HOW to: TAKE DOWN the SITES with HULK DOS

we have all heard about the hulk tool for dosing sites but time has passed and it went hold, now it barely can hold any sites off with CDNs and Loadbalancing servers like nginx and cloudflare protecting them. well not any more, witness the power of the new and improved hulk tool version 1.0.2, available in both golang and python.

Let me show you an example of how it actually works,

Python Hulk Working Example

First it will show that the response received from the website is 200 i.e the site is working. Now the magic happens, try loading the site in your browser once....and you will see this DOS immediately showing its effects on the site, after loading the url in your browser check your cli , you should see something like this :

which indicates that there is a bad gateway to the site in case its on cloudflare, the error code should be 429 in case of nginx and 500 for apache or any other servers. Note :- if the site is poorly configured without CDN it would take the whole backend server down else it will just take down the closest server to you, which means that for other people trying to connect to the website might see it up, if they arent connected to the same server of the CDN as yours.

Commands to Run the Code for Python

```python3 hulk.py <site.com > --thread=(Number of threads you want)
```

Golang Working Example

The main difference from Python version layed in Golang architecture for concurrency: the goroutines. hulk.py runs a new thread for each connection in the connection pool so it uses hundreds and thousands of threads. hulk.go just uses lightweight goroutines that used only tens of threads (commonly golang runtime started one thread for CPU core + several service threads). This architecture allows golang version better consume resources and got much higher connection pool on the same hardware than Python version can.

so if go to the folder hulk_go inside the repository and run the hulk.go file , you should see something like this:

In use is the number of requests sent, RESP OK is the number of working response received back from the website.And Got err is the number of errors occured while trying to send a request to the website.so basically it works both way in python and go, run in whichever you feel like. The only drawback of the golang however it fails to take down even one server if the site is using a CDN or loadbalancing.

Command to Run the Code for Golang

```
go run hulk.go -site example.com
```

How to Download

go to the github forked repo : github.com/Chr0m0s0m3s/hulk
clone it with:
```
git clone github.com/Chr0m0s0m3s/hulk.git
```
and then run the commands of the respective version you want to use

Something Went Wrong?

If anything goes wrong or you receive any error messages while using the code feel free to open up an issue on the github repo, or comment down here.

Thank You

Thanks for your time, happy hacking ;) , have a great day

Our Best Hacking & Security Guides

New Null Byte posts — delivered straight to your inbox.

Be the First to Respond

Share Your Thoughts

  • Hot
  • Active