5

Is there a way to DDOS my web app through jMeter? Can anyone DDOS with a simple PC?

I couldn't find any answer here. I would appreciate if anyone could help me out.

7

DDOS (Distributed Denial Of Service) implies that the attack is distributed, meaning from many sources. So by definition, one cannot DDOS from a single source. If the traffic came from one source it would be a DOS (Denial Of Service) attack.

Yes, someone could possibly DOS you from a single source but it would have to be a very powerful server to bring down your web app (Depending obviously on the safeguards you have in place and the design of your web app).

The whole thing about DDOS is that it is able to direct a lot more traffic at your server since the traffic comes from multiple sources (Like an NTP server or misconfigured DNS server).

A more relevant question would be: If someone did DOS me, would I be able to identify the source and stop the flow of traffic and how?

4

Yes they could. JMeter is distributed - the load can be injected by multiple slave servers controlled by the master controller server making it possible for a DDoS attack to be executed:

JMeter

This diagram shows a local IP range, but there is no reason that this could not be distributed over the internet. This means that a single, powerful sever is not needed.

Information from this doc: JMeter Distributed Testing Step-by-step.

2

if it is a layer 7 (d)dos and your application is badly designed or eats up resources quickly, then, yes it is possible to dos your server with a simple perftest-tool.

oh, and the good thing is: you can test yourself.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.