domingo, julho 24, 2011

LOIC (Low Orbit Ion Cannon) DDoS/DoS Analysis [update]



This post is only a update note to complement the follow spiderlabs article:
http://blog.spiderlabs.com/2011/01/loic-ddos-analysis-and-detection.html
If you read, you need to now that, the LOIC HTTP GET request was fixed:

GET / HTTP/1.0

But, for lucky of the anonymous target, keep the 1.0 HTTP protocol version, that can be easily controlled /mitigated by Mod-Security.


@trustwave , @spiderlabs, @emanueldosreis , @modsecurity #infosec