Questions tagged [denial-of-service]

Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks

Filter by
Sorted by
Tagged with
1
vote
2answers
57 views

Is DDoS a specific type of ALDoS

In a very broad terminology: I understand Application Layer Denial of Service (ALDoS) to be a 1 machine on 1 machine attack. I understand Distributed Denial of Service DDoS (DDoS) to be a 2 or more ...
6
votes
1answer
107 views

Web application set cookie based on a GET paramater. Is it vulnerable?

In my web application I take the GET paramater x and I store it in a cookie after URL-encoding it (so there is no HTTP response splitting). Some people say that this can be abused to cause DOS, but I ...
3
votes
2answers
194 views

Depleted DB User Connections leads to DoS

I want to ask you for clarification and advice regarding the following situation that emerged during a penetration test of my client's eCommerce shop. My client is using an xt:commerce shop software ...
-3
votes
2answers
298 views

Reverse DoS Attack [closed]

Is there anything on a computer or a router that prevents a hacker from doing a DoS on you. So let's say that you are going to https://www.google.com/. When you enter that in the search bar, it sends ...
3
votes
1answer
165 views

How to protect a website from DDoS without a CDN? [closed]

I have basic knowledge in Bash and with that knowledge I rented a remote machine in a mostly-self-managed hosting platform (DigitalOcean) and raised a LEMP environment on which I have a website. I ...
9
votes
1answer
4k views

Difference between Amplification and Reflection Attack?

Reflection Attack: Reflection attacks are attacks that use the same protocol in both directions. The attacker spoofs the victim’s IP address and sends a request for information via UDP to servers ...
2
votes
2answers
65 views

Is it feasible to leverage DOS by triggering large numbers of application exceptions?

One key aspect of a DOS or DDOS seems to be to leverage the required computational power on the attackers side to maximize the impact on the target side. This wiki article lists many examples of such ...
5
votes
3answers
869 views

Does blocking an IP with IP Tables protect you from a DOS (not DDOS) attack?

I am fairly new to network security, and I just learned about the Fail2Ban framework you can use for automated exploit detection/prevention. It says that you can protect yourself from DOS attacks by ...
1
vote
0answers
217 views

DoS attack to device not connected to WiFi

I would like to know if there is any attack to DoS a device (NOT AN AP) that is not connected to any WiFi network. Using Probe Request frames I can obtain the MAC address. I can't 802.11 deauth ...
-5
votes
1answer
148 views

What resources does a SYN flooding attack try to exhaust? [duplicate]

In a SYN flooding denial of service attack, what resource is the attacker trying to exhaust? RAM? CPU?
3
votes
1answer
246 views

Is ping of death attack specific to ICMP or could it also happen with other transport protocols?

A Ping of Death attack is a denial-of-service (DoS) attack, in which the attacker aims to disrupt a targeted machine by sending a packet larger than the maximum allowable size, causing the target ...
1
vote
2answers
483 views

How to whitelist an IP, but prevent others from DoS attacks [closed]

I've a Windows Server 2016 and I want to allow unlimited incoming requests from some specific IPs, but prevent others from DoS attacks. I see RDP Defender but I'm not sure how good or safe it is to ...
0
votes
1answer
697 views

DoS testing as a part of penetration testing

I am doing penetration testing on web application in my local network. As a part of testing procedure I am planning to perform DoS testing. Because I am using just one PC I think that the only ...
3
votes
1answer
502 views

Can someone help me decipher what these netgear log entries mean? Am I getting hacked?

Can someone help me decipher what these log entries mean? Am I getting hacked? So this is my residential router is a netgear gateway C3700-100NAS with Spectrum Internet. Usually I have no problems. ...
3
votes
1answer
198 views

Does SMS flood cause denial of service even when “blocked”?

Imagine a SMS flood using a few phone numbers. The client blocks the phone numbers using the build in mechanism of the smart phone, and thus does not receive any notifications. Even though the user ...
-3
votes
1answer
61 views

Most resource intensive assembly instructions? [closed]

Assuming I want to overload a server which is running some kind of web-app or gaming server, what is the best way for me to figure out which usage of legitimate features on the web-app or gaming ...
2
votes
2answers
625 views

SSH protocol banner is a kind of DOS?

