ClsHack:Computer Security Blog    

[How-to]HULK:Web Server DoS Tool

Thursday, May 17th, 2012

HULK , as many other tools to make dos attacks allows to make a web site inaccessible.
HULK è opensource e scritto in python :D

What does HULK ?

HULK, is to generate Unique requests for each and every request generated, thus avoiding/bypassing caching engines and effecting directly on the server’s load itself.

So do we say bypassing the cache commits in the server resource allocation.
(more…)

How-To: thc-ssl-dos && attack ssl server

Wednesday, April 18th, 2012

Thc-ssl-dos was developed by famous programmers hydra known antagonist medusa

thc-ssl-dos exploits a vulnerability in SSL and loads the CPU of the server 100 % and thus make the server unusable.
(more…)

[CVE-2012-0207 Exploit]Linux IGMP Remote Denial Of Service && Video

Tuesday, January 17th, 2012

New vulnerabilities for linux systems which utilizes a vulnerability in the IPv4 IGMP can be thrown off by remote.

The technical description:
(more…)

slowhttptest: Application Layer DoS attack simulator

Sunday, January 15th, 2012

I have already spoken of suitable tools to carry out attacks two :)
But today we see,slowhttptest.
From the official website:

SlowHTTPTest is a highly configurable tool that simulates some Application Layer Denial of Service attacks.

It implements most common low-bandwidth Application Layer DoS attacks, such as slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer exploit) by draining concurrent connections pool, as well as Apache Range Header attack by causing very significant memory and CPU usage on the server.

Slowloris and Slow HTTP POST DoS attacks rely on the fact that the HTTP protocol, by design, requires requests to be completely received by the server before they are processed. If an HTTP request is not complete, or if the transfer rate is very low, the server keeps its resources busy waiting for the rest of the data. If the server keeps too many resources busy, this creates a denial of service. This tool is sending partial HTTP requests, trying to get denial of service from target HTTP server.

(more…)

Install ettercap WINDOWS AND UBUNTU :)

Wednesday, February 17th, 2010

Not so long ago, We have seen this guide:
GUIDE:Arp Poisoning by evilsocket :)
The technique listed above, makes use, for simplicity of a very powerful tool, ettercap.


Ettercap, is a network sniffer for environments switchati, where, network switch arranges for each port only packets for hosts directly connected to the door itself, in addition to broadcasts that are propagated to all ports (or at least to all ports of the same VLAN).
(more…)