j0lt.c DNS amplification (DDoS) attack tool

Use with extreme caution

Brutally effective DNS amplification ddos attack tool, will cripple a target machine from a single host.

• [email protected]
• https://www.rootstorm.com

Knowledge:

• https://datatracker.ietf.org/doc/html/rfc1700 (NUMBERS)
• https://datatracker.ietf.org/doc/html/rfc1035 (DNS)
• https://datatracker.ietf.org/doc/html/rfc1071 (CHECKSUM)
• https://www.rfc-editor.org/rfc/rfc768.html (UDP)
• https://www.rfc-editor.org/rfc/rfc760 (IP)

• Usage: sudo ./j0lt -t -p -m
• (the-scientist㉿rs)-$ gcc j0lt.c -o j0lt
• (the-scientist㉿rs)-$ sudo ./j0lt -t 127.0.0.1 -p 80 -m 1337

• ---

• Options:
• [-x] will print a hexdump of the packet headers
• [-d] puts j0lt into debug mode, no packets are sent
• [-r list] will not fetch a resolv list, if one is provided.

What is DNS a amplification attack:

• A type of DDoS attack in which attackers use publicly accessible open DNS servers to flood a target with DNS response traffic. An attacker sends a DNS lookup request to an open DNS server with the source address spoofed to be the target’s address. When the DNS server sends the
  record response, it is sent to the target instead.