In my test environment with Python script I generate on a target server: SSHException: Error reading SSH protocol banner simply opening/closing a sufficient number of ssh connection. Is it ...
0
votes
2answers
170 views

The difference between DDoS attacks in the cloud computing and the traditional network infrastructure [closed]

Is there any difference between the DDoS attack in the cloud computing and traditional network in infrastructure? What are the important features for detection these types of attack in cloud ...
1
vote
2answers
574 views

Apache Access Log Indicates DOS Attack? Or any other attack? [duplicate]

Below is my apache access log. 175.139.240.59 - - [28/Jul/2017:23:42:50 +0000] "HEAD http://xx.xxx.xx.xxx:80/mysql/admin/ HTTP/1.1" 301 - ... 175.139.240.59 - - [28/Jul/2017:23:42:50 +0000] "HEAD ...
1
vote
1answer
3k views

DeAuth sent to router doesn't deauthenticate

I'm trying to perform a De-authentication attack on my wifi network. My command is: aireplay-ng -0 0 -a B8:A3:86:5E:9C:DC wlan0 The response looks like this: 20:35:59 Waiting for beacon frame (...
4
votes
4answers
857 views

How to prevent “TSource Engine Query” DDoS attack?

I recently started a game hosting company and one of my boxes is being hit very hard by what i believe is a botnet. We are getting thousands of IP addresses sending traffic to a port where a game ...
1
vote
2answers
201 views

How Can Someone Do A Denial Of Service Attack With JavaScript

I was recently reading this cloudfare article about JavaScript Denial Of Service and I didn't understand how it could work. From what I've learned JavaScript is a client side language and can't ...
2
votes
4answers
393 views

What damage can a MITM do to encrypted traffic, and what can be done about it?

Assume a server and a client that are each on physically secure, uncompromised networks. However, between each network is an attacker that is capable of viewing traffic. For example, two department ...
3
votes
0answers
357 views

Memory and CPU usage during a denial of service attack. How to understand the data?

The Debian crontab file that is a web server Apache has the line: */2 * * * * echo -e "`date`\n\n`free` \n\n`vmstat`\n" >> /home/hacker/free_vmstat_output.txt I ...
0
votes
3answers
707 views

Why are DDos-Attacks still possible?

There are so many Intrusion Detection Systems and systems that block IP Addresses with suspicous behavior. Everyone can use those systems, as many of them are free. But why is it then still possible ...
3
votes
1answer
100 views

Prevent automated account creation without using CAPTCHA

I had a scenario, where someone created thousands of user accounts in a shop system, which flooded the DB. Different usernames/emails were used and each creation came from a different IP address. How ...
5
votes
3answers
3k views

Is deleting files from a database considered a denial of service attack? [duplicate]

If i am able to access a database and delete all the files which a web app would read, would that be considered a Denial of Service attack? It is not a duplicate of the question in the following link ...
1
vote
1answer
55 views

Cannot reproduce MSF fuzzer results?

This is my first time asking for some support in my case. Please forgive me, as I am still learning... The scenario is really simple: Some device with HTTP server is being fuzzed by metasploit's ...
0
votes
2answers
192 views

Is captcha the only thing preventing endless account creation

I wonder whether or not there are mechanisms other than captcha that prevent a mallicious script from creating an indefinite number of accounts for a given service. If so, is this not a huge red flag, ...
0
votes
1answer
993 views

What is an “appropriate” request size limit for a web service?

Point 18.4 of the OWASP ASVS says Verify that all input is limited to an appropriate size limit. Currently i have an input limit of 50MB on all web services. (And it seems like this is the ...
3
votes
1answer
2k views

How to avoid DOS attacks on Wifi?

I learned from ethical hacking tutorial and tested following command about DOS on Wifi. aireplay-ng -0 0 -a [Wifi-MAC here] It works fine, but my question is how can we avoid such attacks?
1
vote
1answer
109 views

Is dns ddos protection enough for my website ddos protection?

If I hide my server's public IP and using a DDoS protection service such as CloudFlare or DYN, does it means that my website is safe from DDoS attacks? Or can an attacker conduct DDoS attacks that ...
0
votes
1answer
93 views

What are the TCP header features that are included in DoS buffer overflow? [closed]

What are the TCP header features that are included in DoS attacks? Such as service type: http, port: 80 and the count, and what else? I want to know the features that determine the attack so I can ...
2
votes
0answers
79 views

How feasible would forced unpairing of paired bluetooth devices be?

