All Questions
14 questions
1
vote
1
answer
197
views
Making website queries and return a large amount of data, can it be exploited for DOS attack?
I am testing a website (bug bounty website) and found an endpoint like replycomment?cmt_id[]=1. When open on browser, this endpoint let me reply to comment with id 1 by fetching this comment into a ...
- 83
1
vote
2
answers
988
views
If HTTPS only runs on a single port, why is SYN flooding an issue?
I've read online that SYN flooding is when "the attacker sends repeated SYN packets to every port on the targeted server." However, HTTPS only runs on port 443. Therefore, why is it ...
- 67
1
vote
2
answers
1k
views
How to understand a single packet embedded with multiple requests?
When I read Multi VERB Single Request:
This Attack is also a variation of the Excessive Verb Attack
strategy. The attacking BOT creates multiple HTTP requests, not by issuing them one after
another ...
- 111
0
votes
1
answer
1k
views
What is the traffic volume of practical DDoS attacks
I wonder what is the volume of traffic, in terms of requests/second, forms a legit DDoS attack against a website. I know it highly depends on the website and where it is hosted. But is there any real-...
- 725
1
vote
2
answers
548
views
What is the most powerful type of DDOS/DOS attack? [closed]
What I mean is what protocol are best to DOS something like TCP, UDP, HTTP?
- 13
-1
votes
2
answers
718
views
What do DoS/ DDoS TCP SYN Floods and Layer 7/HTTP floods look like on a firewall log?
I am looking for some examples of log files for DoS or DDoS attacks that show a SYN Flood or a HTTP/Layer 7 Flood. I have had a google, but can't seem to find anything.
Would the incoming packet ...
- 3
2
votes
1
answer
1k
views
Does this look like a DDOS attack?
I've put up a small proof of concept web api on AWS infrastructure (elastic beanstalk) using their free tier. My app is working fine, but I'm seeing a lot of this in the access logs:
172.xxx.xxx.xxx -...
- 123
2
votes
2
answers
2k
views
Beginner-friendly tool to simulate HTTP flood on my website
Is there any easy-to-use tool available I can use to produce an HTTP GET flood on a website I maintain? If so, can you also explain in steps how to use it?
I need to do this for testing purposes. Our ...
- 358
0
votes
1
answer
232
views
Clean and cheap protection for user registration HTTP requests?
I am developing a website that has user registration. I already built some rate-limit protection techniques using nginx and at a lower level using iptables, but I am worried about real-world attacks ...
- 103
15
votes
3
answers
2k
views
External websites in logs [duplicate]
I have a website, let's call it www.good.com.
I've been getting a lot of requests to www.good.com under completely different URLs than www.good.com. I suspect this traffic is also causing some site ...
- 253
0
votes
1
answer
376
views
rate limiting and access filter for web application
I had a requirement of rate limiting and dynamically access controlling access to web application dynamically
I want to be able to rate limit access turned on / off dynamically
black/white list ...
- 197
6
votes
3
answers
26k
views
How to send GET/POST requests without header and agent information
I want to test our DOS prevention system against http requests that are not have header and agent information. Is there any tool I can do that. I tried siege with this command
siege -c 3 -b -H "Host:...
- 641
3
votes
6
answers
3k
views
DDOS slow-http attack prevention
I am often getting DDOS attack from multiple IPs with simple HEAD requests. There are around 30 unique IPs creating such attacks.
201.230.167.68 - [05/Jan/2014:00:19:19 +0530] "HEAD / HTTP/1.1" 301 5....
- 139
5
votes
3
answers
980
views
How similar are bots regarding their HTTP GET request?
Lets assume a botnet is attacking a website by HTTP GET flooding. To find the bots, the only way seems to be finding the similarities of the HTTP GET requests considering the URL and header fields, ...
- 353