DDos - Possible to ...
 
Notifications
Clear all

DDos - Possible to hack a specific page, not whole site?

7 Posts
6 Users
0 Reactions
2,138 Views
 ding
(@ding)
Eminent Member
Joined: 17 years ago
Posts: 22
Topic starter  

Is it technically possible to bring down a specific web page on a web server by using DDos attack while the whole server is still operating?
For example, let's say that by using a DDos attack you want to prevent users from accessing a certain web page to block a specific content on that page, while allowing the web server still operating and serving the rest of other pages.
Any input would be appreciated.


   
Quote
(@joethomas)
Trusted Member
Joined: 16 years ago
Posts: 65
 

No. A DDoS attack involves millions of computers bombarding a server with traffic. It doesn't matter what web page they're accessing; it's the server itself that is being attacked. Ports are being blocked and the processor is forced to run at a snails pace - individual pages aren't the target here.


   
ReplyQuote
 ding
(@ding)
Eminent Member
Joined: 17 years ago
Posts: 22
Topic starter  

Thanks for a quick reply.
That is what I thought.
Recently there was an alleged DDos attack on Korean election commission's web site, according to this report. While the site was on attack, however, some specific pages were unavailable, but most other pages in the site were still accessible.
The unavailable pages contain information about the voting place.
The Korean cyber security force had concluded that it was indeed a DDos attack. ?


   
ReplyQuote
(@alastairfay)
Eminent Member
Joined: 14 years ago
Posts: 36
 

Thanks for a quick reply.
That is what I thought.
Recently there was an alleged DDos attack on Korean election commission's web site, according to this report. While the site was on attack, however, some specific pages were unavailable, but most other pages in the site were still accessible.
The unavailable pages contain information about the voting place.
The Korean cyber security force had concluded that it was indeed a DDos attack. ?

Depends on where the pages are stored. If it was a subdomain, then technically yes, it could still be up. People often include the subdomain as part of the 'main website'.

docs.website.com still remains up.

website.com remains up.

www.website.com gets DDoS'd… as it's a subdomain of website.com


   
ReplyQuote
Passmark
(@passmark)
Reputable Member
Joined: 14 years ago
Posts: 376
 

Another common configuration is to have a web server and a separate database server.

So if the DDOS involved a complicated SQL query, then the database server might be brought down and other static pages are left OK.

There is also the possibility that it was just random. e.g. Only 1 in 10 requests got served up as a result of the load, and it wasn't related to the particular page.


   
ReplyQuote
(@Anonymous 6593)
Guest
Joined: 17 years ago
Posts: 1158
 

Is it technically possible to bring down a specific web page on a web server by using DDos attack while the whole server is still operating?

'Web server' is a rather ambiguous term. It could refer to the hardware (and, if there's a load-balancing scheme in place, to all hardware systems sharing the load), to the actual HTTP server (which may host several virtual hosts), and also to a particular virtual host within the base server.

In general, I suspect the answer is no. But given some particular server software and a web page that relies on particular DDosable services, either in that server software or in some backend, I don't think it would be technically impossible.

One such special case could be a page that is redirected from the main site ('www.xyz.com') to another site ('www.pqr.org'). If the DDos attack targets 'www.pqr.org', to any user trying to access the page on 'www.xyz.com' it would seem that that single page was inaccessible, while the rest of the xyz.com site worked perfectly.

No, that doesn't seem to be what the article you refer to is about. But then I don't see that the article says anything about singling out one or more web pages on a particlar server either as far a I interpret that text it's about DDosing of entire websites. Or is there additional information somewhere else?


   
ReplyQuote
(@twjolson)
Honorable Member
Joined: 17 years ago
Posts: 417
 

'Web server' is a rather ambiguous term. It could refer to the hardware (and, if there's a load-balancing scheme in place, to all hardware systems sharing the load), to the actual HTTP server (which may host several virtual hosts), and also to a particular virtual host within the base server.

I agree, wouldn't it be more accurate to say IP Address? DDoS attacks an ip address and the machine behind that. That might be just one domain (mydomain.com) and its subdomain, or it could be a subdomain (sub.mydomain.com), or even a group of domains, if they are all housed on the same machine.

So, if the pages that were unavailable were on one machine/IP, and the functional ones on another machine/IP, then maybe. Or, as someone pointed out, the database could have been attacked, leaving the actual pages operational.

Correct me if I am in error, please.


   
ReplyQuote
Share: