Skip to main content

Questions tagged [denial-of-service]

Denial of Service (DoS) is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) by flooding a target with useless packets, connections or tasks.

35 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers
923 views

Protection against JPEG compression bombs

There is a well-known threat named compression bombs. Such image formats as PNG and JPEG use compression methods, and therefore and in theory PNG/JPEG images might be a compression-bomb. I've found an ...
salazar324's user avatar
4 votes
0 answers
343 views

How does proper use of session.use_only_cookies and session_regenerate_id() cause personal DoS?

From PHP Session Management basics: Proper use of session.use_only_cookies and session_regenerate_id() can cause personal DoS with undeletable cookies set by attackers. In this case, developers may ...
Kyoma's user avatar
  • 141
3 votes
0 answers
196 views

How is satellite uplink secured from DOS attack?

How satellite communication is secured from Denial of Service attack on up-link frequency as anyone can create interference?
Ali Asad Sahu's user avatar
3 votes
0 answers
432 views

Memory and CPU usage during a denial of service attack. How to understand the data?

The Debian crontab file that is a web server Apache has the line: */2 * * * * echo -e "`date`\n\n`free` \n\n`vmstat`\n" >> /home/hacker/free_vmstat_output.txt I ...
Laurinda Souza's user avatar
2 votes
0 answers
122 views

Discovery Service as a Trust Anchor for P2P Network?

Context I'm designing a P2P network with a central Discovery Service (providing core info about every platform in the network) but no centralised Auth server. OAuth 2.0 and OpenID Connect will be used ...
joannaW's user avatar
  • 21
2 votes
0 answers
360 views

Preventing DoS Attacks on NFC

There are some attack scenarios on NFC. These include e.g. Data modification, data insertion, relay attacks and DoS attacks. Just to name a few. While some of these attack scenarios are more likely ...
P_Gate's user avatar
  • 121
2 votes
0 answers
154 views

How feasible would forced unpairing of paired bluetooth devices be?

What are the possible ways an attacker could force two paired devices to unpair? What it be any different for classic bluetooth and bluetooth smart?
Lew Wei Hao's user avatar
2 votes
0 answers
169 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...
Charles's user avatar
  • 258
2 votes
0 answers
237 views

Router reporting DoS-Attack from rival provider

In my (netgear) routers logs there are entries like the following, often multiple times a second since quite some time. [DoS Attack: RST Scan] from source: 80.218.64.172, port 10646, Tuesday, ...
Marius Schär's user avatar
2 votes
0 answers
3k views

Ping Of Death reconstruction against a Windows 95 virtual machine

For the sake of demonstration, I'm trying to perform a Ping Of Death sent from a Kali Linux virtual machine to a Windows 95 virtual machine (vmware) on a private network. I've set both vms correctly, ...
mak's user avatar
  • 121
1 vote
0 answers
84 views

What are the security concerns from failing to unpin memory?

I am trying to understand the implication of CVE-2023-40791. The CVE reads: "Linux kernel before 6.4.12 fails to unpin pages in certain situations". NetApp says this could lead to ...
Munazh's user avatar
  • 11
1 vote
0 answers
201 views

Dos and DDos attacks in UAV

Are modern-day UAVs secured from Dos or DDos attacks? Most of the drones available in the markets are easily hackable with the help of Dos attacks be how secure the UAV-GS authentication is. Moreover, ...
Turing101's user avatar
  • 111
1 vote
0 answers
237 views

How susceptible are JWTs to being used for denial of service?

Consider an API that requires a JWT for authorisation. For each JWT presented, it has to validate the signature, including base64 decoding, hashing and asymmetric encryption, which is stated noted as ...
Tony's user avatar
  • 178
1 vote
1 answer
249 views

Possible ways to intrigue IP blockage on practical websites

Assume that I share the same IP address with others. Then if I can do something bad to intrigue practical websites, such as Google, Amazon, or jQuery to block me, then all other users will also be ...
dovod74538's user avatar
1 vote
0 answers
151 views

Suppose a mischievous coffeeshop wifi gateway wants to drain phone batteries

Suppose a mischievous coffeeshop wifi gateway wants to drain phone batteries. It is easy to see how it might weaken signals and flip a few bits to wreak NAK havoc at the link level so wifi chip power ...
bobuhito's user avatar
  • 240
1 vote
0 answers
151 views

Preventing DoS and flooding attacks on wireless MANET network

How can I prevent DoS/flooding attacks on a wireless MANET network?
user958473's user avatar
1 vote
0 answers
260 views

Regex DoS: Is OWASP's characterization of "evil regexes" complete?

OWASP defines "evil regex" (here) as follows: Evil Regexes A Regex is called "evil" if it can stuck on crafted input. Evil Regex pattern contains: Grouping with repetition ...
Shuzheng's user avatar
  • 1,267
1 vote
0 answers
241 views

WiFi Channel 6 unusable, but no other AP on Channel 6

There is a single MAC address broadcasting a vast amount of QoS packets on channels between 3 and 9. Is this a DoS attack? The access point that MAC address is associated with says its on channel 1. ...
SkyPi's user avatar
  • 29
1 vote
1 answer
195 views

Can a process be DoSed by interfering with its compare-exchange loops?

