Skip to main content

Questions tagged [denial-of-service]

Denial of Service (DoS) is a family of attacks that attempt to force a target to use up resources (CPU time, memory, bandwidth etc) by flooding a target with useless packets, connections or tasks.

Filter by
Sorted by
Tagged with
0 votes
1 answer
128 views

DoS attack blocks website while in another connections show website run normally [closed]

I am learning Ethical Hacking. I create my own website on a cloud hosting service for testing purposes. I run DoS attack from my local VM and it shows that website is down. When I sent a link to my ...
MirDer's user avatar
  • 3
4 votes
0 answers
344 views

How does proper use of session.use_only_cookies and session_regenerate_id() cause personal DoS?

From PHP Session Management basics: Proper use of session.use_only_cookies and session_regenerate_id() can cause personal DoS with undeletable cookies set by attackers. In this case, developers may ...
Kyoma's user avatar
  • 141
2 votes
1 answer
2k views

Why would hackers attack a DNS server with a DoS?

I wake up this morning to a rebooted server. The DNS server was running at over 100%. After a little bit of work, I got fail2ban in place to block all of those requests. The requests themselves are ...
Alexis Wilke's user avatar
  • 1,017
0 votes
2 answers
240 views

Can a Slow Post HTTP attack be done from a single client?

Can a Slow Post HTTP attack be done from a single client? The following source cites this line: https://medium.com/fantageek/understanding-socket-and-port-in-tcp-2213dc2e9b0c Ports are 16-bit numbers,...
Mehul's user avatar
  • 1
0 votes
0 answers
423 views

slowhttptest showing up as service unavailable, but is inaccurate service still up and running

I've got a small contract with a website; they have given me permission to stress test their website, testing for DOS attacks. I have some experience in the field, but I am no omniscient hacker. I'm ...
schizosavant's user avatar
0 votes
1 answer
159 views

Is it considered as a DOS attack if I add too much data to a page so that it doesn't respond at all?

I am working on an application. There is a new feature implemented where a user create some IDs and secret keys for that application. I have observed that there is no rate limit for creating those. I ...
Sai Dutt Mekala's user avatar
11 votes
4 answers
2k views

Defending against DoS via product reservation

An e-commerce site should reserve products for a user while they're going through the payment process (more info). This creates a potential denial-of-service risk where an attacker could reserve many ...
paj28's user avatar
  • 33.5k
0 votes
1 answer
217 views

Why did my DoS attack fail against Windows 10?

I have multiple devices - a Samsung and a Lenovo tab, an Amazon Alexa, an HP laptop running Windows 7, and another running Windows 10. Bored, I tried to DoS my Windows 10 laptop using my Windows 7 ...
astroanax's user avatar
1 vote
1 answer
2k views

Access point uses different BSSID and deauth attack fails

I'm using airgeddon (https://github.com/v1s1t0r1sh3r3/airgeddon) to perform a deauthentication attack on my wifi network. When i put my wireless interface in monitor mode to scan the network from the ...
Emanuele Sabato's user avatar
-2 votes
1 answer
671 views

Why does hping3 test DoS not successfully?

I used hping3 to stress test a web app (DoS): sudo hping3 -S --flood -V -p 80 [IP addr/url] When I attempted to get access to the target web application through my network, it refused to connect ...
sanba06c's user avatar
  • 123
0 votes
1 answer
1k views

What is the traffic volume of practical DDoS attacks

I wonder what is the volume of traffic, in terms of requests/second, forms a legit DDoS attack against a website. I know it highly depends on the website and where it is hosted. But is there any real-...
SamTest's user avatar
  • 715
-2 votes
1 answer
513 views

I think I may have DoS'ed a website accidentally

I had recently started using the nmap --script vuln option and I did try it on my own local router IP, which then crashed and we had to restart (coincidence?). Then today I wanted to try it again, ...
i-Need-Help's user avatar
0 votes
1 answer
278 views

Can wifi router be ddosed by "trying" to login to router repeatedly and in very fast manner?

Trying to make an important router as safe as possible from low skill "dos" attack on it. Is it possible for someone in the range of a wifi router to write a script in whatever programming language to ...
CoffeDev's user avatar
  • 103
0 votes
4 answers
119 views

Potential DoS in emailing admin on error pages

In my website, the backend sends an email to the sysadmin whenever there is an Error 500 with the logs and other data about the error. How can I prevent a cracker from intentionally triggering the ...
Heng Ye's user avatar
  • 535
2 votes
1 answer
201 views

How can one mitigate both account-level DOS attacks and online brute force attacks at the same time?

I was recently reading this question, where the accepted answer claims that it is easy for attackers to bypass rate limiting that is based on IP, which makes any sort of IP rate limiting to prevent a ...
john01dav's user avatar
  • 225
0 votes
0 answers
161 views

Entrypoint on webapp allows semi-arbitrary data to be written. Can it be considered as DoS?

