In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.
One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.
In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.
There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol
Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.
As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking.
Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.
I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.
The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.
Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.
And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.
Continue reading
- Hacking Tools 2020
- New Hacker Tools
- Hacker Tools Windows
- Hack Rom Tools
- Hack Tool Apk No Root
- Hacker Tools Apk Download
- Pentest Tools For Ubuntu
- Hacker Tools 2019
- Install Pentest Tools Ubuntu
- Hacking Tools Mac
- What Is Hacking Tools
- Hacking Tools
- Hacking Tools For Windows
- Hack App
- Hacker Tool Kit
- Hacking Tools Pc
- Hacker Tools Free Download
- Pentest Tools For Ubuntu
- Ethical Hacker Tools
- Nsa Hack Tools Download
- Hack Tools For Windows
- Ethical Hacker Tools
- Growth Hacker Tools
- New Hack Tools
- Pentest Tools For Android
- Hacker Tools Free Download
- Hacking Tools Free Download
- Hacking Tools Github
- Hacker Tools Free Download
- Hack Tools Mac
- What Are Hacking Tools
- Hack Tools For Games
- Pentest Tools Website Vulnerability
- Hacker Security Tools
- Beginner Hacker Tools
- Hacker Tools Free
- What Is Hacking Tools
- Hacker Tools Mac
- Top Pentest Tools
- Hack Apps
- Hacking Tools Kit
- Hacker Tools Free
- Hacker Tools Windows
- Hacking Tools
- Hacker Tools Linux
- Nsa Hack Tools Download
- Pentest Tools Apk
- Pentest Tools Subdomain
- Best Hacking Tools 2020
- What Are Hacking Tools
- Hacker Tools 2020
- Wifi Hacker Tools For Windows
- Best Hacking Tools 2019
- Install Pentest Tools Ubuntu
- Hack Tools
- Tools For Hacker
- Hacking Tools Online
- Tools 4 Hack
- Termux Hacking Tools 2019
- Hacking Tools Kit
- Hacker
- Pentest Tools Nmap
- Hacking Tools Online
- Hacker Tools For Pc
- Pentest Tools Windows
- Hack Tools Mac
- Hack App
- Hacking Tools Software
- Hackers Toolbox
- Best Pentesting Tools 2018
- Hacking Apps
- Pentest Tools Review
- Hack Tool Apk No Root
- Pentest Tools Bluekeep
- Game Hacking
- Nsa Hack Tools
- Pentest Tools Android
- Hacking Tools For Kali Linux
- Best Hacking Tools 2020
- Pentest Tools Bluekeep
- How To Make Hacking Tools
- Hacking Tools Kit
- Ethical Hacker Tools
- Hacker Tools Hardware
- Pentest Tools For Mac
- Hack Tools Download
- Tools 4 Hack
- Wifi Hacker Tools For Windows
- New Hack Tools
- Install Pentest Tools Ubuntu
- Pentest Tools Framework
- Usb Pentest Tools
- Hacking Tools For Windows Free Download
- Underground Hacker Sites
- Hacker Tools Apk Download
- Easy Hack Tools
- Hack Tool Apk No Root
- Hacking Tools Usb
- Hacking Tools For Windows
- Hack Apps
- Hacker Tools 2019
- Growth Hacker Tools
- Hacker Tools Windows
- Hacker Tools
- Hack Apps
- Nsa Hack Tools Download
- Free Pentest Tools For Windows
- Hack Apps
- Hack Tool Apk
- Hacks And Tools
- Hack Tool Apk No Root
- Hack Tools Github
- Hacking Tools Pc
- Android Hack Tools Github
- Pentest Tools Bluekeep
- Hack Tools
- What Is Hacking Tools
- Best Pentesting Tools 2018
- Nsa Hack Tools
- World No 1 Hacker Software
- New Hack Tools
- How To Hack
- Pentest Reporting Tools
- Hacking Tools Windows
- Hacker Search Tools
- Hacker Techniques Tools And Incident Handling
- Hacker
- Hacking Tools For Kali Linux
- Hacking Tools Github
- Hack Rom Tools
- Hacking Tools And Software
- Best Hacking Tools 2019
- Pentest Tools Alternative
- Pentest Tools Nmap
- Hacker
- Pentest Tools Review
- Hack Apps