BEDFLOOD is a tool designed for launching Denial of Service (DoS) attacks on Minecraft Bedrock Edition servers. This tool floods the server with multiple methods to overload the server’s resources, resulting in an unresponsive state.
-
Flooding Methods:
- Magic Packets
- Login Data Flooding with usernames and skins
- Chat Message Flooding
- Variation Payload Flooding
- UDP Fragmentation Flooding
-
AES Encryption:
- Encrypts the login and skin data using AES with ECB mode, securing the data being sent.
-
Bot Simulation:
- Simulates multiple Minecraft Bedrock bots that connect to the server and send repeated packets to overload the server.
-
Multithreading:
- Uses a lock mechanism to ensure that multiple operations (like counting the total packets sent) don't conflict with each other.
-
RakNet ping flood
- Sends RakNet Unconnected Ping packets to trigger server responses and increase network load.
-
RakNet handshake spam
- Abuses RakNet handshake steps (Open Connection Request 1 & 2) to overload session management on the server.
-
Send malformed packets
- Sends intentionally broken or random packets to disrupt packet parsing and stress the server's network stack.
-
Check Server Status:
- To check the server status directly with the api provided by mcstatus.io. Use the parameter python3 bedflood.py -api < IP Address >
| Argument | Required | Description |
|---|---|---|
| -ip | Yes | Target server IP address (e.g., 127.0.0.1). |
| -port | Yes | Target server port (must be in range 1–65535). |
| -b | Yes | Number of bots to launch (must be an integer). |
| -s | Yes | Directory containing skin .json files. |
| -c | Yes | Chat messages file (must be a .txt file with non-empty lines). |
| -i | Yes | Attack intensity (value between 1 and 10). |
| -d | Yes | Duration of the attack in seconds (must be an integer). |
| -delay | Optional | Delay the attack by X seconds after all required arguments are set. |
| -api | Optional | Provide a domain/IP to call the api function and exit. |
| -h | No | Show help message and exit. |
-
Clone this repository to your local machine:
git clone https://github.com/Audrise/bedflood.git cd bedflood -
Install the necessary Python libraries:
pip3 install -r requirements.txt
or
pip3 install pystyle requests pycryptodome
-
To run BEDFLOOD, open a terminal and use the following command:
python3 bedflood.py -ip [IP Address] -port [Port] -b [Bot Counts] -s [Skin Directory] -c [Chatfile.txt] -i [Intensity 1-10] -d [Duration]
Example
python3 bedflood.py -ip 120.0.0.1 -port 19132 -b 100 -s skins - c chat.txt -i 3 -d 30
BEDFLOOD is developed strictly for educational and research purposes within a controlled environment. This tool must only be used with the explicit permission of the server owner.
Any unauthorized use, including attempting to disrupt, overload, or damage servers, is strictly prohibited and may be considered illegal under applicable laws. Such actions can lead to severe consequences for both the target systems and the individuals involved.
Please use this tool responsibly and only for legitimate security testing and academic purposes. Misuse of this tool is unethical, potentially unlawful, and strongly discouraged.
- Thanks to billythegoat356 which provides the PyStyle module for very nice terminal styling and Hyperion for nice obfuscation tool
- Thanks to mcstatus.io which provides API to check server easily and quickly.
The Delay Attack Mode allows you to schedule an attack with a countdown timer before it starts. This feature is useful for giving yourself preparation time before the attack executes automatically.
When using the "-delay" parameter, you specify the countdown duration (in seconds). The program displays a real-time countdown from the duration you set.
python3 bedflood.py -ip 127.0.0.1 -port 19132 -b 10 -s skins -c chat.txt -i 1 -d 3 -delay 30-
The message below will appear in your terminal
[!] You're using delayed attack mode [!] Flood attack will be launched in [Value] seconds
The program will not flood the target before the value on the -delay is exhausted or 0
If the value has reached 0, the program will automatically continue to the main process.
-
The program will immediately flood the target as usual