Click on the play button above to start an Iframe ddos attack. DDOS is short for distributed denial of service attack. This particular bandwith attack uses iframes (inline frames or floating frames). An iframe has all the same attributes as a normal html frame, however it can float with the text. Hence it's term floating frame. It can also be included on a web page along with normal marked up text and images, and most importantly the width and height of the frame can be controlled. If you set both values to 0 you will have hidden iframes on a page. Set the <src> attribute of the iframe to the page you want to attack.

If you have lets say 300 hidden iframes on a webpage. All of them loading the same URL, and using the <meta> refresh tag to refresh the page every 2 seconds. You have the potential for a successful bandwidth attack. The crucial part of ddos attacks though is the distributed element. What this means is that for your attack to be successful you have to distribute it. Click here for the basic coding for an iframe attack.

If you click on the play button above, then right click on the iframe that loads and view the source, you'll notice that I've included my iframes within an html table. It really helps to know some basic html. However if you want to just copy and paste and try this out for yourself then you can do so with the link I've provided above to the source code.

One more point is that the URL I've specified in the <src> attribute of the iframes points to a webpage I made up myself specifically for this expirement. So I'm not causing mischief as such. Click here to see the webpage I made up to attack. One last point and you've probably already noticed this ; your anti virus will most likely flag the iframe attack file as heuristic html malware or some similar definition. It's safe to disable your AV, you'll need to to see the iframes in action.