Saturday, August 29, 2020

Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 
Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Related word

  1. Hack Tools For Pc
  2. Hackers Toolbox
  3. Pentest Tools Apk
  4. Hacking Tools For Windows Free Download
  5. Pentest Tools For Windows
  6. Hacking Tools For Games
  7. Hacking Tools Software
  8. Hacking Tools Name
  9. Hack Apps
  10. Hacker Tools
  11. Hacking Tools Free Download
  12. Pentest Tools Online
  13. Hack Tools 2019
  14. Pentest Tools Find Subdomains
  15. Pentest Tools Open Source
  16. Hacking Tools For Windows
  17. Tools 4 Hack
  18. Hack Tools Github
  19. New Hacker Tools
  20. Pentest Tools Subdomain
  21. Hacker Tools Online
  22. Best Hacking Tools 2019
  23. Hacker Techniques Tools And Incident Handling
  24. Tools Used For Hacking
  25. Hak5 Tools
  26. Hacker Search Tools
  27. Kik Hack Tools
  28. Hacking Tools Pc
  29. Underground Hacker Sites
  30. Hacking Tools For Beginners
  31. Hack Tools
  32. Android Hack Tools Github
  33. Hacking Tools For Pc
  34. Hacking Tools 2019
  35. Pentest Tools Online
  36. Hacker Hardware Tools
  37. Hacker Tools For Mac
  38. Hacking Tools Software
  39. Hacking Tools Free Download
  40. Pentest Tools Windows
  41. New Hacker Tools
  42. Hacking Tools For Kali Linux
  43. Hack Tools For Games
  44. Hack Tools Online
  45. Hack Tool Apk
  46. Hacking Tools For Mac
  47. Beginner Hacker Tools
  48. Hacker Tools Github
  49. Pentest Tools Framework
  50. Hacking Tools Windows
  51. Pentest Tools Kali Linux
  52. Pentest Tools Open Source
  53. Pentest Tools For Android
  54. World No 1 Hacker Software
  55. How To Install Pentest Tools In Ubuntu
  56. Android Hack Tools Github
  57. Hacking Tools Hardware
  58. Hack Tools 2019
  59. Hacking Tools Windows
  60. Hack App
  61. Pentest Tools Find Subdomains
  62. Hacker Tools Linux
  63. Hacking Tools For Windows Free Download
  64. Black Hat Hacker Tools
  65. Pentest Automation Tools
  66. Pentest Tools Nmap
  67. Kik Hack Tools
  68. Nsa Hacker Tools
  69. Pentest Tools Kali Linux
  70. Black Hat Hacker Tools
  71. Hacking Tools Windows 10
  72. Hack Tools For Pc
  73. Hack Tool Apk No Root
  74. Pentest Tools For Ubuntu
  75. Hack Tools Github
  76. Black Hat Hacker Tools
  77. Best Pentesting Tools 2018
  78. Pentest Tools Download
  79. Hacker
  80. Hacking Tools For Windows 7
  81. Hackers Toolbox
  82. Hacker Tools Windows
  83. Hacker Tools For Pc
  84. Pentest Tools Nmap
  85. Hacking Tools Usb
  86. Easy Hack Tools
  87. Hacker Tools For Windows
  88. Hacking Tools And Software
  89. How To Install Pentest Tools In Ubuntu
  90. Hack Tool Apk No Root
  91. Hacker Hardware Tools
  92. Pentest Tools Free
  93. Pentest Tools Online
  94. Pentest Tools Open Source
  95. Nsa Hacker Tools
  96. Pentest Tools Android
  97. Hacker Tools For Ios
  98. Beginner Hacker Tools
  99. Hacker
  100. Hacking Tools For Windows Free Download
  101. Hacking Tools Usb
  102. Hacker Tools For Ios
  103. Pentest Tools Linux
  104. Pentest Tools Subdomain
  105. Github Hacking Tools
  106. Hacker Hardware Tools
  107. Pentest Tools Tcp Port Scanner
  108. Hacker Tools Online
  109. Hacking Tools For Mac
  110. Termux Hacking Tools 2019

No comments:

Post a Comment