Please Don't Attack websites without the owner's consent.
-
π£ Layer7
GET | GET Flood
POST | POST Flood
OVH | Bypass OVH
RHEX | Random HEX
STOMP | Bypass chk_captcha
STRESS | Send HTTP Packet With High Byte
DYN | A New Method With Random SubDomain
DOWNLOADER | A New Method of Reading data slowly
SLOW | Slowloris Old Method of check
HEAD | https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/HEAD
NULL | Null UserAgent and ...
COOKIE | Random Cookie PHP 'if (isset($_COOKIE))'
PPS | Only 'GET / HTTP/1.1\r\n\r\n'
EVEN | GET Method with more header
GSB | Google Project Shield Bypass
DGB | check Guard Bypass
AVB | Arvan Cloud Bypass
BOT | Like Google bot
APACHE | Apache Expliot
XMLRPC | WP XMLRPC exploit (add /xmlrpc.php)
CFB | CloudFlare Bypass
CFBUAM | CloudFlare Under Attack Mode Bypass
BYPASS | Bypass Normal Anticheck
BOMB | Bypass with codesenberg/bombardier
- πͺ KILLER | Run many threads to kill a target
- π§ TOR | Bypass onion website
-
𧨠Layer4:
TCP | TCP Flood BypassUDP | UDP Flood Bypass
SYN | SYN Flood
OVH-UDP | UDP flood with random HTTP headers and binary payload to bypass OVH and WAFs.
CPS | Open and close connections with proxy
ICMP | Icmp echo request flood (Layer3)
CONNECTION | Open connection alive with proxy
VSE | Send Valve Source Engine Protocol
TS3 | Send Teamspeak 3 Status Ping Protocol
FIVEM | Send FiveM Status Ping Protocol
FIVEM-TOKEN | Send FiveM confirmation token floodMEM | Memcached Amplification
NTP | NTP Amplification
MCBOT | Minecraft Bot Attack
MINECRAFT | Minecraft Status Ping Protocol
MCPE | Minecraft PE Status Ping Protocol
DNS | DNS Amplification
CHAR | Chargen Amplification
CLDAP | Cldap Amplification
ARD | Apple Remote Desktop Amplification
RDP | Remote Desktop Protocol Amplification
-
βοΈ Tools - Runs With
python3 start.py tools- π CFIP | Find Real IP Address Of Websites Powered By Cloudflare
- πͺ DNS | Show DNS Records Of Sites
- π TSSRV | TeamSpeak SRV Resolver
- β PING | PING Servers
- π CHECK | Check If Websites Status
- π DSTAT | That Shows Bytes Received, bytes Sent and their amount
-
π© Other
- β STOP | STOP All Attacks
- π TOOLS | Console Tools
- π HELP | Show Usage Script
Added a safer, authorized-only analysis layer for passive security review of domains and web endpoints:
- DNS posture checks for A, AAAA, MX, NS, TXT and CAA records.
- Web posture checks for HTTP headers and common browser security headers.
- TLS certificate inspection for expiry and issuer visibility.
Run the new CLI commands:
python3 cli.py cyber domain example.com
python3 cli.py cyber url https://example.com
python3 cli.py cyber host 8.8.8.8MHcheck now includes a modern OSINT framework! It integrates powerful external tools right into the project via an interactive CLI and Streamlit Dashboard:
- theHarvester: Subdomains, Emails, IPs.
- Shodan: Search connected devices or perform deep IP lookups.
- Mr.Holmes: Custom Interactive wrapper footprinting.
Run the new CLI Tool:
python3 cli.py --help
python3 cli.py osint shodan 1.1.1.1
python3 cli.py osint theharvester example.comRun the new UI Dashboard (Streamlit):
streamlit run app.pyYou can download it from GitHub Releases
Requirements
You can read it from GitHub Wiki
Clone and Install Script
git clone https://github.com/MatrixTM/MHcheck.git
cd MHcheck
pip install -r requirements.txtOne-Line Installing on Fresh VPS
apt -y update && apt -y install curl wget libcurl4 libssl-dev python3 python3-pip make cmake automake autoconf m4 build-essential git && git clone https://github.com/MatrixTM/MHcheck.git && cd MH* && pip3 install -r requirements.txtDocker
git clone https://github.com/MatrixTM/MHcheck.git
cd MHcheck
docker compose build
# you can use the built image directly by uncommenting one line in the dockercompose
docker compose run -it --entrypoint /bin/bash mhcheck




