Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 32 guests online
Free Business and Tech Magazines and eBooks
You are here:
Home
Ethical Hacking Discussions and Related Certifications
Network Pen Testing
Crashing a server
EH-Net
May 23, 2013, 02:28:51 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Ethical Hacking Discussions and Related Certifications
>
Network Pen Testing
(Moderator:
don
) >
Crashing a server
Pages:
1
[
2
]
Go Down
« previous
next »
Print
Author
Topic: Crashing a server (Read 13828 times)
0 Members and 1 Guest are viewing this topic.
servercrasher365
Newbie
Offline
Posts: 11
Re: Crashing a server
«
Reply #15 on:
April 30, 2008, 07:51:04 AM »
Thanks a ton.However, one thing my supervisor says is that if the test tool cant crash the server,it suggests that the tool aint good enuff.
But it cud also mean that the server is robust and secure in which case i can list out the reasons y the attacks arent working anymore and the explanations wud fetch me the required credits.
thanx 4 the info bout the daemons,i wasnt aware of that...so in that case DoS isnt that easy to implement as some of the earlier posts suggest...
Logged
servercrasher365
Newbie
Offline
Posts: 11
Re: Crashing a server
«
Reply #16 on:
April 30, 2008, 07:56:15 AM »
"the listed attack vectors only make sense if the box you are trying to test is running the vulnerable service"
I wouldnt be knowing what vulnerablities,if any that the server wud be running.So I assume,that i wud have to scan for them first and then based on the search,launch attacks to exploit them...did i get that one right?
Logged
Andrew Waite
Hero Member
Offline
Posts: 928
Re: Crashing a server
«
Reply #17 on:
April 30, 2008, 08:00:05 AM »
Quote from: servercrasher365 on April 30, 2008, 07:56:15 AM
"the listed attack vectors only make sense if the box you are trying to test is running the vulnerable service"
I wouldnt be knowing what vulnerablities,if any that the server wud be running.So I assume,that i wud have to scan for them first and then based on the search,launch attacks to exploit them...did i get that one right?
Makes sense to me
if you could link your tester to a nessus/nmap/etc. scan output then you're getting more automated
Quote from: servercrasher365 on April 30, 2008, 07:51:04 AM
...so in that case DoS isnt that easy to implement as some of the earlier posts suggest...
Not entirely true, DoS attacks can be the simplest form of assault on a system (other than SE
). But if a system isn't running the service/application you are attacking it is just going to ignore you.
More basically, if you are trying to DoS a system using the apache2 attack you mentioned for example. If the system isn't running apache2 to server web documents then there is no service for you to deny...
Same way you don't need to bring a web server to it's knees to effectively stop it serving web content. Again, I'd recommend that you make sure that you have a well defined scope so that you can effectively prove you have achieved the targets of your project, thus getting the most marks for your project (which I'm assuming is your true goal
)
Logged
--
http://www.infosanity.co.uk
--
http://blog.infosanity.co.uk
vijay2
Full Member
Offline
Posts: 220
Re: Crashing a server
«
Reply #18 on:
April 30, 2008, 08:08:51 AM »
No offense to you but I think if this thread goes long enough, RR would end up doing the project for you. In my opinion you need to do some research and try to understand the methodology of Pen test to evaluate the security of the server. As I have always said Google is your friend. To start you off here are some links
http://en.wikipedia.org/wiki/Penetration_test
http://www.governmentsecurity.org/archive/t125.html
Hope this helps
Logged
GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
Andrew Waite
Hero Member
Offline
Posts: 928
Re: Crashing a server
«
Reply #19 on:
April 30, 2008, 08:11:53 AM »
Quote from: vijay2 on April 30, 2008, 08:08:51 AM
I think if this thread goes long enough, RR would end up doing the project for you.
No thanks, just got out of that game. I've just got used to sleeping again
Logged
--
http://www.infosanity.co.uk
--
http://blog.infosanity.co.uk
Andrew Waite
Hero Member
Offline
Posts: 928
Re: Crashing a server
«
Reply #20 on:
April 30, 2008, 09:01:59 AM »
Quote from: servercrasher365 on April 30, 2008, 08:49:04 AM
man,whats the matter with u???
