How to simulate a ddos attack?

DenisMNE

Corporate Member
Corporate Member
Joined
Apr 11, 2018
Messages
108
Best answers
0
Ratings
10 2
Points
18
#1
Hello!

We wanted to check out how would our website show in a simulated DDoS attack.

I think this is one of the best tests one can do.

Does anyone have experience with this ? Did you do it yourself ?
 

VirtuBox

Global Mod
Staff Member
Joined
May 3, 2016
Messages
1,524
Best answers
4
Ratings
398 12
Points
83
#2

KnownHost-DanielP

Well-known member
Joined
Mar 1, 2018
Messages
121
Best answers
2
Ratings
27 3
Points
28
#5
It's really going to depend on what kind of attack you want to simulate.

If you simply want to see how the website will perform with lots of traffic, something like Apache Bench will work. You also have to be careful simulating real DDOS attacks as if you have automatic protection this will likely get triggered to filter it. So many different ways to simulate it for sure.
 

DenisMNE

Corporate Member
Corporate Member
Joined
Apr 11, 2018
Messages
108
Best answers
0
Ratings
10 2
Points
18
#11
DenisMNE
Yes.
Those were my intentions.Just to see how will website react if it gets traffic, let say, 100%-500% more than usual.
I will use the tool you provided for me.
Automatic protection should be disabled ? Well, that is something I did not know about.
Many members suggested one of the ways so I will try them all.
 

Marcus_SM

Corporate Member
Corporate Member
Joined
Apr 6, 2018
Messages
39
Best answers
0
Ratings
15
Points
8
#6
You sure know that DDoS stands for a distributed DoS attack, don't you? It means that if you want to simulate it, you'll actually have to launch it from multiple locations, which is illegal even if you target your own server, simply due to the fact that it can damage your provider's network and require additional costs to mitigate against.

However, you still can stress-test your own server using a number of freely available DoS tools such as this one https://sourceforge.net/projects/loic/
 

KnownHost-DanielP

Well-known member
Joined
Mar 1, 2018
Messages
121
Best answers
2
Ratings
27 3
Points
28
#7
I think using the term illegal is a stretch. You can initiate a DDoS and not cross the bounds into 'illegal' depending upon how it's done and who all is involved and notified.
 

Marcus_SM

Corporate Member
Corporate Member
Joined
Apr 6, 2018
Messages
39
Best answers
0
Ratings
15
Points
8
#8
Marcus_SM
Launching a DDoS attack from a botnet is illegal in almost every country, and this is how most attacks are expedited IRL. Thus, you can safely regard DDoS attacks as an illegal activity in most countries.

I'm not saying that OP will be prosecuted, most likely his provider won't even pay attention to the attack, especially if it has decent DDoS protection in place. However, the only legal way to launch a DDoS attack is to get written permission from all the parties involved and send packets from servers that you legally have access to. I'm not even saying that widely used DDoS attack amplification techniques are illegal too.
 

KnownHost-DanielP

Well-known member
Joined
Mar 1, 2018
Messages
121
Best answers
2
Ratings
27 3
Points
28
#9
KnownHost-DanielP
I know we're just arguing semantics as I understand what you're getting at. Sure, using a botnet which is comprised of hacked/compromised equipment would indeed be illegal. However, if I want to use all the nodes in our Texas facility to DDoS everything in our Washington facility there's nothing illegal about that at all. We own everything from A-Z and pay for any transit. The large transit providers really don't care/monitor what type of traffic passes along them anyways so as long as you aren't exceeding that causing them issues then really no problem at all.

But yes, get permission from parties involved if you don't own everything and execute the simulation from something you own and/or have permission to borrow and it's not illegal ;).
 

DenisMNE

Corporate Member
Corporate Member
Joined
Apr 11, 2018
Messages
108
Best answers
0
Ratings
10 2
Points
18
#14
DenisMNE
Wow, this kind of talk got me scared :LOL:
I see @KnownHost-DanielP saying that it is not illegal and , you @Marcus_SM saying it is illegal.
I did not do it yet, I was just trying to find answers.
I think I will stay away from it until I get all the information about doing it and is it harmful.
 

Dopani

Well-known member
Joined
Mar 11, 2014
Messages
97
Best answers
0
Ratings
9
Points
8
#13
A DDoS script will send a lot of packet to the targeted host until it go down.
It's not a false DDoS attack, and using it elsewhere than on your own server (dedicated server, not VPS) isn't legal.
A DDoS script will send a lot of packet to the targeted host until it go down.
It it can do that, it is becoming a real DDOS attack?
 
Older Threads
Replies
3
Views
134
Replies
3
Views
249
Replies
0
Views
146
Replies
3
Views
240
Latest Threads

Latest postsNew threads

Latest Hosting OffersNew Reviews

Sponsors

Latest Blog ArticlesMost Viewed Threads

Tag Cloud

You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.

Top