How to prevent a DDoS attack (or a Brute-force attack)

Рет қаралды 27,985

3 жыл бұрын

In this video we'll see what is a Brute-force attack, DDoS attack and a DoS attack, and finally we'll see how to prevent all these kind of attacks.
🚀 Deploy NodeJs app: zeet.co/r/yourstruly
(One FREE project forever 😘)
⭐ Kite is a free AI-powered coding assistant that will help you code faster and smarter. The Kite plugin integrates with all the top editors and IDEs to give you smart completions and documentation while you’re typing. I've been using Kite for 6 months and I love it! www.kite.com/get-kite/?...
FREE $100 credit @Digital Ocean: m.do.co/c/3208f08b3324
Subscribe: kzfaq.info...
Support the channel:
Paypal: www.paypal.me/trulymittal
Patreon: / trulymittal
---------------
Other useful Playlists
---------------
#RestAPI (#NodeJS and MongoDB): • REST API using NodeJS ...
#API Authentication using #JWT: • NodeJS API Authenticat...
#Firebase: • Firebase | Build a Not...
Docker: • Docker
MongoDB: • Learn MongoDB in 50 mi...
Html/Css/Js: • HTML / CSS / JS
Android: • Android
Challenges: • Challenges
---------------
What I use
---------------
Mouse: amzn.to/2O9RJtu
Keyboard: amzn.to/2qxajCU
Keyboard 2: amzn.to/2XDWH4X
Monitor: amzn.to/2pDg7dH
Processor: amzn.to/347WWIb
RAM: amzn.to/2QEkUqw
Graphics: amzn.to/33aBrF4
Microphone: amzn.to/2DabdI9
#StayHome #WithMe #yoursTRULY #tutorial #howto #android

Пікірлер: 52

@pranavwani Жыл бұрын

Thanks Man!

@san2sansan 2 жыл бұрын

Great Tutorial. Waiting for more videos

@markbarlescu1853 Жыл бұрын

Great content!

@shahreazneeloy2119 Жыл бұрын

Thank you for this type of awesome content. Please make a detail video on rate-limit-flexible

@Trisulamindia Жыл бұрын

Great info

@ArtOfFun 3 жыл бұрын

Useful. Thank you!

@mafiacodes 3 жыл бұрын

Glad it was helpful!

@DTUSEM Жыл бұрын

Suggestion - Sir make your channel a single point for nodejs backend content. Your explanation is easy to understand and simple.

@hitmusic6978 2 жыл бұрын

Thank You

@ericf.3334 2 жыл бұрын

Too great 👍👍👍

@ragz_redeye 4 ай бұрын

Great content king! Also worth mentioning the limit is per-ip-address

@brunodepaula5293 3 ай бұрын

Nice content...just a very important point. This express rare limit library by default uses an in memory store to save the requests and control it. A very common use case is to put the api in aws lambdas or any other type of cloud function. This infrastructure is stateless..so the in memory store will not work. The nice thing is that the lib is already prepared to work with many external stores like mongo, redis.... So the infrastructure would be a little bit more complex in real life.. that would be great to have a video after 3 years showing how to implemeny this part!! 😂 Thanks

@showbikshowmma3520 3 жыл бұрын

can we use this for a dynamic website?? as professional we we need to change something to prevent DDOS attack

@technoinfoworldwide2329 2 жыл бұрын

for 10 req in login, i have applied 60*60*1000 ms, but the user can login after 4-5 minute why?

@rishijain2386 2 жыл бұрын

Great Tutorial. This restriction is based on per IP. Any suggestions to block requests from particular geographic location?

@mafiacodes 2 жыл бұрын

Use nginx plugin to black by geolocation

@itechinnovations2200 5 ай бұрын

Hello brother i am an engineering students and undergoing a internship and my role is full stack developer my problem statement is as follows DESCRIPTION The Distributed Denial of Service (DDoS) attack is an attack poses a server threat to the internet. It is difficult to find the exact sign of attacking. Moreover, it occurs when a huge number of users occasionally access the target at the same time. Using the entropy computing you should find the accuracy of an attack. TASK Write a program using entropy computing to detect DDOS attack. Steps: 1.Create a algorithm for sending data packets to the server. 2.Find Accuracy. plz help me what processes should i follow plz help 🙏🙏

@c.mohanrajcs396 3 жыл бұрын

Hi completely enjoyed it and I have one doubt. Prevent from brute force we can lock the user for 3 invalid password attempts right?

