UFONet - is a free software, P2P and cryptographic -disruptive toolkit- that allows to perform DoS and DDoS attacks; on the Layer 7 (APP/HTTP) through the exploitation of Open Redirect vectors on third-party websites to act as a botnet and on the Layer3 (Network) abusing the protocol.
See these links for more info:
-
CWE-601:Open Redirect: https://cwe.mitre.org/data/definitions/601.html
-
OWASP:URL Redirector Abuse: https://www.owasp.org/index.php/OWASP_Periodic_Table_of_Vulnerabilities_-_URL_Redirector_Abuse2
UFONet runs on many platforms. It requires Python (>=3) and the following libraries:
python3-pycurl - Python bindings to libcurl (Python 3)
python3-geoip - Python3 bindings for the GeoIP IP-to-country resolver library
python3-whois - Python module for retrieving WHOIS information - Python 3
python3-crypto - cryptographic algorithms and protocols for Python 3
python3-requests - elegant and simple HTTP library for Python3, built for human beings
python3-scapy - Packet crafting/sniffing/manipulation/visualization security tool
You can automatically get all required libraries using (as root):
sudo python setup.py install
For manual installation, on Debian-based systems (ex: Ubuntu), run:
sudo apt-get install python3-pycurl python3-geoip python3-whois python3-crypto python3-requests python3-scapy
On other systems such as: Kali, Ubuntu, ArchLinux, ParrotSec, Fedora, etc... also run:
pip install GeoIP
pip install python-geoip
pip install pygeoip
pip install requests
pip install pycrypto
pip install pycurl
pip install whois
pip install scapy-python3
- Python: https://www.python.org/downloads/
- PyCurl: http://pycurl.sourceforge.net/
- GeoIP: https://pypi.python.org/pypi/GeoIP/
- Python-geoip: https://pypi.org/project/python-geoip/
- Pygeoip: https://pypi.org/project/pygeoip/
- Whois: https://pypi.python.org/pypi/whois
- PyCrypto: https://pypi.python.org/pypi/pycrypto
- PyRequests: https://pypi.python.org/pypi/requests
- Scapy-Python3: https://pypi.org/project/scapy-python3/
- Leaflet: http://leafletjs.com/ (provided)
UFONet is released under the GPLv3. You can find the full license text in the LICENSE file.
