Questions tagged [denial-of-service]

Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

Entrypoint on webapp allows semi-arbitrary data to be written. Can it be considered as DoS?

Me and my team have written a web app, and we had a bug report regarding a DoS vulnerability. This vulnerability, requires a basic account to be created and allows this user to inject semi-arbitrary ...
0
votes
0answers
37 views

How to understand the SYN-cookie technology's SYN to Server? [closed]

The snapshot is about syn-cookie technology: How to understand the Server' and Client' in this snapshot? Whether the Client':SYN is the second time initial SYN of Client? or is Client's first time ...
0
votes
0answers
46 views

Difference between in Integer overflow, buffer, stack, heap and cache overflow and the nuance in criticality regarding the system [closed]

I want to know the difference between these from a practical point of view: buffer overflow stack overflow Heap overflow and integer overflow cache overflow Thanks in advance!
0
votes
0answers
45 views

Is the half_md4 dirent hashing algorithm a security problem in ext* filesystems?

half_md4 does not look a very strong hash for me, although googling for it does not reveal too much. I suspect, the directory entries could be organized by a half_md4 hashed hash table. If it is so, ...
0
votes
4answers
130 views

How to identify IP from a UDP-based DoS

I'm running a Counterstrike server on UDP port 27015. I'm using Amazon AWS to host the game server. I have added only my friends' IPs (about 50 of them) into a security group so the rest of the ...
0
votes
1answer
47 views

Calculate pps for DDoS evaluation

I am working on a task where I have to evaluate how much throughput one can generate in packets per second. I know I can send them as fast as possible with hping3 [...] --flood, but is there a way to ...
0
votes
0answers
47 views

Network overload due to attack [duplicate]

My hosting provider (ovh) recently blocked my VPS due to some attack on the server. When I restored it to the normal mode, I can see indeed something is happening: the access to server is limited, ...
0
votes
4answers
433 views

Password hashing that is resistant to ASIC-assisted cracking without risking DoS of server

Previously, authentication systems stored passwords in cleartext. This made it trivial for an attacker to log in to an account if he had access to a leaked password file. Later, passwords were hashed ...
1
vote
2answers
72 views

Does a DDOS attack on an application using CDN have to first bring down all the involved CDN servers to affect the application's availability?

CDN are said to absorb and mitigate the Denial of Service and DDOS attacks. Consider an application that uses a CDN provider to deliver its content. So if an attacker tries to bring down such an ...
0
votes
1answer
48 views

Can an ethernet device plugged into a switch block all the other ethernet devices?

And if so, what protections are available against this kind of thing?
2
votes
0answers
72 views

Preventing DoS Attacks on NFC

There are some attack scenarios on NFC. These include e.g. Data modification, data insertion, relay attacks and DoS attacks. Just to name a few. While some of these attack scenarios are more likely ...
2
votes
1answer
347 views

Are these log messages in my nginx server evidence of an attempted attack?

My AWS Elastic Beanstalk server is often reporting Environment health has transitioned from Ok to Severe. 100.0 % of the requests are erroring with HTTP 4xx. This happens almost daily for a few ...
1
vote
0answers
72 views

Is Slowloris traceable? [closed]

When someone launches a slowloris attack on a website, could that attack be traced via IP? Could someone feasibly locate the IP of the person that launches said attack?
1
vote
0answers
69 views

Preventing DoS and flooding attacks on wireless MANET network

How can I prevent DoS/flooding attacks on a wireless MANET network?
0
votes
1answer
98 views

What type of vulnerabilty is this?

I'm testing a website: https://this-site.com/path/to/dirs but what i've found is if I do the following below the site will load 4 pages in a infinite loop https://this-site.com/path/to/dirs/.../. ...
1
vote
1answer
238 views

Client reconnects during deauthentication attack

During my first deauthentication attack the client I targeted was disconnected from the wireless network, however I was able to reconnect the client to the network even though aireplay-ng was still ...
1
vote
1answer
48 views

UDP amplification: length(response_packet) < length(request_packet)

I was researching the GitHub DDoS attack of 2018, in which memcached UDP amplification was used. I noticed that a GitHub blog post referenced a CloudFlare post which described memcached-based UDP ...
0
votes
0answers
31 views

Is it safe to pass user input through rails gsub?