My team and I have written a web app, and we had a bug report regarding a DoS vulnerability. This vulnerability, requires a basic account to be created and allows this user to inject semi-arbitrary ...
Simon R.'s user avatar
1 vote
4 answers
633 views

How to identify IP from a UDP-based DoS

I'm running a Counterstrike server on UDP port 27015. I'm using Amazon AWS to host the game server. I have added only my friends' IPs (about 50 of them) into a security group so the rest of the ...
Nihas's user avatar
  • 11
0 votes
1 answer
224 views

Calculate pps for DDoS evaluation

I am working on a task where I have to evaluate how much throughput one can generate in packets per second. I know I can send them as fast as possible with hping3 [...] --flood, but is there a way to ...
DaveMitHut's user avatar
0 votes
0 answers
47 views

Network overload due to attack [duplicate]

My hosting provider (ovh) recently blocked my VPS due to some attack on the server. When I restored it to the normal mode, I can see indeed something is happening: the access to server is limited, ...
forsberg's user avatar
  • 283
0 votes
4 answers
984 views

Password hashing that is resistant to ASIC-assisted cracking without risking DoS of server

Previously, authentication systems stored passwords in cleartext. This made it trivial for an attacker to log in to an account if he had access to a leaked password file. Later, passwords were hashed ...
Ole Tange's user avatar
  • 352
1 vote
1 answer
194 views

Does a DDOS attack on an application using CDN have to first bring down all the involved CDN servers to affect the application's availability?

CDN are said to absorb and mitigate the Denial of Service and DDOS attacks. Consider an application that uses a CDN provider to deliver its content. So if an attacker tries to bring down such an ...
adi's user avatar
  • 11
0 votes
1 answer
145 views

Can an ethernet device plugged into a switch block all the other ethernet devices?

And if so, what protections are available against this kind of thing?
davidtgq's user avatar
  • 197
2 votes
0 answers
360 views

Preventing DoS Attacks on NFC

There are some attack scenarios on NFC. These include e.g. Data modification, data insertion, relay attacks and DoS attacks. Just to name a few. While some of these attack scenarios are more likely ...
P_Gate's user avatar
  • 121
3 votes
1 answer
1k views

Are these log messages in my nginx server evidence of an attempted attack?

My AWS Elastic Beanstalk server is often reporting Environment health has transitioned from Ok to Severe. 100.0 % of the requests are erroring with HTTP 4xx. This happens almost daily for a few ...
Glen Pierce's user avatar
1 vote
0 answers
327 views

Is Slowloris traceable? [closed]

When someone launches a slowloris attack on a website, could that attack be traced via IP? Could someone feasibly locate the IP of the person that launches said attack?
Altunsu2's user avatar
1 vote
0 answers
151 views

Preventing DoS and flooding attacks on wireless MANET network

How can I prevent DoS/flooding attacks on a wireless MANET network?
user958473's user avatar
0 votes
1 answer
167 views

What type of vulnerabilty is this?

I'm testing a website: https://this-site.com/path/to/dirs but what i've found is if I do the following below the site will load 4 pages in a infinite loop https://this-site.com/path/to/dirs/.../. ...
dlw's user avatar
  • 35
1 vote
1 answer
2k views

Client reconnects during deauthentication attack

During my first deauthentication attack the client I targeted was disconnected from the wireless network, however I was able to reconnect the client to the network even though aireplay-ng was still ...
jh4x's user avatar
  • 23
1 vote
1 answer
236 views

UDP amplification: length(response_packet) < length(request_packet)

I was researching the GitHub DDoS attack of 2018, in which memcached UDP amplification was used. I noticed that a GitHub blog post referenced a CloudFlare post which described memcached-based UDP ...
CharlieBucket's user avatar
0 votes
0 answers
108 views

Is it safe to pass user input through rails gsub?

Are there risks associated with using gsub on user input? Can it be used for regular expression DoS?
Tim Abell's user avatar
  • 101
1 vote
0 answers
261 views

Regex DoS: Is OWASP's characterization of "evil regexes" complete?

OWASP defines "evil regex" (here) as follows: Evil Regexes A Regex is called "evil" if it can stuck on crafted input. Evil Regex pattern contains: Grouping with repetition ...
Shuzheng's user avatar
  • 1,267
1 vote
2 answers
923 views

infinity redirection as Dos Attack

I was wondering that infinite redirection could be used as a dos attack in my case, I have this test.php <?php $url = $_GET['url']; header('Location: '.$newURL); ?> ...
Trying to learn's user avatar
0 votes
1 answer
199 views

Failed logins on a windows server - performance impact?

I have recently started analysing our logs and noticed 600-700 failed login attempts per day against a windows 2016 server hosting some shared files. I know what the cause is (another misconfigured ...
Hawke's user avatar
  • 13
-1 votes
1 answer
104 views

Validation issue in name field causes the page to hang

I am using a webpage that doesn't have validation for name field. If I give any special characters, the page just becomes unresponsive. Though the captcha times out after some time, the request still ...
user2455158's user avatar
1 vote
3 answers
2k views

What websites would I be allowed to DoS?

