Blog of Gonzalo Brusella

The different flavors of the Orbital Ion Cannons (DDoS attack tools)

gbrusella — Wed, 15 Dec 2010 16:12:56 +0000

WARNING: This is just a study on the tools. I DO NOT encourage you to use them. The source code that I will show is intended to be used ONLY on learning purposes.

On my last entry, you found that the Anti-Anti-Wikileaks (Pro Wikileaks, you know all about double negations) groups are using LOIC (Low Orbit Ion Cannon) to provoke DDoS attacks on several sites.

So far I have found 3 tools that makes all the “good” job.

LOIC: It means “Low Orbit Ion Cannon”, and is an open source network stress testing application, written in C#. Initially developed by Praetox Technologies but later released in the public domain. Can be found here: http://sourceforge.net/projects/loic/, but the root is: http://praetox.com/n.php/sw/sauce. This tool used Framework 3.5, but if it’s upgraded to .Net 4 and makes use of TPL (yes, I did it, and NO I WON’T release it’s source) can gain some more performance.
- IRC LOIC: Found on https://github.com/NewEraCracker/LOIC/zipball/1.1.2.3 this is the source of the (one of the latest?, you need to lurk more seriously on 4chan’s /b forum to see if there is a newer version) versions of LOIC. It varies from the original LOIC on the fact that it can connect to a IRC server and be controlled from a room by it’s operators (the users prefixed by “@”) . This creates a voluntary botnet called “Hive Mind”. It’s controlled by the members of Anonymous Group.
- LOIQ: Located on http://sourceforge.net/projects/loiq/, is a C++/Qt4, port of the original LOIC intended to be executed on X (Mainly Linux, but also Mac OS X).
- JS LOIC: http://anonsp.hostoi.com/ is a JavaScript version of LOIC. Much less effective, but also with no download/install requirements. The source code is in the page’s source code .
- JavaLOIC: http://www.mediafire.com/?9rfblvej3ycd8dt Not open sourced, but the .jar file is not secured. Maybe the source can be obtained after using a Java Decompiler
HOIC: It means “High Orbit Ion Cannon”. Located on http://hoic.99k.org/ it claims to be open sourced, but I couldn’t find the source. It Cannot be remotely controlled, but is way more powerful than LOIC.
GOIC: Acronym of “Geosynchronous orbital ion cannon” http://pastebin.com/FH6njMew is a public domain tool that has been released but has no transcendence (so far).

As you can see, there is a lot of tools being used, on this matter, but those are the ones related to the Wikileaks-Anonymous matter (as far as I know)

Wikileaks and the [CyberWar? / Incidents] that the lastest leaks started

gbrusella — Mon, 13 Dec 2010 12:14:13 +0000

Well… Since Nov 28, I have been listening about “the cablegate”. According to them “WikiLeaks is a non-profit media organization dedicated to bringing important news and information to the public. They provide an innovative, secure and anonymous way for independent sources around the world to leak information to our journalists. They publish material of ethical, political and historical significance while keeping the identity of our sources anonymous, thus providing a universal way for the revealing of suppressed and censored injustices.”

They leaked 251,287 confidential cabled sent by United States embassy and that started this kind of cyberwar. Once they leaked the documents, a craker who calls himself Jester, started a DDoS on the wikileaks site. Also, several US political figures urged to private companies to stoop helping Wikileaks. Amazon, Paypal, Visa and Mastercard (among others) where targets of the Anonymous Group who called themselves to the “Operation Payback”. I let you know the Original communicate:

A Letter from Anonymous

Our Message, Intentions, and Potential Targets “Those who deny freedom to others deserve it not for themselves.” – Abraham Lincoln “He who sacrifices freedom for security deserves neither.” – Benjamin Franklin

Hello World. We are Anonymous. What you do or do not know about us is irrelevant. We have decided to write to you, the media, and all citizens of the free world at large to inform you of the message, our intentions, potential targets, and our ongoing peaceful campaign for freedom.

“True, This! —

Beneath the rule of men entirely great,

The pen is mightier than the sword. Behold

The arch-enchanters wand! — itself a nothing! —

But taking sorcery from the master-hand

To paralyse the Cæsars, and to strike

The loud earth breathless! — Take away the sword —

States can be saved without it!”

