Social Icons

Tuesday, July 23, 2013

How To Find Admin Login Panel Of A Website -The Best and Top 7 Ways


Hello Friends this is that post which you might be looking for today i am going to tell you how to find admin panel of a website that you want to hack into so are you interested to know so let me list down ways by which you can easily get the admin login panel.

in various case i find some new born hacker able to get the user id and password by sql injection but still they give up as they unable to find the admin login panel so if you are in search of admin login panel of a website then this post will help you for sure.

Method 1:Adding URL
This is the first and easiest method to find admin login page. You can add some words
after the URL.Like

www.site.com/admin.php

Method 2:
Using Various Script
You can use various scripts like various admin finder to get the admin page.Here I am
showing you an useful scripts which will help you to get the admin page.
To run this script you first need to install Active Perl.get it from
http://www.activestate.com/activeperl/downloads

Now copy the code of http://pastebin.com/WWZszURW and save it as anything.pl and
run the script to get the login page of the desired site.(Remember its a python Script).

Method 3:Crawling software
You can use various crawling tool to crawl the website and get the login page. These
website crawl all the pages of the website and show the list of all pages and
directories.
Method 4:Crawling
By default various search engines crawl the entire site and by using robots.txt the site
owner actually gives the list of links that are not to be crawled by the engine.
Now most
of the time the admin ask the engine not to crawl the admin page so if you view the
robots.txt you can get the link to the login page.
www.site.com/robots.txt
Method 5:Google Dorks
Google dorks are some time very useful if you know to use it properly.so here are some example of useful Google dorks that will definitely help you in finding admin login panle of a website.
Site:site.com “admin”
Site:site.com inurl:login
site:site.com intitle:"admin login"

Method 6:
Using Online Admin Finder/Scanner
There are many such online admin finder available but i am giving you the link for one of my favorite one This
site http://sc0rpion.ir/af/ will help you in finding admin login page online.

Method 7:
Havij Tool
At last you can use the all time popular Havij to find admin page.Click on the HAvij Link to know more i have already written a nice post on it.

COUNTERMEASURES BY ADMIN

From this post it becomes very clear that if You (site owners) have not changed the
default URL of your site’s login page then it can easily be compromised if an attacked
gets the User name and password or even he can brute it.So it is advised that you
should change the default URL of yours login page to something uncommon which is
hard to guess like for example:
www.site.com/glass.php
www.site.com/myway.php

Monday, July 22, 2013

Deny a user by IP Address & How to stop someone looking at your htaccess file

1.Deny a user by IP Address
There may come a time when you unfortunately need to ban someone from visiting your website completely. This is very easy to do using htaccess and can be useful if there is a spammer or disgruntled member attacking your site (something which unfortunately happens a lot to forum and blog owners).
To ban someone completely all you need to do is add the following code to your .htaccess file. Simply replace the ip address below with the ip of the person you want to ban
#ban users from visiting the site
order allow,deny
deny from 123.45.6.7
allow from all
If you want to ban more people you simply add more lines, like this :
#ban users from visiting the site
order allow,deny
deny from 123.45.6.7
deny from 987.65.4.3
deny from 56.45.34.456
allow from all


2.How to stop someone looking at your htaccess file
One of the first things you want to do is make sure no one tries to look at your .htaccess file. This is actually very easy to do, all you need to do is make use of the Files option.

Just enter the code below to block people seeing your .htaccess file.

# Block people seeing the htaccess file
<Files .htaccess>
order deny,allow
deny from all
</Files>
If there is no .htaccess file there then you need to create one. Thankfully, this is very easy to do. All you need to do is open a text editor and save a blank document as .htaccess. Save the file exactly as it is stated there in bold ie. there is no writing before the extension. You need to save it as .htaccessand not htaccess.txt or document1.htaccess or whatever.

When uploading you should always :
  • Upload in ASCII mode, not binary
  • CHMOD the file to 644 (this isn’t absolutely necessary per say but it’s advisable, it means your server can access it but it can’t be seen via a browser).


