Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Continue reading

1. Hacker Tools Free Download
2. Pentest Tools
3. Hack Rom Tools
4. Pentest Reporting Tools
5. Pentest Tools Apk
6. Pentest Reporting Tools
7. Hacker Tools Linux
8. Pentest Automation Tools
9. Hacker Tools Hardware
10. Hacking App
11. Hack Tools Pc
12. Pentest Tools Kali Linux
13. Pentest Tools Website
14. Pentest Tools Nmap
15. Hacker Tools Github
16. Pentest Tools Kali Linux
17. Blackhat Hacker Tools
18. Hacking Tools Kit
19. Hack Tools Mac
20. Pentest Tools Website Vulnerability
21. Hack And Tools
22. Hack Tools For Mac
23. Hacker
24. Hack Tools Download
25. Pentest Automation Tools
26. Hacker Search Tools
27. Hacker Tools Software
28. Hacking Tools Mac
29. Hackrf Tools
30. Hacker Tools Free
31. Hack Tools For Games
32. Hacker Tools Linux
33. Hack Tools Download
34. Wifi Hacker Tools For Windows
35. Nsa Hack Tools Download
36. How To Install Pentest Tools In Ubuntu
37. Hacker Tools For Mac
38. Hacking Tools
39. Hack Tools 2019
40. Hacker Tools
41. Hackrf Tools
42. Hacker Tools Software
43. Best Hacking Tools 2020
44. Hack Tools For Ubuntu
45. Hacker Tools 2019
46. Hacking Tools For Windows Free Download
47. Hacker Tool Kit
48. Hacking Tools Usb
49. Pentest Tools For Mac
50. Hacker Tools Linux
51. Pentest Tools Find Subdomains
52. Hacking Tools For Mac
53. Hacking Tools Github
54. Pentest Tools Framework
55. Hackrf Tools
56. Hacker Tools Online
57. Kik Hack Tools
58. Hacker Tools Mac
59. Hackrf Tools
60. Hacker Tools Apk Download
61. Pentest Tools For Windows
62. Hacker Tool Kit
63. Hacking Tools For Windows 7
64. Hacking Tools Download
65. Hacking Tools Download
66. Pentest Tools Apk
67. Pentest Tools Apk
68. Pentest Tools Android
69. Pentest Tools Kali Linux
70. Hack Tools For Mac
71. Kik Hack Tools
72. Hack Website Online Tool
73. Hacker
74. Hacking Tools For Windows
75. Pentest Tools Port Scanner
76. Hack App
77. Pentest Tools List
78. Free Pentest Tools For Windows
79. Nsa Hacker Tools
80. Hacking Tools Mac
81. What Is Hacking Tools
82. Pentest Tools Online
83. Hacker Tools Hardware
84. Tools Used For Hacking
85. Nsa Hacker Tools
86. What Is Hacking Tools
87. Beginner Hacker Tools
88. Ethical Hacker Tools
89. Hacking Tools For Games
90. Pentest Tools Github
91. Hacker Tools Online
92. Pentest Tools Open Source
93. Hak5 Tools
94. What Are Hacking Tools
95. Hack Tools Download
96. Install Pentest Tools Ubuntu
97. Hacking Tools For Games
98. Hak5 Tools
99. Hacker Techniques Tools And Incident Handling
100. How To Install Pentest Tools In Ubuntu
101. Pentest Tools For Android
102. Hacking Tools Usb
103. Hacking Tools For Windows
104. Pentest Tools Free
105. Beginner Hacker Tools
106. Hacking Tools For Pc
107. Hack Tools Online
108. Hacker Search Tools
109. Hack Tools Download
110. Hacker Tools
111. Pentest Tools Framework
112. Hacker Tools For Pc
113. Hacker Search Tools
114. Pentest Tools List
115. Free Pentest Tools For Windows
116. Nsa Hack Tools
117. Hacking Tools For Kali Linux
118. Hacker Tools Mac
119. Hacker Tools For Windows
120. Hack Website Online Tool
121. Ethical Hacker Tools
122. Underground Hacker Sites
123. Hackrf Tools
124. Free Pentest Tools For Windows
125. Hacker Tools Linux
126. Hacker Search Tools
127. Hacking Tools Hardware
128. Hak5 Tools
129. Pentest Reporting Tools
130. Hack Rom Tools
131. Usb Pentest Tools
132. Hack Tool Apk No Root
133. Pentest Tools Framework
134. Hack App
135. Usb Pentest Tools
136. Hack Tool Apk No Root
137. Pentest Tools List
138. Computer Hacker
139. Hack Tools 2019
140. Pentest Automation Tools
141. Pentest Tools Website Vulnerability
142. Hacker Security Tools