Skip to main content

Vulcan DoS Vs Akamai

By admin
In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 
Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Related news


  1. Hacking Tools For Kali Linux
  2. Free Pentest Tools For Windows
  3. Hack Tool Apk No Root
  4. Pentest Tools Website Vulnerability
  5. Hack Tool Apk
  6. Hacker Tools Apk Download
  7. Pentest Tools Open Source
  8. Underground Hacker Sites
  9. Termux Hacking Tools 2019
  10. Hacker Tools
  11. Pentest Tools Find Subdomains
  12. Hacking Tools For Games
  13. Hacking Tools 2020
  14. Termux Hacking Tools 2019
  15. Kik Hack Tools
  16. Game Hacking
  17. World No 1 Hacker Software
  18. Pentest Tools Tcp Port Scanner
  19. Pentest Tools Alternative
  20. Pentest Recon Tools
  21. Pentest Tools For Windows
  22. Hacker Tool Kit
  23. Hacker Tools Software
  24. Hack And Tools
  25. Beginner Hacker Tools
  26. Blackhat Hacker Tools
  27. Hacking Tools Hardware
  28. Pentest Tools Download
  29. Physical Pentest Tools
  30. Hacker Tools Github
  31. Hack Tools For Games
  32. Free Pentest Tools For Windows
  33. Hacking Tools
  34. Hack Tools For Games
  35. Hacker
  36. Hacking Tools Online
  37. Hacking Tools For Kali Linux
  38. Pentest Tools Review
  39. Pentest Tools Framework
  40. Hacker Tools Apk
  41. Pentest Tools Url Fuzzer
  42. Nsa Hack Tools Download
  43. Wifi Hacker Tools For Windows
  44. Hacker Tool Kit
  45. Hacker Tools Software
  46. Pentest Tools Framework
  47. Hacking Tools For Windows Free Download
  48. Hacker Tools Apk Download
  49. Hacking Tools For Pc
  50. Pentest Tools Download
  51. Github Hacking Tools
  52. Hacking Tools Hardware
  53. Pentest Automation Tools
  54. Hack Tools 2019
  55. Pentest Tools Linux
  56. World No 1 Hacker Software
  57. Hacking Tools Name
  58. Pentest Reporting Tools
  59. Pentest Tools Subdomain
  60. Top Pentest Tools
  61. Hacking Tools Kit
  62. Pentest Box Tools Download
  63. Pentest Tools Free
  64. Hacker Tools 2020
  65. Pentest Tools Apk
  66. Wifi Hacker Tools For Windows
  67. Nsa Hacker Tools
  68. Pentest Tools Download
  69. Pentest Tools Github
  70. Hacking Tools Windows 10
  71. Hacking Tools For Mac
  72. Hack Tools 2019
  73. Hacking Tools For Kali Linux
  74. Hacker
  75. Hack Tools
  76. Hacker Techniques Tools And Incident Handling
  77. Hacking Tools For Kali Linux
  78. Hacking Tools Name
  79. Growth Hacker Tools
  80. Best Pentesting Tools 2018
  81. Hacking Tools Pc
  82. Best Hacking Tools 2020
  83. Hack Tool Apk
  84. Game Hacking
  85. Growth Hacker Tools
  86. Hacking Tools For Windows Free Download
  87. Pentest Automation Tools
  88. Hack Tools Pc
  89. Pentest Tools
  90. What Is Hacking Tools
  91. Hacker Tools Apk
  92. Pentest Tools Windows
  93. Hacking App
  94. World No 1 Hacker Software

Comments

Post a Comment

Popular posts from this blog

דף הבית | הטכניון - מכון טכנולוגי לישראל

By admin
https://technion.ac.il http://library.technion.ac.il/he https://www.technion.ac.il/%D7%A8%D7%A9%D7%99%D7%9E%D7%AA-%D7%94%D7%A4%D7%A7%D7%95%D7%9C%D7%98%D7%95%D7%AA-2/ http://www.admin.technion.ac.il/dpcalendar/ https://www.technion.ac.il/%D7%94%D7%A0%D7%94%D7%9C%D7%94-%D7%91%D7%9B%D7%99%D7%A8%D7%94/ https://www.technion.ac.il/%D7%A1%D7%9E%D7%99%D7%A0%D7%A8%D7%99%D7%9D/ https://dean.web.technion.ac.il/%D7%A7%D7%9E%D7%A4%D7%95%D7%A1-%D7%AA%D7%95%D7%A1%D7%A1/ http://www.dmag.co.il/pub/technion/tmag.html http://moodle.technion.ac.il/ https://tender-logistics.web3.technion.ac.il http://cis.technion.ac.il/ http://video.technion.ac.il/ https://portal.technion.ac.il/irj/portal https://www.technion.ac.il/ https://www.technion.ac.il/en/home-2/ http://arabic.net.technion.ac.il https://www.technion.ac.il/%d7%97%d7%96%d7%95%d7%9f-%d7%94%d7%98%d7%9b%d7%a0%d7%99%d7%95%d7%9f/ https://www.technion.ac.il/%d7%94%d7%99%d7%a1%d7%98%d7%95%d7%a8%d7%99%d7%99%d7%aa-%d7%94%d7%98%d7%9b%d7%a0%d7%99%d7%95%d7%9f/ ht
Post a Comment
Read more

Gu Energy Gel for Sale

By admin
Get Gu Energy Gel Here - https://bit.ly/3f97Wvz _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Post a Comment
Read more

Top 12 Highest Paying URL Shortener 2019: Best URL Shortener to Earn Money

By admin
Short.pe Short.pe is one of the most trusted sites from our top 30 highest paying URL shorteners.It pays on time.intrusting thing is that same visitor can click on your shorten link multiple times.You can earn by sign up and shorten your long URL.You just have to paste that URL to somewhere. You can paste it into your website, blog, or social media networking sites.They offer $5 for every 1000 views.You can also earn 20% referral commission from this site.Their minimum payout amount is only $1.You can withdraw from Paypal, Payza, and Payoneer. The payout for 1000 views-$5 Minimum payout-$1 Referral commission-20% for lifetime Payment methods-Paypal, Payza, and Payoneer Payment time-on daily basis Short.am Short.am provides a big opportunity for earning money by shortening links. It is a rapidly growing URL Shortening Service. You simply need to sign up and start shrinking links. You can share the shortened links across the web, on your webpage, Twitter, Facebook, and more. Short
Post a Comment
Read more