Also, after editing your .htaccess file serveral times it may look a little complicated so I recommend adding a comment above the longer parts of code so that you know what each section is for when you look at the file again at a later date. To add a comment to the file you simply start the line with #, any code written after the # in the line will not be executed and is simply a reference for you in the future (and anyone else who may be working on your website ie. co-admin or whatever).

How to get rid of broken links – 404 errors from your website using Google Web Master Tool


Please keep the number of 404 errors and broken links on your site to the minimum, or none if possible, says Google. The basic idea is to help the robots index content more efficiently from websites and help index relevant information.
Both you and me would have number of 404 errors on your blogs and websites, now in order to align yourself more towards the league of good guys who follow the standard guidelines, let’s see how we can detect and avoid the number of broken links on a website.
  1. Making use of Google Webmasters
    Google Webmasters is a wonderful tool that can help you in detecting and getting rid of broken links (or all those errors) from your site.
    Join in using your Google ID at Webmasters and add your site to the account.
    For this you have to,
    i) Add your website by providing the URL
    ii) Verify that you are the webmaster by uploading a file or adding a meta tag to the files.
    iii) Submit the XML sitemap
    After submitting the XML sitemap, you have to wait for the nest successful indexing to happen. This depends on your crawling frequency.
  2. Finding out the errors
    Soon after the next successful indexing is done, while you visit the Webmasters dashboard, you will be greeted with all the errors possibly found on your website. And this includes broken links, http errors, 404 errors, broken sitemap files etc.
  3. Trace the broken link
    Click on the “Linked from” page to get a popup that will give you the URL that carries the broken link.
     
  4. Find out the URL from your website and delete it.
    It might be from one of those articles you linked to, which is no longer existing or a dead link. Most of the time Google will tell you the exact URL that’s suggesting the broken link. So just get rid of it.
  5. Now, rebuild your sitemap and resubmit to Google through Webmasters
    Wait for a fresh new indexing. If you have successfully deleted all broken links you should not see that yellow, annoying icon in your dashboard !
Keeping your site clean off broken links and http errors are a sign that you are a “good guy” to search engines. It’s just a simple ignorable thing but technically, will pass lot of value to you.



Redirecting "not found" pages in to a common page using htaccess

Lets Start

    RewriteEngine On
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^(.*)$ comingsoonpage.php

The following procedure, guides on how to redirect.
  1. If you are using cPanel, log into front-end and click on “File Manager” application. Make sure you enable the hidden file viewers.
  2. Go to the root folder of the website & edit or create ”.htaccess” file.
  3. Add the following code & replace YOURURL with the URL where you want the error 404 page redirected to.
  4. Click save & you are done.
1
ErrorDocument 404 http://YOURURL to redirect from the 404 error 

You can do it in your .htaccess file which should be in your site root directory. 
In your .htaccess file add this line:
ErrorDocument 404 /error404.htm (or any name you like)

Create a HTML page such as error404.htm (or any name you like) That page can have text saying something nice like "Sorry that page doesn't seem to exist here" or whatever... 
In the HEAD section of the page put:
<meta http-equiv=REFRESH CONTENT="5; URL=http://your-site-URL/"> 
That page will be viewed for 5 seconds and then redirect to your-site-URL/


or you could leave out the meta refresh and just have text and a link to your home page.

All About htaccess

  1. Overview
  2. Requirements
  3. General instructions
  4. http://example.com/folder1/ to http://example.com/folder2/
    1. .htaccess
    2. Test
    3. Code explanation
  5. http://example.com/file.html to http://example.com/folder1/file.html
    1. .htaccess
    2. Test
    3. Code explanation
  6. Add www or https
    1. .htaccess
    2. Test
    3. Code explanation
  7. Regular expressions
  8. Troubleshooting
    1. 404 Not Found
    2. Infinite URL, timeout, redirect loop


