Questions tagged [denial-of-service]

Denial of Service is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) through flood a target with useless packets, connections or tasks

Filter by
Sorted by
Tagged with
2
votes
2answers
65 views

Is it feasible to leverage DOS by triggering large numbers of application exceptions?

One key aspect of a DOS or DDOS seems to be to leverage the required computational power on the attackers side to maximize the impact on the target side. This wiki article lists many examples of such ...
5
votes
3answers
828 views

Does blocking an IP with IP Tables protect you from a DOS (not DDOS) attack?

I am fairly new to network security, and I just learned about the Fail2Ban framework you can use for automated exploit detection/prevention. It says that you can protect yourself from DOS attacks by ...
1
vote
0answers
214 views

DoS attack to device not connected to WiFi

I would like to know if there is any attack to DoS a device (NOT AN AP) that is not connected to any WiFi network. Using Probe Request frames I can obtain the MAC address. I can't 802.11 deauth ...
-5
votes
1answer
140 views

What resources does a SYN flooding attack try to exhaust? [duplicate]

In a SYN flooding denial of service attack, what resource is the attacker trying to exhaust? RAM? CPU?
3
votes
1answer
239 views

Is ping of death attack specific to ICMP or could it also happen with other transport protocols?

A Ping of Death attack is a denial-of-service (DoS) attack, in which the attacker aims to disrupt a targeted machine by sending a packet larger than the maximum allowable size, causing the target ...
1
vote
2answers
440 views

How to whitelist an IP, but prevent others from DoS attacks [closed]

I've a Windows Server 2016 and I want to allow unlimited incoming requests from some specific IPs, but prevent others from DoS attacks. I see RDP Defender but I'm not sure how good or safe it is to ...
0
votes
1answer
648 views

DoS testing as a part of penetration testing

I am doing penetration testing on web application in my local network. As a part of testing procedure I am planning to perform DoS testing. Because I am using just one PC I think that the only ...
3
votes
1answer
468 views

Can someone help me decipher what these netgear log entries mean? Am I getting hacked?

Can someone help me decipher what these log entries mean? Am I getting hacked? So this is my residential router is a netgear gateway C3700-100NAS with Spectrum Internet. Usually I have no problems. ...
3
votes
1answer
194 views

Does SMS flood cause denial of service even when “blocked”?

Imagine a SMS flood using a few phone numbers. The client blocks the phone numbers using the build in mechanism of the smart phone, and thus does not receive any notifications. Even though the user ...
-3
votes
1answer
60 views

Most resource intensive assembly instructions? [closed]

Assuming I want to overload a server which is running some kind of web-app or gaming server, what is the best way for me to figure out which usage of legitimate features on the web-app or gaming ...
2
votes
2answers
584 views

SSH protocol banner is a kind of DOS?

In my test environment with Python script I generate on a target server: SSHException: Error reading SSH protocol banner simply opening/closing a sufficient number of ssh connection. Is it ...
0
votes
2answers
169 views

The difference between DDoS attacks in the cloud computing and the traditional network infrastructure [closed]

Is there any difference between the DDoS attack in the cloud computing and traditional network in infrastructure? What are the important features for detection these types of attack in cloud ...
1
vote
2answers
528 views

Apache Access Log Indicates DOS Attack? Or any other attack? [duplicate]

Below is my apache access log. 175.139.240.59 - - [28/Jul/2017:23:42:50 +0000] "HEAD http://xx.xxx.xx.xxx:80/mysql/admin/ HTTP/1.1" 301 - ... 175.139.240.59 - - [28/Jul/2017:23:42:50 +0000] "HEAD ...
1
vote
1answer
3k views

DeAuth sent to router doesn't deauthenticate

I'm trying to perform a De-authentication attack on my wifi network. My command is: aireplay-ng -0 0 -a B8:A3:86:5E:9C:DC wlan0 The response looks like this: 20:35:59 Waiting for beacon frame (...
4
votes
4answers
802 views

How to prevent “TSource Engine Query” DDoS attack?

I recently started a game hosting company and one of my boxes is being hit very hard by what i believe is a botnet. We are getting thousands of IP addresses sending traffic to a port where a game ...
1
vote
2answers
190 views

How Can Someone Do A Denial Of Service Attack With JavaScript

I was recently reading this cloudfare article about JavaScript Denial Of Service and I didn't understand how it could work. From what I've learned JavaScript is a client side language and can't ...
2
votes
4answers
379 views

What damage can a MITM do to encrypted traffic, and what can be done about it?