- The Cardinal

Richelieu; Or the Conspiracy by: Edward Bulwer-Lytton

The message is simple: Freedom of Speech. Anonymous is peacefully campaigning for Freedom of Speech everywhere in all forms. Freedom of Speech for: The Internet, for journalism and journalists, and citizens of the world at large. Regardless of what you think or have to say; Anonymous is campaigning for you.

The recent news of our campaigns has been, at best, misinformed. Anonymous is not always the same group of people. The Constitution of the United States is said to be a living document, because it can be edited, amended; changed at the will of the people to suit the peoples’ needs. In that same vein, Anonymous is a living idea. Anonymous is an idea that can be edited, updated, remanded, changed on a whim. We are living consciousness. We are not a terrorist organization as governments, demagogues, and the media would have you believe. At this time Anonymous is a consciousness focused on campaigning peacefully for Freedom of Speech. We ask the world to support us, not for our sake, but for your own. When governments control freedom they control you. The Internet is the last bastion of freedom in this evolving technical world. The Internet is capable of connecting us all. When we are connected we are strong. When we are strong we have power. When we have power we are able to do the impossible. This is why the government is moving on Wikileaks. This is what they fear. They fear our power when we unite. Do not forget this.

“…Now, we must all fear evil men. But there is another kind of evil which we must fear most, and that is the indifference of good men.”

- Monsignor, Boondock Saints

Anonymous’ intentions are very clear. We are not vigilantes, regardless of the sentiment of quoting Boondock Saints, we are people on a campaign for freedom. Anonymous’ intentions are to change the current way the governments of the world and the people view true Freedom of Speech and The Internet. Anonymous is willing, ready, and able to campaign for the freedom for all. We are campaigning right now as you read the news, watch the television, fight with your

significant other, love your children, hate your neighbor, criticize the man or woman next to you. We are campaigning. The goal is simple: Win the right to keep the Internet free of any control from any entity, corporation, or government. We will do this until our, proverbial, dying breath. We do this not only for our selves, but for the world and its people at large.

“Truth is treason in the empire of lies.”

- Ron Paul

Pay attention citizens, governments, and the world. Anonymous’ peaceful campaign will focus on any organization, corporation, government, or entity until the Internet is truly free.

Anonymous is doing what many successful campaigns have done in the past; a sit-in. It may be hard to comprehend, but a digital sit-in is our most effective method to show that all of us deserve Freedom of Speech and a free Internet. Our methods may appear, on the outside, to be cruel to those the entities that we are campaigning against, but remember buy supporting censorship they are denying everyone a basic human right. Any person, corporation, government, or miscellaneous entity that stops supporting censorship and starts promoting Freedom of Speech and a free Internet will become our allies. Anonymous, at this time, wants to persuade our counterparts rather than hurt them. We are campaigning for freedom for everyone, even the opposing side.

Do not fear us. Anonymous’ campaign does not intend to harm the individual citizen, any organizations, any websites, or government, that supports true freedom of speech. Anonymous’ past is not our present. We are here for all of you; to campaign for all of you. Where others have made this promise and failed; we make this promise and aim to keep it for everyone.

Anything attributed, credited, or tagged to Anonymous is not always what we do. We arenot always the same consciousness on a yearly, monthly, or even hourly basis. Do not believe everything you hear or read on the news. Anonymous is often credited with actions that are not campaigned for by Anonymous. The true core of Anonymous is here to help the free world for now. Anonymous wishes to represent the truth and ask that you as a citizen, media organization, or government do the same.

Unfortunately, this message has changed. Instead of that, this video is the new “letter”

This blog is not abandoned… yet

gbrusella — Tue, 05 Oct 2010 03:39:16 +0000

It’s been a long time since I don’t write some words on this blog. It’s not dead… Just delayed… I’m not a pro blogger and I, personally, prefer to spread my knowledge and my experiences in using other media.

But it was time to come and check if the site is alive. I made some changes (new WordPress version, new Twitter integration, better sitemaps and better caching)…

Now I’m thinking on a new theme…. But i have to work on it…

Haking Infography

gbrusella — Sat, 29 May 2010 23:57:18 +0000

Here is a “little” and very condensed history of hacking. A remarkable mention to Nash.

