Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Related word

1. Pentest Tools Nmap
2. Black Hat Hacker Tools
3. Hacking Tools Windows 10
4. Pentest Tools For Mac
5. Nsa Hacker Tools
6. Hacker Tools For Mac
7. Hacker Tools Online
8. Hacking Tools Hardware
9. Pentest Tools Port Scanner
10. Hack Tools For Games
11. Hack Tools Mac
12. How To Hack
13. What Are Hacking Tools
14. Pentest Tools List
15. Hacker Tools For Mac
16. Hacking Tools Pc
17. Hack Tool Apk No Root
18. Hacker Tools 2020
19. Pentest Tools Framework
20. Pentest Tools
21. Hack Tools Github
22. Hacker Hardware Tools
23. Pentest Tools Tcp Port Scanner
24. Hacking Tools Windows
25. How To Make Hacking Tools
26. Hacking Tools Hardware
27. Hacker Tools 2020
28. Hack Tools Mac
29. Hacker Tool Kit
30. Hacker Tools
31. Hacker Tools List
32. Usb Pentest Tools
33. Tools 4 Hack
34. Hack Tools 2019
35. Hack Tool Apk No Root
36. Hacker Hardware Tools
37. Hackers Toolbox
38. Hacking Tools Windows
39. Hacking Tools For Games
40. Hacking Tools For Mac
41. Hacker Tools Apk
42. Hacker Tools
43. Hacker Search Tools
44. Hacking Tools For Windows Free Download
45. Hacking Tools For Pc
46. Pentest Tools For Android
47. Hacking Tools Software
48. Hacker Search Tools
49. Hak5 Tools
50. Hack Rom Tools
51. Hacking Tools Github