ALERT!
Click here to register with a few steps and explore all our cool stuff we have to offer!

Jump to content



Photo

Using google spreadsheets to launch DDos attacks exploit


  • Please log in to reply
Using google spreadsheets to launch DDos attacks exploit

#81

pruned_37550775
pruned_37550775
    Offline
    0
    Rep
    0
    Likes

    Lurker

  • Pip
Posts: 7
Threads: 1
Joined: Jun 06, 2017
Credits: 0
Six years registered
#81
interesting

  • 0

#82

gubi
gubi
    Offline
    0
    Rep
    0
    Likes

    Member

Posts: 47
Threads: 0
Joined: Jun 10, 2017
Credits: 0
Six years registered
#82
Ty

  • 0

#83

pruned_31924384
pruned_31924384
    Offline
    0
    Rep
    1
    Likes

    Addicted

  • PipPipPipPipPip
Posts: 223
Threads: 0
Joined: Jun 12, 2017
Credits: 0
Six years registered
#83

ty


  • 0

#84

pruned_18535900
pruned_18535900
    Offline
    0
    Rep
    0
    Likes

    Member

  • PipPipPip
Posts: 73
Threads: 0
Joined: Nov 22, 2015
Credits: 0
Eight years registered
#84

Lol nice trick xD


  • 0

#85

pruned_67005605
pruned_67005605
    Offline
    0
    Rep
    0
    Likes

    Lurker

  • Pip
Posts: 1
Threads: 0
Joined: Jul 21, 2017
Credits: 0
Six years registered
#85

Using Google spreadsheet to Launch DDos attack

 

// Please note I did not make this exploit I've only made the tools in this thread.

// Get better results by using more than one google accounts.

 

Google uses its FeedFetcher crawler to crawl any websites image that is put inside =image(“link”) in the spreadsheet.

If we put =image(“

Please Login or Register to see this Hidden Content

in one of the cells of Google spreadsheet, Google will send the FeedFetcher crawler to grab the image and cache it to display.

 

However, if you add many  request parameter to the filename and tell FeedFetcher to crawl the same file multiple times. Say, for instance a website hosts a 10 mb file.pdf then pasting a list in the spreadsheet will cause Google’s crawler to fetch the same file 1000 times.

Please Login or Register to see this Hidden Content

Each link is treated as different thus Google crawls it multiple times causing a loss of outbound traffic for the website owner. So anyone using a browser and opening just a few tabs on his PC can send huge HTTP GET flood to a web server.

 

traffic.png

 

Exploit

 

This tool it will allow you to create large spreadsheet files with lots of ID parameters:

 

 

 

After creating your csv file go to

Please Login or Register to see this Hidden Content

   then click on blank in the Start a new spreadsheet column

in the blank document go to the file menu and import your csv file

 

Leave the settings in the import menu the same.

 

If you have done everything right then Google spreadsheets would be ddosing your chosen site for you.

 

More info on the exploit:

 

Please Login or Register to see this Hidden Content

ty

 


  • 0

#86

pruned_22050593
pruned_22050593
    Offline
    2
    Rep
    -3
    Likes

    Veteran

  • PipPipPipPipPipPipPip
Posts: 455
Threads: 5
Joined: Jul 02, 2015
Credits: 0
Eight years registered
#86

ty


  • 0

#87

pruned_74297006
pruned_74297006
    Offline
    0
    Rep
    0
    Likes

    .-.

  • PipPip
Posts: 16
Threads: 0
Joined: Jul 22, 2017
Credits: 0
Six years registered
#87

ty


  • 0

#88

pruned_16672431
pruned_16672431
    Offline
    0
    Rep
    0
    Likes

    Lurker

  • Pip
Posts: 4
Threads: 0
Joined: Jul 22, 2017
Credits: 0
Six years registered
#88

gjimklsgdjsuingshidgsnhjigdsihgddsggduigdidsggdjfjdfjfdjfd


  • 0

#89

pruned_77466508
pruned_77466508
    Offline
    0
    Rep
    0
    Likes

    Member

  • PipPipPip
Posts: 70
Threads: 0
Joined: Sep 11, 2016
Credits: 0
Seven years registered
#89

thanks for this share 


  • 0

#90

ohboi
ohboi
    Offline
    0
    Rep
    2
    Likes

    New Member

Posts: 14
Threads: 1
Joined: Sep 28, 2016
Credits: 0
Seven years registered
#90

TY


  • 0


 Users browsing this thread: