full-disclosure - Re: IOSEC HTTP Anti Flood/DoS Security Gateway Module (PHP Script)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Wed, 11 Jul 2012 16:35:49 +0100
From: Benji <me@...ji.com>
To: Gokhan Muharremoglu <gokhan.muharremoglu@...ec.org>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: IOSEC HTTP Anti Flood/DoS Security Gateway
 Module (PHP Script)

Just read this crap due to your amazing emails. Crap code, easily bypassable.

On Wed, Jul 11, 2012 at 9:37 AM, Gokhan Muharremoglu
<gokhan.muharremoglu@...ec.org> wrote:
> http://sourceforge.net/projects/iosec/
>
> This module provides security enhancements against (HTTP) Flood & Brute
> Force Attacks for native PHP or .NET scripts at web application level.
> Massive crawling/scanning tools, HTTP flood tools can be detected and
> blocked by this module via htaccess or iptables, etc.
>
> You can use this module by including "iosec.php" to any PHP file which wants
> to be protected.
>
> You can test module here: http://www.iosec.org/test.php (demo)
>
> Wordpress Plugin
> http://wordpress.org/extend/plugins/iosec-anti-flood-security-gateway-module
>
> CHANGES v.1.7
> - Request Cache Size Option
> - Improved Implicit Deny Mode
> - Excluded Files Support
> - Admin GUI Removed
> - Config File Removed
> - Connection Limit Support
> - Whitelist Support
> - Reverse Proxy Support
> - reCAPTCHA Support
>
> This is a unique project and it is the world's first web application flood
> guard script.
> At web application (scripting) level you can,
> - Block proxies. (only via HTTP header)
> - Detect flooding IP addresses.
> - Slow down or restrict access for automated tools (HTTP flood, brute force
> tools, vulnerability scanners, etc.)
> - Save your server resources (database, cpu, ram, etc.) under an attack.
> - Restrict access permanently or temporarily for listed IP addresses in
> "banlist" file.
> - Notify yourself via email alerts when attacks begin.
> - Implicit deny for DDoS attacks
>
> You can use IOSEC under .NET see. http://phalanger.codeplex.com/
>
> Gokhan Muharremoglu
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/