' Wrote:There was an application released some years ago in the dark depths of the internet with a built-in UDP flooder, email flooder, pingsweep, portscanner, etcetera. It had pretty much everything a cracker needed, (short of exploit code) to bring down a server. Seeing as this guy didn't actually bother to gain root access to the disco server, I'd assume he's just a script kiddie using something like that.
From what I understand, this was done using a botnet of sort, made up of web-servers that all had a common compromised piece of software installed.
I seriously doubt that this black-hat, or just about any, could find enough bandwidth to do this "alone." You need more than one "home" connection, I doubt even a T1 or T2 would suffice. You're right though, there's a ludicrous amount of simple shell scripts that can make anyone how knows what --help is a "Hacker on Steroids." Lucky for us, most ISPs will block suspicious outgoing activity (I've run into issues with this while auditing my own servers/equipment) and most shared hosts and web servers will blackhole suspicious incoming activity, not only that but, like I said, the sheer quantity of bandwidth that's required to make enough ruckus to disrupt a server like the DiscoGC one is a security measure in itself.
99 bugs in my Java Code, 99 bugs in my Code,
Fix one bug and compile again,
283 bugs in my Java Code.
