Memcache 反射攻击脚本 - V2EX
V2EX = way to explore
V2EX 是一个关于分享和探索的地方
Sign Up Now
For Existing Member  Sign In
爱意满满的作品展示区。
Srar

Memcache 反射攻击脚本

  •  
  •   Srar
    Srar Mar 2, 2018 7008 views
    This topic created in 2978 days ago, the information mentioned may be changed or developed.

    昨天(2018-03-02)了解到很多国人 vps 商都遭到了 memcache 反射攻击.

    cloudflare 前几天也对这类反射攻击做出了通告.

    所以就花了几小时做了一个 memcache 反射攻击脚本蹭一波热度.

    Github: https://github.com/Srar/MemcacheDos

    脚本需要伪造 IP, 大部分机房已经做了检测. 部分运营商已经在路由做 ACL 直接丢弃 11211 UDP 包.

    12 replies    2018-03-02 16:56:05 +08:00
    ixinshang
        1
    ixinshang  
       Mar 2, 2018 via Android
    牛逼了
    pyufftj
        2
    pyufftj  
       Mar 2, 2018
    厉害了,膜一下
    nciyuan
        3
    nciyuan  
       Mar 2, 2018 via Android
    大佬, V2 看到你了
    lScarlet
        4
    lScarlet  
       Mar 2, 2018 via Android
    litter123
        5
    litter123  
       Mar 2, 2018
    大佬,报错了:
    Debian 8:
    npm WARN package.json [email protected] No repository field.
    npm ERR! 404 Not Found
    npm ERR! 404
    npm ERR! 404 'types/node' is not in the npm registry.
    npm ERR! 404 You should bug the author to publish it
    npm ERR! 404 It was specified as a dependency of 'rawsocks'
    npm ERR! 404
    npm ERR! 404 Note that you can also install from a
    npm ERR! 404 tarball, folder, or http url, or git url.

    npm ERR! System Linux 3.16.0-4-amd64
    npm ERR! command "/usr/bin/nodejs" "/usr/bin/npm" "install"
    npm ERR! cwd /root/MemcacheDos
    npm ERR! node -v v0.10.29
    npm ERR! npm -v 1.4.21
    npm ERR! code E404
    npm ERR!
    npm ERR! Additional logging details can be found in:
    npm ERR! /root/MemcacheDos/npm-debug.log
    npm ERR! not ok code 0

    Centos 6.8:
    npm http 404 https://registry.npmjs.org/types/node
    npm ERR! TypeError: Cannot read property 'latest' of undefined
    npm ERR! at next (/usr/lib/node_modules/npm/lib/cache.js:687:35)
    npm ERR! at /usr/lib/node_modules/npm/lib/cache.js:675:5
    npm ERR! at saved (/usr/lib/node_modules/npm-registry-client/lib/get.js:148:7)
    npm ERR! at /usr/lib/node_modules/graceful-fs/polyfills.js:133:7
    npm ERR! at Object.oncomplete (fs.js:108:15)
    npm ERR! If you need help, you may report this log at:
    npm ERR! <http://github.com/isaacs/npm/issues>
    npm ERR! or email it to:
    npm ERR! <[email protected]>

    npm ERR! System Linux 2.6.32-696.20.1.el6.x86_64
    npm ERR! command "node" "/usr/bin/npm" "install"
    npm ERR! cwd /root/MemcacheDos
    npm ERR! node -v v0.10.48
    npm ERR! npm -v 1.3.6
    npm ERR! type non_object_property_load
    npm ERR!
    npm ERR! Additional logging details can be found in:
    npm ERR! /root/MemcacheDos/npm-debug.log
    npm ERR! not ok code 0
    gdtv
        6
    gdtv  
       Mar 2, 2018 via Android
    弱弱问一下,是不是修改默认的端口就可以从一定程度上防止被攻击?
    ipoh
        7
    ipoh  
       Mar 2, 2018   1
    @gdtv 只监听 127.0.0.1 或者禁 udp
    Srar
        8
    Srar  
    OP
       Mar 2, 2018 via iPhone
    @litter123 nodejs 版本太老了
    litter123
        9
    litter123  
       Mar 2, 2018
    @Srar 确实是这样的,没想到 apt-get 的 nodejs 版本这么老,v0.10.....
    robinchina
        10
    robinchina  
       Mar 2, 2018
    memcache 本身不需要密码,禁止外网访问 11211 端口
    zjcqoo
        11
    zjcqoo  
       Mar 2, 2018
    觉得大量发包的程序用 C 实现是最简单优雅高效的。
    Srar
        12
    Srar  
    OP
       Mar 2, 2018 via iPhone
    @zjcqoo 没错 不过我平时都在写 ts 所以用 ts 实现了
    About     Help     Advertise     Blog     API     FAQ     Solana     3407 Online   Highest 6679       Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 81ms UTC 00:39 LAX 17:39 JFK 20:39
    Do have faith in what you're doing.
    ubao msn snddm index pchome yahoo rakuten mypaper meadowduck bidyahoo youbao zxmzxm asda bnvcg cvbfg dfscv mmhjk xxddc yybgb zznbn ccubao uaitu acv GXCV ET GDG YH FG BCVB FJFH CBRE CBC GDG ET54 WRWR RWER WREW WRWER RWER SDG EW SF DSFSF fbbs ubao fhd dfg ewr dg df ewwr ewwr et ruyut utut dfg fgd gdfgt etg dfgt dfgd ert4 gd fgg wr 235 wer3 we vsdf sdf gdf ert xcv sdf rwer hfd dfg cvb rwf afb dfh jgh bmn lgh rty gfds cxv xcv xcs vdas fdf fgd cv sdf tert sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf sdf shasha9178 shasha9178 shasha9178 shasha9178 shasha9178 liflif2 liflif2 liflif2 liflif2 liflif2 liblib3 liblib3 liblib3 liblib3 liblib3 zhazha444 zhazha444 zhazha444 zhazha444 zhazha444 dende5 dende denden denden2 denden21 fenfen9 fenf619 fen619 fenfe9 fe619 sdf sdf sdf sdf sdf zhazh90 zhazh0 zhaa50 zha90 zh590 zho zhoz zhozh zhozho zhozho2 lislis lls95 lili95 lils5 liss9 sdf0ty987 sdft876 sdft9876 sdf09876 sd0t9876 sdf0ty98 sdf0976 sdf0ty986 sdf0ty96 sdf0t76 sdf0876 df0ty98 sf0t876 sd0ty76 sdy76 sdf76 sdf0t76 sdf0ty9 sdf0ty98 sdf0ty987 sdf0ty98 sdf6676 sdf876 sd876 sd876 sdf6 sdf6 sdf9876 sdf0t sdf06 sdf0ty9776 sdf0ty9776 sdf0ty76 sdf8876 sdf0t sd6 sdf06 s688876 sd688 sdf86