democracy will not work there to change things like it could in the U.S. (voters were able to get rid of Bush for being a war monger).
- dogweather 5y ago> in this conflict They don't know there's a war going on.
- cik2e 5y agoVoters kept Bush Jr. in office for a second term. Term limits got rid of him. If you're referring to Bush Sr., then this is also incorrect. The economy and Ross Perot got rid of him.
- Ntrails 5y agoIt's the job of the Canadian people to stand up to oppression and fight the governmental overreach... etc etc
- amcoastal 5y agoYes. It is. What's your point? If the truckers of Canada try to shut down the country over a vaccine mandate, seems the Russians should consider this a reason to do their best to shut down Russia.
- mickael-kerjean 5y agoRussian visitors of my foss project (https://www.filestash.app/ https://www.filestash.app/) now see the message of peace address to them by president Zelenskyy: https://www.youtube.com/watch?v=Fwzb_JX7u04 https://www.youtube.com/watch?v=Fwzb_JX7u04
- uR2oeE8lQ3Lb4uQ 5y agoFrankly, I think that's a much wiser approach than escalating the situation further with DDos attacks. https://en.wikipedia.org/wiki/Nonviolence https://en.wikipedia.org/wiki/Nonviolence
- simonh 5y agoIt's "not escalating the situation further" for the last few decades that's allowed this to happen. A good strong dose of escalation in 2014 when Russia annexed Crimea might have nipped this in the bud. If we avoid escalating now, Taiwan is next. The cost of inaction has gone up, and up, and up. Now the Ukrainian people are paying that price in blood and subjugation. How much higher should we allow it to go? DDOS-ing a website is nonviolent. Severe, crippling economic sanctions are nonviolent. We should wage all-out economic war and accept the costs, which will be real and painful. Gandhi and other pacifist leaders didn't advocate inaction, he advocated forceful and determined nonviolent action that caused as much inconvenience and difficulty for his opponents as possible. We should at least be doing that, surely?
- nautilius 5y agoEscalating? You realize they just invaded a sovereign country?
- deleted 5y ago[deleted]
- d0mine 5y agoLike Iraq?
- nevermind1337 5y agoUpdate the targets with the following please: https://raw.githubusercontent.com/UndefinedProgramBehaviour/against-russia/main/README.md https://raw.githubusercontent.com/UndefinedProgramBehaviour/... then we can share as much as we can
- deleted 5y ago[deleted]
- throwaway2438 5y ago
- exikyut 5y agoNB: there is a sibling comment next to this one with an updated URL that you cannot see unless "showdead" is on (Not linking the URL in case that's why the comment is dead)
- lostmsu 5y agoThanks for the list. I made a clone with your entries included + state railroad website: https://lostmsu.github.io/hack_russia/ https://lostmsu.github.io/hack_russia/ BTW, the script is self-contained and pretty trivial, and can easily be modified to include more sites. I will accept pull requests for any improvements: https://github.com/lostmsu/lostmsu.github.io/blob/master/hack_russia.html https://github.com/lostmsu/lostmsu.github.io/blob/master/hac...
- mettamage 5y agoI am still learning how to code certain things in JavaScript, I'll take a look on the site to see how this is implemented and will record a few weeks of response times so I can analyze the variance. Sounds like interesting research!
- Freya99 5y agoIs it better to have that tab open or use LOIN directed at https://www.rt.com/ https://www.rt.com/
- lostmsu 5y agoYou can check using Task Manager. That tab did not seem to generate much traffic. LOIC is outdated and I think is protected against nowadays.
- Freya99 5y agoI have tried looking at DNS amplification but their are no guides or publicly accessible software for it and people are not particularly happy when I asked around about it
- FollowingTheDao 5y ago"The "official" news in russian federation are all fake and we believe it is better to shut them down!" Now the people are the censors? In the fog of war, how can we judge information if we have no access to the information? Is it fake news that the U.S. said that they would not let N.A.T.O. into Ukraine? As with all technologies, they come with responsibility. Acting as self censors is just as bad as letting the government do it for you. I know this is an unpopular opinion, but think of what happened at the begging of the Iraq war and the lies of WMDs.
- Freya99 5y ago
- juanani 5y ago
- anthk 5y ago>"The "official" news in russian federation are all fake and we believe it is better to shut them down!" No difference with Fox News, Sky News and most TV channels from Spain, them. They tried to pass a Chinese explosion (causality) as a war bombing from Russians.
- yessirwhatever 5y agolol
- deleted 5y ago[deleted]
- lostmsu 5y agoThe first website only puts ~500KBps of load, according to Task Manager. Is it even effective?
- sunsetMurk 5y agoSometimes it's less about the size of the payload and more about # of requests. Especially when targeting the application layer. Read more here: https://www.imperva.com/blog/gbps-pps-rps-ddos-attacks/#:~:text=and%20packet%20size.-,rps%20or%20Application%20Layer%20DDoS%20Attacks,-While%20volumetric%20attacks https://www.imperva.com/blog/gbps-pps-rps-ddos-attacks/#:~:t...