28 questions with no answers
0
votes
0
answers
57
views
UN/EDIFACT parser security: DoS vectors possible with malicious documents?
I'm still learning EDIFACT. And while reviewing EDIFACT parser software, I'm wondering if it's possible, within UN/EDIFACT Syntax, to build a document that expands and blows up when parsed?
Known XML ...
0
votes
0
answers
124
views
In a custom network protocol that prepends messages with their length, how do you prevent malicious packets from causing memory exhaustion?
For learning purposes, I'm writing a basic network protocol over TcpStreams. In order to delimit individual messages, I was using read_until, but because the data sent can contain any bytes, this can'...
- 348
0
votes
0
answers
99
views
Denial of service protection: how to reject connections based on content and frequency (golang as example)
I run a p2p service (so no webserver, no load balancing with DOS functionality, etc.), which receives direct connection requests.
I want to reject connections when the exact same message has been sent ...
- 6,410
0
votes
0
answers
96
views
Is it possible to dispatch a successful DOS attack on a firewall with all ports closed?
I am wondering if my network is vulnerable to (D)DoS attacks even though I have no ports open. Currently, I am thinking that you should be able to throw random malformed packets at my public IP, ...
- 128
0
votes
0
answers
111
views
Matching user-input text with a user-input regex in Node.js
I'm assuming that DoS is a possible issue when matching, on the backend in Node.js, arbitrary strings with arbitrary regexes with one of JS's regex functions. If the provided regex is simply invalid, ...
- 1
3
votes
0
answers
1k
views
How to avoid Contentful rate-limit exhaustion DoS
We are building a public web app and have created custom API's that call out to Contentful to get various content entries like news articles.
Some of our API's take the entry ID - ex ...
- 35.4k
0
votes
0
answers
609
views
Python 2.7 - Send multiple requests to server Without getting blocked (DOS)
My WebScraper uses urllib to get data from sites like YouTube. But I often run into a problem when there are too many requests, resulting in the site blocking my connection.
So my question is, is ...
1
vote
0
answers
209
views
Rate limiting in web server
How do web servers implement rate-limiting, for example, from a particular client/user?
The doubt is, the server has to first "get" the request, and if the threshold has reached, deny. In ...
- 20.2k
0
votes
0
answers
294
views
Exception in Socket Threading - No connection could be made because the target machine actively refused it
I'm trying to simulate a simple DOS attack using sockets in python . In the DOS Script , I use threads to create multiple attacks on the server . But , some threads are being executed and the program ...
- 579
0
votes
0
answers
49
views
Effecient way to read and store image via Servlet (avoiding DoS)
A image file will be sent to a servlet POST method.
I need to Read the request input stream and store it as image in server .
I thought of using BufferedImage and ImageIO classes .
But im Afraid of ...
0
votes
0
answers
238
views
express-session, how to prevent session/cookie resource exhaustion attack?
Setting
I am currently trying to create a webapp using NodeJS Express, and I am using express-session for managing sessions and storing the sessions in redis.
For simplicity, I am going to have the ...
- 51
0
votes
0
answers
82
views
Does a DDOS attack on an application using CDN have to first bring down all the involved CDN servers to affect the application's availability?
CDN are said to absorb and mitigate the Denial of Service and DDOS attacks. Consider an application that uses a CDN provider to deliver its content. So if an attacker tries to bring down such an ...
- 163
0
votes
0
answers
421
views
Angular 6 https-proxy-agent, Denial of Service
I am using Serverless system for authentication, earlier it was working fine but then I installed jQuerya and Popper.js, as Bootstrap 4 has these dependencies [I read it somewhere]. When I installed ...
- 1
0
votes
0
answers
125
views
What happens during DDoS attack on distributed system?
In case of a centralized system, DDoS attacks are just on a particular IP. What happens when you do a DDoS attack on a distributed system like Facebook or Google or any other company that has a pool ...
- 247
1
vote
0
answers
804
views
Protect socket from DOS and DDOS using python
Here is my socket server and client:
import socket
import threading
import chardet
bind_ip = '0.0.0.0'
bind_port = 9999
server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
server.bind((...
- 40.1k