Note :

Note :

Sunday, January 28, 2024

Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 
Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

More information
  1. Hack Tools Github
  2. Pentest Tools Nmap
  3. Hack Website Online Tool
  4. Hack Tools
  5. Bluetooth Hacking Tools Kali
  6. Termux Hacking Tools 2019
  7. Pentest Tools Port Scanner
  8. Hacker
  9. Hacker Tools 2019
  10. Wifi Hacker Tools For Windows
  11. Hacker Tools Windows
  12. Hacker Tools For Ios
  13. Termux Hacking Tools 2019
  14. Growth Hacker Tools
  15. Pentest Tools Tcp Port Scanner
  16. Pentest Tools For Mac
  17. Install Pentest Tools Ubuntu
  18. Pentest Tools For Ubuntu
  19. Hacking Tools For Pc
  20. Hacker Search Tools
  21. Best Hacking Tools 2020
  22. Kik Hack Tools
  23. Hack Tool Apk No Root
  24. Hacking Tools For Windows 7
  25. Pentest Tools For Android
  26. Hack Tools
  27. Hack And Tools
  28. Hacker Tools Mac
  29. Pentest Tools Nmap
  30. Hacker Tools 2020
  31. Install Pentest Tools Ubuntu
  32. Hacking Tools Kit
  33. Hacker Tools For Windows
  34. Termux Hacking Tools 2019
  35. Pentest Tools Bluekeep
  36. How To Install Pentest Tools In Ubuntu
  37. Nsa Hack Tools Download
  38. Hacking App
  39. Hacker Tools Free
  40. Pentest Tools Free
  41. Pentest Tools List
  42. Hack Tool Apk
  43. Hack Tools
  44. How To Hack
  45. Hack Tools Github
  46. Hacking Tools Name
  47. Hacker Tools List
  48. Pentest Tools Open Source
  49. Hacking Tools Pc
  50. Hacking Apps
  51. Pentest Tools Alternative
  52. Hacking Tools Download
  53. What Is Hacking Tools
  54. How To Hack
  55. Hacking Tools For Windows Free Download
  56. Hacker Tools Online
  57. Pentest Box Tools Download
  58. Pentest Tools Url Fuzzer
  59. Pentest Tools Review
  60. Hack Tools
  61. Hack Tools Download
  62. Hacking Tools For Games
  63. Hacking Tools Windows 10
  64. Hacking Tools For Pc
  65. Hacking Tools For Games
  66. Growth Hacker Tools
  67. Hacking Tools Windows
  68. Pentest Tools For Ubuntu
  69. Usb Pentest Tools
  70. Hacker Tools Linux
  71. Hack Tools Mac
  72. Hack Tools Download
  73. Game Hacking
  74. Pentest Box Tools Download
  75. Physical Pentest Tools
  76. Hack Tools Mac
  77. How To Hack
  78. Hacking Apps
  79. Bluetooth Hacking Tools Kali
  80. Pentest Tools Framework
  81. Hack Tools For Mac
  82. World No 1 Hacker Software
  83. Hacker Search Tools
  84. Hacking Tools Software
  85. Nsa Hack Tools
  86. Hacker Tools Software
  87. How To Install Pentest Tools In Ubuntu
  88. Top Pentest Tools
  89. Hack Tool Apk
  90. Game Hacking
  91. Hacker Tool Kit
  92. Install Pentest Tools Ubuntu
  93. Pentest Tools Port Scanner
  94. Hacker Techniques Tools And Incident Handling
  95. Hacker Tools List
  96. Hacker Security Tools
  97. Hacking Tools Github
  98. Hacking Tools Name
  99. Hack Tools 2019
  100. How To Install Pentest Tools In Ubuntu
  101. Computer Hacker

No comments:

Post a Comment