1.Overview
The Apache module mod_rewrite allows you to rewrite URL requests that come into your server and is based on a regular-expression parser. The examples presented here show how to:
  • Direct requests for one subdirectory to a different subdirectory or the primary directory (document root).http://example.com/folder1/ becomes http://example.com/folder2/ or just http://example.com/.
  • Direct requests to a subdirectory. http://example.com/file.html becomeshttp://example.com/folder1/file.html.
  • Add www to every request. http://example.com becomes http://www.example.com. Or, convert http:// tohttps://.
When implemented correctly, mod_rewrite is very powerful. There are many other applications for mod_rewrite that you can learn about at apache.org. Please reference their website for other possible rewrite scenarios.
2.Requirements
Before you start, please have handy:
  • Free web Hosting Servers like 000hosting.com or
  • Better to have a Own Server with Cpanel 
  • Else Google to find how to configure a Server and Use it running Xamp


3.General instructions
  1. Create a plain text .htaccess file (click the link for details on this type of file), or add the lines from the example to the top of your existing .htaccess file.
  2. Add the lines from the appropriate example to your file. Note that you should replace example text with your own information. Replace example.com with your own domain, folder1 with your own folder name, file.htmlwith your own file name, etc. Save your changes.
  3. Use Cpanel to upload the file to the document root of the appropriate domain. If your domain is example.com, you should upload the file to:
    • domains/example.com/html/
That's it! Once you've uploaded the file, the rewrite rule should take effect immediately.
Some Content Management Systems (CMSs), like WordPress for example, overwrite .htaccess files with their own settings. In that case, you may need to figure out a way to do your rewrite from within the CMS.

4.http://example.com/folder1/ to http://example.com/folder2/
http://example.com/folder1/ becomes http://example.com/folder2/ or just http://example.com/.
domains/example.com/html/folder2/ must exist and have content in it for this to work.

4.1
.htaccess
This .htaccess file will redirect http://example.com/folder1/ to http://example.com/folder2/. Choose this version if you don't have the same file structure in both directories:
Filename: .htaccess
Options +FollowSymLinks
RewriteEngine On
RewriteRule ^folder1.*$ http://example.com/folder2/ [R=301,L]
  • This .htaccess file will redirect http://example.com/folder1/ to plain http://example.com/. Choose this version if you want people redirected to your home page, not whatever individual page in the old folder they originally requested:
Filename: .htaccess.
Options +FollowSymLinks
RewriteEngine On
RewriteRule ^folder1.*$ http://example.com/ [R=301,L]
  • This .htaccess file will redirect http://example.com/folder1/file.html tohttp://example.com/folder2/file.html. Choose this version if your content is duplicated in both directories:
File name: .htaccess
Options +FollowSymLinks
RewriteEngine On
RewriteRule ^folder1/(.*)$ http://gs.mt-example.com/folder2/$1 [R=301,L]

4.2
Test
Upload this file to folder2 (if you followed the first or third example) or your html folder (if you followed the second example) withFTP:
Filename: index.html
<html>
<body>
Mod_rewrite is working!
</body>
</html>
Then, if you followed the first or second example, visit http://example.com/folder1/ in your browser. You should see the URL change to http://example.com/folder2/ or http://example.com/ and the test page content.
If you followed the third example, visit http://example.com/folder1/index.html. You should be redirected to http://example.com/folder2/index.html and see the test page content.
4.3
Code explanation
  • Options +FollowSymLinks is an Apache directive, prerequisite for mod_rewrite.
  • RewriteEngine On enables mod_rewrite.
  • RewriteRule defines a particular rule.
  • The first string of characters after RewriteRule defines what the original URL looks like. There's a more detailed explanation of the special characters at the end of this article.
  • The second string after RewriteRule defines the new URL. This is in relation to the document root (html) directory. / means the html directory itself, and subfolders can also be specified.
    • $1 at the end matches the part in parentheses () from the first string. Basically, this makes sure that sub-pages get redirected to the same sub-page and not the main page. Leave it out to redirect to the main page. (It is left out in the first two examples for this reason. If you don't have the same content in the new directory that you had in the old directory, leave this out.)
  • [R=301,L] - this performs a 301 redirect and also stops any later rewrite rules from affecting this URL (a good idea to add after the last rule). It's on the same line as RewriteRule, at the end.

