WARNING NEW HUB FLOODER !!!OUT

[wiper]

Warning !!!
New Hub flooder are out 16FEB 2004  name:"*hmm plzz dont tell ppl the name, dont want ppl finding it and using it ;)*

What the flooder do

this program will keep packing user into the hub specified until the hub is maxed out.
This is the ultimate Version! this can access EVERY hubsoft including Yhub.

i have tested that to Y.hub and the new ptokax 0.330.b15.25.dbg

The Y-hub will go down only after 3min
and the ptokax 0.330.b15.25.dbg go down only  after 20sec and generate
Excetion EaccecViolation in module Ptokax.exe at 000E013E
Access violation at address 004E113E in module ptokax.exe read of address 000001FF

damn can any fix script for the new flooder ?

[kepp]

WRONG thread!!!

[[T-G-T]M@sto]

Originally posted by kepp
WRONG thread!!!

Why is it wrong ? he wrote >>damn can any fix script for the new flooder ?<<

[pHaTTy]

Originally posted by [T-G-T]M@sto

Originally posted by kepp
WRONG thread!!!

Why is it wrong ? he wrote >>damn can any fix script for the new flooder ?<<

because i just moved it here lol

[c h i l l a]

send me that program.

if the prog always uses the same ip then its easy to block it with Ptokax ;), if it also uses different IP's then you need to check other simularities.

other wize set you max allowed users, only a little above your current users. What should be normal.

[nEgativE]

Hum.. last week and this one, i think i'm having that exactly problem describe by wiper :\

[NightLitch]

I have had I look at it and it can be stopped... I will try creating a script for it.

Am gonna give you guys I now a bit the programs, like:

Plop, Tezlo, Chilla, Phatty

You guys I see as big programmers so.

but I will PM you guys l8r.

right now I need to head home fix somethings.

But I will give you guys it.

/NL

[NightLitch]

hope you accept my decision guys. / NL

[dReiska]

Hi!

I have downloaded those flooders/"hub destroyers" and with using logging + packet sniffer I discovered that those programs just send a big pile of GetINFO and MyINFO request. When hub starts responding and delivering MyINFOs begins problems. Hub starts to use a freaking lot bandwidth and also it begins to run out of memory.

There's a simple solution:
Write a script which controls GetINFO count.

I added to my own bot a control which kicks users after 5 GetINFO and/or MyINFO in 3 seconds. It works, flooder/"hub destroyer" gets kicked but normal users stay online. :P

[pHaTTy]

Originally posted by dReiska
Hi!

I have downloaded those flooders/"hub destroyers" and with using logging + packet sniffer I discovered that those programs just send a big pile of GetINFO and MyINFO request. When hub starts responding and delivering MyINFOs begins problems. Hub starts to use a freaking lot bandwidth and also it begins to run out of memory.

There's a simple solution:
Write a script which controls GetINFO count.

I added to my own bot a control which kicks users after 5 GetINFO and/or MyINFO in 3 seconds. It works, flooder/"hub destroyer" gets kicked but normal users stay online. :P

hmmmm, hmmmm, hmmmm lol hmm, now that almost sounds good if its done by ip....

[NightLitch]

for every MYINFO an X is added...

if you kick 1 user what about the rest of them...

it is a loot of users added in list...

that must be deleted to...

I notice this is gonna be hard. you cna in the login already
kick the users by the description...

otherwise another way is after x lenght of char. ban/disc. or

for each MyInfo sent an X is added in the names...

but you can't always check the MyInfo all the time or can you.

sooner or later the hub will crash...

mean look at it how FAST it goes when setting it to max.

and say now hub has already 2000+ users the hub will go nuts...

/NL

[[T-G-T]M@sto]

Originally posted by c h i l l a
send me that program.

Speak to Trucker i just posted him a PM on Magmar Forum  ;)

[tezlo]

hmm lol hmm.. what are you on about?

[dReiska]

It's best to check ip against getinfos.

I'm filtering incoming traffic. Memory consumption with 300 users is 1700kt (including everything, not just this script) and processor usage is quite low.. CPU1 4-6% and CPU2 0-1%

So there should be no problem with larger hubs.

(I have also pm+main flooding control in the same filtering function and there is no lag at all)


EDIT: LOL.. read a bit too fast your post.. When the setting is at the max it post about 10 or 20 getinfos / myinfos in few seconds.. so trigger at 5 GI / MI in 3 seconds is enough to get that  "evil-bot" out and manage still keep your users in.

[NightLitch]

Well I would surelly want to see the script now you have talked about.

Could you post it...??

[c h i l l a]

I still need the proggie for the $GetINFO  if there is one well here are 2 ways to block the MyINFO proggies.

this one is better

change curUser:Disconnect() to
curUser:Ban()

MyInfos = {}

CheckTrig = {
	["$MyI"] = 1,
}

function Main()
	SetTimer()
	StartTimer(1*1000)
end

function OnTimer()
	foreach(MyInfos, function(i,v)
		if v == 0 then
			MyInfos[i] = nil
		else
			MyInfos[i] = MyInfos[i] - 1
		end
	end)
end


function DataArrival(curUser,data)
	if CheckTrig[strsub(data,1,4)] then
		MyInfos[curUser.sName] = MyInfos[curUser.sName] or 1
		MyInfos[curUser.sName] = MyInfos[curUser.sName] + 1
		if MyInfos[curUser.sName] >= 4 then
			MyInfos[curUser.sName] = nil
			curUser:Disconnect()
		end
	end
end

this is also okey but wont check if the MyInfo has different share.

CheckTrig = {
	["$MyI"] = 1,
}

function DataArrival(curUser,data)

	if CheckTrig[strsub(data,1,4)] then

		local _,_,nick = strfind(data,"^%$MyINFO %$ALL (%S+)")
		if (not nick) or (nick ~= curUser.sName) then
			curUser:Disconnect()
		end
	end
end

[Ruri_Ruri]

hehe u like my lil progs? im still working on them, i also have a client attacker but that didnt leak ;)

want more info? ull find me around ;)

[Ruri_Ruri]

oh, n thanks for the way to stop it, ill work around it now!!!!

hahahaha ur all screwed,  trust me, lol

[tezlo]

lol moron.. u got too much time on your hands

[Ruri_Ruri]

Originally posted by tezlo
lol moron.. u got too much time on your hands

ha, yea, a moron with too much time on his hands who knows too much

hehe, anybody know Progger and Hisoka?

[pHaTTy]

Originally posted by Ruri_Ruri
oh, n thanks for the way to stop it, ill work around it now!!!!

hahahaha ur all screwed,  trust me, lol

lol *no comment*

[pHaTTy]

eheh well at least theres a lively topic going on here *lol*

Hey so Ruri does that mean it cant attack private hubs???

[NightLitch]

Well what can I say ppl don't f*** change.

Why is it SO DAMN FUN destroying ???

What do they expect from this "soft prog".. more users ???

ppl are just getting angry. And why attack privat hubs ??

What is the fun in that...

chheeezzzz...

/NL

[RollTheDice]

HMM oh well some things will never change ...sad...and this Ruri *lol* ...i already get sumthin'...it means u just cant escape!!!Escape the real danger wot "step" on ur way .....u'll see fa##ot!

[AMediaMan]

May I ask just what the fist of the 2 scripts above actually do? I seem to be a little lost with it.


Thnx, AMediaMan