Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [denial-of-service]

Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks

1
vote
1answer
70 views

Is Mailbait still a threat?

Is Mailbait (or similar services) still a threat, was it ever a threat, and if so how can it be mitigated? Mailbait is that service that promises to fill up your email inbox by sending you a huge ...
0
votes
0answers
33 views

SYN flood acting weird

I was playing around with SYN flood using tools like netwox 73 and hping3. In the process, I encounter a number of weird behaviors that I did not expect to see. All of my machines are set up with ...
6
votes
4answers
432 views

Most reduced types of DoS attacks

As I understand it, there are generally only two common types of Denial of Service attacks in regards to the OSI model: Network-Layer-DoS (NLDoS) on layers 3, 2 or 1. Application-Layer-DoS (ALDoS) on ...
3
votes
3answers
120 views

Is a DoS attack possible on a single home connection when the ISP uses NAT?

Today almost all ISPs use a NAT system to assign more people the same IP (at least where I am), probably because the IPv4 addresses are ending and they want to save money. Is it possible to make a DoS ...
-2
votes
2answers
214 views

Why is DDOS is one of the most common Cyber-Attack? [closed]

Based on some articles and some research DDOS is one of the most common cyber-attack. There are tonnes of articles out there about the DDOS subject, including describing, mitigating, the question "...
2
votes
1answer
106 views

Difference between DNS flood attack and DNS amplifier attack [duplicate]

I am trying to understand DNS flood and DNS amplifier attack. I have read the definition and am still confused, could you give me an example of each attack or tell me the differences between them? It ...
90
votes
6answers
16k views

Is it safe to let a user type a regex as a search input?

I was in a mall a few days ago and I searched for a shop on an indication panel. Out of curiosity, I tried a search with (.+) and was a bit surprised to get the list of all the shops in the mall. I'...
1
vote
1answer
139 views

How perform Ping Flood, Ping Of Death, and Teardrop on local network?

Is it possible nowadays to perform a Ping Flood, Ping Of Death, and Teardrop on local network? According to this article, these three attack are useless and out of date. I'd like to test this on my ...
1
vote
3answers
173 views

How to detect a DoS attack if today all use network address translation?

If a basic DoS attack can be handled by limiting the number of connections that occur in a interval of time with one IP and some enterprises and institutions use network address translation with many ...
0
votes
0answers
25 views

Fully patched Windows 2008 immediate BSOD from low privilege account

Is there any exploit/script/vulnerability where a very low privileged user can trigger a BSOD or reboot? I'm familiar with the USB exploit, but I'm wondering if its possible with some remote method? ...
0
votes
1answer
180 views

How to avoid XML vulnerabilities in Python?

I am writing a suite of Python 3 applications (including first a command line utility, second an HTTP(S) proxy) which deal with XML. Today I've discovered that there are several vulnerabilities ...
0
votes
0answers
27 views

DoS Service on moxa EDR-810

I'm in the process of configuring a Moxa EDR-810 router. I've done no work with DoS before and I'm trying to get an understanding of what is happening. The router gives options for Xmas scan and a ...
7
votes
3answers
401 views

A way to prevent non distributed, network-level DoS attacks?

I have a DigitalOcean Ubuntu 16.04 machine with Bash as main shell, Nginx, PHP-FPM, and MySQL as server environment, Certbot for TLS and WordPress for web applications. I protect from MITMs with TLS. ...
-2
votes
2answers
160 views

SYN-flood to the localhost Apache server

I've set up the apache server on localhost (127.0.0.1). I've downloaded PackETH to perform a DoS attack. So PackETH wants MAC-HEADER of the destination and source. And I don't know, where to find ...
-1
votes
1answer
165 views

What do DoS/ DDoS TCP SYN Floods and Layer 7/HTTP floods look like on a firewall log?

I am looking for some examples of log files for DoS or DDoS attacks that show a SYN Flood or a HTTP/Layer 7 Flood. I have had a google, but can't seem to find anything. Would the incoming packet ...
2
votes
1answer
75 views

Protecting WordPress from a single machine DoS (either in network/web level)?

