On March 31, anonymous will shut the Internet down

AlexNguyenAlexNguyen Member Posts: 358 ■■■■□□□□□□
Source:
0100111 - Pastebin.com

  1. 01001111 01110000 01100101 01110010 01100001 01110100 01101001 01101111
  2. 01101110 01000111 01101100 01101111 01100010 01100001 01101100
  3. 01000010 01101100 01100001 01100011 01101011 01101111 01110101 01110100

  4. ___ _ _ ___ _ _ _
  5. / _ \ _ __ ___ _ _ __ _| |_(_)___ _ _ / __| |___| |__ __ _| |
  6. | (_) | '_ \/ -_) '_/ _` | _| / _ \ ' \ | (_ | / _ \ '_ \/ _` | |
  7. \___/| .__/\___|_| \__,_|\__|_\___/_||_| \___|_\___/_.__/\__,_|_|
  8. |_|
  9. ___ _ _ _
  10. | _ ) |__ _ __| |_____ _ _| |_
  11. | _ \ / _` / _| / / _ \ || | _|
  12. |___/_\__,_\__|_\_\___/\_,_|\__|


  13. 01001111 01110000 01100101 01110010 01100001 01110100 01101001 01101111
  14. 01101110 01000111 01101100 01101111 01100010 01100001 01101100
  15. 01000010 01101100 01100001 01100011 01101011 01101111 01110101 01110100

  16. "The greatest enemy of freedom is a happy slave."

  17. To protest SOPA, Wallstreet, our irresponsible leaders and the beloved
  18. bankers who are starving the world for their own selfish needs out of
  19. sheer sadistic fun, On March 31, anonymous will shut the Internet down.



  20. In order to shut the Internet down, one thing is to be done. Down the
  21. 13 root DNS servers of the Internet. Those servers are as follow:

  22. A 198.41.0.4
  23. B 192.228.79.201
  24. C 192.33.4.12
  25. D 128.8.10.90
  26. E 192.203.230.10
  27. F 192.5.5.241
  28. G 192.112.36.4
  29. H 128.63.2.53
  30. I 192.36.148.17
  31. J 192.58.128.30
  32. K 193.0.14.129
  33. L 199.7.83.42
  34. M 202.12.27.33

  35. By cutting these off the Internet, nobody will be able to perform a
  36. domain name lookup, thus, disabling the HTTP Internet, which is,
  37. after all, the most widely used function of the Web. Anybody entering
  38. "http://www.google.com" or ANY other url, will get an error page,
  39. thus, they will think the Internet is down, which is, close enough.
  40. Remember, this is a protest, we are not trying to 'kill' the Internet,
  41. we are only temporarily shutting it down where it hurts the most.

  42. While some ISPs uses DNS caching, most are configured to use a low
  43. expire time for the cache, thus not being a valid failover solution
  44. in the case the root servers are down. It is mostly used for speed,
  45. not redundancy.

  46. We have compiled a Reflective DNS Amplification DDoS tool to be used for
  47. this attack. It is based on AntiSec's DHN, contains a few bugfix, a
  48. different dns list/target support and is a bit stripped down for speed.

  49. The principle is simple; a flaw that uses forged UDP packets is to be
  50. used to trigger a rush of DNS queries all redirected and reflected to
  51. those 13 IPs. The flaw is as follow; since the UDP protocol allows it,
  52. we can change the source IP of the sender to our target, thus spoofing
  53. the source of the DNS query.

  54. The DNS server will then respond to that query by sending the answer to
  55. the spoofed IP. Since the answer is always bigger than the query, the
  56. DNS answers will then flood the target ip. It is called an amplified
  57. because we can use small packets to generate large traffic. It is called
  58. reflective because we will not send the queries to the root name servers,
  59. instead, we will use a list of known vulnerable DNS servers which will
  60. attack the root servers for us.

  61. DDoS request ---> [Vulnerable DNS Server ] <---> Normal client requests
  62. \
  63. | ( Spoofed UDP requests
  64. | will redirect the answers
  65. | to the root name server )
  66. |
  67. [ 13 root servers ] * BAM

  68. Since the attack will be using static IP addresses, it will not rely
  69. on name server resolution, thus enabling us to keep the attack up even
  70. while the Internet is down. The very fact that nobody will be able to
  71. make new requests to use the Internet will slow down those who will try
  72. to stop the attack. It may only lasts one hour, maybe more, maybe even
  73. a few days. No matter what, it will be global. It will be known.



