Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks

learn more… | top users | synonyms (1)

1
vote
2answers
527 views

Can older or custom web browsers override the same origin policy?

I totally understand the basis of origin policy and the reasoning why all modern browsers have put this policy into place. My question I guess is, do older browsers support this, and if they don't, ...
1
vote
3answers
3k views

How does a DOS attack work when attacking a single server with a single client?

How is it possible to make a DOS attack from a single computer? Let us assume two computers, one acting as server and the other as client. Both has 100/100 mbit bandwitdh. How can then the client ...
1
vote
1answer
106 views

Could John Oliver be (inadvertently?) launching DOS attacks?

Occasionally on his show, John Oliver points his viewers to the comments section of websites for companies/organizations that have done something putatively nefarious. For instance, when he pointed ...
1
vote
2answers
222 views

do ISPs implement security measures?

For example, if a user is receiving a denial of service attack, with huge amounts of packets being sent to him to disrupt his service, will the ISP notice and stop the offending traffic? Another ...
1
vote
1answer
88 views

Dealing with a DDoS: horizontal vs vertical scaling?

I'm reading this paper about DDoS protection in AWS. One of the benefits of EC2 is that depending on the instance, it can scale for minimizing the effect of the attack. In the paper there are two ...
1
vote
2answers
177 views

Protecting server from bogus HTTP Requests

What would be the recommended approach to block those typical bogus HTTP requests that the server gets bombarded with? Also has this attack/nuisance been named yet or is it generalized as Bot Activity?...
1
vote
2answers
232 views

How to prevent Cookie-Bombs?

Egor Homakov made a nice writeup (Cookie Bomb or let's break the Internet) on how to crash CDNs and other websites with cookies. Although this is a user/browser-side DOS, I'm wondering how one would ...
1
vote
2answers
1k views

Secure against HTTP FLOOD ATTACK

What is the best way to defend your web site against HTTP FLOOD POST/GET ATTACK ?
1
vote
3answers
333 views

Mass account lockout prevention using CSRF tokens

I'm currently working on reducing the risk of mass account lockout on a site that (unfortunately) issues sequential, numeric user IDs. Changing the structure of the userID is not an option at this ...
1
vote
1answer
163 views

DoS and Serialization

I got the following message from Fortify static code analyser. Incorrect serialization and de-serialization can lead to unpredictable behavior and cause denial of service attacks. Can anyone ...
1
vote
2answers
70 views

OpenSSH DOS exploit proof of concept [closed]

For some research I'm looking for a working DOS exploit for OpenSSH. The OpenSSH version, vulnerable to the exploit is irrelevant. The only requirement that I have is, that the exploit should work for ...
1
vote
2answers
181 views

Is this a DDOS attack?

I lost my internet connection for about 15 minutes and I checked my netgear router log and found these 3: [DoS Attack: ACK Scan] from source: 114.77.184.189, port 44822, Tuesday, March 24,2015 19:...
1
vote
1answer
94 views

Is it possible to build a web-service which is immune to DOSes?

I heard that a service I'm using on the web has some problems with denial of service -attacks. I was wondering if it is theoretically possible to build a web-services where user can send data and ...
1
vote
2answers
520 views

How to avoid DDOS against Kerberos Authentication Server

I have a school project where i am supposed to implement a Kerberos based infrastructure (AS, TGS and resource server). It is already done and working, but i started thinking about how to protect the ...
1
vote
1answer
348 views

Possible DOS Attack? And solutions for it?

I don't know whether it's appropriate to post this question here but I desperately need help. I've been receiving ping requests from 18 different IP addresses so far. Some of them are local, some ...
1
vote
1answer
311 views

Which cloud providers can be used for the simulation of DDoS attacks? [closed]

Cloud providers have a great infrastructure to perform DDoS simulations. You can get thousands of virtual machines with different IP addresses, fully customizable with the tools you need for testing. ...
1
vote
1answer
127 views

How to know what's the type of an attack and from whom is sent?