5. http://example.com/file.html to http://example.com/folder1/file.html
http://example.com/file.html becomes http://example.com/folder1/file.html.
Note: The directory folder1 must be unique in the URL. It won't work for http://example.com/folder1/folder1.html. The directoryfolder1 must exist and have content in it.
5.1
.htaccess
  • This .htaccess file will redirect http://example.com/file.html to http://example.com/folder1/file.html:
Filename: .htaccess
Options +FollowSymLinks
RewriteEngine On
RewriteCond %{HTTP_HOST} example.com$ [NC]
RewriteCond %{HTTP_HOST} !folder1
RewriteRule ^(.*)$ http://example.com/folder1/$1 [R=301,L]

5.2
Test
Upload this file to folder1 with FTP:
Filename: index.html
<html>
<body>
Mod_rewrite is working!
</body>
</html>
Then, visit http://example.com/ in your browser. You should see the URL change to http://example.com/folder1/ and the test page content.
5.3
Code explanation
  • Options +FollowSymLinks is an Apache directive, prerequisite for mod_rewrite.
  • RewriteEngine On enables mod_rewrite.
  • RewriteCond %{HTTP_HOST} shows which URLs we do and don't want to run through the rewrite.
    • In this case, we want to match example.com.
    • ! means "not." We don't want to rewrite a URL that already includes folder1, because then it would keep getting folder1 added, and it would become an infinitely long URL.
  • [NC] matches both upper- and lower-case versions of the URL.
  • RewriteRule defines a particular rule.
  • The first string of characters after RewriteRule defines what the original URL looks like. There's a more detailed explanation of the special characters at the end of this article.
  • The second string after RewriteRule defines the new URL. This is in relation to the document root (html) directory. / means the html directory itself, and subfolders can also be specified.
    • $1 at the end matches the part in parentheses () from the first string. Basically, this makes sure that sub-pages get redirected to the same sub-page and not the main page. Leave it out to redirect to the main page of the subdirectory.
  • [R=301,L] - this performs a 301 redirect and also stops any later rewrite rules from affecting this URL (a good idea to add after the last rule). It's on the same line as RewriteRule, at the end.

6. Add www or https
http://example.com becomes http://www.example.com. Or, http://example.com becomes https://example.com.
6.1
.htaccess
  • This .htaccess file will redirect http://example.com/ to http://www.example.com/. It will also work if an individual file is requested, such as http://example.com/file.html:
Filename:.htaccess
Options +FollowSymLinks
RewriteEngine on
RewriteCond %{HTTP_HOST} ^example.com [NC]
RewriteRule ^(.*)$ http://www.example.com/$1 [R=301,L]
  • This .htaccess file will redirect http://example.com/ to https://example.com/. It will also work if an individual file is requested, such as http://example.com/file.html:
Filename: .htaccess
RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://www.example.com/$1 [R,L]

6.2
Test
Visit http://example.com in your browser. You should see that the same page is displayed, but the URL has changed tohttp://www.example.com (first example) or https://example.com (second example).
Also, http://example.com/file.html will become http://www.example.com/file.html or https://example.com/file.html.
6.3
Code explanation
  • Options +FollowSymLinks is an Apache directive, prerequisite for mod_rewrite.
  • RewriteEngine On enables mod_rewrite.
  • RewriteCond %{HTTP_HOST} shows which URLs we do and don't want to run through the rewrite.
    • In this case, we want to match anything that starts with example.com.
  • [NC] matches both upper- and lower-case versions of the URL.
  • RewriteRule defines a particular rule.
  • The first string of characters after RewriteRule defines what the original URL looks like. There's a more detailed explanation of the special characters at the end of this article.
  • The second string after RewriteRule defines the new URL. This is in relation to the document root (html) directory. / means the html directory itself, and subfolders can also be specified.
    • $1 at the end matches the part in parentheses () from the first string. Basically, this makes sure that sub-pages get redirected to the same sub-page and not the main page.
  • [R=301,L] - this performs a 301 redirect and also stops any later rewrite rules from affecting this URL (a good idea to add after the last rule). It's on the same line as RewriteRule, at the end.

