ClsHack:Computer Security Blog    

[How-to]HULK:Web Server DoS Tool

Thursday, May 17th, 2012

HULK , as many other tools to make dos attacks allows to make a web site inaccessible.
HULK è opensource e scritto in python :D

What does HULK ?

HULK, is to generate Unique requests for each and every request generated, thus avoiding/bypassing caching engines and effecting directly on the server’s load itself.

So do we say bypassing the cache commits in the server resource allocation.
(more…)

How-To: thc-ssl-dos && attack ssl server

Wednesday, April 18th, 2012

Thc-ssl-dos was developed by famous programmers hydra known antagonist medusa

thc-ssl-dos exploits a vulnerability in SSL and loads the CPU of the server 100 % and thus make the server unusable.
(more…)

MS12-020 && Metasploit: Windows <= 8 Remote Dos

Wednesday, March 21st, 2012

It’ released by metasploit the much discussed bug microsoft RDP weblog: MS12-020.
For now it is only a remote dos.
The original author of this exploit is Luigi Auriemma.
Description exploits:

This module exploits the MS12-002 RDP vulnerability originally discovered and reported by Luigi Auriemma.
The flaw can be found in the way the T.125 ConnectMCSPDU packet is handled in the maxChannelIDs field, which will result
an invalid pointer being used, therefore causing a denial-of-service condition.

(more…)

PHP 5.3.* likes DOS Vulnerabilities

Friday, February 3rd, 2012

Almost all part of the CVE-2011-4885 PHP Hashtables Denial of Service that says this:

PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.

With the upgrade to version PHP 5.3.9 introduces the bug fix:

Added max_input_vars directive to prevent attacks based on hash collisions (Dmitry).

max_input_vars My example is configurable via php.ini:

This, max_input_vars however, introduces a new bug: CVE-2012-0830
(more…)

[CVE-2012-0207 Exploit]Linux IGMP Remote Denial Of Service && Video

Tuesday, January 17th, 2012

New vulnerabilities for linux systems which utilizes a vulnerability in the IPv4 IGMP can be thrown off by remote.

The technical description:
(more…)