I'm currently running a game server on a dedicated Windows 7 machine and it is being attacked. How do I know what kind of attack it is and from whom is sent? When he attacks, the RDP freezes and the ...
1
vote
1answer
69 views

How to successfully report DoS attack coming from a big ISP?

A few weeks ago I reported a small botnet which is coming from the network of a big Internet provider. They asked me for more details which I provided. But the attack is going for weeks already and ...
1
vote
1answer
130 views

How can one securely hash passwords server side while avoiding DoS?

It is generally recommended that one use a slow hash function to hash passwords. However, does this create a DoS risk?
1
vote
2answers
72 views

How can perpertrators of denial of service attacks, determine the impact their attack has had?

Although I know how a user could mitigate Dos attacks and detect their presence e.g. checking packets received and sent, comparing current CPU usage to normal, comparing network usage to normal etc. ...
1
vote
1answer
73 views

Denial of Service during scanning [closed]

As I know you can do Denial of Service when footprinting with scanners, like nmap or Maltego. But is it legal? As I know, scanning isn't illegal but doing DoS attacks is. EDIT I meant if you scan ...
1
vote
1answer
129 views

Is there an easy way to know if a regex is “evil”

I was reading this article (about ReDos). The examples they give are pretty simple but I'm sure such regex can hide everywhere. If there is any way to test if a regex is evil without spending a lot of ...
1
vote
2answers
88 views

Hosting multiple websites on the same server - Prevention from DoS

I have an server which contains around 4 instances hosted on it. I am aware that if a DoS attack happens on one of the instances it will take down all the other instances too. How to prevent such a ...
1
vote
2answers
126 views

Preventing a Computational DoS Attack in Public Key Cryptosystems

I'm designing a server which accepts anonymous messages using ECIES: as in, anonymous users send the server an ephemeral EC public key, and the server uses ECDH to derive a shared secret, and some KDF ...
1
vote
1answer
387 views

Root/Naked domain and DDOS

Some services like Github has DDOS mitigation measures for their root/naked domain, but not other subdomain(s). What so special about the root domain concerning the DDOS attacks? [1] http://...
1
vote
2answers
2k views

How to mitigate SIP Reflection Attacks?

SIP has a practical need to be widely available, but its services are prone to being spoofed as reflectors used in DDoS attacks. A freeswitch server I manage has seen heaps of registration requests ...
1
vote
1answer
133 views

How effective are firewall rate limiting rules for slowing down brute force and DOS attacks?

I am investigating methods to slow down the rate at which attackers can make brute force attempts against my webserver's SSH and HTTP services. I have come across many articles as well as the iptables-...
1
vote
1answer
97 views

DHCP Exhaustiation / Rogue DHCP interrupted by real DHCP NACK

I was trying to run a Rogue DHCP Server which should cause a MITM attack. I did the following Exhaust the real DHCP Server using DHCPig (worked) Run a Rogue DHCP Server using the auxiliary/server/...
1
vote
1answer
160 views

Strange IP's on my firewall log

Check the screenshot of my router firewall log below, I can see traffic originating from strange IP addresses to my public address. What are these? I've just setup this router few hours ago, am I ...
1
vote
1answer
73 views

Is DDOS more common than DOS?

Which attack takes place more often over the internet? I would have assumed DDOS due to the amount of botnets around today.
1
vote
1answer
2k views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
1
vote
1answer
322 views

Could a large amount of wget requests be viewed as an attack?

I'm working on a program that downloads and analyzes historical stock data from Yahoo Finance. I download the data in my program by using the wget command. I have a list of about 3,000 stock symbols ...
1
vote
1answer
178 views

Slow HTTP DoS Mechanics

Our firewall detected and blocked a Slow HTTP DoS the other day. There were only a few attempts in the log. It wasn't a full on attack (there would be more traffic). My question is...if I'm an ...
1
vote
1answer
88 views

DOS attack to increase packets received from a single request?

