Skip to content
tester2024 edited this page Oct 27, 2026 · 6 revisions

MHDDoS

Release Python License Docker

MHDDoS is a Python stress-testing toolkit for authorized testing. It includes Layer 4 and Layer 7 flood methods, a web panel, and a set of network diagnostic tools.

Jump to: Installation · Usage · Methods · Tools · Troubleshooting · FAQ

Warning

Use MHDDoS only on systems you own or have written permission to test. Flooding third-party infrastructure is illegal in most countries and can cause real damage.

Start here

flowchart TD
    A[New to MHDDoS] --> B{What do you need?}
    B -->|Install it| C[Installation]
    B -->|Run a test| D[Usage]
    B -->|Look up a method| E[Methods]
    B -->|Fix an error| F[Troubleshooting]
    B -->|Use the panel| G[Web Panel]
    C --> H[Run DOCTOR]
    H --> D
Loading

Quick start

Linux / macOS
git clone https://github.com/MatrixTM/MHDDoS.git
cd MHDDoS
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
python3 start.py DOCTOR
Windows PowerShell
git clone https://github.com/MatrixTM/MHDDoS.git
cd MHDDoS
python -m venv .venv
.venv\Scripts\Activate.ps1
pip install -r requirements.txt
python start.py DOCTOR
Docker
docker pull ghcr.io/matrixtm/mhddos:latest
docker run --rm --cap-add=NET_RAW ghcr.io/matrixtm/mhddos:latest HELP

A first Layer 7 run against an authorized target:

python3 start.py GET https://example.com 0 100 http.txt 10 60

A first Layer 4 run:

python3 start.py UDP 192.0.2.10:80 100 60

First run checklist

  • Python 3.11 or newer is active
  • requirements.txt installed
  • DOCTOR passes, or the only failure is raw sockets
  • The target is in your written scope
  • Threads, duration, and stop condition are written down
  • Someone is watching the target

What is inside

Part Count What it covers
Layer 4 methods 21 TCP, UDP, SYN, Minecraft, FiveM, TeamSpeak, amplification
Layer 7 methods 25 HTTP floods and common anti-DDoS bypasses
Tools 9 DNS, CFIP, proxy checks, headers, ping, stats
Commands 5 help, stop, tools, web, doctor
Total 60 Attack methods plus tools and commands

The 46 attack methods are split across Layer 4 and Layer 7.

Documentation

Page Use it for
Installation Python, pip, Docker, and first-run checks
Python Installation Installing Python 3.11+ on common systems
Usage CLI arguments, examples, debug mode, stop
Methods Full method catalogue and requirements
Layer 4 Methods TCP/UDP/raw-socket and amplification details
Layer 7 Methods HTTP methods, proxies, TLS behaviour
Proxies Proxy types, file format, downloading, checking
Proxy Types Which proxy type works where
Proxy Files File format and automatic download
Debug Mode Reading per-second PPS/BPS output
Amplification Reflector files, spoofing, and raw sockets
Tools Tools console and the DOCTOR command
Web Panel Installing and running the web UI
Docker Images, Compose, volumes, and privileges
Safety Authorization and operational checks
Troubleshooting Common errors and fixes
FAQ Short answers to common questions
Glossary Terms used across the wiki
Development Repository layout, linting, builds
Release Process Tags, archives, and the container image

Requirements

  • Python 3.11 or newer
  • git while installing PyRoxy
  • Node.js 18+ only if you want the web panel
  • Docker only if you use the container image

Run python3 start.py DOCTOR after installing. It checks the Python version, imports, config, wordlists, web scripts, and raw-socket support.

Safety

  • Keep the web panel on 127.0.0.1 unless you have added authentication and TLS.
  • Raw-socket methods need root on Linux or NET_RAW in Docker.
  • Amplification methods need spoofable servers and a reflector list. They will not work from a normal home connection.
  • STOP only stops other start.py processes from the same checkout.

Read Safety before running anything against a live network.

Clone this wiki locally