Assume a server and a client that are each on physically secure, uncompromised networks. However, between each network is an attacker that is capable of viewing traffic. For example, two department ...
3
votes
0answers
355 views

Memory and CPU usage during a denial of service attack. How to understand the data?

The Debian crontab file that is a web server Apache has the line: */2 * * * * echo -e "`date`\n\n`free` \n\n`vmstat`\n" >> /home/hacker/free_vmstat_output.txt I ...
0
votes
3answers
685 views

Why are DDos-Attacks still possible?

There are so many Intrusion Detection Systems and systems that block IP Addresses with suspicous behavior. Everyone can use those systems, as many of them are free. But why is it then still possible ...
3
votes
1answer
97 views

Prevent automated account creation without using CAPTCHA

I had a scenario, where someone created thousands of user accounts in a shop system, which flooded the DB. Different usernames/emails were used and each creation came from a different IP address. How ...
5
votes
3answers
3k views

Is deleting files from a database considered a denial of service attack? [duplicate]

If i am able to access a database and delete all the files which a web app would read, would that be considered a Denial of Service attack? It is not a duplicate of the question in the following link ...
1
vote
1answer
55 views

Cannot reproduce MSF fuzzer results?

This is my first time asking for some support in my case. Please forgive me, as I am still learning... The scenario is really simple: Some device with HTTP server is being fuzzed by metasploit's ...
0
votes
2answers
190 views

Is captcha the only thing preventing endless account creation

I wonder whether or not there are mechanisms other than captcha that prevent a mallicious script from creating an indefinite number of accounts for a given service. If so, is this not a huge red flag, ...
0
votes
1answer
908 views

What is an “appropriate” request size limit for a web service?

Point 18.4 of the OWASP ASVS says Verify that all input is limited to an appropriate size limit. Currently i have an input limit of 50MB on all web services. (And it seems like this is the ...
2
votes
1answer
2k views

How to avoid DOS attacks on Wifi?

I learned from ethical hacking tutorial and tested following command about DOS on Wifi. aireplay-ng -0 0 -a [Wifi-MAC here] It works fine, but my question is how can we avoid such attacks?
1
vote
1answer
109 views

Is dns ddos protection enough for my website ddos protection?

If I hide my server's public IP and using a DDoS protection service such as CloudFlare or DYN, does it means that my website is safe from DDoS attacks? Or can an attacker conduct DDoS attacks that ...
0
votes
1answer
91 views

What are the TCP header features that are included in DoS buffer overflow? [closed]

What are the TCP header features that are included in DoS attacks? Such as service type: http, port: 80 and the count, and what else? I want to know the features that determine the attack so I can ...
2
votes
0answers
77 views

How feasible would forced unpairing of paired bluetooth devices be?

What are the possible ways an attacker could force two paired devices to unpair? What it be any different for classic bluetooth and bluetooth smart?
1
vote
3answers
95 views

How about performing a denial of service on the “pipes”?

When talking about Denial of Service attacks one generally discusses attacks to the CPU, RAM, or memory on machines. I have yet to hear of an attack going after the cables which are used to transport ...
1
vote
1answer
399 views

How well the OpenVPN router defend against mitm

I'm not an expert in VPN, so I'm curious about how well does a router with installed vpn defend against an mitm attack. Since ARP Spoofing can decrypt https, I'm concerned if it's able to decrypt a ...
-4
votes
1answer
533 views

How Can I Tell If A Denial-Of-Service Attack Is Working/Would This Attack Work? [closed]

Say I want to test the security of a site and I decide to send a DOS attack against it using a javascript script: function imgflood(link, uri) { var TARGET = link; var URI = uri; var pic =...
0
votes
1answer
173 views

What Kind of Site Would I Need To DDOS

Recently I heard about Distributed Denial of Service and Denial of Service attacks and to see how this worked, I made a quick script (this is not a debug thing, I have an actual question about Cyber ...
0
votes
1answer
373 views

Slowloris DOS partial request with subsequent headers?

