Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks

learn more… | top users | synonyms (1)

-3
votes
1answer
107 views

Random scanning or potential attack/recon? [duplicate]

If the purpose of a SYN Flood attack would be to make the target unresponsive to normal traffic, same as any other DoS, wouldn't this attack generally have been directed at a public server rather than ...
0
votes
1answer
2k views

Secure Client-Initiated Renegotiation - DoS DANGER

I tested my server against cryptographic attacks and I have a few major and minor issues. However I would like to know how can I mitigate and protect against such vulnerability warning: Secure Client-...
-7
votes
2answers
937 views

How long does it take to execute a DoS attack on a PC using the ping… -t CMD command?

Suppose the target of a Denial of Service attack is a PC on LAN with IP 192.168.1.10. Then, I can continue to ping the target by running the ping command in an infinite loop in CMD, that is, by ...
2
votes
2answers
214 views

2 External IPs to prevent DDoS?

In my home network I currently have a Hitron cgnm-2250 acting as a modem/router combo with an IP Passthrough option enabled for a 2nd router connected to it (ddwrt nighthawk x6 r8000). I already have ...
5
votes
3answers
1k views

How can I defend against malicious GET requests?

My server is getting hit with a variety if requests like the following: Started GET "/key/values" ActionController::RoutingError (No route matches [GET] "/key/values") Started GET "/loaded" ...
-2
votes
1answer
93 views

Recommendations for SMTP DoS [closed]

I have an opened SMTP server that allows me to send emails. The problem is that I can send a massive amount of emails (80,000+) to a specific mailbox and block all the other legitimate emails (that ...
2
votes
0answers
195 views

DNS Server Recursive Query Cache Poisoning Weakness “Bounce DoS”

Tenable Nessus states that if there is a DNS Server Recursive Query Cache Poisoning Weakness the host allows recursive queries via UDP, then the host can be used to 'bounce' Denial of Service attacks ...
4
votes
2answers
159 views

Deny attacker access to my router

I was experiencing very low connectivity on my wireless, so I checked the router logs. Here's what I saw: Jul 09 11:07:24 Per-source ACK Flood Attack Detect (ip=74.125.130.129) Packet Dropped Jul 09 ...
4
votes
1answer
238 views

HPKP-based persistent denial-of-service attack on web sites

HTTP Public Key Pinning (HPKP) is a standard that allows a HTTPS website to specify which certificates it trusts, and instruct the browser not to allow any connection to that site that's secured by ...
7
votes
2answers
4k views

How to prevent smurf attack?

I am using college network to access internet. Many other users are using the same network. Recently I have been experiencing sluggish net connection. So when I did some investigation, I found that ...
4
votes
2answers
5k views

How to mitigate UDP flood attacks?

My friend linked me some website where you pay $5.00 / m and get access to a plethora of 'dos stresser' tools that offer udp flooding, and other malicious flooders. It's a web-based system and you ...
10
votes
4answers
421 views

What are the drawbacks of login request throttling?

In a web application, one way to protect against password guessing attacks is to lock out accounts after a set number of failed logins. This could be done on both source IP address and username. For ...
62
votes
9answers
8k views

Can attackers get anything with DoS attacks except crashing the service?

A DoS (short for "denial of service") attack is a form of attack used on web services which aims to "crash" the service. Is there any motive of this form of attack besides crashing the service / ...
6
votes
2answers
1k views

How can the Android GraphicBuffer::unflatten() vulnerability (CVE-2015-1474) be exploited remotely?

I've been reading up-on DoS (denial-of-service) attacks within android and although I understand attacks like the below, which make use of regular programming functions etc. (Android Web Browser) ...
4
votes
0answers
151 views

What to do if I accidentally DoS a site? [closed]

A few weeks ago I was non-maliciously using a website with server-side calculations when curiosity got the better of me and I decided to mess with some GET request values. I expected the site to give ...
6
votes
2answers
925 views

Is there any protection against malicious devices on a CAN bus?

