WEBVTT

00:00:01.040 --> 00:00:01.850
In this demo,

00:00:01.860 --> 00:00:05.750
we're going to use LOIC to flood a network with a distributed attack.

00:00:06.640 --> 00:00:09.850
We'll use Hive Mind to execute this network flood with commands from

00:00:09.850 --> 00:00:12.550
the IRC channel we connected to in the last demo.

00:00:13.640 --> 00:00:15.840
This enables us to simulate a distributed

00:00:15.840 --> 00:00:18.350
denial‑of‑service attack in our lab environment.

00:00:19.640 --> 00:00:23.170
Using these features in a lab allows you to simulate network flooding

00:00:23.170 --> 00:00:27.830
attacks from multiple hosts using LOIC. Let's head over to the lab and get

00:00:27.830 --> 00:00:34.300
started. Before we run the attack, let's try selecting a new target. Our

00:00:34.300 --> 00:00:38.550
other host on the network has a few applications also hosted on port 80.

00:00:38.550 --> 00:00:42.730
We can view them by navigating to the host by IP address again in our web

00:00:42.730 --> 00:00:49.260
browser. This target is 10.0.0.101. Rather than targeting a specific

00:00:49.260 --> 00:00:49.960
application,

00:00:50.340 --> 00:00:53.310
we're going to simulate a network attack and just target the host

00:00:53.310 --> 00:00:57.970
IP address using TCP. From our chat window, we can control the two

00:00:57.970 --> 00:01:02.040
hosts by entering an exclamation point followed by the word lazor,

00:01:02.090 --> 00:01:08.560
spelled L‑A‑Z‑O‑R in this case. You then enter all the properties

00:01:08.560 --> 00:01:09.360
for the attack.

00:01:09.940 --> 00:01:14.020
In our case, we would use target ip followed by the IP address

00:01:14.020 --> 00:01:18.860
of our target host, in this case 10.0.0.101.

00:01:20.340 --> 00:01:23.410
Next, we enter the message we want to send with all the packets.

00:01:24.240 --> 00:01:27.360
I'm just going to put test, but you can put whatever you want in this space.

00:01:28.940 --> 00:01:31.750
Then we select our port. I'm going to use 80.

00:01:33.040 --> 00:01:36.890
We need the method, which we'll use TCP, and finally,

00:01:36.900 --> 00:01:38.560
we'll set the wait value to false.

00:01:39.140 --> 00:01:43.250
Let's go ahead and add the additional threads as well and set both hosts to 50.

00:01:44.140 --> 00:01:47.960
Once we hit Enter, we can check LOIC on both machines, and we

00:01:47.960 --> 00:01:50.660
notice that the configuration was updated remotely.

00:01:51.640 --> 00:01:54.770
Before we start our attack, let's set up the TCP dump on

00:01:54.770 --> 00:01:56.860
Metasploitable 3 to capture the traffic.

00:01:57.840 --> 00:02:02.770
We can use vagrant ssh to log in again, and then start

00:02:02.780 --> 00:02:06.160
a TCP dump using the same command.

00:02:08.240 --> 00:02:11.350
Now we just go back to our IRC channel and we start the attack

00:02:11.440 --> 00:02:19.950
using the lazor command followed by start. And immediately we see

00:02:19.960 --> 00:02:22.360
a lot of packets coming into our host.

00:02:23.240 --> 00:02:27.140
Let's check the web browser and see if we can still access the remote host.

00:02:27.140 --> 00:02:31.690
Again, not much slow down because we have a lot of bandwidth on this network and

00:02:31.690 --> 00:02:34.600
we're only attacking this with two hosts right now.

00:02:34.610 --> 00:02:38.640
Normally in these type of attacks, there would be quite a few more.

00:02:38.640 --> 00:02:42.670
To stop our attack, we use the same lazor command and follow it with

00:02:42.680 --> 00:02:47.930
stop. Checking through our TCP dump, we can see a few examples of

00:02:47.930 --> 00:02:52.540
both of our IP addresses attempting to connect numerous times to our

00:02:52.540 --> 00:02:54.460
target host on port 80.

00:02:55.940 --> 00:02:59.280
Although we didn't have enough hosts to conduct a wide enough attack

00:02:59.400 --> 00:03:02.820
and really put stress on our network to make these applications fail,

00:03:02.820 --> 00:03:05.730
we did succeed in the goals of this course,

00:03:05.740 --> 00:03:09.990
which was to explore LOIC's features and conduct some simulated attacks

00:03:09.990 --> 00:03:13.750
in our lab. For a quick recap of the course overall,

00:03:14.140 --> 00:03:17.780
we reviewed the options available in the LOIC interface and conducted

00:03:17.780 --> 00:03:20.350
an attack on a target from a single LOIC instance.

00:03:21.240 --> 00:03:22.830
Once we conducted our first test,

00:03:23.000 --> 00:03:27.890
we set up an IRC server, connected two LOIC instances using Hive Mind, and

00:03:27.890 --> 00:03:31.560
conducted a second attack controlling both hosts simultaneously.

00:03:32.740 --> 00:03:36.290
This completes the short course over Low Orbit Ion Cannon. In

00:03:36.290 --> 00:03:39.160
the last clip, we'll discuss a few additional resources for

00:03:39.160 --> 00:03:42.510
LOIC and then also talk about the other impact tools and

00:03:42.510 --> 00:03:43.960
techniques that you can explore.