Is there any attack out there that can be implemented where a single request to a server i host for example responds by sending the same file say 20 times back ? the idea behind the attack is to DOS ...
1
vote
1answer
64 views

Locking an enterprise account from an internet facing application

Some corporate applications are most useful when they are accessible from the internet. Outlook Web Access comes to mind. Those application usually have a user directory (usually LDAP) in the ...
1
vote
1answer
1k views

Are my Snort rules correct?

I am trying to do a Snort demo and I though it would be nice to detect a real threat. I picked the sasser worm and the jolt/teardrop dos attacks for the demo; no particular reason. Out of the three ...
1
vote
2answers
86 views

Using pattern matching to make a port more secure

I am planning to make a web application deployed on a port more secure by detecting the pattern of the request an then comparing it with the patern next time that IP tries to connect.Any ways to move ...
1
vote
3answers
160 views

What are some good ways to prevent a malicious visitor from maxing out our customer's API maximum allowed service calls?

We run an API service. We gave our customer a package for max limit of 12000 API calls / day. He reported to us that a user has been on purposely visiting his web page 12,000 times a day in order to ...
1
vote
1answer
155 views

What types of hacking attacks happen alongside a DOS or DDOS attack? [closed]

I'm trying to find some good material on this topic for a paper I'm trying to write for class. Any and all help is very much appreciated.
1
vote
1answer
384 views

Is a multitenant web app built on Apache Cassandra more resilient against DoS attacks?

Imagine a multitenant web app that stores data in a Apache Cassandra cluster, with fairly many nodes. Now assume that: Mallory launches a DoS attack against one tenant. (Perhaps that tenant is a ...
1
vote
0answers
113 views

How to keep my VPS server up on Hulk.py attack

This question in not duplicated, I tried everything that was published on stackexchange websites, but could not fix my problem. I have a web server. OS: Ubuntu 15.10 Configured on Apache2 Ram: 1.5 GB ...
1
vote
0answers
88 views

Router reporting DoS-Attack from rival provider

In my (netgear) routers logs there are entries like the following, often multiple times a second since quite some time. [DoS Attack: RST Scan] from source: 80.218.64.172, port 10646, Tuesday, ...
1
vote
0answers
158 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
1
vote
0answers
1k views

Akamai or Incapsula (or other) for CDN with DDoS Protection? [closed]

One of our clients is launching a new site and I've been tasked with making a short overview of the advantages/disadvantages of Akamai, Incapsula or other CDN providers who are strong with DDoS ...
1
vote
0answers
2k views

Ping Of Death reconstruction against a Windows 95 virtual machine

For the sake of demonstration, I'm trying to perform a Ping Of Death sent from a Kali Linux virtual machine to a Windows 95 virtual machine (vmware) on a private network. I've set both vms correctly, ...
1
vote
0answers
647 views

Snort not showing dropped/blocked packets

This question is about SNORT- I m basically trying to detect PING FLOOD attack. I have included the rule**(drop icmp any any -> any any (itype:8; threshold, track by_src, count 20, ...
1
vote
0answers
541 views

Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid? [closed]

I was reading through some of this book on google: http://books.google.ca/books?id=qmdCs_Jf2AEC It is uploaded to a hungarian website here: http://denialofservice.uw.hu/index.html I was reading... ...
0
votes
5answers
1k views

How a DOS TCP packet different from normal Packet?

a normal tcp packet shown in figure How a TCP packet that causes dos attack different from normal Tcp Packet?
0
votes
3answers
567 views

Is it possible to “close” a port by dos'ing it?

If I see port 25 is open, but I dont have access to the program running the smtp server, could It be flooded with enough information to make it unusable (but not affect any other services)?
0
votes
1answer
838 views

defend against LOIC Hive Mind attack

Other than client puzzles, what are some things a website can do to defend itself against a LOIC Hive Mind attack? The Low Orbit Ion Cannon (LOIC) is an attack tool which features a user-friendly GUI ...