Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Related articles

1. Hack Tools For Mac
2. Pentest Tools Subdomain
3. Hacking Tools For Windows Free Download
4. Pentest Tools
5. Hackers Toolbox
6. Top Pentest Tools
7. Hacker Search Tools
8. Best Hacking Tools 2020
9. Hacker Tools
10. Hacker Tools For Pc
11. Hacking Tools Github
12. Kik Hack Tools
13. Hacker Tools Free Download
14. Hacker
15. Nsa Hack Tools
16. Hacker Tools Online
17. Hacker Tools 2019
18. Hacking Tools Windows
19. Black Hat Hacker Tools
20. Physical Pentest Tools
21. Hack Tools
22. Hack Tools Mac
23. What Is Hacking Tools
24. Beginner Hacker Tools
25. Hacker Tools Apk Download
26. Hacking Tools For Windows
27. Hacker Tools Software
28. What Is Hacking Tools
29. Hack Tools For Pc
30. Pentest Box Tools Download
31. Hacker Tools For Ios
32. Hacking App
33. Hack Tools For Windows
34. Hack And Tools
35. Hacker Security Tools
36. Hacking Tools Windows
37. Hackrf Tools
38. Pentest Tools Bluekeep
39. Hack Tools For Ubuntu
40. Best Hacking Tools 2019
41. Hacking Tools Online
42. Hacker Tools Apk Download
43. Hack Tools Pc
44. Hack Tools For Games
45. Free Pentest Tools For Windows
46. How To Hack
47. Pentest Tools Online
48. Hacking Tools Pc
49. Hacking Tools Software
50. Ethical Hacker Tools
51. Hacker Tools List
52. Hacker Tools Software
53. Hacking Tools Kit
54. Hack Tools Mac
55. Hacker Tools Apk
56. How To Make Hacking Tools
57. Hacker Tools Free Download
58. Pentest Tools Download
59. Hack Tools Pc
60. Pentest Tools Subdomain
61. Pentest Tools Website Vulnerability
62. Hacking Tools Github
63. Hack Tools For Windows
64. Hack Tools For Ubuntu
65. Pentest Tools Kali Linux
66. Easy Hack Tools
67. Pentest Automation Tools
68. Nsa Hack Tools
69. Pentest Tools Android
70. Hacker Tools Free
71. Hackers Toolbox
72. Best Hacking Tools 2019
73. Hacker Tools For Pc
74. Hacking Tools Github
75. Pentest Tools Windows
76. Pentest Tools Github
77. Pentest Tools List
78. Termux Hacking Tools 2019
79. Pentest Reporting Tools
80. Hack Tools Online
81. Easy Hack Tools
82. Pentest Tools Website
83. Hack Tools Github
84. Nsa Hack Tools
85. Pentest Tools List
86. Bluetooth Hacking Tools Kali
87. Hack Tools
88. Best Hacking Tools 2019
89. Hack Tool Apk