Hello!

I work in a security/pentesting company and in the last year the demand for DDoS testing has dramatically increased. The issue is that the customer is not interested in what I call a mislabeled load test, but wants us to test the reaction time and reliability of the (almost always outsourced, mostly to their ISP) DDoS protection provider they are using for their applications, plus the impact of the countermeasures launched to reduce an ongoing attack (which are usually various blocking rules made by the DDoS protection provider).

I’ve identified several issues – figuring out from where to perform the test to still go though the DDoS protection provider (that’s very often an ISP guarding their perimeter), how to avoid affecting unrelated third parties, and how to scale up the attack to at least trigger the detection thresholds of the DDoS protection provider while still keeping the test legal and price in a reasonable ranges, since the cost-value tradeoff is still pretty important.

Since I’ve given it a lot of though and I was unable to come up with a solution, and there are legal companies (not counting the random sites that take payment in bitcoin, but legit security companies that you contact for a quote), I’m really intrigued about how they do it and what am I missing. Is there anyone here who has experience with similar kind of engagement?

I hope that cross-posting from security stackexchage is ok. Copying the text of the post, since it’s mine, here seems unnecessary, but if it is an issue I will fix it and paste the content here.

Here are more details, with more in-depth description of the approaches I’ve explored (and rejected), and ideas I’ve had for the solution:
How to test the reaction of an outsourced DDoS protection provider to a DDoS attack, similar to a red teaming engagement?

Thank you! The issue is bugging me and I honestly think that it’s a pretty interesting challenge to think about, that’s why I’m also posting it here.

Hey guys,

TL;DR – I got an Onkyo TX-NR646, front panel and remote is unresponsive, but amp works through Wi-Fi. Skip the questions at the end if u dont wanna read the whole story

I am an Onkyo Amp user ( yeah, ik sucks to be me). Bit of a backstory, I owned 2, one of them broke spend 75% of original cost to ship a replacement board from over 6000km away, coz I live in Sri Lanka.

The one I have the problem is with the Onkyo TX-NR646, somewhere around doing a software update it crashed… and you guessed I had to replace the WHOLE DAMN BOARD, coz onkyo thats why.

Past a year or so, everything is fine with the TX till yesterday, the remote and the front panel stopped working, at all. I have to say all the AMP features work 100%, I have connected it to Wi-Fi so I can use the Wi-Fi remote and it works perfectly. But the buttons on the front and the remote do nothing at all. I figured it was a loose ribbon so I opened it up and re connected stuff and still same issue. Somehow the front panel started working, for like 30 seconds and stopped. I resetted it in that time frame and regretted cause now I have no Wi-Fi control either. Somehow I managed to mess around and quickly connected to Wi-Fi before it became unresponsive.

​

Before anyone mentions, ik a lot about onkyo amps and their problems so I did the usual, power off, disconnect everything blah blah blah. Right not I am not sure if its a software or a hardware problem.

​

So I booted up my PC and decided to access the Linux Shell of the Amp (telnet). Worked fine, I found a github repo on some EISCRP commands, so it was easy to get by, but now I wanna try two things and that’s what I want your help on.

​

Question 01 – How to do a fully Software reset of the amp, using the command-line shell?

Question 02 – Can I get a backup (ftp doesn’t work btw) of the entire software to my computer, in case something happens?

Question 03 – Should I do a firmware update (it is already updated to latest) and hope that it starts working again?

Thanks