Are there risks associated with using gsub on user input? Can it be used for regular expression DoS?
1
vote
0answers
93 views

Regex DoS: Is OWASP's characterization of “evil regexes” complete?

OWASP defines "evil regex" (here) as follows: Evil Regexes A Regex is called "evil" if it can stuck on crafted input. Evil Regex pattern contains: Grouping with repetition ...
0
votes
2answers
106 views

infinity redirection as Dos Attack

I was wondering that infinite redirection could be used as a dos attack in my case, I have this test.php <?php $url = $_GET['url']; header('Location: '.$newURL); ?> ...
0
votes
1answer
55 views

Failed logins on a windows server - performance impact?

I have recently started analysing our logs and noticed 600-700 failed login attempts per day against a windows 2016 server hosting some shared files. I know what the cause is (another misconfigured ...
-1
votes
1answer
41 views

Validation issue in name field causes the page to hang

I am using a webpage that doesn't have validation for name field. If I give any special characters, the page just becomes unresponsive. Though the captcha times out after some time, the request still ...
1
vote
3answers
299 views

What websites would I be allowed to DoS?

I recently wrote an automated DoS script and was wondering 2 things: Would I be allowed to use it on hackthissite.org? Would I be able to make a Wix site and use it on that?
-1
votes
1answer
264 views

Is Windows 10 Vulnerable to IPv6 Router Advertisement Flooding?

In a DEFCON 19 video Sam Bowne says that windows 7 machines CPU goes to 100% if you send a bunch of IPv6 Router Advertisement requests on a network. What would happen to a Windows 10 machine? Would it ...
0
votes
0answers
180 views

what kind of attack is this

Im developing a website on test server and so when debugging some stuff I had to look in access log, this is a small chunk of what I saw: 37.99.49.203 - - [13/May/2019:17:51:34 +0200] "H\x1E\xF3qxZ\...
0
votes
2answers
463 views

Billion Laughs Attack (XXE) - how does it work

Hi all Im trying to understand how the billion laughs attack works(https://en.wikipedia.org/wiki/Billion_laughs_attack) So far I get its obviously sending this payload: <?xml version="1.0"?> &...
4
votes
1answer
628 views

How do you prevent/guard against a wireless disassociation attack [duplicate]

Going over the security+ lectures by professor Messer here, he explains and demonstrates a wireless disassociation attack very well. But no where in the video does he explain how this type of attack ...
4
votes
2answers
293 views

Why were hyperlink auditing pings used for DDoS attacks and not any other requests?

A few days ago this new story has been published: Researchers have found that the HTML feature called hyperlink auditing, or pings, is being used to perform DDoS attacks against various sites. This ...
2
votes
0answers
148 views

WiFi Channel 6 unusable, but no other AP on Channel 6

There is a single MAC address broadcasting a vast amount of QoS packets on channels between 3 and 9. Is this a DoS attack? The access point that MAC address is associated with says its on channel 1. ...
1
vote
1answer
104 views

Question about hping3, TCP and ngrok

I have set up a experimental setup which consists of: Windows PC with ethernet cable; Arduino shield (connected to Windows machine with USB) with LTE connectivity sending data using TCP/IP to ngrok; ...
0
votes
1answer
56 views

Can a process be DoSed by interfering with its compare-exchange loops?

Consider a file accessed by multiple processes; the processes map the file to memory and then use lock-free operations to synchronize (for example, use atomic-add to allocate an offset in the file to ...
0
votes
1answer
3k views

Detect / Prove and Prevent Wifi Deauth attack

I'm suspecting that my neighbor is running multiple Wifi deauth flood attacks against my Wifi. I'm using WPA2 and I don't think he can really crack my password, but my devices keep having wifi ...
0
votes
1answer
2k views

Snort rule for syn flood attacks - Limiting number of alerts

So I have a snort rule that detects syn flood attacks that looks like this: alert tcp any any -> $HOME_NET 80 (msg:”SYN Flood - SSH"; flags:S; flow: stateless; detection_filter: track by_dst, ...
0
votes
0answers
69 views

Can jumping to a new SSID be a solution for flood attacks?

