Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Read more

1. Hacking Tools Name
2. Hacking Tools For Windows Free Download
3. Hacker Security Tools
4. Hacker Tools Apk
5. Pentest Tools Android
6. Hacker Tools For Windows
7. Hacking Tools And Software
8. Hacker Tool Kit
9. Pentest Tools Website
10. Pentest Tools For Windows
11. Hack Rom Tools
12. Hacking Tools For Windows Free Download
13. Hack Tools For Games
14. Android Hack Tools Github
15. Hacking Tools For Windows
16. Pentest Tools Bluekeep
17. Beginner Hacker Tools
18. Pentest Tools Bluekeep
19. Hacker Tools For Mac
20. Pentest Tools Review
21. Hack Tools Github
22. Hacker Tools 2020
23. Pentest Tools Download
24. Pentest Tools Apk
25. Tools 4 Hack
26. Hacker Hardware Tools
27. Hack Tools 2019
28. Hacker Tools For Windows
29. Github Hacking Tools
30. Pentest Tools Apk
31. Hack Tools Github
32. Hack Tool Apk
33. Hack Tools For Games
34. Hacking Tools Windows
35. Pentest Box Tools Download
36. Hacking Tools Software
37. Hack Tools For Mac
38. Tools For Hacker
39. Termux Hacking Tools 2019
40. Pentest Tools For Mac
41. Physical Pentest Tools
42. Hacking Tools Hardware
43. Computer Hacker
44. Best Hacking Tools 2019
45. Hacker Tools Github
46. Hacker Security Tools
47. Pentest Tools Bluekeep
48. Hacking Tools Hardware
49. Hacker Tools Apk
50. Underground Hacker Sites
51. Hacking Tools 2020
52. Best Pentesting Tools 2018
53. Pentest Tools Alternative
54. Hack Tools Mac
55. Hacking Tools Hardware
56. Hacking Tools For Pc
57. Hacking Tools Usb
58. Physical Pentest Tools
59. Hacker Tools For Pc
60. Hacking Tools For Windows 7
61. Install Pentest Tools Ubuntu
62. Hack Tools Mac
63. Hacker Tools
64. Computer Hacker
65. Pentest Tools Linux
66. Hack Tools For Windows
67. Hacker Tools 2020
68. Hacker Tools Free
69. Hacking Tools For Windows
70. Termux Hacking Tools 2019
71. Ethical Hacker Tools
72. Pentest Tools Find Subdomains
73. Termux Hacking Tools 2019
74. Hacking Tools For Games
75. What Are Hacking Tools
76. Hacker Tools Free Download
77. Hacking Tools 2020
78. Pentest Tools Alternative
79. Pentest Tools Open Source
80. Hacker Tools List
81. Hacker Tool Kit
82. How To Make Hacking Tools
83. Nsa Hacker Tools
84. Hacking Tools 2019
85. Hacker Tools For Mac
86. Pentest Tools Subdomain
87. Kik Hack Tools
88. Black Hat Hacker Tools
89. Hacker Tools For Mac
90. Hacker Tool Kit
91. Hacking Tools Windows
92. Hacking Tools Mac