  74. download link in #opGlobalBlackout



  75. The tool is named "ramp" and stands for Reflective Amplification. It is
  76. located in the \ramp\ folder.


  77. > Windows users

  78. In order to run "ramp", you will need to download and install these two
  79. applications;

  80. WINPCAP DRIVER - http://www.winpcap.org/install/default.htm
  81. TOR - http://www.torproject.org/dist/vidalia-bundles/

  82. The Winpcap driver is a standard library and the TOR client is used as
  83. a proxy client for using the TOR network.

  84. It is also recommended to use a VPN, feel free to choose your own flavor
  85. of this.

  86. To launch the tool, just execute "\ramp\launch.bat" and wait. The attack
  87. will start by itself.


  88. > Linux users

  89. The "ramp" linux client is located under the \ramp\linux\ folder and
  90. needs a working installation of python and scapy.



  91. "He who sacrifices freedom for security deserves neither."
  92. Benjamin Franklin

  93. We know you wont' listen. We know you won't change. We know it's because
  94. you don't want to. We know it's because you like it how it is. You bullied
  95. us into your delusion. We have seen you brutalize harmless old womans who were
  96. protesting for peace. We do not forget because we know you will only use that
  97. to start again. We know your true face. We know you will never stop. Neither
  98. are we. We know.

  99. We are Anonymous.
  100. We are Legion.
  101. We do not Forgive.
  102. We do not Forget.
  103. You know who you are, Expect us.
Knowledge has no value if it is not shared.
Knowledge can cure ignorance, but intelligence cannot cure stupidity.

Comments

  • CodeBloxCodeBlox Member Posts: 1,363 ■■■■□□□□□□
    I would like to see this happen! The internet wont really be shutdown though. If you know the IP address of said website, you could still get there.
    Currently reading: Network Warrior, Unix Network Programming by Richard Stevens
  • LizanoLizano Member Posts: 230 ■■■□□□□□□□
    werent they gonna kill Facebook on November 5th ?
  • pizzaboypizzaboy Member Posts: 244 ■■■□□□□□□□
    CodeBlox wrote: »
    I would like to see this happen! The internet wont really be shutdown though. If you know the IP address of said website, you could still get there.

    Yeah but who really keeps those figures in their head.

    But I too would like to see it happen, would be very interesting.
    God deserves my best
  • DevilWAHDevilWAH Member Posts: 2,997 ■■■■■■■■□□
    Any one who know Anonymous knows this is not how they act and is not the kind of stunt they would pull.
    • If you can't explain it simply, you don't understand it well enough. Albert Einstein
    • An arrow can only be shot by pulling it backward. So when life is dragging you back with difficulties. It means that its going to launch you into something great. So just focus and keep aiming.
  • tr1xtr1x Member Posts: 213
    lol hoax.. bunch of BS.
  • DevilWAHDevilWAH Member Posts: 2,997 ■■■■■■■■□□
    pizzaboy wrote: »
    Yeah but who really keeps those figures in their head.

    But I too would like to see it happen, would be very interesting.

    Most DNS servers cache requests as they pass through them, meaning that taking down the 13 root servers would actualy not have the inpact people would expect.

    Most peoples DNS point to there ISP, and many ISPs could continue serving the majority of DNS requests with out the need of the ROOT servers.
    • If you can't explain it simply, you don't understand it well enough. Albert Einstein
    • An arrow can only be shot by pulling it backward. So when life is dragging you back with difficulties. It means that its going to launch you into something great. So just focus and keep aiming.
  • tr1xtr1x Member Posts: 213
    DevilWAH wrote: »
    Most DNS servers cache requests as they pass through them, meaning that taking down the 13 root servers would actualy not have the inpact people would expect.

    Most peoples DNS point to there ISP, and many ISPs could continue serving the majority of DNS requests with out the need of the ROOT servers.

