Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

More info

1. Hacker Security Tools
2. Hacker Tools For Windows
3. Pentest Tools Android
4. Hack Tools 2019
5. Pentest Box Tools Download
6. Hacker Tools Mac
7. Wifi Hacker Tools For Windows
8. Hacker Tools Github
9. Hak5 Tools
10. Hack Tools 2019
11. Pentest Tools Review
12. Pentest Tools For Ubuntu
13. Hacking Tools For Windows
14. Hacker Tools Mac
15. Hacking Tools For Windows Free Download
16. Hacking Tools For Games
17. Top Pentest Tools
18. Growth Hacker Tools
19. Pentest Tools For Ubuntu
20. Hacker Security Tools
21. Pentest Box Tools Download
22. Hacker Security Tools
23. Best Hacking Tools 2020
24. Hacking Tools For Kali Linux
25. Hack Tools For Windows
26. Tools For Hacker
27. Hacking Tools For Beginners
28. Hacker Security Tools
29. Pentest Automation Tools
30. Pentest Tools Free
31. Nsa Hack Tools
32. Hacking Tools Kit
33. Hacker Tools
34. Hacking Tools Pc
35. Hack Tool Apk
36. Hacker Search Tools
37. Best Hacking Tools 2019
38. Install Pentest Tools Ubuntu
39. Pentest Tools Review
40. Hacker Tools 2020
41. What Is Hacking Tools
42. Hack Tools Github
43. Top Pentest Tools
44. Hacker Tools Mac
45. Hacking Tools Kit
46. Android Hack Tools Github
47. New Hacker Tools
48. Pentest Recon Tools
49. Hack Apps
50. Hacker Tools Online
51. Pentest Tools For Android
52. Hacker Tools Windows
53. Pentest Tools For Ubuntu
54. Pentest Tools Tcp Port Scanner
55. Hacking Tools For Windows
56. Hack Tool Apk No Root
57. Nsa Hack Tools
58. Hacker Tools Mac
59. Hacking Tools For Windows
60. Pentest Tools
61. Pentest Tools For Mac
62. New Hack Tools
63. Pentest Tools Port Scanner
64. Hacking Tools Github
65. Pentest Tools Alternative
66. Best Hacking Tools 2020
67. Hacker Tools Hardware
68. Hacker Tools 2019
69. Hack Website Online Tool
70. Pentest Tools Download
71. Hack Tool Apk
72. Hack And Tools
73. Pentest Tools Download
74. Top Pentest Tools
75. Tools Used For Hacking
76. Usb Pentest Tools
77. Pentest Automation Tools
78. Pentest Tools Android
79. Hacker Tool Kit
80. Hack Tools For Windows
81. Easy Hack Tools
82. Pentest Tools Nmap
83. Black Hat Hacker Tools
84. Top Pentest Tools
85. Pentest Tools For Windows