In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.
One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.
In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.
There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol
Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.
As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking.
Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.
I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.
The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.
Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.
And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.
Read more
- Hacking Tools Pc
- Hacking Apps
- Growth Hacker Tools
- Pentest Tools For Ubuntu
- Hacks And Tools
- Hacking Tools Name
- Termux Hacking Tools 2019
- Hacker Tools For Pc
- Hacking Tools For Beginners
- Pentest Recon Tools
- Termux Hacking Tools 2019
- Hacking App
- Hacker Tools Windows
- Pentest Tools Website Vulnerability
- Hack Tools
- Hack Tools Github
- Hacks And Tools
- Pentest Tools For Ubuntu
- Hacker Tools For Windows
- Pentest Tools Tcp Port Scanner
- Hack And Tools
- Hack Tools For Games
- Easy Hack Tools
- Nsa Hack Tools Download
- Hack Tools For Windows
- Hack Tools 2019
- Hacker Tools For Ios
- Hacking Tools Hardware
- New Hack Tools
- Hacking Tools Pc
- Hacking Tools Hardware
- Physical Pentest Tools
- Hacker Tools Github
- Best Hacking Tools 2019
- Hacker Tools 2019
- Hacking Tools For Mac
- Hacker Tools Apk
- Pentest Tools Windows
- Hacking Apps
- Hacking Tools For Windows
- Pentest Tools Android
- Pentest Tools Linux
- Hacking Tools For Beginners
- Hacker Tools 2020
- What Are Hacking Tools
- Hacking Tools For Beginners
- Hacking Apps
- Hacker Tools Mac
- Pentest Recon Tools
- Hacking Tools Free Download
- Hacking Tools 2019
- Hacker Hardware Tools
- Pentest Tools Github
- Pentest Tools Bluekeep
- Android Hack Tools Github
- Hacker Hardware Tools
- Pentest Tools For Windows
- Growth Hacker Tools
- Hacking App
- Pentest Tools Github
- Hack Tools For Mac
- Usb Pentest Tools
- Hacking Tools Github
- Hacking Tools For Windows Free Download
- Tools 4 Hack
- Hacking Tools Windows
- Hacking Tools For Windows 7
- Pentest Tools For Ubuntu
- Termux Hacking Tools 2019
- Ethical Hacker Tools
- Hacker Techniques Tools And Incident Handling
- Hacker Tools For Windows
- Hacking Tools For Windows
- Hack Rom Tools
- Hack Tools For Games
- Hacks And Tools
- Hack Tools For Games
- World No 1 Hacker Software
- Pentest Tools Free
- Pentest Tools Kali Linux
- Pentest Tools Subdomain
- Hacker Hardware Tools
- Hacking Tools Free Download
- How To Hack
- Hack Tools For Mac
- Bluetooth Hacking Tools Kali
- Hacking Tools For Windows Free Download
- Hacker Tools For Pc
- What Is Hacking Tools
- Hacker Tool Kit
- Hacker Tools For Windows
- Pentest Tools For Ubuntu
- Hacking Tools Hardware
- Hacker Tools Windows
- Nsa Hack Tools Download
- Install Pentest Tools Ubuntu
- Pentest Recon Tools
- Hacking Tools For Windows Free Download
- Hacker Security Tools
- Hackrf Tools
- Pentest Recon Tools
- Pentest Tools Nmap
- Pentest Tools Bluekeep
- Pentest Recon Tools
- Hacking Tools
- Nsa Hacker Tools
- Pentest Tools Github
Comments