Luigi Auriemma

how to use this on windows?, or how to use at all..i've tried using it on Windows and get interrupted system call..I've seen in the PoC that i need to use a diff program for windows is this correct?..Where to find this program..and how to use it?

take a look to this thread for additional info: post831.html#p831

Briefly looking at this tool, it appears to use 1 spoofed packet to disconnect a client. It is not possible to spoof an IP on most versions of windows, and this is likely why you're getting this error (I remember getting this error on a similar tool that uses spoofing). To use a spoofed address, you will have to compile and run the tool on an OS that allows it such as Linux. I have also heard of people using a virtualbox/linux combo within windows to bypass this... though I was never able to get that working correctly (I'll have to play with the network settings in virtualbox more, but I can see it being possible).

Once you get the tool working correctly, you will want to make sure firewalls and NAT are turned off, or you could have additional problems. And hope your ISP doesn't use egress filtering.

Ok, So an older OS or VirtualBox?

virtualbox with linux on it (obviously using the root account or sudo during the tests for having access to the raw sockets).
then your machine must be directly on internet which means that your ethernet card has the same IP showed by whatismyip.com otherwise the router/nat can block your packets (in case you want to test this on internet).

that seems like 2 much work, lol thanks for replying anyway

So, Finally got around to trying this, on a VBox Running Ubuntu..and when i run q3noclient i get the error Operation not permitted. OR Socket type not supported

are you running it as root? or though the sudo command?

would this still work on localhost..i get the finished msg now stating client shud be d/c now but nothing seems to happen as i seen in another post..or might be doing something wrong idk have also tried udpsz with a disconnect packet

Your isp could be using egress filtering, where they block any traffic going out with a source address that isn't within their network. Also, as luigi said, make sure you don't have any firewalls, nat, router, etc. in the way. It should be a clean connection to the internet or you are bound to have problems. If it's the ISP issue you are out of luck.

could the network settings inside of Virtual box be a issue aswell?..i think i had it on NAT..what to do/change it to, suggest anything more?

bridged adapter