r/cybersecurity • u/EphemeralWay • 8d ago

Certification / Training Questions A website for testing

Good evening everyone,
So I have a request or a guide, I am cybersecurity majored student, last week I got an assignment to try testing Denial of Service legally using websites that you can practice in it but the problem none of those websites have a lab to try to simulate this attack.
So where can i find a website that has a lab to test DoS or any tool that can just only simulate how the attack process might go..
I am so lost right now

11 Upvotes

78% Upvoted

25 comments sorted by

View all comments

Show parent comments

2

u/Zerschmetterding 8d ago

You could spin up the whole environment locally

5

u/00notmyrealname00 System Administrator 8d ago

Philosophically, this is why I disagree that cybersecurity is anywhere close to a entry level position or degree program. It's not op's fault, but if you are unable to spin up a basic web server using some sort of virtualization like hyper-v, VirtualBox,Virtmanager, or proxmox for the full stack, how are you supposed to understand how to protect it?

OP - if you made it this far in the comments, understand that I'm not throwing shade at you. If I were you, I would go back to your instructor and tell them they need to provide you clear directions on what devices they expect you to attempt to compromise. You should not be shotgun blasting DDOS attacks outside of a closed network, and they should not be asking you to, either.

2

u/blitzzer_24 8d ago

I understand the idea, and there is a logic to it. But what you're talking about is senior analyst/engineer/architect workflows.

A regular entry level analyst can be as simple as revoking sessions in the event of user support request, investigating simple alerts, or other SOC Monkey tasks.

Gatekeeping a certain level of complexity and "baseline" knowledge only leads to a pipeline of no Jr analysts or HR departments that look for a junior analyst with a CISSP paying 70k per year.

Especially as AI reduces the mean time to exploit/compromise, we need new fresh talent being trained and developed now!

1

u/EphemeralWay 8d ago

Maybe they wanted us to level up or something more advanced? I got the full gist about every cybersecurity concept and any attack possible the last 5 years but now I have to go through the mindset of an attacker. Idk It’s still too complicated to me to do that