![]() |
|
Slowloris And remote access - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45) +--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449) +---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4) +---- Thread: Slowloris And remote access (/showthread.php?tid=5996205) |
Slowloris And remote access - Cyb3r_IT - Aug 4, 2019 I want to know if I am able to get remote access or remote code execution through the slowloris dos attack. I heard that sometimes dos attacks can help with remote access and code execution, anyone know if slowloris is able to achieve that? RE: Slowloris And remote access - CyberStrike - Aug 4, 2019 Can DOS lead to RCE? Can poop lead to gold? All slowloris is doing is taking up resources in this case incomplete sessions take up the number of sessions which the server can hold. RCE != DoS RE: Slowloris And remote access - Asdethprime - Aug 4, 2019 Well it can be used in creative ways ; though slowloris barely works. These days if u want to DoS someone with a single computer SACK Panic (it needs to be Linux box ) is the most popular attack ; it’s newer. I have at least heard of people attacking Certification Revocation Endpoint ; and taking it offline. Some programs will forgo a CRL check if the server is offline and assume even revoked cert as valid. You could use that to fake authentication. Using DDos for RCE I haven’t really seen that. If anyone has ideas around it would love to hear it. RE: Slowloris And remote access - Fur_Sec - Aug 6, 2019 Interesting topic. I like the idea of using a DDoS attack for RCE. I have no idea how that would work, but nevertheless, it's interesting. RE: Slowloris And remote access - Mr. Furioz - Aug 7, 2019 Sounds intresting but it would suprise me that Dos and Rce actually work together. Dos'ing a target , will slow down the target's connection and will make it harder to connect or execute code decently. In theory, ddos'ing a target and trying to RCE the same target , would be cutting in ur own hands. |