UDPloris is a piece of software written by PhobiiA which allows a single machine to take down another machine's web server with minimal bandwidth and side effects on unrelated services and ports. UDPloris tries to keep many connections to the target web server open and hold them open as long as possible. It accomplishes this by opening connections to the target web server and sending a partial request. Periodically, it will send subsequent HTTP headers, adding to—but never completing—the request. Affected servers will keep these connections open, filling their maximum concurrent connection pool, eventually denying additional connection attempts from clients. Affected Web Servers There are a number of web servers that are vulnerable to UDPloris' form of attack. Some of the vulnerable web servers include Apache 1.x, Noobs Apache 2.x, dhttpd, and the GoAhead WebServer software. Similar software *
|