1

What are some tools or techniques that could be used in external network penetration testing to perform safe scans only that are designed to cause no DoS (Denial of Service) or other interruptions? Or what points should one have in mind?

The scenario is:

External pen test for 20 servers & 150 workstations on the internal network and pen test network perimeter & all public-facing systems.

2
  • 2
    Any tool designed to cause absolutely no DoS at all in every conceivable situation would have to be completely passive. And a completely passive approach will probably miss most of the vulnerabilites.
    – nobody
    Commented Jul 15, 2021 at 18:35
  • No matter how slowly are carefully you scan if actively send something to a server you may hit a bug at any time and thus causing a service interruption. For software that bases on commons well established products like web servers the chance is low but not zero.
    – Robert
    Commented Jul 15, 2021 at 18:56

1 Answer 1

1

Some industrial control systems (ICS) are known to be very sensitive and easily disrupted by uncommon probes. I think that even in a black box scenario you are entitled to ask what type of environment you are expected to test (at least get a rough idea). If availability is an issue, then it is crucial to establish a line of contact with your customer to address possible emergency situations should they arise.

To avoid DDOSing, the most obvious is of course not to flood the network with millions of packets. That should not be necessary anyway, unless you are probing the /8 network of a big corporation.

Then, understand what you are doing. If for example you are using nmap with default options, figure out what it does and does not, how many packets are issued per seconds and how they are crafted. The documentation is there for you, and you can also do simulations and analyze the resulting network traffic with tools like Wireshark.

That being said, even if you generate unusual traffic it is quite unlikely that your actions will crash remote services. If you send tons of traffic, that's another story, your actions may cause temporary unavailability but not necessarily a crash.

Last but not least: if you are a professional pentester, you should maybe purchase insurance to cover professional risk and unforeseen damages (it can also provide reassurance to prospective clients).

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .