At some point I just got annoyed by all the 4chan script kiddies and went in active defense mode :D Also lookup "slowloris attack" -It's pretty efficient if th

At some point I just got annoyed by all the 4chan script kiddies and went in active defense mode :D Also lookup "slowloris attack" -It's pretty efficient if the attacker has more network bandwidth than you have, and can even out the advantage. Won't be as effective against them having more networked machines though, so you have to use some other tricks against shodan, websnort, burp suite etc. There are some other tricks though, and you can also abuse HTTP smuggled headers (in the response) to specifically crash their proxies, for example :) Most common vulnerability scanners use some standard http libraries, so they are vulnerable to slowloris + chunked encodings, or they can't recover from a broken http trailing header, or from an http2/3 upgrade/downgrade loop that breaks their UDP packet parser. What also works is if you spoof their SOCKS5 proxy with UDP bind requests until they can't use it anymore. So for a lot of DDoS attack scenarios there are active defense options to mitigate the damage which the redteam can cause.