@mafiacodes 3 жыл бұрын

Yes u can specify the route also - like 3 attempts and then block for n number of hours

@drexler6013 2 жыл бұрын

Sir I m getting error when I use fork

@dennisgonzales9521 3 жыл бұрын

Cool

@nawzhinit2744 Жыл бұрын

thank you for your video ... but i have a question this limit request for each user that request or for all users that request to the server ?

@mafiacodes Жыл бұрын

Per user based on IP address

@webdeveloper2795 Жыл бұрын

Good video but Server is replying for each time even after 5 request within 5 sec. So resources of Server is utilised lot. Is there any way, we can just block the attack without Server resource Utilised like WAF or Firewalls. Any way good video

@damiangilz 3 жыл бұрын

There are so many ways to rate limit an app... one can do it also by configuring it in nginx at a lower level. But now that you touch this subject, and as it seems you know a lot, maybe a good idea would be to develop a gateway.

@damiangilz 3 жыл бұрын

Also in your start script is enough to just write"nodemon", and node will fill in the blank with the "main" property.

@prabhavrajeev9682 3 жыл бұрын

Can u share what zsh theme Ur using

@mafiacodes 3 жыл бұрын

Oh my zsh Robby Russel with space ship prompt

@jivanmainali1742 3 жыл бұрын

So it's only for dos attack

@DafleSantos 2 жыл бұрын

What is your vs code theme and font?

@mafiacodes 2 жыл бұрын

Snazzy operator and font operator mono

@arunaditya2655 3 жыл бұрын

sir, I have a confusion I think this time limiter can limit the actual user for example, if I set 5 requests in 5 seconds then if attacker requested 5 times then all the 5 requests will end and then when actual user request then they will get request limit over sir is there a way to limit the specific user request ??? for example, one user can only request 2 times in 5 second I think it will solve the problem if that method exists then please make a video on that

@mafiacodes 3 жыл бұрын

Bro it is per client, everyone has their kitty of 5 requests

@DeepakJangra-up8ek 3 жыл бұрын

@@mafiacodes Same doubt! You should pin this comment. Also how does it identify the client to restrict that specific client, like cookies or something like that in request headers?

@mafiacodes 3 жыл бұрын

Using the clients IP

@raza-abbas37 3 ай бұрын

How to prevent ddos attack? Because the IP will be different

@farhansadiqmahi1397 2 жыл бұрын

3:55

@developer_hadi Жыл бұрын

The hacker maybe using bots, thousands of bots, how are we going to avoid that?

@jivanmainali1742 3 жыл бұрын

So how this method will prevent a brute force attack

@mafiacodes 3 жыл бұрын

Explained in video itself

@jivanmainali1742 3 жыл бұрын

@@mafiacodesuser could still make request after some time. So doesn't work much unless you restrict for long hours

@gledianlalushllari9577 3 жыл бұрын

This seems to be useless. What if the attacker sends requests using a loop?

@johnyepthomi892 2 жыл бұрын

wdum useless?

@aviwhitewolf 3 жыл бұрын

Is there any way, to use the rate limiter in socket.io ?

@mafiacodes 3 жыл бұрын

U have to implement ur own logic

@aviwhitewolf 3 жыл бұрын

@@mafiacodes any suggestions?

@kaganakgul9484 2 жыл бұрын

Doksandört 94 . Yüzyirmibir 121 yüzaltmısdokuz 169 Yüzseksendört 184 ızmırdeyım vurda görek

@EhSUN37 2 жыл бұрын

lol I guess sending back a json response for each request saying that "you are doing too much" is less expensive. what a useless video

@abhishekbhavsar1950 2 жыл бұрын

showing me this error /node_modules/express-rate-limit/dist/index.cjs:51 const totalHits = (this.hits[key] ?? 0) + 1; ^ SyntaxError: Unexpected token ? at Module._compile (internal/modules/cjs/loader.js:723:23) at Object.Module._extensions..js (internal/modules/cjs/loader.js:789:10) at Module.load (internal/modules/cjs/loader.js:653:32) can anyone help me with this problem