Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

Related word

1. Pentest Tools Windows
2. Pentest Tools Free
3. Hack Tools Download
4. Hacking Tools For Windows 7
5. Nsa Hack Tools
6. Hacker Security Tools
7. Pentest Tools
8. Hacker Tools List
9. Kik Hack Tools
10. Hack Tools Mac
11. Hacker Tools Free
12. Nsa Hack Tools
13. Black Hat Hacker Tools
14. New Hacker Tools
15. Blackhat Hacker Tools
16. Ethical Hacker Tools
17. Hacking Tools Software
18. Hacker Techniques Tools And Incident Handling
19. Hacking Tools Download
20. Hacking Tools Hardware
21. Blackhat Hacker Tools
22. Hack Tools Online
23. Hacking Tools For Windows
24. Hacking Tools For Pc
25. Hack Tools Mac
26. World No 1 Hacker Software
27. Hack Website Online Tool
28. Hacking Tools For Windows 7
29. Pentest Tools Website Vulnerability
30. Pentest Automation Tools
31. Hacking Tools For Windows Free Download
32. Bluetooth Hacking Tools Kali
33. Pentest Tools Find Subdomains
34. Hacker Hardware Tools
35. Hacker Tools Windows
36. Tools 4 Hack
37. Pentest Recon Tools
38. Hacking Tools For Games
39. Pentest Tools Android
40. Pentest Tools For Mac
41. Hack Apps
42. How To Hack
43. Hack Tools
44. Hacking Tools Hardware
45. What Are Hacking Tools
46. Usb Pentest Tools
47. Hacks And Tools
48. Pentest Tools Subdomain
49. Growth Hacker Tools
50. Nsa Hack Tools
51. Pentest Tools List
52. How To Hack
53. Hackrf Tools
54. Black Hat Hacker Tools
55. Hacker Security Tools
56. Hacking Tools Github
57. Hacking Tools For Pc
58. Hack Rom Tools
59. Hack Tools For Games
60. What Is Hacking Tools
61. Wifi Hacker Tools For Windows
62. Beginner Hacker Tools
63. How To Install Pentest Tools In Ubuntu
64. Hacker Tools List
65. Hacker Tools Free Download
66. Hack Tools Download
67. Hack Rom Tools
68. Hacking Tools For Games
69. Pentest Tools Windows
70. Black Hat Hacker Tools
71. Hack Tools Github
72. Easy Hack Tools
73. Pentest Tools Online
74. Pentest Tools List
75. Pentest Tools List
76. Best Hacking Tools 2019
77. Hacker Tools Software
78. Hacking Tools Online
79. Hacking Tools For Games
80. Hacking App
81. Nsa Hack Tools
82. Pentest Tools Android
83. Usb Pentest Tools
84. Hacking Tools Software
85. Pentest Tools Download
86. Pentest Tools For Android
87. Tools 4 Hack
88. World No 1 Hacker Software
89. Hacker Hardware Tools
90. Hack Tools
91. Blackhat Hacker Tools
92. Hacking Tools Hardware
93. Growth Hacker Tools
94. Pentest Tools Subdomain
95. Pentest Recon Tools
96. Pentest Reporting Tools
97. Hacker Tools Free
98. New Hack Tools
99. Black Hat Hacker Tools
100. Tools 4 Hack
101. Bluetooth Hacking Tools Kali
102. Hacking Tools Download
103. Best Hacking Tools 2019
104. Pentest Tools Linux
105. Hacker Tools Apk Download
106. Hacking Tools For Pc
107. Pentest Tools List
108. Hacker
109. Hacking Tools For Windows Free Download
110. Nsa Hacker Tools