7. Regular expressions
Rewrite rules often contain symbols that make a regular expression (regex). This is how the server knows exactly how you want your URL changed. However, regular expressions can be tricky to decipher at first glance. Here's some common elements you will see in your rewrite rules, along with some specific examples.
  • ^ begins the line to match.
  • $ ends the line to match.
    • So, ^folder1$ matches folder1 exactly.
  • . stands for "any non-whitespace character" (example: a, B, 3).
  • * means that the previous character can be matched zero or more times.
    • So, ^uploads.*$ matches uploads2009, uploads2010, etc.
    • ^.*$ means "match anything and everything." This is useful if you don't know what your users might type for the URL.
  • () designates which portion to preserve for use again in the $1 variable in the second string. This is useful for handling requests for particular files that should be the same in the old and new versions of the URL.
See more regular expressions at perl.org.
8. Troubleshooting
 8.1 404 Not Found
Examine the new URL in your browser closely. Does it match a file that exists on the server in the new location specified by the rewrite rule? You may have to make your rewrite rule more broad (you may be able to remove the $1 from the second string). This will direct rewrites to the main index page given in the second string. Or, you may need to copy files from your old location to the new location.
If the URL is just plain wrong (like http://example.com/folder1//file.html - note the two /s) you will need to re-examine your syntax. (mt) Media Temple does not support syntax troubleshooting.
8.2 Infinite URL, timeout, redirect loop
If you notice that your URL is ridiculously long, that your page never loads, or that your browser gives you an error message about redirecting, you likely have conflicting redirects in place.
You should check your entire .htaccess file for rewrite rules that might match other rewrite rules. You may also need to check .htaccess files in subdirectories. Note that FTP will not show .htaccess files unless you have enabled the option to view hidden files and folders. See our .htaccess article for details.
Also, it's possible to include redirects inside HTML and PHP pages. Check the page you were testing for its own redirects.
Adding [L] after a rewrite rule can help in some cases, because that tells the server to stop trying to rewrite a URL after it has applied that rule.
Those rules are ordered almost completely backwards, and you've apparently ignored what I said about using a canonical URL and optimizing the trailing-slash rule above... 

Options +FollowSymLinks -MultiViews
RewriteEngine on
#
### Disallow Image Hotlinking
RewriteCond %{HTTP_REFERER} .
RewriteCond %{HTTP_REFERER} !^http://www\.example\.com
RewriteRule \.(jpe?g¦gif¦bmp¦png)$ - [F]
#
### Externally redirect to remove ".php" if the user adds it
RewriteCond %{THE_REQUEST} ^GET\ /([^/]+/)*[^.]+\.php(\?[^\ ]*)?\ HTTP/
RewriteRule ^(([^/]+/)*[^.]+)\.php$ http://www.example.com/$1 [R=301,L]
#
### Externally redirect to remove double slashes
RewriteCond %{REQUEST_URI} ^(.*)//(.*)$
RewriteRule . http://www.example.com/%1/%2 [R=301,L]
#
### Externally redirect to remove trailing slash
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.+)/$ http://www.example.com/$1 [R=301,L]
#
### Externally redirect non-canonical hostname requests to canonical 
### domain (if not already done by one of the preceding rules)
RewriteCond %{HTTP_HOST} !=www.example.com
RewriteRule ^(.*)$ http://www.example.com/$1 [R=301,L]
#
### Internally rewrite requests for URLs which do not resolve
### to physically-existing files or directories to a PHP file
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ $1.php [L,QSA]

Note that the rules are now in order: External redirects in order from most-specific patterns/conditions to least-specific, followed by internal rewrites, again in orderfrom most-specific to least-specific.
This prevents multiple chained redirects in cases where two or more 'errors' are present in the URL, and prevents 'exposing' your internally rewritten filepaths as URLs. The 403-Forbidden rule goes first, as there's no use wasting time redirecting to correct an unwelcome request




Wednesday, July 3, 2013

How To Disable Copying Text From Blog And Website?


