A month and a half ago chr13 discovered how to DDoS someone with the help of Google Spreadsheet, and now he applied such a method to Facebook Notes. And it worked!

Operating procedure is absolutely the same as in Google Spreadsheet:

  1. Create a list with «unique» «photos»:
    <img src="http://targetname/file?r=1" />
    <img src="http://targetname/file?r=2" />
    ...
    <img src="http://targetname/file?r=1000" />

  2. Write a note with the help of m.facebook.com. The service will cut the note after some fixed length.
  3. Create several notes with one or several accounts. Each note will make 1000+ HTTP-requests.
  4. Open all the notes at the same time. Specified server will get a mountainous pile of HTTP-traffic. Thousands of requests will go to the server within a couple of seconds.

The author managed to overload a gigabit channel at his VPS. 127 Facebook servers were involved in the DDoS attack.

How to DDos someone: bandwidth chart

Facebook marked the problem as “Won't fix”.

Subscribe to Kukuruku Hub

Or subscribe with RSS

0 comments

Read Next