[Help] TCPFP vent flooding

demonshade · **Joined:** 15 Feb 2008 12:55 **Posts:** 11

When i use tcpfp to flood a certain server it locks it up as it says the slots become full

but when i tried on a different server this is what i got

I wouldnt care if it would kick me but still work but it doesnt work, people can still enter the server freely

anyone know how to get around this so any server can be flooded?

Sethioz · **Posted:** 16 Feb 2008 12:24

i havent actually used ventrilo, but what does it mean by ''not allowed for your account''
it sounds like somehow its possible to use multiple connections ?!

anyways if the server limits connection from one IP to 1 then i guess theres nothing much you can do. maybe you can play around with proxy servers so it wont be from one IP. not sure about it .. i guess Luigi can tell more about it.

oh and .. you could take shot of the cmd and/or vent window only ;)

Visual · **Joined:** 17 Feb 2008 15:19 **Posts:** 1

On the first vent, the slots fill up because there isn't an ip user limit on the server, therefore you can continue sending tcp connections to that ip/port. The second however does have a set connection limit on ip connections. Thus saying you have too many connections on the server. If you would want to bypass this, you would either create a botnet, learn how to code or kindly ask
aluigi if he could possibly make the program proxy/socks compatible. E.g. a command where you can select a .txt list on your computer which contains proxies in the format of ip:port and then attempts to connect using the proxies on the selected list.

aluigi · **Posted:** 18 Feb 2008 15:42

All my tools and practically almost any existent network program can be sockified using Sockscap.
Then with Tor there is no longer the need to find valid SOCKS servers, it's enough to:
- install the Tor/Vidalia Package http://www.torproject.org/download.html.en
- run sockscap, this tool is hard to find on the net so a ready to use copy is available on http://mirror.aluigi.org/misc/sockscap-2.40-051231.zip
- in the SOCKS settings place 127.0.0.1 and port 9050 as SOCKS server and select SOCKS Version 5 and "Resolve all names locally"
- launch Vidalia and start Tor from there
- go in SocksCap and add the program to socksify with the needed command arguments and Run it from there

Sethioz · **Posted:** 18 Feb 2008 17:51

wow Luigi this thing looks awsome. I mean i havent had need for such thing .. but it looks intresting.
i downloaded it and run it quickly ..but didnt try anything thru it.
basically it runs program and then it uses different proxys ? ..so for example if i run some fakeplayer tool with it .. then each ''player'' has different ip (proxy) ?

demonshade · **Joined:** 15 Feb 2008 12:55 **Posts:** 11

is there any way to send the server false info enabling any features that otherwise would be unavailable? for example phantoming, etc.

Sethioz · **Posted:** 20 Feb 2008 07:46

demonshade wrote:

is there any way to send the server false info enabling any features that otherwise would be unavailable?

what exactly you mean under ''false info'' ?
i do not have vent. and havent used it either so i dont know much about it, but ive done those kind of things on other servers...like game servers, chatrooms ..etc. like in some chatrooms you can talk under other persons names or get the admin status ..etc (also in some games) ..and these kind of things. thats what you mean ?

aluigi · **Posted:** 20 Feb 2008 12:02

Basically is possible that each player will have a different IP address but naturally this depends by Tor.

demonshade · **Joined:** 15 Feb 2008 12:55 **Posts:** 11

Yea thats what i meant Sethioz

Sethioz · **Posted:** 21 Feb 2008 14:07

i would play around with old good packet editors and see what comes up.
in most chatrooms there is always something you can do with packet editors that you cant do as normal user and from my point of view ventrilo, teamspeak ...etc are pretty much like chatroom ... so im sure theres something that can be done.

demonshade · **Joined:** 15 Feb 2008 12:55 **Posts:** 11

im not good at reading packets and stuff :( thats why i came here hehe. If someone does succeed maybe you could document or set a small guide, id really like to learn this stuff

Sethioz · **Posted:** 22 Feb 2008 11:24

you mean the packet stuff ? ...give me an idea and i will make a guide, but not on vent .. i hate it.

i have that in mind for long time .. but cant find the right program where to show some simple packet stuff. I do have tutorial on my site on how to steal songs(mp3) and/or videos from sites where you usually cant download them.

here that may give you idea about packet editors and how to read em .. etc.
you can use etherreal for that too.
-how to steal mp3 from site-

durka99 · **Joined:** 09 Mar 2008 00:25 **Posts:** 7

Anyone have a copy of the file containing the raw data for ventrilo?

aluigi · **Posted:** 09 Mar 2008 01:02

about what exact raw data you refer?

demonshade · **Joined:** 15 Feb 2008 12:55 **Posts:** 11

The method above works, to a certain extent. All the proxys it connects to are so slow that it doesnt flood the vent fast enough :S

haco.pk3 · **Joined:** 02 May 2008 15:37 **Posts:** 38

Sethioz wrote:

here that may give you idea about packet editors and how to read em .. etc.
you can use etherreal for that too.
-how to steal mp3 from site-

sorry for bring back this old topic but I wanna ask Sethioz what tool you use to do it ?

Sethioz · **Posted:** 23 May 2008 23:53

uhm, can't remember and can't be bothered to look my own video lol, but i think i hided the program's name there ?!

not sure what i used there. it was etherreal or commview i guess, but my favorite network monitor/packet editor is still commview. newer version of commview has also the process monitor rule. you can simply set a process name and it captures packets only sent/recieved thru this process. so its ideal for programs that connects to several ips.
to see this stuff, you can simply set the process rule. for example:
firefox.exe (capture)
then you just go to site and commview will show you all traffic that was made by firefox. then you can right click packet and select ''reconstruct TCP session''. its quite easy to read.

Luigi Auriemma

[Help] TCPFP vent flooding