Today, I want my readers to know how to protect your hard work put on creating and writing new articles on your website or blog from being copied by others. Copying the text from your site and blog and posting it elsewhere is common on the Internet. There are sites which doesn't allow us to copy the text from the web pages. The copy function is disabled in the site by the site admin in order to protect the site. We will see how to implement the same methodology for Blogger and website. This trick is valid for any sites. This trick is going to disable (Ctrl+A) function for your site.


Please bear in mind that this is no guarantee that your content will not be copied. Someone with a little bit of experience may be able to bypass this JavaScript. But at least you are not making it so easy for them.
Please find below the HTML code that you need to instert in your blogger template or website in order to disable the copy paste function.

Features:
1.) It Will Not Allow The Visitor To Highlight Your Text.
2.) It Will Also Disable (CTRL+A) Function To Highlight.
3.) When There Is No Highlighting, No One Can Copy Your Text.
4.) Easy To Install And Quick To Load.
5.) Secure Your Content From Newbies.

How To Add In Blogspot?
1.) Go To Your www.blogger.com
2.) Open Your Desire Blog.
3.) Go To Layout.
4.) Click "Add A Gadget" Where You Want To Add It.
5.) Now Scroll To "HTML-JAVASCRIPT"
6.) Click "+" Icon To Add It.
7.) Now Copy The Below Code And Paste It To There.
8.) Leave The Title Empty.
9.) Click Save, Now You Are Done.


How To Add In Website?
1.) Just Go To Your HTML File.
2.) Now Copy The Below Code And Paste It Between <body> </body>.
3.) Save It, Now You Are Done.


________________________________________________________________
<script language='JavaScript1.2'>
function disableselect(e){
return false
}
function reEnable(){
return true
}
document.onselectstart=new Function (&quot;return false&quot;)
if (window.sidebar){
document.onmousedown=disableselect
document.onclick=reEnable
}
</script>
________________________________________________________________

Tuesday, July 2, 2013

12 Types of DDoS Attacks Used By Hacker


12 Types of DDoS Attacks
Distributed denial of service (DDoS) attacks are a growing concern with far-reaching effects for businesses and organizations of all sizes. DDoS attacks are used by criminal enterprises, politically-motivated cyber terrorists, and hackers hoping to bring websites down for fun or profit.
Denial of service occurs when a target machine is flooded with malicious traffic until resources are exhausted and the system goes offline. Distributed denial of service works much the same way, except in this particular instance the attack is amplified by enlisting other machines and computers in the attack. Most large-scale DDoS attacks rely on botnets.

DDoS Attacks Are Getting Stronger, More Sophisticated, and Difficult to Stop

The current climate of cyber threats has been well documented and highlighted in the media. Banks and financial institutions faced countless attacks during 2012 and attacks have evolved to become more effective. Distributed denial of service attacks have also been used as distractions to divert attention from fraud and network intrusion.
Now, more than ever, it is crucial for organizations and online retailers to measure their risk of attack and create a DDoS attack protection plan in advance in order to mitigate risk and enable a fast recovery.
Here are some common forms of DDoS attacks (both past and present):

UDP Flood

User Datagram Protocol is a sessionless networking protocol. One common DDoS attack method is referred to as a UDP flood. Random ports on the target machine are flooded with packets that cause it to listen for applications on that those ports and report back with a ICMP packet.

SYN Flood

A “three-way handshake”, which is a reference to how TCP connections work, are the basis for this form of attack. The SYN-ACK communication process works like this:
  • First, a “synchronize”, or SYN message, is sent to the host machine to start the conversation.
  • Next, the request is “acknowledged” by the server. It sends an ACK flag to the machine that started the “handshake” process and awaits for the connection to be closed.
  • The connection is completed when the requesting machine closes the connection.
A SYN flood attack will send repeated spoofed requests from a variety of sources at a target server. The server will respond with an ACK packet to complete the TCP connection, but instead of closing the connection the connection is allowed to timeout. Eventually, and with a strong enough attack, the host resources will be exhausted and the server will go offline.