Servercrash,
chill out. Vijay2 was trying to offer assistance, as he has said Google is your friend. But from my experience I know that Google can be daunting and unhelpful if you don't know what to search for, hence why I have given additional pointers.
If you don't agree with/appreciate someones input that's fine,
but
don't flame them, this isn't that kind of place.
Regardless, remember that Vijay2 did try to offer you assistance. That was on his time and his choice. I think you may have just stopped him (and possibly others) providing further assistance.
RR
Logged
--
http://www.infosanity.co.uk
--
http://blog.infosanity.co.uk
servercrasher365
Newbie
Offline
Posts: 11
Re: Crashing a server
«
Reply #21 on:
April 30, 2008, 09:14:49 AM »
ok,i removed that post....i really didnt mean to hurt or flame vijay2.....ofcourse theres plenty of stuff on the net,but as u said it doesnt help if you don't know what to search for.And i got to submit an initial proposal for the project by the 2nd,so there aint much time to read all the basic stuff n then plan things from the ocean of knowledge.so thats reason i ask experts like u.....vijay did try to help,but it really freaks me out when
i post something,RR or someone else trys to help n vijay has a thing or 2 to say bout it......just made me wonder what the matter was with him...anyways,its over as far as i'm concerned,peace with vijay2.cheers buddy....hope ur ok with me
Logged
vijay2
Full Member
Offline
Posts: 220
Re: Crashing a server
«
Reply #22 on:
April 30, 2008, 09:30:24 AM »
Well I would not have responded to your post .. but just wanted to clear a few things .. yes, this a forum and its all about helping. There are a lots of brilliant and knowledgeable folks here who would not miss an opportunity to help anyone. But, have you wondered why no one else except RR replied to your posts ? Its all about helping people who have done their basic research and need further assistance, you don't expect to be spoon feed here.
And my if you are asking for help please leave the attitude at home, that wont take you far. We are here to help each other and share knowledge.
Don - Correct me if I am wrong.
VJ
Logged
GPEN GCFA GCIH CISSP CISA GSEC OSCP C|EH Security+
oneeyedcarmen
Full Member
Offline
Posts: 233
Klaatu, Borada,Necktie?
Re: Crashing a server
«
Reply #23 on:
April 30, 2008, 09:36:07 AM »
I'm a little confused, and please correct me if I'm out of line. I mean no disrespect to anyone.
If, as you stated, this is for your dissertation, shouldn't you already have built a pretty solid foundation of knowledge on the subject? Especially if you're planning on testing your theories in an environment other than a lab?
Logged
Reluctant CISSP, Certified ASS
rok
Newbie
Offline
Posts: 39
Re: Crashing a server
«
Reply #24 on:
April 30, 2008, 09:40:32 AM »
I second vijay!!!
Logged
Andrew Waite
Hero Member
Offline
Posts: 928
Re: Crashing a server
«
Reply #25 on:
April 30, 2008, 09:51:42 AM »
Quote from: oneeyedcarmen on April 30, 2008, 09:36:07 AM
If, as you stated, this is for your dissertation, shouldn't you already have built a pretty solid foundation of knowledge on the subject? Especially if you're planning on testing your theories in an environment other than a lab?
Servercrash,
I was going to make this suggestion but oneeyedcarmen beat me to it. I'm not sure of your level of study as I don't know where you are studying but if you have 2 days to get the initial proposal in and you are needing information like this you may want to look at a less technical area, where research material will be easier to find and readily available.
As already stated when I completed my dissertation (UK BSc) my project was built on a technology that I had over one year's real world experience implementing, and still found it hard going.
Therefore I would ask one final question, 'Why have you chosen this project over any other?'
Either way, whatever your final topic as has been expressed by other posters you will get more respect, learn more information and ultimately complete a better project if you can fully understand and research the basics for yourself.
Good Luck.
