full-disclosure - Arbitrary DDoS PoC

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sun, 12 Feb 2012 14:09:01 -0200
From: Lucas Fernando Amorim <lf.amorim@...oo.com.br>
To: full-disclosure@...ts.grok.org.uk
Subject: Arbitrary DDoS PoC

With the recent wave of DDoS, a concern that was not taken is the model 
where the zombies were not compromised by a Trojan. In the standard 
modeling of DDoS attack, the machines are purchased, usually in a VPS, 
or are obtained through Trojans, thus forming a botnet. But the 
arbitrary shape doesn't need acquire a collection of computers. 
Programs, servers and protocols are used to arbitrarily make requests on 
the target. P2P programs are especially vulnerable, DNS, internet 
proxies, and many sites that make requests of user like Facebook or W3C, 
also are.

Precisely I made a proof-of-concept script of 60 lines hitting most of 
HTTP servers on the Internet, even if they have protections likely 
mod_security, mod_evasive. This can be found on this link [1] at GitHub. 
The solution of the problem depends only on the reformulation of 
protocols and limitations on the number of concurrent requests and 
totals by proxies and programs for a given site, when exceeded returning 
a cached copy of the last request.

[1] https://github.com/lfamorim/barrelroll

Cheers,
Lucas Fernando Amorim
http://twitter.com/lfamorim

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/