If an attacker can access inside my network in any way and make a UDP or ICMP flood attack on any point of the network (server, client or router), can I prevent this attack transiently with jumping on ...
1
vote
1answer
198 views

Is this regular expression vulnerable to DoS?

FindBugs flagged the following email address validation regex as vulnerable to DoS: ^[\w!#$%&'*+/=?`{|}~^-]+(?:\.[\w!#$%&'*+/=?`{|}~^-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,6}$ Here's an easier ...
2
votes
4answers
2k views

What is the difference between an SYN-Flood attack and an SYN-ACK-Flood attack?

What is the difference between an SYN-Flood attack and an SYN-ACK-Flood (SYN Reflection) attack?
57
votes
7answers
12k views

Does it make sense to consider a triggerable server software crash a DOS attack?

I've found a little vulnerability in a web application running on Node.js server. It works by sending some crafted payload to the application server, which makes the application server code to throw ...
1
vote
2answers
110 views

Risk and probability from CVE

How can I find risk and probability from CVE (https://cve.mitre.org/)? I read an article and it says (pg 14), The cost is derived from the attack tree, and risk and probability are based on CVE ...
1
vote
1answer
297 views

How fill up a gig interface bandwidth with hping3?

I've been trying to test our software against DOS attacks. So, I used 'HPing3' but it just fills up 10-11M of my interface's bandwidth! I ran the tool 40 times, I mean 40 hping3 processes, ...
1
vote
1answer
99 views

lan-side denial of service affecting target's CPU performance

Why does a LAN-side UDP flood take up the target's CPU resources and make it sluggish? i.e: the mouse doesn't respond properly, opening an application is slow... Note: The computers are both ...
0
votes
1answer
103 views

Types of firewalls to implement to reduce DoS attacks in POS systems

Would you need an internal, external and a host-resident firewall for each POS client?
1
vote
1answer
572 views

Nginx: mod-security rule for http slow DoS attack

The only related rule in mod-security for slow DoS is modsecurity_crs_11_slow_dos_protection, and it's for Apache only. Is there a rule for Nginx?
1
vote
1answer
73 views

Addressing availability element of CIA triad using technical controls

When looking at the availability element of the CIA triad, most definitions mention that availability is addressed through ensuring system up-time by using controls such as disaster recovery, business ...
2
votes
1answer
482 views

Is there a multi-layered DoS protection which can be tightly integrated with cloud hosting services?

I know that one can deny services (DoS) in any of the 7 layers of the OSI model and that in principle, a denial can be done by a single entity (human or machine) or from 2 or more such entities ("...
2
votes
2answers
636 views

Account lockout to protect from brute force: doesn't it open up vulnerabilities to DOS attacks? [duplicate]

AFAIK the recommended practice to mitigate brute force attacks is to lock an account down for, say, 15 min (perhaps escalating lockout time if the attack continues afterwards?) after, say, 5 failed ...
0
votes
1answer
1k views

How to identify a Ping of Death attack by analyzing its packet in Wireshark? [closed]

I've tried researching it for a long while, but came out dry.
0
votes
1answer
259 views

Are NTP servers without monlist still dangerous?

I've been studying DOS flood attacks, namely NTP and DNS floods. I know that monlist is the primary factor in launching these sorts of attacks, but I have one question. The problem is are these ...
4
votes
3answers
3k views

Threshold for DDOS Attack

I am trying to understand and simulate SYN Flood DDOS attacks. I am using snort to give me alerts. While I have control over the rate for my testing, I am interested in knowing what a good estimate of ...
2
votes
0answers
97 views

How is satellite uplink secured from DOS attack?

How satellite communication is secured from Denial of Service attack on up-link frequency as anyone can create interference?
3
votes
1answer
13k views

Is Mailbait still a threat?

Is Mailbait (or similar services) still a threat, was it ever a threat, and if so how can it be mitigated? Mailbait is that service that promises to fill up your email inbox by sending you a huge ...

1
2 3 4 5
8