I use a DigitalOcean Ubuntu 16.04 machine with Bash, LEMP and WordPress. I already did the best I can to protect the system and WordPress from BFAs and Backdoors, and to protect WordPress from DB ...
1
vote
2answers
56 views

Is DDoS a specific type of ALDoS

In a very broad terminology: I understand Application Layer Denial of Service (ALDoS) to be a 1 machine on 1 machine attack. I understand Distributed Denial of Service DDoS (DDoS) to be a 2 or more ...
6
votes
1answer
102 views

Web application set cookie based on a GET paramater. Is it vulnerable?

In my web application I take the GET paramater x and I store it in a cookie after URL-encoding it (so there is no HTTP response splitting). Some people say that this can be abused to cause DOS, but I ...
3
votes
2answers
178 views

Depleted DB User Connections leads to DoS

I want to ask you for clarification and advice regarding the following situation that emerged during a penetration test of my client's eCommerce shop. My client is using an xt:commerce shop software ...
-3
votes
2answers
144 views

Reverse DoS Attack [closed]

Is there anything on a computer or a router that prevents a hacker from doing a DoS on you. So let's say that you are going to https://www.google.com/. When you enter that in the search bar, it sends ...
3
votes
1answer
148 views

How to protect a website from DDoS without a CDN? [closed]

I have basic knowledge in Bash and with that knowledge I rented a remote machine in a mostly-self-managed hosting platform (DigitalOcean) and raised a LEMP environment on which I have a website. I ...
0
votes
0answers
257 views

How to determine DoS protection rates for firewall

I am looking to enable my Firewall's DoS protection, and when searching for values to put in the rate fields, am finding that the answer is usually "it depends". While there is almost always room for ...
9
votes
1answer
2k views

Difference between Amplification and Reflection Attack?

Reflection Attack: Reflection attacks are attacks that use the same protocol in both directions. The attacker spoofs the victim’s IP address and sends a request for information via UDP to servers ...
2
votes
2answers
62 views

Is it feasible to leverage DOS by triggering large numbers of application exceptions?

One key aspect of a DOS or DDOS seems to be to leverage the required computational power on the attackers side to maximize the impact on the target side. This wiki article lists many examples of such ...
5
votes
3answers
490 views

Does blocking an IP with IP Tables protect you from a DOS (not DDOS) attack?

I am fairly new to network security, and I just learned about the Fail2Ban framework you can use for automated exploit detection/prevention. It says that you can protect yourself from DOS attacks by ...
1
vote
0answers
141 views

DoS attack to device not connected to WiFi

I would like to know if there is any attack to DoS a device (NOT AN AP) that is not connected to any WiFi network. Using Probe Request frames I can obtain the MAC address. I can't 802.11 deauth ...
-6
votes
1answer
84 views

What resources does a SYN flooding attack try to exhaust? [duplicate]

In a SYN flooding denial of service attack, what resource is the attacker trying to exhaust? RAM? CPU?
3
votes
1answer
144 views

Is ping of death attack specific to ICMP or could it also happen with other transport protocols?

A Ping of Death attack is a denial-of-service (DoS) attack, in which the attacker aims to disrupt a targeted machine by sending a packet larger than the maximum allowable size, causing the target ...
1
vote
2answers
248 views

How to whitelist an IP, but prevent others from DoS attacks [closed]

I've a Windows Server 2016 and I want to allow unlimited incoming requests from some specific IPs, but prevent others from DoS attacks. I see RDP Defender but I'm not sure how good or safe it is to ...
0
votes
1answer
354 views

DoS testing as a part of penetration testing

I am doing penetration testing on web application in my local network. As a part of testing procedure I am planning to perform DoS testing. Because I am using just one PC I think that the only ...
3
votes
1answer
286 views

Can someone help me decipher what these netgear log entries mean? Am I getting hacked?

Can someone help me decipher what these log entries mean? Am I getting hacked? So this is my residential router is a netgear gateway C3700-100NAS with Spectrum Internet. Usually I have no problems. ...
3
votes
1answer
130 views

Does SMS flood cause denial of service even when “blocked”?

Imagine a SMS flood using a few phone numbers. The client blocks the phone numbers using the build in mechanism of the smart phone, and thus does not receive any notifications. Even though the user ...
-3
votes
1answer
54 views

Most resource intensive assembly instructions? [closed]

Assuming I want to overload a server which is running some kind of web-app or gaming server, what is the best way for me to figure out which usage of legitimate features on the web-app or gaming ...
2
votes
2answers
312 views

SSH protocol banner is a kind of DOS?

