Page 1 of 5

Ping Of Death

Posted: Wed Oct 24, 2007 9:25 am
by leo
Can some will tell me,
How should i ping of death. :?: :) :)

POD

Posted: Wed Oct 24, 2007 11:10 am
by <<D.A.>>
You mean, how to use ping of death? Well... POD is pinging computer with malformed packets. Standard packet size (maximal) is 65,535 bytes. The trick was so, that most systems couldn't handle larger packets, so packets of 65,536 could crash the system (it could cause buffer overflow). But the modern systems are fixed, and they probably won't crash because of this. But who knows...

Posted: Wed Oct 24, 2007 2:43 pm
by leo
But now a days Ping flood is used insted? 8)

Posted: Wed Oct 24, 2007 3:02 pm
by <<D.A.>>
Right... but this isn't so fast. Only one PC can't flood a server with a pings...

Posted: Thu Oct 25, 2007 5:35 am
by leo
O I see, :!:
So Denial of service attack would be better? :) 8) 8)

Posted: Thu Oct 25, 2007 7:50 am
by <<D.A.>>
Hell yeah!! :twisted: :twisted: :twisted: And there're so many ways to perform that attack... :D :D :D

Re: POD

Posted: Thu Oct 25, 2007 11:59 am
by jack krauser
<<D.A.>> wrote:You mean, how to use ping of death? Well... POD is pinging computer with malformed packets. Standard packet size (maximal) is 65,535 bytes. The trick was so, that most systems couldn't handle larger packets, so packets of 65,536 could crash the system (it could cause buffer overflow). But the modern systems are fixed, and they probably won't crash because of this. But who knows...
what is ping of death?

ping of death

Posted: Thu Oct 25, 2007 12:09 pm
by <<D.A.>>
A ping of death (abbreviated "POD") is a type of attack on a computer that involves sending a malformed or otherwise malicious ping to a computer. A ping is normally 64 bytes in size (or 84 bytes when IP header is considered); many computer systems cannot handle a ping larger than the maximum IP packet size, which is 65,535 bytes. Sending a ping of this size can crash the target computer.
Traditionally, this bug has been relatively easy to exploit. Generally, sending a 65,536 byte ping packet is illegal according to networking protocol, but a packet of such a size can be sent if it is fragmented; when the target computer reassembles the packet, a buffer overflow can occur, which often causes a system crash.
This exploit has affected a wide variety of systems, including Unix, Linux, Mac, Windows, printers, and routers. However, most systems since 1997-1998 have been fixed, so this bug is mostly historical.
In recent years, a different kind of ping attack has become wide-spread - ping flooding simply floods the victim with so much ping traffic that normal traffic fails to reach the system (a basic denial-of-service attack).

Re: ping of death

Posted: Thu Oct 25, 2007 12:11 pm
by jack krauser
<<D.A.>> wrote:A ping of death (abbreviated "POD") is a type of attack on a computer that involves sending a malformed or otherwise malicious ping to a computer. A ping is normally 64 bytes in size (or 84 bytes when IP header is considered); many computer systems cannot handle a ping larger than the maximum IP packet size, which is 65,535 bytes. Sending a ping of this size can crash the target computer.
Traditionally, this bug has been relatively easy to exploit. Generally, sending a 65,536 byte ping packet is illegal according to networking protocol, but a packet of such a size can be sent if it is fragmented; when the target computer reassembles the packet, a buffer overflow can occur, which often causes a system crash.
This exploit has affected a wide variety of systems, including Unix, Linux, Mac, Windows, printers, and routers. However, most systems since 1997-1998 have been fixed, so this bug is mostly historical.
In recent years, a different kind of ping attack has become wide-spread - ping flooding simply floods the victim with so much ping traffic that normal traffic fails to reach the system (a basic denial-of-service attack).
how can i send to the target ping over 65,535?

Posted: Thu Oct 25, 2007 12:14 pm
by <<D.A.>>
in linux you just can enter "ping -s 65536"... -s defines the size of a packet. But the problem is that usually it's not allowed by the system, so I guess you gotta find some cracked ping program.

Posted: Thu Oct 25, 2007 12:16 pm
by jack krauser
<<D.A.>> wrote:in linux you just can enter "ping -s 65536"... -s defines the size of a packet. But the problem is that usually it's not allowed by the system, so I guess you gotta find some cracked ping program.
do you know any good?

Posted: Thu Oct 25, 2007 12:35 pm
by <<D.A.>>
nah... didn't had a practice.

Posted: Thu Oct 25, 2007 12:40 pm
by jack krauser
<<D.A.>> wrote:nah... didn't had a practice.
well never mind i will find it my self 8)

Posted: Thu Oct 25, 2007 12:41 pm
by <<D.A.>>
aright... but keep in mind that most of sustems got that exploit fixed...

Posted: Thu Oct 25, 2007 12:44 pm
by jack krauser
<<D.A.>> wrote:aright... but keep in mind that most of sustems got that exploit fixed...
ok thx for the advice :wink: