Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Related news

1. Hacking Tools For Kali Linux
2. Free Pentest Tools For Windows
3. Hack Tool Apk No Root
4. Pentest Tools Website Vulnerability
5. Hack Tool Apk
6. Hacker Tools Apk Download
7. Pentest Tools Open Source
8. Underground Hacker Sites
9. Termux Hacking Tools 2019
10. Hacker Tools
11. Pentest Tools Find Subdomains
12. Hacking Tools For Games
13. Hacking Tools 2020
14. Termux Hacking Tools 2019
15. Kik Hack Tools
16. Game Hacking
17. World No 1 Hacker Software
18. Pentest Tools Tcp Port Scanner
19. Pentest Tools Alternative
20. Pentest Recon Tools
21. Pentest Tools For Windows
22. Hacker Tool Kit
23. Hacker Tools Software
24. Hack And Tools
25. Beginner Hacker Tools
26. Blackhat Hacker Tools
27. Hacking Tools Hardware
28. Pentest Tools Download
29. Physical Pentest Tools
30. Hacker Tools Github
31. Hack Tools For Games
32. Free Pentest Tools For Windows
33. Hacking Tools
34. Hack Tools For Games
35. Hacker
36. Hacking Tools Online
37. Hacking Tools For Kali Linux
38. Pentest Tools Review
39. Pentest Tools Framework
40. Hacker Tools Apk
41. Pentest Tools Url Fuzzer
42. Nsa Hack Tools Download
43. Wifi Hacker Tools For Windows
44. Hacker Tool Kit
45. Hacker Tools Software
46. Pentest Tools Framework
47. Hacking Tools For Windows Free Download
48. Hacker Tools Apk Download
49. Hacking Tools For Pc
50. Pentest Tools Download
51. Github Hacking Tools
52. Hacking Tools Hardware
53. Pentest Automation Tools
54. Hack Tools 2019
55. Pentest Tools Linux
56. World No 1 Hacker Software
57. Hacking Tools Name
58. Pentest Reporting Tools
59. Pentest Tools Subdomain
60. Top Pentest Tools
61. Hacking Tools Kit
62. Pentest Box Tools Download
63. Pentest Tools Free
64. Hacker Tools 2020
65. Pentest Tools Apk
66. Wifi Hacker Tools For Windows
67. Nsa Hacker Tools
68. Pentest Tools Download
69. Pentest Tools Github
70. Hacking Tools Windows 10
71. Hacking Tools For Mac
72. Hack Tools 2019
73. Hacking Tools For Kali Linux
74. Hacker
75. Hack Tools
76. Hacker Techniques Tools And Incident Handling
77. Hacking Tools For Kali Linux
78. Hacking Tools Name
79. Growth Hacker Tools
80. Best Pentesting Tools 2018
81. Hacking Tools Pc
82. Best Hacking Tools 2020
83. Hack Tool Apk
84. Game Hacking
85. Growth Hacker Tools
86. Hacking Tools For Windows Free Download
87. Pentest Automation Tools
88. Hack Tools Pc
89. Pentest Tools
90. What Is Hacking Tools
91. Hacker Tools Apk
92. Pentest Tools Windows
93. Hacking App
94. World No 1 Hacker Software