Skip to content

Testrun can trigger DOS attack prevention mechanisms in devices that can yield false negatives for services in reports #1531

@duncangreene

Description

@duncangreene

Describe the bug
The aggressive scanning nature of Testrun can trigger DOS attack prevention mechanisms in devices.

Image

Naturally, this can (and will in the case of the above) cause legitimate services that Testrun wants to detect, to close. E.g. the web server running on port 5011 in the case of the above. This could manifest as a false negative in a test report.

Expected behavior
Testrun should be more graceful in its approach to avoid triggering DOS prevention mechanisms that subsequently 'hide' legitimate services from Testrun's services detection mechanism.

Environment (please provide the following information about your setup):

  • Version 2.3.3

Additional context
This subject has been raised a number of times, notably in #885 and #1290. PR's #1516 and #1521 go some way in making Testrun more graceful, but that's only at the broad TCP and UDP service scan layer.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions