Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks

learn more… | top users | synonyms (1)

0
votes
0answers
26 views

Slow Loris Get Request

From my understanding, a slow loris attack is an attack of incomplete GET requests to most famously an Apache server because the server does not timeout the connection made. GET / HTTP/1.1\r\nHost: ...
2
votes
3answers
485 views

Tracking IP address to prevent abuse without logging user metadata

I am trying to balance good security practices against excessive logging of user metadata / Personally Identifiable Information. I am constructing a web app that allows for secure messaging. In part ...
0
votes
0answers
51 views

DOS attacks on 802.11 access points

I want to carry out resource exhaustion attacks on access points which would lead to DOS condition of the access point. I would like to exhaust the client association table,by imitating a large ...
1
vote
1answer
48 views

Is DDOS more common than DOS?

Which attack takes place more often over the internet? I would have assumed DDOS due to the amount of botnets around today.
0
votes
2answers
67 views

Is this a DDOS attack?

I lost my internet connection for about 15 minutes and I checked my netgear router log and found these 3: [DoS Attack: ACK Scan] from source: 114.77.184.189, port 44822, Tuesday, March 24,2015 ...
0
votes
1answer
54 views

Hosting multiple websites on the same server - Prevention from DoS

I have an server which contains around 4 instances hosted on it. I am aware that if a DoS attack happens on one of the instances it will take down all the other instances too. How to prevent such a ...
-2
votes
0answers
40 views

What is the mechanism used by the ISP to avoid DoS attacks? [duplicate]

What is the mechanism used in the public networks or home networks to avoid DDoS or DoS attacks? How secure they are maintained by their ISP's.
1
vote
0answers
41 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
3
votes
2answers
81 views

DoS attacks and bitcoin

I was wondering what the repercussions were if a Bitcoin exchange or website that holds bitcoins were to succumb to a DoS attack. In my understanding, all a denial-of-service attack does is deny ...
2
votes
1answer
44 views

Server side validations for file upload to prevent DoS on HTTP server

I am aware that client side validations can be easily bypassed by means like disabling javascript. I would like to know the things to be checked while doing a server side validation for file upload. I ...
3
votes
1answer
58 views

Content management url security

I manage a website that is a "bad magnet" for our competitors. I am using Incapsula CDN + WAF and I have internal proxy for caching. CMS/WP from its nature is very data consuming, I have check ...
0
votes
2answers
80 views

DoS attack against a domain registrar and DNS provider

our smalltime registrar comes under DoS often who is also our DNS provider. If we switch our DNS provider, will it let us keep our domain afloat during an attack against the registrar, or do we have ...
0
votes
0answers
28 views

802.11w Protected Management Frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
8
votes
1answer
502 views

How is DDoS possible if you're not listening to the DoS traffic?

I've read about DDoS attacks and specially the amplification techniques. For example, the DNS amplification technique where you can send queries to open resolvers pretending to be the victim, then [if ...
0
votes
1answer
114 views

Identifying attacks by network activity

Is it possible (and how) to tell from a network dump if there is a buffer overflow attack, DoS or brute force attack? A DDoS would be more obvious to identify, but those attacks mentioned above I ...
0
votes
5answers
654 views

How a DOS TCP packet different from normal Packet?

a normal tcp packet shown in figure How a TCP packet that causes dos attack different from normal Tcp Packet?
0
votes
1answer
52 views

Could a large amount of wget requests be viewed as an attack?

I'm working on a program that downloads and analyzes historical stock data from Yahoo Finance. I download the data in my program by using the wget command. I have a list of about 3,000 stock symbols ...
-2
votes
2answers
93 views

DoS and Hacking [closed]

Based on the top rated answer to this question: Is showing your IP address in the URL a bad practice? I'm curious to know if a DoS attack is consider 'hacking' or simply an 'attack.' I think ...
5
votes
1answer
163 views

Can/do botnets brute force “high value” users of services like Gmail?

On an intranet a login is generally disabled after a very small number of failed logins. But a public email service like Gmail can't do the same, otherwise pranksters would just be continuously ...
5
votes
3answers
408 views

DoS by consuming all hosting trafic

Given a small website hosted on a small data plan, is it possible for someone to keep doing requesting for my website URL or just an image hosted on my website that will consume all my permitted ...
-1
votes
1answer
45 views

Mitigate DDos on Windows box

I would love to know, If you know some way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the IPTables Almighty, but I wonder If there is something like that in Windows. ...
0
votes
3answers
67 views

DoS on an ordinary IP [duplicate]

So, I understand DoSing to an HTTP Server. I understand Layer 7 DoS attacks and how to even make these work. But what for an normal IP that isn't HTTP and is connected to the internet. Is the only ...
10
votes
4answers
3k views

How does HTTPS help websites under DoS attacks

From time to time one of the websites I browse regularly becomes a victim of a DoS/DDoS attack and usually they solve the problem by switching to https. I cant see the connection between the attack ...
1
vote
1answer
64 views

Slow HTTP DoS Mechanics

Our firewall detected and blocked a Slow HTTP DoS the other day. There were only a few attempts in the log. It wasn't a full on attack (there would be more traffic). My question is...if I'm an ...
1
vote
5answers
5k views

Google: “Unusual traffic from your computer network”

I often happen to receive the message: "Unusual traffic from your computer network" while googling in Russian speaking countries. Google explains this with: You may see "Our systems have ...
1
vote
1answer
43 views

Locking an enterprise account from an internet facing application

Some corporate applications are most useful when they are accessible from the internet. Outlook Web Access comes to mind. Those application usually have a user directory (usually LDAP) in the ...
1
vote
1answer
87 views

Is it possible to build a web-service which is immune to DOSes?

