+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Bypass nginx, and DoS a website with Slowloris HTTP DoS? (/showthread.php?tid=4149666)
Bypass nginx, and DoS a website with Slowloris HTTP DoS? - Linux™ - Apr 2, 2014
The title says it all, I want to find a way to crash a website protected by nginx, the only problem is that it mitigates the attack really well, and doesn't even phase it, and I don't have the resources to put into a botnet at this point in time.
Slowloris - An HTTP Denial Of Service Attack script made in perl. I'm running *nix if that helps any.
Are there any methods to bypass their nginx DDoS mitigation?
Thanks in advance. -Abrin
Or maybe a way to WAF Bypass their admin login, it gives me the error message (Oops! You don't have permission to view this page.) I have tamperdata installed on firefox.
Plus the command I'm using is:
Code
perl slowloris.pl -dns <website url> -port 80 -timeout <set to whatever the test says is okay> 1000* - xhflhkeuhwguu34 - Apr 2, 2014
NGINX is a web server. It is not a protection tool.
* - Linux™ - Apr 2, 2014
(Apr 2, 2014 08:07 PM)Xen0n Wrote: NGINX is a web server. It is not a protection tool.Well that about sums it up, and idea on how to crash an NGINX Reverse Proxy?
Thanks for clearing up my ignorance. I don't quite understand it.
🤝
* - Too803 - Apr 2, 2014
(Apr 2, 2014 08:10 PM)Abrin Wrote: Well that about sums it up, and idea on how to crash an NGINX Reverse Proxy?
Thanks for clearing up my ignorance. I don't quite understand it.
🤝
Really you should just pound it with a UDP attack until it drops.