Sunday, October 14, 2012

New THC attack tool targets Web servers using secure connections

  • Sunday, October 14, 2012
  • asd
  • Share

  • THC the German based hacker’s have released a program they assert will allow a single computer to take down a Web server using a secure connection.

    The THC-SSL-DOS tool, which was released 2 days before, purportedly exploits a flaw in SSL renegotiation protocol by overwhelming the system with multiple requests for secure connections. SSL renegotiation allows Web sites to create a new security key over an already established SSL connection.

    A German group called as Hackers Choice said it released the exploit to bring attention to flaws in SSL, which allows sensitive data to flow between Web sites and an individual user's computer without being intercepted.
    The exploit also works on servers that don't have SSL renegotiation enabled, the group said, but requires some modification and more computers. The group said the exploit will allow a single IBM laptop to take down the average server over a standard DSL connection

    Download

    0 Responses to “New THC attack tool targets Web servers using secure connections”

    Post a Comment