Re: [Full-disclosure] HTTPKiller - (Global HTTP DoS)

2011-08-25 Thread Xianuro GL
This attack amplifies the server load so you need to create a significant load on the server. When we send a HEAD request to the server, it processes the PHP to generate headers. What happens when we do 2 Requests for an apache server using pipelining? linux-7nli:/home/xianur0 # netcat -vvv loca

Re: [Full-disclosure] HTTPKiller - (Global HTTP DoS)

2011-08-25 Thread -= Glowing Sex =-
Same here, but i tried with a rather large html file... had no effect, in fact, it got blocked, here is the log: root@ip-10-170-103-253:~# perl mn.pl http://www..com/news/articles.html 30 30 190.1.1.1 URL: http://www..com/news/articles.html [!] Launching 30 threads! Target: www..com:8

Re: [Full-disclosure] HTTPKiller - (Global HTTP DoS)

2011-08-25 Thread Ulises2k
I have tried with Apache 2.2.9 and a simple file php and does not cause DoS Apache Server. On Thu, Aug 25, 2011 at 19:21, Xianuro GL wrote: > > linux-7nli:/home/xianur0/fhttp-v1.3/DoS # perl mn.pl http://[domain]/[file] > 30 100 190.1.1.1 > > Where "file" have to consume processing in the serv

Re: [Full-disclosure] HTTPKiller - (Global HTTP DoS)

2011-08-25 Thread -= Glowing Sex =-
ahhh ok, yes i see now, thanks. , will test it on my local vps and dedis now. cheers xd On 26 August 2011 08:21, Xianuro GL wrote: > linux-7nli:/home/xianur0/fhttp-v1.3/DoS # perl mn.pl > http://[domain]/[file] 30 100 190.1.1.1 > > Where "file" have to consume processing in the server (i.e. ind

Re: [Full-disclosure] HTTPKiller - (Global HTTP DoS)

2011-08-25 Thread Xianuro GL
linux-7nli:/home/xianur0/fhttp-v1.3/DoS # perl mn.pl http://[domain]/[file]30 100 190.1.1.1 Where "file" have to consume processing in the server (i.e. index.php for Joomla! CMS). Remember the "http://"; :P 2011/8/25 -= Glowing Sex =- > Ummm ok, lets see, i tried to use this, it keeps giving m

Re: [Full-disclosure] HTTPKiller - (Global HTTP DoS)

2011-08-25 Thread -= Glowing Sex =-
Ummm ok, lets see, i tried to use this, it keeps giving me 'usage' abit to much :P , even when i have read thru the code and seen an example/would make example but seems it is not being nice, unless i have perhaps made the error.. or it is not pasted in correctly,... i will try again but, i sof

[Full-disclosure] HTTPKiller - (Global HTTP DoS)

2011-08-25 Thread Xianuro GL
Connection Keep-Alive + Pipelining + Close the connection before the response + Something... = DoS Apache, IIS, Squid, NetCache, What else? mn.pl Description: Perl program ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-di