How to simulate a ddos attack?

DenisMNE

Well-known member
Collaborate
Registered
Joined
Apr 11, 2018
Messages
108
Points
18
Hello!

We wanted to check out how would our website show in a simulated DDoS attack.

I think this is one of the best tests one can do.

Does anyone have experience with this ? Did you do it yourself ?
 

VirtuBox

Well-known member
Registered
Joined
May 3, 2016
Messages
1,622
Points
83

BillEssley

Well-known member
Registered
Joined
Feb 19, 2013
Messages
358
Points
28
BillEssley
I only am wondering how a DDoS script works? and how is it different from a real DDoS attack? :)
 

DenisMNE

Well-known member
Collaborate
Registered
Joined
Apr 11, 2018
Messages
108
Points
18
DenisMNE
I am sure we will get a word from @VirtuBox on that.
In my honest opinion, I believe it will only show the consequences you can have when getting DDoS attack.
DDoS attacks can get nasty.I had experience with a colleague who was under DDoS attack by a rival crew, just out of envy and jealousy.
Thats why I asked how can one simulate it.
 

KnownHost-DanielP

Well-known member
Hosting Provider
Registered
Joined
Mar 1, 2018
Messages
121
Points
28
It's really going to depend on what kind of attack you want to simulate.

If you simply want to see how the website will perform with lots of traffic, something like Apache Bench will work. You also have to be careful simulating real DDOS attacks as if you have automatic protection this will likely get triggered to filter it. So many different ways to simulate it for sure.
 

DenisMNE

Well-known member
Collaborate
Registered
Joined
Apr 11, 2018
Messages
108
Points
18
DenisMNE
Yes.
Those were my intentions.Just to see how will website react if it gets traffic, let say, 100%-500% more than usual.
I will use the tool you provided for me.
Automatic protection should be disabled ? Well, that is something I did not know about.
Many members suggested one of the ways so I will try them all.
 

Marcus_SM

Member
Hosting Provider
Registered
Joined
Apr 6, 2018
Messages
53
Points
8
You sure know that DDoS stands for a distributed DoS attack, don't you? It means that if you want to simulate it, you'll actually have to launch it from multiple locations, which is illegal even if you target your own server, simply due to the fact that it can damage your provider's network and require additional costs to mitigate against.

However, you still can stress-test your own server using a number of freely available DoS tools such as this one https://sourceforge.net/projects/loic/
 

KnownHost-DanielP

Well-known member
Hosting Provider
Registered
Joined
Mar 1, 2018
Messages
121
Points
28
I think using the term illegal is a stretch. You can initiate a DDoS and not cross the bounds into 'illegal' depending upon how it's done and who all is involved and notified.
 

Marcus_SM

Member
Hosting Provider
Registered
Joined
Apr 6, 2018
Messages
53
Points
8
Marcus_SM
Launching a DDoS attack from a botnet is illegal in almost every country, and this is how most attacks are expedited IRL. Thus, you can safely regard DDoS attacks as an illegal activity in most countries.

I'm not saying that OP will be prosecuted, most likely his provider won't even pay attention to the attack, especially if it has decent DDoS protection in place. However, the only legal way to launch a DDoS attack is to get written permission from all the parties involved and send packets from servers that you legally have access to. I'm not even saying that widely used DDoS attack amplification techniques are illegal too.
 

KnownHost-DanielP

Well-known member
Hosting Provider
Registered
Joined
Mar 1, 2018
Messages
121
Points
28
KnownHost-DanielP
I know we're just arguing semantics as I understand what you're getting at. Sure, using a botnet which is comprised of hacked/compromised equipment would indeed be illegal. However, if I want to use all the nodes in our Texas facility to DDoS everything in our Washington facility there's nothing illegal about that at all. We own everything from A-Z and pay for any transit. The large transit providers really don't care/monitor what type of traffic passes along them anyways so as long as you aren't exceeding that causing them issues then really no problem at all.

But yes, get permission from parties involved if you don't own everything and execute the simulation from something you own and/or have permission to borrow and it's not illegal ;).
 

DenisMNE

Well-known member
Collaborate
Registered
Joined
Apr 11, 2018
Messages
108
Points
18
DenisMNE
Wow, this kind of talk got me scared :LOL:
I see @KnownHost-DanielP saying that it is not illegal and , you @Marcus_SM saying it is illegal.
I did not do it yet, I was just trying to find answers.
I think I will stay away from it until I get all the information about doing it and is it harmful.
 

Dopani

Well-known member
Registered
Joined
Mar 11, 2014
Messages
233
Points
18
A DDoS script will send a lot of packet to the targeted host until it go down.
It's not a false DDoS attack, and using it elsewhere than on your own server (dedicated server, not VPS) isn't legal.
A DDoS script will send a lot of packet to the targeted host until it go down.
It it can do that, it is becoming a real DDOS attack?
 
Older Threads
Replies
3
Views
1,824
Replies
6
Views
4,428
Replies
3
Views
1,839
Replies
0
Views
1,311
Replies
3
Views
1,948
Newer Threads
Recommended Threads
Replies
0
Views
1,289
Replies
7
Views
2,324
Replies
1
Views
1,061

Latest Hosting OffersNew Reviews

Sponsors

Tag Cloud

You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.

Top