56k Denial of Service
summary
Demonstrates that HTTP application‑layer attacks like Slowloris and slow POST can saturate servers using only a 56 kbps uplink; live demos use Kali and a Windows GUI tool with NetLimiter against default Apache, nginx and IIS to show real 500/gateway timeouts. Presents exact attack tools and parameters, measured concurrent connection counts on a small test server, and concrete mitigations such as tighter timeouts, header/body limits, and using reverse proxies.
AI-written summary · about
chapters (16)
- 0:00DoS attacks intro
- 2:20DoS vs DDoS
- 6:16Transport-layer attacks
- 9:45Application-level DoS
- 11:55Slowloris HTTP flaw
- 14:07Slowloris demo
- 17:03How Slowloris works
- 22:00Why Slowloris is dangerous
- 24:53Slowloris tools
- 25:36Slowloris on test server
- 31:5356K bandwidth limit
- 32:36Slow HTTP Read demo
- 34:13Kali Linux setup
- 36:23Slowloris protection
- 39:33Slowloris load testing
- 39:55Q&A
related talks
42mRunning at 99% Surviging an Application DoS
45mHTTP Desync Attacks: Smashing Into The Cell Next Door
37mAnatomy of a DDoS
47mDenial of Service with a Fistful of Packets: Exploiting Algorithmic Complexity Vulnerabilities
50mHTTP Desync Attacks: Smashing into the Cell Next Door
45mAnatomy of a DDoS
25mHow to Pull Off a Near Undetectable DDoS Attack...
52mInvestigating DDOS - Architecture Actors and Attribution