Ping of Death

Ping of death (”POD”) is a denial of service attack that manipulates IP protocol by sending packets larger than the maximum byte allowance, which under IPv4 is 65,535 bytes. Large packets are divided across multiple IP packets – called fragments – and once reassembled create a packet larger than 65,535 bytes. The resulting behemoth packet causes servers to reboot or crash.
Note: This was a real problem in early years (think 1996), but doesn’t have the same effect these days. Most ISPs block ICMP or “ping” messages at the firewall. However, there are many others forms of this attack that target unique hardware or applications. Some other names are “Teardrop”, “Bonk”, and “Boink”.

Reflected Attack

A reflected attack is where an attacker creates forged packets that will be sent out to as many computers as possible. When these computers receive the packets they will reply, but the reply will be a spoofed address that actually routes to the target. All of the computers will attempt to communicate at once and this will cause the site to be bogged down with requests until the server resources are exhausted.

Peer-to-Peer Attacks

Peer-to-Peer servers present an opportunity for attackers. What happens is instead of using a botnet to siphon traffic towards the target, a peer-to-peer server is exploited to route traffic to the target website. When done successfully, people using the file-sharing hub are instead sent to the target website until the website is overwhelmed and sent offline.

Nuke

Corrupt and fragmented ICMP packets are sent via a modified ping utility to keep the malicious packets to be delivered to the target. Eventually, the target machine goes offline. This attack focuses on comprising computer networks and is an old distributed denial of service attack.

Slowloris

This type of distributed denial of service attack can be especially difficult to mitigate. It’s most notable use was in the 2009 Iranian Presidential election. Slowloris is a tool that allows an attacker to use fewer resources during an attack. During the attack connections to the target machine will be opened with partial requests and allowed to stay open for the maximum time possible. It will also send HTTP headers at certain intervals. This adds to the requests, but never completes them – keeping more connections open longer until the target website is no longer able to stay online.

Degradation of Service Attacks

The purpose of this attack is to slow server response times. A DDoS attack seeks to take a website or server offline. That is not the case in a degradation of service attack. The goal here is to slow response time to a level that essentially makes the website unusable for most people. Zombie computers are leveraged to flood a target machine with malicious traffic that will cause performance and page-loading issues. These types of attacks can be difficult to detect because the goal is not to take the website offline, but to degrade performance. They are often confused with simply an increase in website traffic.

Unintentional DDoS

Unintended distributed denial of service happens when a spike in web traffic causes a server to not be able to handle all of the incoming requests. The more traffic that occurs, the more resources are used. This causes pages to timeout when loading and eventually the server will fail to respond and go offline.

Application Level Attacks

Application level attacks target areas that have more vulnerabilities. Rather than attempt to overwhelm the entire server, an attacker will focus their attack on one – or a few – applications. Web-based email apps, WordPress, Joomla, and forum software are good examples of application specific targets.

Multi-Vector Attacks

Multi-vector attacks are the most complex forms of distributed denial of service (DDoS) attack. Instead of utilizing a single method, a combination of tools and strategies are used to overwhelm the target and take it offline. Often times, multi-vector attacks will target specific applications on the target server, as well as, flood the target with a large volume of malicious traffic. These types of DDoS attacks are the most difficult to mitigate because the attack come in different forms and target different resources simultaneously.

Zero Day DDoS

A “Zero Day” based attack is simply an attack method that to date has no patches. This is a general term used to describe new vulnerabilities and exploits that are still new.

Get DDoS Protection

In the growing climate of cyber groups and criminals using distributed denial of service as a way to disrupt businesses and take websites offline, it’s vital to incorporate DDoS attack protection into your business continuity plan. DDoS protection is insurance for your online presence. If you need help stopping DDoS attacks Contact me.