    Yeah.. taking down the root DNS servers would basically do nothing. It may impact a very small amount for a limited time but that's it.
  • SettSett Member Posts: 187
    Cool story brah. Most of the DNS servers (well, the ones I've seen) are caching the zones for 24h - that's more then enough. Also, I really doubt that this is coming from Anonymous.
    Non-native English speaker
  • ipchainipchain Member Posts: 297
    Early April Fool's joke? That is likely...
    Every day hurts, the last one kills.
  • EveryoneEveryone Member Posts: 1,661
    DevilWAH wrote: »
    Most DNS servers cache requests as they pass through them, meaning that taking down the 13 root servers would actualy not have the inpact people would expect.

    Most peoples DNS point to there ISP, and many ISPs could continue serving the majority of DNS requests with out the need of the ROOT servers.

    ^^ This.

    Darn kids. ;P
  • tpatt100tpatt100 Member Posts: 2,991 ■■■■■■■■■□
  • ptilsenptilsen Member Posts: 2,835 ■■■■■■■■■■
    CodeBlox wrote: »
    I would like to see this happen! The internet wont really be shutdown though. If you know the IP address of said website, you could still get there.

    It would be quite cumbersome. First, you'd need to have a list. Second, you'd need to add them as A records to a local DNS record or add them to your hosts file. HTTP host headers are often required to access some web sites; browsing directly to an IP address is not always an option.

    As others are pointing out, this would depend on ISPs' failure to just cache everything. With this kind of forewarning, I suspect many, if not most ISPs will be able to respond to this, and I bet Google and Open DNS could take up the slack. Sure, the will be outages, but to say the Internet or Web will be down is exaggeration.
    Working B.S., Computer Science
    Complete: 55/120 credits SPAN 201, LIT 100, ETHS 200, AP Lang, MATH 120, WRIT 231, ICS 140, MATH 215, ECON 202, ECON 201, ICS 141, MATH 210, LING 111, ICS 240
    In progress: CLEP US GOV,
    Next up: MATH 211, ECON 352, ICS 340
  • msteinhilbermsteinhilber Member Posts: 1,480 ■■■■■■■■□□
    Meh, why bother giving them attention. I wouldn't be surprised if there are government elements at work within Anonymous to exploit them as a tool to exert more control and regulation on the Internet.
  • AlexNguyenAlexNguyen Member Posts: 358 ■■■■□□□□□□
    Knowledge has no value if it is not shared.
    Knowledge can cure ignorance, but intelligence cannot cure stupidity.
  • FloOzFloOz Member Posts: 1,614 ■■■■□□□□□□
    i hope it does happen. Even if only for 10 seconds ha
  • MentholMooseMentholMoose Member Posts: 1,525 ■■■■■■■■□□
    Supposedly "operation global blackout" was a hoax.
    Anonymous is not taking down the Internet | ZDNet

    In any case, March 31 came and went and the Internet is (obviously) still here.
    MentholMoose
    MCSA 2003, LFCS, LFCE (expired), VCP6-DCV
  • jibbajabbajibbajabba Member Posts: 4,317 ■■■■■■■■□□
    Supposedly "operation global blackout" was a hoax.
    Anonymous is not taking down the Internet | ZDNet

    In any case, March 31 came and went and the Internet is (obviously) still here.

    There was me hoping to have an excuse not to be on call :)
    My own knowledge base made public: http://open902.com :p
  • powerfoolpowerfool Member Posts: 1,666 ■■■■■■■■□□
    That would have been fun... I use TShark as a service on my system to capture DNS traffic. I do it watch for naughty things happening on my computer, but I could have reviewed the PCAP files to get all of the IP addresses that I need to perform my daily routine.
    2024 Renew: [ ] AZ-204 [ ] AZ-305 [ ] AZ-400 [ ] AZ-500 [ ] Vault Assoc.
    2024 New: [X] AWS SAP [ ] CKA [ ] Terraform Auth/Ops Pro
  • tpatt100tpatt100 Member Posts: 2,991 ■■■■■■■■■□
    Supposedly "operation global blackout" was a hoax.
    Anonymous is not taking down the Internet | ZDNet

    In any case, March 31 came and went and the Internet is (obviously) still here.

    It was down when you all were asleep. I lost connection when I was playing Wow so I fixed it.
  • cyberguyprcyberguypr Mod Posts: 6,928 Mod
    tpatt100 wrote: »
    It was down when you all were asleep. I lost connection when I was playing Wow so I fixed it.

    TE crew to the rescue. Thanks man!
Sign In or Register to comment.