Thursday, January 18, 2024

Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 
Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Continue reading


  1. Hacking Tools For Kali Linux
  2. Hack Tools 2019
  3. Pentest Tools Review
  4. Physical Pentest Tools
  5. How To Make Hacking Tools
  6. Nsa Hacker Tools
  7. Hacker Tools 2019
  8. Pentest Tools Linux
  9. Hack Tools
  10. Beginner Hacker Tools
  11. Hack App
  12. Nsa Hack Tools
  13. Hacker Tools List
  14. Hacking Tools Online
  15. Hacking Tools For Windows
  16. Hacking Tools For Kali Linux
  17. Hacking Tools Name
  18. Hacker Tools List
  19. Hack Tools For Pc
  20. How To Install Pentest Tools In Ubuntu
  21. Hacker Tools Online
  22. Pentest Tools Kali Linux
  23. Pentest Tools Nmap
  24. Hacking Tools Github
  25. Hacking Tools Kit
  26. Pentest Tools Tcp Port Scanner
  27. Best Hacking Tools 2019
  28. Hacking Apps
  29. Hackers Toolbox
  30. Pentest Tools Online
  31. Hack Tools Mac
  32. Hack Apps
  33. Ethical Hacker Tools
  34. Install Pentest Tools Ubuntu
  35. Hack Tool Apk No Root
  36. How To Install Pentest Tools In Ubuntu
  37. Hacking Tools For Pc
  38. Pentest Tools Review
  39. Hacker Tools Free
  40. Hacking Tools For Pc
  41. Hacking Tools Download
  42. Pentest Tools For Mac
  43. Pentest Tools Kali Linux
  44. Hacking Apps
  45. Physical Pentest Tools
  46. Pentest Tools Bluekeep
  47. Hacking Tools For Windows 7
  48. Hacker Tools For Pc
  49. Pentest Tools Tcp Port Scanner
  50. Install Pentest Tools Ubuntu
  51. Hack App
  52. Pentest Reporting Tools
  53. Hack Tools Online
  54. Pentest Tools Find Subdomains
  55. Pentest Tools Framework
  56. Hackrf Tools
  57. Hack Tools For Mac
  58. Best Hacking Tools 2019
  59. Pentest Tools Website Vulnerability
  60. Pentest Tools Nmap
  61. Hacker Tools Software
  62. Hacker Tools Linux
  63. Game Hacking
  64. Hack Tools Pc
  65. Ethical Hacker Tools
  66. Hacker Tools
  67. Hacker
  68. Hack Tools Github
  69. Hack Tool Apk
  70. Install Pentest Tools Ubuntu
  71. Hacker Tools For Mac
  72. Ethical Hacker Tools
  73. What Are Hacking Tools
  74. Hacking Tools Github
  75. Pentest Tools Port Scanner
  76. Easy Hack Tools
  77. Nsa Hack Tools Download
  78. Hacker Tools 2020
  79. Top Pentest Tools
  80. Pentest Box Tools Download
  81. Hack Tools For Games
  82. Pentest Tools Windows
  83. Hacking Apps
  84. Hack Tool Apk
  85. Pentest Automation Tools
  86. Hack Tools Mac
  87. Usb Pentest Tools
  88. Hak5 Tools
  89. Hack Tool Apk
  90. Hacking Tools 2020
  91. Hacker Tools Free
  92. Beginner Hacker Tools
  93. Usb Pentest Tools
  94. Hacking Tools For Kali Linux
  95. Hacking Tools Online
  96. Pentest Tools Find Subdomains
  97. Hacker Tools Online
  98. Hacker Tools Free
  99. Easy Hack Tools
  100. Hacking Tools And Software
  101. Hack Website Online Tool
  102. Github Hacking Tools
  103. Pentest Tools Url Fuzzer
  104. Pentest Box Tools Download
  105. Kik Hack Tools
  106. Hacking Tools 2020
  107. Blackhat Hacker Tools
  108. Pentest Tools Apk
  109. Pentest Tools Linux
  110. Best Pentesting Tools 2018
  111. Pentest Tools Url Fuzzer
  112. Hack Tools For Ubuntu
  113. Hack Rom Tools
  114. Hacking Tools Windows 10
  115. Hacking Tools And Software
  116. Hack Tools 2019
  117. Hacking Tools For Windows Free Download
  118. Hack Tools 2019
  119. Hacking Tools Kit
  120. Hack Tools
  121. Kik Hack Tools
  122. Hack Tools 2019
  123. Hacker Tool Kit
  124. Usb Pentest Tools
  125. Pentest Tools For Ubuntu
  126. Hacking Tools For Games
  127. Pentest Tools Website Vulnerability
  128. Hacker Tools Online
  129. Pentest Tools List
  130. Hacking Tools For Mac
  131. Hacker Tools Free
  132. Nsa Hacker Tools
  133. Pentest Tools Github
  134. Pentest Tools For Android
  135. Hacker Tools Free Download
  136. Hacker Tools For Mac
  137. Hacker Tools Free Download
  138. Hacking Tools For Windows Free Download
  139. Pentest Tools Android
  140. Pentest Tools Linux
  141. Pentest Tools Website
  142. Physical Pentest Tools
  143. How To Make Hacking Tools
  144. What Is Hacking Tools
  145. Hacking Tools For Windows 7
  146. Hacking Tools Software
  147. Pentest Tools Bluekeep
  148. Hacker Tools Apk Download
  149. Pentest Tools Windows
  150. Hackers Toolbox
  151. How To Make Hacking Tools
  152. Nsa Hack Tools
  153. Hack Tools Online
  154. Growth Hacker Tools
  155. Tools For Hacker
  156. Physical Pentest Tools
  157. Hack Tools For Mac
  158. Pentest Tools For Mac
  159. Pentest Tools Download
  160. Hacker Techniques Tools And Incident Handling
  161. Pentest Tools Open Source
  162. Best Hacking Tools 2020
  163. What Are Hacking Tools
  164. Pentest Box Tools Download
  165. Hack Tools For Ubuntu
  166. Pentest Tools Online
  167. Hacking Tools Kit

No comments:

Post a Comment