Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Continue reading

1. Best Hacking Tools 2020
2. Hack Tool Apk
3. Growth Hacker Tools
4. Pentest Tools Linux
5. Hacking Apps
6. Pentest Tools Open Source
7. Install Pentest Tools Ubuntu
8. Hacker Tools For Windows
9. Pentest Tools Review
10. Pentest Tools Review
11. Hacker Tools For Mac
12. Hacker Tools For Mac
13. Hacker Tools Windows
14. Hacking Tools Software
15. Ethical Hacker Tools
16. Hack Website Online Tool
17. How To Make Hacking Tools
18. Hacking Tools Mac
19. Hacker Tools List
20. Hack Tools Online
21. Hack Tools
22. Pentest Box Tools Download
23. Free Pentest Tools For Windows
24. Hack Tools Mac
25. Hacks And Tools
26. Hacking Tools Name
27. Hacking Tools And Software
28. Hacker Tools Apk Download
29. Hack Tools For Ubuntu
30. Hacking Tools For Games
31. Hacking Tools And Software
32. Hacker Tools For Mac
33. Hacker Tools Apk Download
34. Usb Pentest Tools
35. Hackrf Tools
36. Hacking Tools Hardware
37. Beginner Hacker Tools
38. Nsa Hacker Tools
39. Pentest Tools Alternative
40. Top Pentest Tools
41. Pentest Tools Github
42. Hack Tools For Games
43. Hacker Tools For Pc
44. Hacker Tools List
45. Pentest Tools Open Source
46. Pentest Tools Apk
47. Pentest Tools
48. World No 1 Hacker Software
49. Hack Tools 2019
50. Nsa Hacker Tools
51. Pentest Tools Website
52. Hacking Apps
53. Easy Hack Tools
54. Hacking Tools 2019
55. Underground Hacker Sites
56. Hacks And Tools
57. Hacking Tools For Games
58. Pentest Tools For Ubuntu
59. Install Pentest Tools Ubuntu
60. Pentest Recon Tools
61. Pentest Tools Github
62. What Are Hacking Tools
63. Pentest Tools Linux
64. Hacking Tools For Windows Free Download
65. Hacker Tools 2019
66. Tools 4 Hack
67. Pentest Tools Github
68. Hacker Search Tools
69. Hacking Tools Pc
70. Pentest Box Tools Download
71. Hacker Tools 2019
72. Growth Hacker Tools
73. Nsa Hack Tools Download
74. Pentest Tools Framework
75. How To Install Pentest Tools In Ubuntu
76. Bluetooth Hacking Tools Kali
77. Pentest Reporting Tools
78. Hacking Tools Hardware
79. Hacker Tools For Ios
80. Pentest Automation Tools
81. Hack Tools Download
82. Usb Pentest Tools
83. Hacker
84. Pentest Tools Nmap
85. How To Hack
86. Hacker Tools Apk Download
87. Nsa Hacker Tools
88. Hacking Tools Software
89. Hacking Tools For Kali Linux
90. Hacker Tools For Windows
91. Hacking Tools 2019
92. Pentest Recon Tools
93. Pentest Tools For Windows
94. Hacking Tools Github
95. Pentest Tools Port Scanner
96. How To Hack
97. Hacker Tools Free