What are the possible ways an attacker could force two paired devices to unpair? What it be any different for classic bluetooth and bluetooth smart?
1
vote
3answers
98 views

How about performing a denial of service on the “pipes”?

When talking about Denial of Service attacks one generally discusses attacks to the CPU, RAM, or memory on machines. I have yet to hear of an attack going after the cables which are used to transport ...
1
vote
1answer
407 views

How well the OpenVPN router defend against mitm

I'm not an expert in VPN, so I'm curious about how well does a router with installed vpn defend against an mitm attack. Since ARP Spoofing can decrypt https, I'm concerned if it's able to decrypt a ...
-4
votes
1answer
562 views

How Can I Tell If A Denial-Of-Service Attack Is Working/Would This Attack Work? [closed]

Say I want to test the security of a site and I decide to send a DOS attack against it using a javascript script: function imgflood(link, uri) { var TARGET = link; var URI = uri; var pic =...
0
votes
1answer
177 views

What Kind of Site Would I Need To DDOS

Recently I heard about Distributed Denial of Service and Denial of Service attacks and to see how this worked, I made a quick script (this is not a debug thing, I have an actual question about Cyber ...
0
votes
1answer
382 views

Slowloris DOS partial request with subsequent headers?

Reading about Slowloris attack: Slowloris tries to keep many connections to the target web server open and hold them open as long as possible. It accomplishes this by opening connections to the ...
4
votes
1answer
606 views

How to prove the Apache web server is not accepting connections anymore because of an denial of service attack (Slowloris)?

I have a network dump (PCAP file) from a "conversation" between a web server apache (192.168.1.2) and some clients: What a should look for to prove that the server buffer (or TCP WINDOW) is full? I ...
18
votes
5answers
6k views

Cloud-based DDoS as a Service

With the consolidation of cloud computing and virtualization, a really simple doubt comes to my mind: why isn't DDoS being largely offered as a service? Why don't we see cloud-based DDoS attacks? ...
2
votes
1answer
524 views

Where can I find a snort signature for detecting slowhttp DoS attack from Slowloris tool [duplicate]

I am performing a test on some DoS attacks and how to detect them. I am currently testing the slowloris tool, but all the signature I have seen online, as very very few as they are,do not work even ...
2
votes
2answers
140 views

Does the choice of protocol affect the efficiency of a DOS attack?

I was wondering, to make a DOS attack you need to send something to the target you are DOS-ing. And to send something you need to use some protocol. My question is, are all protocols the same speed? ...
4
votes
1answer
203 views

Trying to determine if someone was “DoS'd”

I'm part of a pretty small video game community and one of our members claims he was DoSed or DDoSed during a recent match. We are currently split as some people believe he was and others believe he ...
0
votes
2answers
152 views

Exploit/DoS applications with a 0 width and 0 height image

I believe I've read multiple times that many applications can't properly handle 0x0 pixel images, but I can't get a hold of such an article right now. From what I recall, the vulnerability was ...
1
vote
1answer
258 views

How bad it would be? If hackers managed to take down all 13 Root DNS servers at the same time? [closed]

Would such huge DDoS attack can cause any economical damage? How severe this DDoS attack would be, if all 13 Root DNS servers got successfully DDoSed/flooded and taken out? Would any websites even ...
4
votes
1answer
189 views

Are there valid reasons for compressed files (zip, gzip, etc.) to spoof file size?

Zip files, GZip files, and likely others, include information about the contained file, including the uncompressed size of the file. However, when extracting these files the number is meaningless as ...
15
votes
4answers
4k views

How to deal with this denial of service attack on an Apache server?

I was the target of different attacks today. The last one created this traffic on port 80. Apache is down and the load on server remains high. Firewall is enabled. Any suggestions? 15:27:10.203993 ...
1
vote
2answers
221 views

role of ISP in defeating Dos DDoS

What is the role or responsibility of my ISP to protect my network that is connected through their network to the Internet against DDoS / DoS ?
-2
votes
3answers
208 views

How do start looking for software that shouldnt be on my pc? [closed]

Pardon my lack of security savvy- I dont know all the terminology. I've taken the comment below and updated. I get nightly DOS (browser) - this means I see the following attached picture on any ...