CAN (controller area network) is a bus used in all modern cars. You can read a lot of the cars information over this bus and I think (but I'm not too sure about this) that some critical control ...
0
votes
1answer
1k views

Is there a layer 1, 2, 5 and 6 DDoS attack? [closed]

I'm doing some research on DDoS attacks, and I seem to only be finding information on layer 3,4 and 7 attacks. When I saw 3/4 and 7 DDoS attacks, I figured they were the most popular, but there were ...
-4
votes
1answer
152 views

Is there an exploit for python hash collision? [closed]

Is there an exploit for this vulnerability? EDIT Python DoS via hash algorithm collision - oCERT advisory 2011-003. Affected numerous languages. No CVE for Python but CVEs for other languages.
3
votes
1answer
318 views

RSnake's Slow Loris tool

I was looking at RSnakes implementation of his Slow Loris done on perl which can be seen here. I set up a little server to listen to his packets, and at first found this GET / HTTP/1.1\r\nHost: David-...
0
votes
2answers
80 views

Requesting webpage as DOS

Is it possible to launch a DOS by repeatedly requesting a webpage (refreshing)? Like holding down F5 on your browser?
0
votes
1answer
27 views

Is there some kind of a local DoS against processes?

Is there an attack that somehow floods a target process (e.g. by repeatedly calling a WinAPI function that involves the process) and thereby crashes or temporarily disables it?
0
votes
1answer
222 views

Organizing results from netstat using find on Windows [closed]

I am trying to figure out a way to natively do this within Windows without having to load any 3rd party applications. When I run: netstat -ba I want to find established connections without losing ...
2
votes
2answers
227 views

Is radio burst transmission really “jam resistant”?

Quoted from here: Certain military communication systems are based on the jam-resistant burst transmission of binary telegrams which consist of orthogonal spread-spectrum waveforms (BOK). To ...
0
votes
1answer
288 views

Slow Loris Incomplete GET Request

A slow loris attack is an attack of incomplete GET requests to most famously an Apache server because the server does not timeout the connection made after extremely long periods of time, from my ...
1
vote
2answers
176 views

Is this a DDOS attack?

I lost my internet connection for about 15 minutes and I checked my netgear router log and found these 3: [DoS Attack: ACK Scan] from source: 114.77.184.189, port 44822, Tuesday, March 24,2015 19:...
1
vote
1answer
73 views

Is DDOS more common than DOS?

Which attack takes place more often over the internet? I would have assumed DDOS due to the amount of botnets around today.
1
vote
0answers
155 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
2
votes
1answer
319 views

Server side validations for file upload to prevent DoS on HTTP server

I am aware that client side validations can be easily bypassed by means like disabling javascript. I would like to know the things to be checked while doing a server side validation for file upload. I ...
3
votes
2answers
148 views

DoS attacks and bitcoin

I was wondering what the repercussions were if a Bitcoin exchange or website that holds bitcoins were to succumb to a DoS attack. In my understanding, all a denial-of-service attack does is deny ...
1
vote
1answer
2k views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
8
votes
1answer
632 views

How is DDoS possible if you're not listening to the DoS traffic?

I've read about DDoS attacks and specially the amplification techniques. For example, the DNS amplification technique where you can send queries to open resolvers pretending to be the victim, then [if ...
1
vote
1answer
302 views

Could a large amount of wget requests be viewed as an attack?

I'm working on a program that downloads and analyzes historical stock data from Yahoo Finance. I download the data in my program by using the wget command. I have a list of about 3,000 stock symbols ...
3
votes
2answers
108 views

Content management url security

I manage a website that is a "bad magnet" for our competitors. I am using Incapsula CDN + WAF and I have internal proxy for caching. CMS/WP from its nature is very data consuming, I have check that,...
8
votes
1answer
606 views

Can/do botnets brute force “high value” users of services like Gmail?

