News for hackers. Stuff that matters.

A comment on Slowloris - the low bandwidth, yet greedy and poisonous HTTP client.

Re:Slowloris - the low bandwidth, yet greedy and poisonous H... by forza on Tuesday December 07, 2010 @11:55AM (#1979613)
While interesting, this attack is old. A newer "variation" on this is with HTTP POST instead of headers.

http://www.darkreading.com/vulnerability-management/16790102... http://www.owasp.org/images/4/43/Layer_7_DDOS.pdf

[ Parent | on HN ]
Re:Slowloris - the low bandwidth, yet greedy and poisonous H... by signa11 on Tuesday December 07, 2010 @12:44PM (#1979806)
yes that is exactly right. micahl-zalewski and adrian-llarion reported it here : http://www.securityfocus.com/archive/1/456339/30/0/threaded, nevertheless, it definitely _is_ very interesting
[ Parent | on HN ]