Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

More information

1. Hacking Tools For Games
2. Hacking Tools And Software
3. Pentest Tools Apk
4. Hacking Tools For Windows Free Download
5. Pentest Automation Tools
6. Hacker Tools Linux
7. Hack Tools For Ubuntu
8. Pentest Tools For Mac
9. Hacker Tools Hardware
10. Hacking Tools Usb
11. Hacker Hardware Tools
12. Pentest Tools For Android
13. Android Hack Tools Github
14. Pentest Recon Tools
15. Hack Tools Mac
16. Hacker Tools Mac
17. Hacker Tools Software
18. Hack Tools 2019
19. Game Hacking
20. Pentest Tools Framework
21. Ethical Hacker Tools
22. Hack Tools Mac
23. Hack Tools Mac
24. Tools Used For Hacking
25. Hacker Tools Apk
26. Hack Rom Tools
27. Hacking Tools Name
28. Hacking Tools For Pc
29. Pentest Tools Android
30. Hacking Tools Software
31. Hacking Tools Mac
32. How To Hack
33. Hacking Tools For Pc
34. Tools 4 Hack
35. Kik Hack Tools
36. Top Pentest Tools
37. Pentest Tools Port Scanner
38. Termux Hacking Tools 2019
39. Nsa Hack Tools
40. Hacker Tool Kit
41. Pentest Recon Tools
42. Hack Tools Pc
43. Blackhat Hacker Tools
44. Pentest Tools List
45. Hacker Tools For Pc
46. Hacking Tools For Beginners
47. New Hacker Tools
48. Black Hat Hacker Tools
49. Growth Hacker Tools
50. Hack Tool Apk No Root
51. Hacking Tools For Windows
52. Hacker Tools 2019
53. Pentest Tools Online
54. Hacking Tools For Mac
55. Pentest Tools Tcp Port Scanner
56. Hacker
57. Pentest Tools For Ubuntu
58. Hacker Tools Windows
59. Usb Pentest Tools
60. Hack Tools
61. Tools Used For Hacking
62. Hack Tool Apk
63. Hack Tools For Ubuntu
64. Hacker Tools Online
65. Usb Pentest Tools