Reading about Slowloris attack: Slowloris tries to keep many connections to the target web server open and hold them open as long as possible. It accomplishes this by opening connections to the ...
4
votes
1answer
582 views

How to prove the Apache web server is not accepting connections anymore because of an denial of service attack (Slowloris)?

I have a network dump (PCAP file) from a "conversation" between a web server apache (192.168.1.2) and some clients: What a should look for to prove that the server buffer (or TCP WINDOW) is full? I ...
18
votes
5answers
6k views

Cloud-based DDoS as a Service

With the consolidation of cloud computing and virtualization, a really simple doubt comes to my mind: why isn't DDoS being largely offered as a service? Why don't we see cloud-based DDoS attacks? ...
2
votes
1answer
517 views

Where can I find a snort signature for detecting slowhttp DoS attack from Slowloris tool [duplicate]

I am performing a test on some DoS attacks and how to detect them. I am currently testing the slowloris tool, but all the signature I have seen online, as very very few as they are,do not work even ...
2
votes
2answers
140 views

Does the choice of protocol affect the efficiency of a DOS attack?

I was wondering, to make a DOS attack you need to send something to the target you are DOS-ing. And to send something you need to use some protocol. My question is, are all protocols the same speed? ...
4
votes
1answer
188 views

Trying to determine if someone was “DoS'd”

I'm part of a pretty small video game community and one of our members claims he was DoSed or DDoSed during a recent match. We are currently split as some people believe he was and others believe he ...
0
votes
2answers
147 views

Exploit/DoS applications with a 0 width and 0 height image

I believe I've read multiple times that many applications can't properly handle 0x0 pixel images, but I can't get a hold of such an article right now. From what I recall, the vulnerability was ...
1
vote
1answer
225 views

How bad it would be? If hackers managed to take down all 13 Root DNS servers at the same time? [closed]

Would such huge DDoS attack can cause any economical damage? How severe this DDoS attack would be, if all 13 Root DNS servers got successfully DDoSed/flooded and taken out? Would any websites even ...
4
votes
1answer
187 views

Are there valid reasons for compressed files (zip, gzip, etc.) to spoof file size?

Zip files, GZip files, and likely others, include information about the contained file, including the uncompressed size of the file. However, when extracting these files the number is meaningless as ...
15
votes
4answers
4k views

How to deal with this denial of service attack on an Apache server?

I was the target of different attacks today. The last one created this traffic on port 80. Apache is down and the load on server remains high. Firewall is enabled. Any suggestions? 15:27:10.203993 ...
1
vote
2answers
205 views

role of ISP in defeating Dos DDoS

What is the role or responsibility of my ISP to protect my network that is connected through their network to the Internet against DDoS / DoS ?
-2
votes
3answers
208 views

How do start looking for software that shouldnt be on my pc? [closed]

Pardon my lack of security savvy- I dont know all the terminology. I've taken the comment below and updated. I get nightly DOS (browser) - this means I see the following attached picture on any ...
1
vote
3answers
267 views

How to protect my network against local flood attacks?

I installed VM centOS 6.8 then I installed hping3 tools. With this tool, I can take down any PC connection on the network as well as increase CPU and RAM usage with the following command hping3 --...
0
votes
1answer
39 views

What L7 traffic patterns can make it easier DoS an Apache web server?

We have a single JMeter HTTP load generator that we use to capacity test our web service (running Django + mod-wsgi + Apache)? If we want to modify the traffic generated to DoS our web service, what ...
22
votes
4answers
11k views

Why does a (D)DoS attack slow down the CPU and crash a server?

So I get the basic idea of (D)DoS used for flooding, but I don't quite understand how this causes servers to crash or get them to slow down due to CPU overuse. As far as I know, the thing that is ...
0
votes
2answers
526 views

In DoS, does every sent Spoofed IP packet have a different IP?

so, my question is: When a DoS attack occurs and the attacker is using spoofed IP packets, do this packets all carry the same spoofed IP or does every packet have a different IP header? Thanks
26
votes
5answers
3k views

Is unauthorised deletion an integrity or availability issue?

During a web application test I have discovered a parameter tampering issue that allows a user to delete comments left by other users. They can't modify the content of other users' comments, and they ...
4
votes
4answers
286 views

Causing Denial of Service by “Session Spaming”

Let's assume you have a single sign on ticket and you logon to a website which authanticates you by the ticket (same thing with user/password). The webserver will create a session and the user stores ...