Vulcan DoS Vs Akamai

In the past I had to do several DoS security audits, with múltiples types of tests and intensities. Sometimes several DDoS protections were present like Akamai for static content, and Arbor for absorb part of the bandwith.

One consideration for the DoS/DDoS tools is that probably it will loss the control of the attacker host, and the tool at least has to be able to stop automatically with a timeout, but can also implement remote response checks.

In order to size the minimum mbps needed to flood a service or to retard the response in a significant amount of time, the attacker hosts need a bandwith limiter, that increments in a logarithmic way up to a limit agreed with the customer/isp/cpd.

There are DoS tools that doesn't have this timeouts, and bandwith limit based on mbps, for that reason I have to implement a LD_PRELOAD based solution: bwcontrol

Although there are several good tools for stressing web servers and web aplications like apache ab, or other common tools used for pen-testing, but I also wrote a fast web flooder in c++ named wflood.

As expected the most effective for taking down the web server are the slow-loris, slow-read and derivatives, few host were needed to DoS an online banking. 

Remote attacks to database and highly dynamic web content were discarded, that could be impacted for sure.

I did another tool in c++ for crafting massive tcp/udp/ip malformed packets, that impacted sometimes on load balancers and firewalls, it was vulcan, it freezed even the firewall client software.

The funny thing was that the common attacks against Akamai hosts, where ineffective, and so does the slow-loris family of attacks, because are common, and the Akamai nginx webservers are well tunned. But when tried vulcan, few intensity was enough to crash Akamai hosts.

Another attack vector for static sites was trying to locate the IP of the customer instead of Akamai, if the customer doesn't use the Akamai Shadow service, it's possible to perform a HTTP Host header scan, and direct the attack to that host bypassing Akamai.

And what about Arbor protection? is good for reducing the flood but there are other kind of attacks, and this protection use to be disabled by default and in local holidays can be a mess.

More information

1. Hacker Tools List
2. Pentest Tools Bluekeep
3. Pentest Tools For Mac
4. Nsa Hack Tools Download
5. Hacking Tools For Windows
6. Hacker Tools Free
7. Hacking Tools Windows 10
8. Pentest Reporting Tools
9. Game Hacking
10. Black Hat Hacker Tools
11. Tools Used For Hacking
12. Pentest Tools
13. New Hacker Tools
14. Hacker Tools For Mac
15. Hacking App
16. Hacking Tools Usb
17. How To Make Hacking Tools
18. Usb Pentest Tools
19. Hacking Tools Pc
20. Hacker Tools Free
21. Pentest Tools Open Source
22. Hack Tools Mac
23. Underground Hacker Sites
24. Pentest Tools Windows
25. Hacks And Tools
26. Black Hat Hacker Tools
27. Hacker Tools Mac
28. Pentest Tools Windows
29. Best Pentesting Tools 2018
30. Hacker Tools For Mac
31. Hacking Tools For Windows
32. Termux Hacking Tools 2019
33. Hacker
34. Github Hacking Tools
35. Best Hacking Tools 2020
36. How To Make Hacking Tools
37. Pentest Tools Open Source
38. Tools 4 Hack
39. Tools 4 Hack
40. Free Pentest Tools For Windows
41. Pentest Tools Online
42. Hack Website Online Tool
43. Hack And Tools
44. Hacking Tools Pc
45. Hacker Tools For Mac
46. Pentest Tools
47. Hacking Tools For Windows
48. World No 1 Hacker Software
49. Pentest Tools Url Fuzzer
50. Top Pentest Tools
51. Tools Used For Hacking
52. Hacking Tools 2020
53. Pentest Reporting Tools
54. Tools 4 Hack
55. Hacking Tools Hardware
56. Hacker Hardware Tools
57. Computer Hacker
58. Hacking Tools Free Download
59. Best Hacking Tools 2020
60. Hacker Techniques Tools And Incident Handling
61. Hack Tool Apk No Root
62. Hack Rom Tools
63. Hacking Tools For Mac
64. Tools Used For Hacking
65. Nsa Hack Tools Download
66. Physical Pentest Tools
67. Pentest Tools Port Scanner
68. Bluetooth Hacking Tools Kali
69. Hacker Hardware Tools
70. Hacking Tools 2020
71. Hacker Tools For Ios
72. Termux Hacking Tools 2019
73. Hacker Tools Mac
74. Pentest Tools Open Source
75. Hacking Tools For Pc
76. Pentest Automation Tools
77. Hack Tools 2019
78. Hack Tools For Games
79. Hacking Tools Software
80. Hack Tools Github
81. Hack Tool Apk
82. Hak5 Tools
83. Hacking Tools Kit
84. Hacking Tools And Software
85. Pentest Tools Framework
86. Beginner Hacker Tools
87. Hack Tools Pc
88. Hacking Tools Pc
89. Wifi Hacker Tools For Windows
90. Hacker Tools Free
91. Beginner Hacker Tools
92. Hacking Tools For Kali Linux