I recently wrote an automated DoS script and was wondering 2 things: Would I be allowed to use it on hackthissite.org? Would I be able to make a Wix site and use it on that?
Astra's user avatar
  • 11
0 votes
1 answer
587 views

Is Windows 10 Vulnerable to IPv6 Router Advertisement Flooding?

In a DEFCON 19 video Sam Bowne says that windows 7 machines CPU goes to 100% if you send a bunch of IPv6 Router Advertisement requests on a network. What would happen to a Windows 10 machine? Would it ...
Eric's user avatar
  • 11
0 votes
0 answers
341 views

what kind of attack is this

Im developing a website on test server and so when debugging some stuff I had to look in access log, this is a small chunk of what I saw: 37.99.49.203 - - [13/May/2019:17:51:34 +0200] "H\x1E\xF3qxZ\...
reckoner's user avatar
0 votes
2 answers
1k views

Billion Laughs Attack (XXE) - how does it work

Hi all Im trying to understand how the billion laughs attack works(https://en.wikipedia.org/wiki/Billion_laughs_attack) So far I get its obviously sending this payload: <?xml version="1.0"?> &...
Jshee's user avatar
  • 121
4 votes
1 answer
3k views

How do you prevent/guard against a wireless disassociation attack [duplicate]

Going over the security+ lectures by professor Messer here, he explains and demonstrates a wireless disassociation attack very well. But no where in the video does he explain how this type of attack ...
Thomas's user avatar
  • 447
2 votes
2 answers
647 views

Why were hyperlink auditing pings used for DDoS attacks and not any other requests?

A few days ago this new story has been published: Researchers have found that the HTML feature called hyperlink auditing, or pings, is being used to perform DDoS attacks against various sites. This ...
rugk's user avatar
  • 1,257
1 vote
0 answers
241 views

WiFi Channel 6 unusable, but no other AP on Channel 6

There is a single MAC address broadcasting a vast amount of QoS packets on channels between 3 and 9. Is this a DoS attack? The access point that MAC address is associated with says its on channel 1. ...
SkyPi's user avatar
  • 29
1 vote
1 answer
372 views

Question about hping3, TCP and ngrok

I have set up a experimental setup which consists of: Windows PC with ethernet cable; Arduino shield (connected to Windows machine with USB) with LTE connectivity sending data using TCP/IP to ngrok; ...
Aladins's user avatar
  • 23
1 vote
1 answer
195 views

Can a process be DoSed by interfering with its compare-exchange loops?

Consider a file accessed by multiple processes; the processes map the file to memory and then use lock-free operations to synchronize (for example, use atomic-add to allocate an offset in the file to ...
avakar's user avatar
  • 111
4 votes
2 answers
25k views

Detect / Prove and Prevent Wifi Deauth attack

I suspect that my neighbor is running multiple Wifi deauth flood attacks against my Wifi. I'm using WPA2 and I don't think he can really crack my password, but my devices keep having wifi connection ...
GMX Rider's user avatar
  • 395
0 votes
1 answer
7k views

Snort rule for syn flood attacks - Limiting number of alerts

So I have a snort rule that detects syn flood attacks that looks like this: alert tcp any any -> $HOME_NET 80 (msg:”SYN Flood - SSH"; flags:S; flow: stateless; detection_filter: track by_dst, ...
Liam's user avatar
  • 1
0 votes
0 answers
165 views

Can jumping to a new SSID be a solution for flood attacks?

If an attacker can access inside my network in any way and make a UDP or ICMP flood attack on any point of the network (server, client or router), can I prevent this attack transiently with jumping on ...
user3241429's user avatar
1 vote
1 answer
449 views

Is this regular expression vulnerable to DoS?

FindBugs flagged the following email address validation regex as vulnerable to DoS: ^[\w!#$%&'*+/=?`{|}~^-]+(?:\.[\w!#$%&'*+/=?`{|}~^-]+)*@(?:[a-zA-Z0-9-]+\.)+[a-zA-Z]{2,6}$ Here's an easier ...
Duncan Jones's user avatar
  • 1,647
3 votes
5 answers
5k views

What is the difference between an SYN-Flood attack and an SYN-ACK-Flood attack?

What is the difference between an SYN-Flood attack and an SYN-ACK-Flood (SYN Reflection) attack?
user198996's user avatar
57 votes
7 answers
12k views

Does it make sense to consider a triggerable server software crash a DOS attack?

I've found a little vulnerability in a web application running on Node.js server. It works by sending some crafted payload to the application server, which makes the application server code to throw ...
Matías's user avatar
  • 507
1 vote
2 answers
483 views

Risk and probability from CVE

How can I find risk and probability from CVE (https://cve.mitre.org/)? I read an article and it says (pg 14), The cost is derived from the attack tree, and risk and probability are based on CVE ...
hamed sharafi's user avatar

1
2
3 4 5
9