BNETv2 — Attack methods
Ten reviewed Android methods covering UDP, TCP, ICMP, GRE and ESP-shaped traffic. HTTP text appears inside GRE; controls are excluded.
- UDP payload floodVector 0
Repeatedly sends configured or randomized UDP payloads to commanded IPv4 targets and ports. The raw-socket path has an ordinary UDP fallback; no reflection exchange is established.
- Crafted TCP packet floodVector 1
Builds and sends raw IPv4/TCP packets with configurable flags, ports, sequence fields and payload without establishing connections. The method is not limited to SYN packets.
- TCP connection and payload floodVector 2
Opens multiple nonblocking TCP connections and repeatedly writes configured or random payload bytes while replacing failed connections. No built-in HTTP or TLS request construction is established.
- ICMP echo floodVector 3
Generates ICMP echo requests (type 8/code 0) with changing IDs, sequences and optional random payload. It attempts raw ICMP and then an ICMP datagram-socket fallback.
- GRE payload floodVector 4
Sends raw GRE packets with configurable protocol type, optional key or checksum, and arbitrary or randomized payload. Advertising inner IPv4 does not establish a valid inner IP conversation.
- ESP-shaped packet floodVector 5
Sends raw IP-protocol-50 packets with chosen or random SPI and sequence values plus payload. No IPsec negotiation, encryption or valid security association is demonstrated.
- GRE-encapsulated HTTP packet floodVector 6
Places generated HTTP request text in synthetic inner TCP/IPv4 packets and transmits them inside GRE. It does not establish an inner TCP session or use TLS; GRE is the outer wire protocol.
- Connection-assisted TCP floodVector 7
Initiates TCP connections and inspects matching raw inbound TCP packets to obtain connection fields, then repeatedly emits crafted TCP payload packets. This differs from a SYN-only flood.
- RakNet request floodVector 8
Alternates UDP connection-request payloads beginning with 0x05 and 0x07 and RakNet offline magic, with protocol, MTU, address and identifier fields. No completed game session or amplification is established.
- UDP voice-packet floodVector 9
Sends bursts of RTP-like UDP packets with evolving sequence numbers, timestamps and synthetic body bytes. No Discord authentication, negotiated voice session or valid encrypted media is demonstrated.
Last 30 days