SSDP Attack and Scanner

Reflective SSDP Amplification DDoS Attack Script and Scanner.
- Includes source code, no compiled scripts.
- Coded in C for Linux.
- IP Spoofed enabled server is required.

Compile Commands:
gcc ssdp-attack.c -lpthread -o ssdp-attack
gcc ssdp-scanner.c -lpthread -o ssdp-scanner


Help:
The scan will take 24 - 72+ hours on a 100Mbps server.
Please be patient and wait it out.

- Once the scan is finished and you have IPs in unfiltered.txt, run this command:
Note* This will gather all replies over 250Bytes and put them into step1.txt
cat unfiltered.txt | awk '{if($2 > 250){print $1}}' > step1.txt

- Next run another filter command.
Note* This will check how many times each IP responded. If it responds more than 20 times, it ill be put into step2.txt
cat step1.txt | awk '{print $1}' | sort -n | uniq -c | awk '$1 > 20' | awk '{print $2 " " $1}' > step2.txt

Last Edited: February 12, 2022, 11:26 pm
Tags: reflection udp amplification ssdp NewerOlder