[SIM-4910472]

What makes some ddos viruses gbps higher than others, and how do they calculate their gbps?

[shaino]

Some use a better ddosing technique than others do

[SIM-4910472]

Some use a better ddosing technique than others do

What are those other techniques?

[shaino]

What are those other techniques?

no idea, prob just sending stuff faster but im just guessing rn im not the guy to really ask

[SIM-4910472]

"Better ddosing technique"
You arent wrong but it's a very shit way of describing it.

People find bypasses, or people push their bots harder. If you send larger payloads for L4 you push more power, but at the same time stress the bot. same for L7 with threads.

You need to balance power over usages imo, no point in pushing it to the limit if the limit breaks it

What is L4 and L7?

[SIM-4910472]

Sorry I forgot not everyone uses those terms, they represent the Layers on the OSI model, so l4 (layer 4) is the transport level, focusing on tcp and udp attack based methods. L7 (layer 7) is the application level, so HTTP or HTTPS, focused on typically web based attacks for websites and so on.




I hope that cleared anythng up.

Yes, thank

[LogiTech]

I have no idea what's going on in that scene these days as far as protection and techniques used to bypass. There's basic denial of service attacks that rely on sheer volume. Others will target a specific protocol or services like Apache.

You should consider denial of service attacks a broad description as even maliciously cutting the power you have physical access to is considered a denial of service attack. That's a really dumb technicality, but I'm trying to reinforce my point that there's many ways to carry out a DoS attack.

Edit:
I just typed all that and realized I didn't answer your question the right way. It's not always about the volume of data you can dish out, but it is the easiest. Start with a google search on DNS amplification. It will give you an idea of why some attacks can be more efficient than others.

[ownd]

I know this is sort of off topic but what would be a way currently to do so if there is something on the HF or someone that can peform it might want to get PM me for further educating me :)

[SIM-4910472]

Very good explanation.


Also very worth noting and adding is the number of connections.
Botnet DDOS attacks are based on the number of connections and which socket can be exploited if it is a domain or website, port if its a direct IP or provisioned line if its a service.

Some more criminal DDOS stresser nets attack CO, which is based on DSL. DSLAM > BPX > Turnstone > Redback(L7).
These are typically more advanced provision line attacks which are meant to deter an entire service center (bank robbery, or larger criminal hit which relies on internet connection or VOIP to notify authorities, some choose to attack the service provider to buy more time).

DDOSing somebody on a video game or a website to obtain ransom, however, is a giant waste of time and a misdirected use of resources.

Why don't big companies like google or facebook get ddosed then?

[Shadow_Cloud]

Why don't big companies like google or facebook get ddosed then?

They do, all the time. You just get to a point where your mitigation is kicking in and you can scale horizontally on the fly.

[SIM-4910472]

They do, all the time. You just get to a point where your mitigation is kicking in and you can scale horizontally on the fly.

seems like a waste of time to try to ddos them.

---

for what? ransom?

you think they dont have backup SSL connections?

i don't know why they wouldn't

[Shadow_Cloud]

seems like a waste of time to try to ddos them.

---

Yes but that's not quite the same as it not happening. The really trick attacks to get rid of are on layer7, they seem almost indistinguishable from your legit traffic. So as an example, slamming a website with registration requests from multiple sources using data that's hard to separate from actual users.

[SIM-4910472]

Yes but that's not quite the same as it not happening.  The really trick attacks to get rid of are on layer7, they seem almost indistinguishable from your legit traffic.  So as an example, slamming a website with registration requests from multiple sources using data that's hard to separate from actual users.

so it could be possible?

[Shadow_Cloud]

so it could be possible?

Could what be possible? I'm not sure I understand your question?

[SIM-4910472]

Could what be possible?  I'm not sure I understand your question?

could it be possible to ddos google?