I heard that a service I'm using on the web has some problems with denial of service -attacks. I was wondering if it is theoretically possible to build a web-services where user can send data and ...
1
vote
3answers
1k views

How to send GET/POST requests without header and agent information

I want to test our DOS prevention system against http requests that are not have header and agent information. Is there any tool I can do that. I tried siege with this command siege -c 3 -b -H ...
23
votes
4answers
7k views

Preventing artificial latency or “Lag Hacking” in multiplayer games

There is an attack that some people have dubbed "lag hacking", and its gaining popularity in multiplayer games. There are at-least two ways of creating artificial latency. One method of introducing ...
2
votes
1answer
201 views

Are COMET installations immune to “Slow TCP Reading” DoS on Windows? (Such as SignalR or WebSync)

My understanding is that COMET implementations of WebSync and SignalR do not directly use IIS and are a few layers lower on the ISO model. After reading Qualys's blog regarding slow TCP reading, I ...
14
votes
5answers
2k views

What is the difference between login throttling and temporary account lockout? [closed]

I am currently working on the redesign of a login page. I have initially suggested that login be throttled whereby pauses (incremental - in number of seconds) are introduced between each failed login ...
10
votes
1answer
4k views

How can I stop this DOS attack?

I have this entry appearing constantly in my router logs: [DOS Attack] : 5 [RST Scan] packets detected in last 20 seconds, source ip [xx.xx.xx.xx] They just never stop. It doesn't seem to affect ...
2
votes
3answers
5k views

Is it safe to ignore DoS attacks on my router?

There are several entries in my router's log file showing recent DoS attempts on some of its ports. They look like this: [DoS Attack: ACK Scan] from source: 213.61.245.234, port 80, Friday, November ...
5
votes
2answers
1k views

How could a SYN flood affect a home router

I was curious how a DoS attack would affect a home router. In particular, I'm interested in how a SYN flood would affect a home router. The reason I'm interested is due to a Cisco document I read. ...
3
votes
1answer
254 views

HTTP attack taking down PHP-FPM [closed]

Someone started attacking my site a few minutes ago and its caused PHP-FPM to max out all cores (4) on my vps and NGINX is now serving 502 to all users. I'm seeing a bunch of these requests with tons ...
3
votes
2answers
168 views

How web application firewalls protect application from DDoS attacks?

How to protect a web application from DDoS by the implementation of Web Application firewalls? How effective is this method?
4
votes
1answer
1k views

Can this be a DoS Attack?

When I'm checking my log, I found like 15k events of " PAM service(sshd) ignoring max retries; 6 > 3 " I know this might be normal, and considered as Brute-Force attack, but can it be classified as ...
0
votes
1answer
227 views

defend against LOIC Hive Mind attack

Other than client puzzles, what are some things a website can do to defend itself against a LOIC Hive Mind attack? The Low Orbit Ion Cannon (LOIC) is an attack tool which features a user-friendly GUI ...
0
votes
1answer
108 views

distinguish between bots and legitimate clients [closed]

If an attack (DoS & DDoS) involves thousands of bots, how can the server distinguish them from legitimate clients?
-1
votes
1answer
112 views

Can the attacker launch a sufficiently large SYN flood to overwhelm the victim's server?

Suppose that the victim's web server infrastructure can process 200,000 TCP connection requests per second. Assume that a single connection request (TCP initial SYN) requires 40 bytes to transmit. The ...
2
votes
1answer
117 views

What is this strange GET request (GET /A0A32579-2767) DoSed my apache?

I have apache behind nginx on my webserver. Today my apache stops answering to requests. Investigations shows this situation: 1) Number of apache processes grows more that 500 but MaxChildren=256 in ...
2
votes
4answers
2k views

How to detect bots clicking a link?

I own a url shortening service. I want to deliver only legitimate statistics to my clients. There are possible scenarios that a particular user writes a script to automatically open the shortened URL, ...
4
votes
1answer
402 views

How does a Distributed Denial Of Service Attack work

Let's assume that a hacker has already infected an X number of PCs , each one of them is online. How will he actually perform this attack? Just send ping requests or use his very precious tool to do ...
2
votes
3answers
131 views

Is opening a new mysql connection for each query potentially unsafe?

I am doing some unit testing and noticed that if I click (or have multiple people clicking) the same filter very very fast (very precise I know;) eventually I get a "The connection is already open." ...
2
votes
2answers
184 views

Does a self-signed certificate offer more protection than a public key?

I'm having a hard time finding the practical benefits of transmitting a self-signed certificate over simply a public key. I understand that a self-signed certificate proves the integrity of the public ...
6
votes
3answers
3k views

Can someone launch a DOS attack on my IP

Suppose, I have a static IP on my PC and is known to others. None of my softwares listen for remote connection. Is it still possible for someone to DOS attack me in such cases? If yes, how it is ...
3
votes
1answer
379 views

De-auth attack Reason codes and possible reaction

I am learning about Deauth attacks and how they work. I see that the Deauth frame has a reason code which indicates the reason for the deauth. I have tested the attack with aircrack-ng and this reason ...
1
vote
1answer
88 views

Could John Oliver be (inadvertently?) launching DOS attacks?

Occasionally on his show, John Oliver points his viewers to the comments section of websites for companies/organizations that have done something putatively nefarious. For instance, when he pointed ...
-1
votes
1answer
105 views

Whose resources does Maltego Footprint L3 exhaust? Mine or target's?

Maltego Footprint L3 says: This perform a level 3 (intense) footprint on a domain. It takes a while and it eats resources. Use with care. Whose resources do they refer to? My resources or the ...
3
votes
1answer
479 views

What is DDOS TCP KILL?

I've recently been introduced to Kali Linux's webkiller tool, located in the websploit category. It works on the concept of Tcpkill. I don't understand how the DoS attack with Tcpkill works. Can ...