THC-SSL-DOS is a tool to verify the performance of SSL. Establishing a secure SSL connection requires 15x more processing power on the server than on the client. THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it of…

read more from this topic.....

The biggest news by far for the past week or so has been the attacks on WikiLeaks infrastructure after posting tens of thousands of classified cables online in a categorized form. Just a few days ago their DNS provider (EveryDNS) pulled the plug &#8211…

read more from this topic.....

DDOSIM simulates several zombie hosts (having random IP addresses) which create full TCP connections to the target server. After completing the connection, DDOSIM starts the conversation with the listening application (e.g. HTTP server). Can be used on…

read more from this topic.....

[Geordy] wanted to use some IDE devices but he didn’t have an interface card for his XT system, which can’t handle 16-bit  IDE. He looked around for 8-bit ISA controllers but they were hard to find and quite expensive. Lucky for him there’s an open source project that makes a solution to this problem. The [...]

read more from this topic.....

[Daniel's] homemade digital picture frame looks great, it’s well-built, and it has a nice set of features. It’s not made from a broken laptop and he didn’t build it around a microcontroller. Instead, he saved a 19″ LCD monitor with a burnt out back light caused by the extremely common blown capacitor problem. Twenty dollars on eBay [...]

read more from this topic.....

Conficker has been giving us all headaches for quite some time now, the latest news it that China hosts up to 28% of the World Conficker infections at its peak.
7 million separate hosts infected with Conficker at the end of 2009, that’s more than…

read more from this topic.....

PenTBox is a Security Suite that packs security and stability testing oriented tools for networks and systems. Programmed in Ruby and oriented to GNU/Linux systems, but compatible with Windows, MacOS and every systems where Ruby works.

It is free, lic…

read more from this topic.....

We wrote about Zeus a while back, a nasty trojan which can evade detection by Anti-virus software and is ranked as the number 1 trojan infector by numbers.
About a week ok a massive sting operation took down large parts of the Mariposa botnet in Spain…

read more from this topic.....

Both Facebook and Twitter were hit with pretty severe DDoS attacks rendering them useless and unavailable to the majority of users.
The thing is it seems like it wasn’t a traditional network based botnet style DDoS attack, but a ‘joejob&#82…

read more from this topic.....

This story actually gave me a lot of LULZ, how stupid can you be seriously? Man this guy made so many mistakes for someone so paranoid (he had a web cam setup outside his appartment door so he could see who was coming)..
But then he exposed his IP addr…

read more from this topic.....

This tool has been hitting the news, including some mentions in the SANS ISC Diary.
It’s not actually a new attack (it’s been around since 2005) but this is the first time a packaged tool has been released for the attack.

Slowloris holds c…

read more from this topic.....