In my test environment with Python script I generate on a target server: SSHException: Error reading SSH protocol banner simply opening/closing a sufficient number of ssh connection. Is it ...
0
votes
2answers
133 views

The difference between DDoS attacks in the cloud computing and the traditional network infrastructure [closed]

Is there any difference between the DDoS attack in the cloud computing and traditional network in infrastructure? What are the important features for detection these types of attack in cloud ...
1
vote
2answers
362 views

Apache Access Log Indicates DOS Attack? Or any other attack? [duplicate]

Below is my apache access log. 175.139.240.59 - - [28/Jul/2017:23:42:50 +0000] "HEAD http://xx.xxx.xx.xxx:80/mysql/admin/ HTTP/1.1" 301 - ... 175.139.240.59 - - [28/Jul/2017:23:42:50 +0000] "HEAD ...
1
vote
1answer
1k views

DeAuth sent to router doesn't deauthenticate

I'm trying to perform a De-authentication attack on my wifi network. My command is: aireplay-ng -0 0 -a B8:A3:86:5E:9C:DC wlan0 The response looks like this: 20:35:59 Waiting for beacon frame (...
3
votes
4answers
513 views

How to prevent “TSource Engine Query” DDoS attack?

I recently started a game hosting company and one of my boxes is being hit very hard by what i believe is a botnet. We are getting thousands of IP addresses sending traffic to a port where a game ...
1
vote
2answers
133 views

How Can Someone Do A Denial Of Service Attack With JavaScript

I was recently reading this cloudfare article about JavaScript Denial Of Service and I didn't understand how it could work. From what I've learned JavaScript is a client side language and can't ...
2
votes
4answers
225 views

What damage can a MITM do to encrypted traffic, and what can be done about it?

Assume a server and a client that are each on physically secure, uncompromised networks. However, between each network is an attacker that is capable of viewing traffic. For example, two department ...
3
votes
0answers
325 views

Memory and CPU usage during a denial of service attack. How to understand the data?

The Debian crontab file that is a web server Apache has the line: */2 * * * * echo -e "`date`\n\n`free` \n\n`vmstat`\n" >> /home/hacker/free_vmstat_output.txt I ...
0
votes
3answers
490 views

Why are DDos-Attacks still possible?

There are so many Intrusion Detection Systems and systems that block IP Addresses with suspicous behavior. Everyone can use those systems, as many of them are free. But why is it then still possible ...
3
votes
1answer
87 views

Prevent automated account creation without using CAPTCHA

I had a scenario, where someone created thousands of user accounts in a shop system, which flooded the DB. Different usernames/emails were used and each creation came from a different IP address. How ...
5
votes
3answers
3k views

Is deleting files from a database considered a denial of service attack? [duplicate]

If i am able to access a database and delete all the files which a web app would read, would that be considered a Denial of Service attack? It is not a duplicate of the question in the following link ...
1
vote
1answer
53 views

Cannot reproduce MSF fuzzer results?

This is my first time asking for some support in my case. Please forgive me, as I am still learning... The scenario is really simple: Some device with HTTP server is being fuzzed by metasploit's ...
0
votes
2answers
186 views

Is captcha the only thing preventing endless account creation

I wonder whether or not there are mechanisms other than captcha that prevent a mallicious script from creating an indefinite number of accounts for a given service. If so, is this not a huge red flag, ...
0
votes
1answer
547 views

What is an “appropriate” request size limit for a web service?

Point 18.4 of the OWASP ASVS says Verify that all input is limited to an appropriate size limit. Currently i have an input limit of 50MB on all web services. (And it seems like this is the ...
2
votes
0answers
54 views

Can one single 10 GBPS server DOS a 1 GBPS server? [closed]

Let's say I own a 10 GBPS server, and my target owns a server with a 1 GBPS port. Assuming I don't just get ipblocked, I could choke up the bandwidth for 1 GBPS severs. I won't need any kind of botnet,...
2
votes
1answer
972 views

How to avoid DOS attacks on Wifi?

I learned from ethical hacking tutorial and tested following command about DOS on Wifi. aireplay-ng -0 0 -a [Wifi-MAC here] It works fine, but my question is how can we avoid such attacks?
1
vote
1answer
106 views

Is dns ddos protection enough for my website ddos protection?

If I hide my server's public IP and using a DDoS protection service such as CloudFlare or DYN, does it means that my website is safe from DDoS attacks? Or can an attacker conduct DDoS attacks that ...