On an intranet a login is generally disabled after a very small number of failed logins. But a public email service like Gmail can't do the same, otherwise pranksters would just be continuously ...
5
votes
3answers
451 views

DoS by consuming all hosting trafic

Given a small website hosted on a small data plan, is it possible for someone to keep doing requesting for my website URL or just an image hosted on my website that will consume all my permitted ...
1
vote
2answers
88 views

Hosting multiple websites on the same server - Prevention from DoS

I have an server which contains around 4 instances hosted on it. I am aware that if a DoS attack happens on one of the instances it will take down all the other instances too. How to prevent such a ...
0
votes
3answers
181 views

DoS on an ordinary IP [duplicate]

So, I understand DoSing to an HTTP Server. I understand Layer 7 DoS attacks and how to even make these work. But what for an normal IP that isn't HTTP and is connected to the internet. Is the only ...
-1
votes
1answer
96 views

What anti-DDoS solutions for Windows are there?

I would love to know, If there is a way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the almighty iptables, but I wonder if there an equivalent for Windows.
11
votes
4answers
3k views

How does HTTPS help websites under DoS attacks

From time to time one of the websites I browse regularly becomes a victim of a DoS/DDoS attack and usually they solve the problem by switching to https. I cant see the connection between the attack ...
1
vote
1answer
174 views

Slow HTTP DoS Mechanics

Our firewall detected and blocked a Slow HTTP DoS the other day. There were only a few attempts in the log. It wasn't a full on attack (there would be more traffic). My question is...if I'm an ...
1
vote
1answer
94 views

Is it possible to build a web-service which is immune to DOSes?

I heard that a service I'm using on the web has some problems with denial of service -attacks. I was wondering if it is theoretically possible to build a web-services where user can send data and ...
16
votes
5answers
3k views

What is the difference between login throttling and temporary account lockout?

I am currently working on the redesign of a login page. I have initially suggested that login be throttled whereby pauses (incremental - in number of seconds) are introduced between each failed login ...
4
votes
2answers
501 views

If I send 4mbps of data to a friend with 4mbps connection, will I DoS him?

Suppose my friend has a connection of 4mbps. If I just send him 4mpbs of random data with my server, wouldn't it block his connection? Even if the router has firewalls and closed ports, isn't enough ...
4
votes
3answers
24k views

Is it safe to ignore DoS attacks on my router?

There are several entries in my router's log file showing recent DoS attempts on some of its ports. They look like this: [DoS Attack: ACK Scan] from source: 213.61.245.234, port 80, Friday, November ...
5
votes
2answers
4k views

How could a SYN flood affect a home router

I was curious how a DoS attack would affect a home router. In particular, I'm interested in how a SYN flood would affect a home router. The reason I'm interested is due to a Cisco document I read. ...
4
votes
1answer
818 views

HTTP attack taking down PHP-FPM [closed]

Someone started attacking my site a few minutes ago and its caused PHP-FPM to max out all cores (4) on my vps and NGINX is now serving 502 to all users. I'm seeing a bunch of these requests with tons ...
4
votes
2answers
1k views

How web application firewalls protect application from DDoS attacks?

How to protect a web application from DDoS by the implementation of Web Application firewalls? How effective is this method?
4
votes
1answer
2k views

Can this be a DoS Attack?

When I'm checking my log, I found like 15k events of " PAM service(sshd) ignoring max retries; 6 > 3 " I know this might be normal, and considered as Brute-Force attack, but can it be classified as ...
-1
votes
1answer
191 views

Can the attacker launch a sufficiently large SYN flood to overwhelm the victim's server?

Suppose that the victim's web server infrastructure can process 200,000 TCP connection requests per second. Assume that a single connection request (TCP initial SYN) requires 40 bytes to transmit. The ...
0
votes
1answer
293 views

distinguish between bots and legitimate clients [closed]

If an attack (DoS & DDoS) involves thousands of bots, how can the server distinguish them from legitimate clients?