Consider a file accessed by multiple processes; the processes map the file to memory and then use lock-free operations to synchronize (for example, use atomic-add to allocate an offset in the file to ...
avakar's user avatar
  • 111
1 vote
0 answers
355 views

DoS attack to device not connected to WiFi

I would like to know if there is any attack to DoS a device (NOT AN AP) that is not connected to any WiFi network. Using Probe Request frames I can obtain the MAC address. I can't 802.11 deauth ...
elena.bdc's user avatar
1 vote
1 answer
1k views

How to test DOS attacks through Router?

One of my clients has been told by their ISP that a DoS attack has happened and they have provided the logs of Juniper router. What is the criteria in routers on which we can confirm DoS attack is ...
santosh407's user avatar
1 vote
0 answers
1k views

Snort not showing dropped/blocked packets

This question is about SNORT- I m basically trying to detect PING FLOOD attack. I have included the rule**(drop icmp any any -> any any (itype:8; threshold, track by_src, count 20, ...
NEENU's user avatar
  • 83
0 votes
0 answers
191 views

How can I verify that my DoS attack is effective?

I was trying to simulate a DoS attack on the CORE network emulator using hping3 (Ubuntu). The topology is like three PCs connected by a router. The client's IP is 10.0.0.20/24, The server's IP is 10.0....
Harsha Gangari's user avatar
0 votes
0 answers
91 views

Hardened BitTorrent? DoS vulnerabilities?

Is there much information about hardening libtorrent usage, or perhaps other bittorrent flavors? I'm curious about denial-of-service attacks in particular. I could narrow down the bittorrent protocol ...
Jeff Burdges's user avatar
0 votes
0 answers
225 views

DoS attack in my home router's logs

I logged in to my router to try to figure out why my phone randomly keeps being unable to connect to my WiFi. I looked in the logs and saw 2 strange rows: [DoS attack: IP packet w/MC or BC SRC addr] ...
whatwhatwhat's user avatar
0 votes
0 answers
110 views

What is the greatest factor in DoS network flow connection tempo?

I'm conducting some research on botnet detection. I'm specifically looking at Zeek/Bro connection logs (so network flows). I was wondering what affects the tempo of the succession of network flows ...
Charles Gallagher's user avatar
0 votes
0 answers
421 views

slowhttptest showing up as service unavailable, but is inaccurate service still up and running

I've got a small contract with a website; they have given me permission to stress test their website, testing for DOS attacks. I have some experience in the field, but I am no omniscient hacker. I'm ...
schizosavant's user avatar
0 votes
0 answers
161 views

Entrypoint on webapp allows semi-arbitrary data to be written. Can it be considered as DoS?

My team and I have written a web app, and we had a bug report regarding a DoS vulnerability. This vulnerability, requires a basic account to be created and allows this user to inject semi-arbitrary ...
Simon R.'s user avatar
0 votes
0 answers
108 views

Is it safe to pass user input through rails gsub?

Are there risks associated with using gsub on user input? Can it be used for regular expression DoS?
Tim Abell's user avatar
  • 101
0 votes
0 answers
341 views

what kind of attack is this

Im developing a website on test server and so when debugging some stuff I had to look in access log, this is a small chunk of what I saw: 37.99.49.203 - - [13/May/2019:17:51:34 +0200] "H\x1E\xF3qxZ\...
reckoner's user avatar
0 votes
0 answers
165 views

Can jumping to a new SSID be a solution for flood attacks?

If an attacker can access inside my network in any way and make a UDP or ICMP flood attack on any point of the network (server, client or router), can I prevent this attack transiently with jumping on ...
user3241429's user avatar
-1 votes
1 answer
104 views

Validation issue in name field causes the page to hang

I am using a webpage that doesn't have validation for name field. If I give any special characters, the page just becomes unresponsive. Though the captcha times out after some time, the request still ...
user2455158's user avatar
-1 votes
2 answers
825 views

SYN-flood to the localhost Apache server

I've set up the apache server on localhost (127.0.0.1). I've downloaded PackETH to perform a DoS attack. So PackETH wants MAC-HEADER of the destination and source. And I don't know, where to find ...
Elvin's user avatar
  • 123
-1 votes
1 answer
458 views

Which protocols are the most secure to achieve authentication and encryption for a client downloading data from a sever?

I'm new to Information Security so please bear with me if this question is quite trivial. I want to design a secure protocol that allows someone to download a piece of data that belongs to them from ...
user3396592's user avatar
-2 votes
1 answer
380 views

What anti-DDoS solutions for Windows are there?

I would love to know, If there is a way to mitigate DDos/Dos attacks on Windows. In Linux we can Mitigate using the almighty iptables, but I wonder if there an equivalent for Windows.
Ammar Brohi's user avatar