Via: Online MBA

OS Music

gbrusella — Mon, 19 Apr 2010 13:32:48 +0000

Well.. I admire what certain people can do. Some are very music-friendly. Some, like me, are geeks. But when the two of your passions join, you can chive things like this:

Or like this:

On this last sample, you can watch some of the very rare RSoD

TEDx Buenos Aires Soon!!

gbrusella — Mon, 05 Apr 2010 14:38:07 +0000

I’m VERY exited about this… The first TEDx (x is for independent talks) in Buenos Aires is about to be materialized next April 8… And I got my ticket!! Finding one was a truly adventure. Just 1 in 6 or 7 pre-registered got his ticket.

But.. What is TED?

TED is a small nonprofit devoted to Ideas Worth Spreading. It started out (in 1984) as a conference bringing together people from three worlds: Technology, Entertainment, Design. Since then its scope has become ever broader. Along with the annual TED Conference in Long Beach, California, and the TEDGlobal conference in Oxford UK, TED includes the award-winning TEDTalks video site, the Open Translation Program, the new TEDx community program, this year’s TEDIndia Conference and the annual TED Prize.

And TEDx is…?

TEDx was created in the spirit of TED’s mission, “ideas worth spreading.” The program is designed to give communities, organizations and individuals the opportunity to stimulate dialogue through TED-like experiences at the local level. At TEDx events, unique talks given by live speakers combine with TEDTalks videos to spark deep conversation and connections. TEDx events are fully planned and coordinated independently, on a community-by-community basis.

I left here some of my favorites…

The Ballmer Peak

gbrusella — Thu, 18 Mar 2010 16:28:19 +0000

I’ve just saw this on XKCD… Impressive.

Microsoft Live Labs Pivot project

gbrusella — Sat, 19 Dec 2009 04:28:41 +0000

Microsoft Live Labs has a new baby: Pivot.

Pivot makes it easier to interact with massive amounts of data in ways that are powerful, informative, and fun. We tried to step back and design an interaction model that accommodates the complexity and scale of information rather than the traditional structure of the Web.

My firt impression: Huuge potential. It is what I think that future search methods should be. A mix between related data, context information, and visual search. The only thing that I cannot undestabd is why only visual search… we have a lot of algorithms to index media… we can do more…

It uses Deep Zoom (a technology that is part of silverlight) that allows to render images in a smart way (Note to me: Must do a Post on how Deep Zoom works) to render the collections.

You can get an invitation by following the dev team in twitter.

.Net News

gbrusella — Sat, 19 Dec 2009 03:45:43 +0000

I have been using Visual Studio 2010 Beta 2 and TFS 2010. They are awesome!

VS2010 is going to be a great poroduct, when it goes RTM. I see a lot of effort on making may life as developer a lot more easy. The integration with Visual Studio Gallery is good (could be better, like allowing to search by cost of the extension, more a la site version). On the PDC 2009 MS that the free version of Code Rush will also be available for Vs2010 developers.

I will include some captures as soon as possible.

On the TFS 2010 side, it’s becoming a serious contender on his segment. Now with a native integration with project server, the managers can concentrate all the info in just a a tool and get an updated snapshoot on the project status every time they want.

Also the new compilation farms are nice. The compilation process is now Workflow based, so you can adjust the process with custom activities as you need. That and much more to come.

Playing With… Oxite!

gbrusella — Tue, 17 Nov 2009 03:50:24 +0000

Right now I am playing With Oxite a Open source CMS made by Microsoft. This is an Alpha release and I must Admit, once i managed to build it (yes, the setup process needs some corrections, but the comments helps a lot with the process).

Once it has been compiled… works like a charm. It is a low end blog. It does not have any of the fancy or the minimum features yet (ie: No RSS/Atom, no anti-spam). The developers also say that is not production ready yet… but I saw some sites using it.

Adding this features seems quite easy since the plug-in/module model is very easy to understand and to code. Rumors say that the Beta version is very close… I’m very happy with this.

Nice code. A Big plus is that my preliminary analysis shows that the persistency layer (it uses a LinqToSql provider) seems quite easy to replace with a more malleable ORM.

In summary: this is a project that you must watch.