Netstress DoS/DDoS saldırıları gerçekleştirerek Firewall/IPS/DDoS sistemlerini test etme amacıyla geliştirilmiş bir yazılımdır. Piyasada bulunan Firewall/IPS ve DDoS egelleme sistemlerinin çoğunda tasarımsal ve yazılımsal hatalar vardır.
Netstress barındırdığı 100′e yakın test seçeneğiyle güvenlik cihazlarındaki bu tasarımsal, yazılımsal hataların çoğunu gerçek ortamlarda test etme imkanı sağlamaktadır.
Netstress neden geliştirilmiştir?
Bilgi güvenliği akademisi bünyesinde verilen DDoS Saldırıları ve Korunma Yolları Eğitiminde katılımcıların DDoS saldırılarını daha iyi anlayabilmeleri amacıyla gerçek ortamlara yakın test senaryolarını gerçekleştirmek ve verilen DDoS test hizmetlerini daha kaliteli yapabilmek amacıyla geliştirilmiştir.
Netstress Linux sistemler üzerinde çalışmaktadır ve donanıma bağlı olarak kapasitesi değişmektedir. Netstress 4 CPU’lu bir sistemde 5.000.000 SYN paketi(diğer TCP/UDP paketleri de aynı sayıda), 3,5 Gb trafik oluşturabilmektedir.
Netstress v1.0′da bulunan özellikler
Syn Flood Attacks
- SYNFlood with static source port
- SYNFlood with random source port
- SYNFlood with static source ip address
- SYNFlood with random source address
- SynFlood with fragmented packets
- ACK Flood with static source port
- ACK Flood with random source port
- ACK Flood with static source ip address
- ACK Flood with random source address
- ACK Flood with fragmented packets
- FIN Flood with static source port
- FIN Flood with random source port
- FIN Flood with static source ip address
- FIN Flood with random source address
- FIN Flood with fragmented packets
- Static source port udp flood
- UDP flood with random source port
- UDP Flood with static source ip address
- UDP Flood with random source address
- UDP Flood with fragmented packets
- ICMP Flood with all options random(source ip, icmp type, code)
- Stateless GET Flood
- Stateless POST Flood
- GET Flood with spoofed headers
- POST Flood with spoofed headers
- SYN+UDP+GET Flood
- ICMP+UDP
- UDP+PUSH Flood
- UDP+ICMP Flood
- DNS flood with static source ip address
- DNS flood with static sppofed ip address
- DNS flood with random ip address
- Root zone amplified DNS DoS
- Spoof well known botnet’s floodings features
- Send packets from a subnet like 88.x.x.x.
- Rate limiting features test
- Statefull packet inspection tests
- Send packets with all known country ip blocks
- Teardrops attacks
- Ping of death
- Smurf
- Reflected ICMP and UDP attacks
- Stacheldraht tool
- Trinoo
- TFN
Eklenecek Özellikler
- SMTP Flooding
- Mail bombing
- Application/OS spesific DoS attacks
- Bind DoS
- Apache DoS
- Juniper
- OpenBSD
- Cisco ASA
- Microsoft Windows
About the author /
Mustafa Kaya
Hacks – Threatpost
- Discord CDN and API Abuses Drive Wave of Malware Detections 23 Temmuz 2021Targets of Discord malware expand far beyond gamers.
- Kaseya Obtains Universal Decryptor for REvil Ransomware 23 Temmuz 2021The vendor will work with customers affected by the early July spate of ransomware attacks to unlock files; it's unclear if the ransom was paid.
- FBI: Cybercriminals Eyeing Broadcast Disruption at Tokyo Olympics 22 Temmuz 2021Expected cyberattacks on Tokyo Olympics likely include attempts to hijack video feeds, the Feds warn.
- Microsoft Issues Windows 10 Workaround Fix for ‘SeriousSAM’ Bug 22 Temmuz 2021A privilege elevation bug in Windows 10 opens all systems to attackers to access data and create new accounts on systems.
- Indictments, Attribution Unlikely to Deter Chinese Hacking, Researchers Say 21 Temmuz 2021Researchers are skeptical that much will come from calling out China for the Microsoft Exchange attacks and APT40 activity, but the move marks an important foreign-policy change.
- What’s Next for REvil’s Victims? 19 Temmuz 2021Podcast: Nothing, says a ransomware negotiator who has tips on staying out of the sad subset of victims left in the lurch, mid-negotiation, after REvil's servers went up in smoke.
Leave a reply