Logged
--
http://www.infosanity.co.uk
--
http://blog.infosanity.co.uk
jason007
Newbie
Offline
Posts: 2
Re: Crashing a server
«
Reply #26 on:
April 30, 2008, 12:09:31 PM »
cant help ignore.This posts getting more n more interesting for all the wrong reasons
servercrasher,vijay2... grow up both of u!!
I wouldnt say servercrasher didnt do any research on the topic...seems looks like hes done some searching,but is looking for specific areas to focus on and continue probing.cant blame him for that,the topic is vast......but he himself seems to be a touch impatient about it!
As for vijay2,his previous post has a hint of sarcasm to it,atleast thats how it looks to me...
"No offense to you but I think if this thread goes long enough, RR would end up doing the project for you"
cmon,thats uncalled for....if u think like many here that servercrasher asked something too generic,u can always choose to ignore him rather than provoke ......
servercrasher,plz be more patient , work on ideas and come out with more specific queries......good luck
guys,help each other rather than question attitudes and where it would take people!!???
Logged
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4167
Editor-In-Chief
Re: Crashing a server
«
Reply #27 on:
April 30, 2008, 01:06:06 PM »
Great first post jason007 and welcome to EH-Net.
As to servercrasher's question, maybe it might be wise to pint out that there is a difference between crashing a server and a DoS.
If I walk up to one of my servers in a datacenter, and either unplug the network cable or properly shut it down, you could make the case that this is DoS since no users can get to it. But this would not be a case of crashing a server. To me, crashing a server would indicate something sinister or wrong that causes it to shut down improperly or restart.
In addition, a stress test is yet a third topic. It could be somewhat related to a crash or DoS but it doesn't have to be. I could run a stress test on a server and it doesn't come down. Depending on what your purpose is, this could be a successful or unsuccessful test.
So I guess I would agree with the overarching point of this thread which is to have servercrasher bring a tighter focus to his own project and then ask questions based on more specific topics.
Hope this helps,
Don
PS - Cooler heads always prevail!
Logged
CISSP, MCSE, CSTA, Security+ SME
jason007
Newbie
Offline
Posts: 2
Re: Crashing a server
«
Reply #28 on:
April 30, 2008, 06:10:28 PM »
Spot on Don n thanx 4 the welcome... servercrasher looks to be a bit naive and mayb he needs to discuss with his supervisor on the scope of this project which would help come up with more specific topics.but having said that one can't overly criticize him for that post.
to add to what Don said,server crashing can mean anything....u can do a dissertation on it for 3 months or a phd for 3 years n so on.......so nuffin wrong with the question,server crasher would have done quite a bit of reading,made a meal of it n now he wants to know what he should be focusin on..nothing wrong with tat!!......n i just noticed vijay2 in one of his previous posts says
"I am not clear what the goals are for the project or even is there a project."
i had be upset if some1 doubts my integrity,particularly if i care to be in an 'ethical' hackers forum.......
but vijay did try to help server crasher,so probably server guy should have gone light with him,.....I wish both of them can get over this small issue n support each other n everyone else.....
Logged
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4167
Editor-In-Chief
Re: Crashing a server
«
Reply #29 on:
April 30, 2008, 08:46:12 PM »
So let's call this one a day for now.
Thread closed.
Don
Logged
CISSP, MCSE, CSTA, Security+ SME
Pages:
1
[
2
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
GCIH - GIAC Certified Incident Handler
: Passed my GCIH
(4) by
Agoonie
Greetings
: Hi from the UK
(4) by
MrTuxracer
GCIH - GIAC Certified Incident Handler
: GCIH Free Practice test attempt
(0) by
prats84
News Items and General Discussion About EH-Net
: Change is Coming to EH-Net!!
(27) by
don
Network Pen Testing
: AIX Vulnerability Assessments
(2) by
ras76
Tutorials
: Need guidance
(9) by
hanyhasan
Programming
: Finished Python Course in Codecademy now what?
(15) by
hanyhasan
Network Pen Testing
: Ruby on Rails Vulnerabilities / Attacks in BackTrack 5 r3
(0) by
SUdoctstudent
Network Pen Testing
: De-ICE 1.140 released!
(2) by
superkojiman
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.