What’s New in DDoS Tools (since February 2000)
Shaft (Nov 1999) – modeled after Trinoo
- Attacker-master : password : tcp / master-zombie : udp
- Can switch master servers and ports on the fly
- Uses ticket system to match zombies with their masters
- Keeps zombie packet statistics
Mstream (April 2000)
- Still in development
- Attacker to master commands sent in one packet over unencrypted TCP – password protected
- Master and zombies talk over udp
- All logged in users (attackers) are notified of access attempts