[Cyb3r_IT]

I want to know if I am able to get remote access or remote code execution through the slowloris dos attack. I heard that sometimes dos attacks can help with remote access and code execution, anyone know if slowloris is able to achieve that?

[CyberStrike]

Can DOS lead to RCE? Can poop lead to gold? All slowloris is doing is taking up resources in this case incomplete sessions take up the number of sessions which the server can hold. RCE != DoS

[Asdethprime]

Well it can be used in creative ways ; though slowloris barely works.

These days if u want to DoS someone with a single computer SACK Panic (it needs to be Linux box ) is the most popular attack ; it’s newer.

I have at least heard of people attacking Certification Revocation Endpoint ; and taking it offline. Some programs will forgo a CRL check if the server is offline and assume even revoked cert as valid. You could use that to fake authentication.

Using DDos for RCE I haven’t really seen that. If anyone has ideas around it would love to hear it.

[Fur_Sec]

Interesting topic. I like the idea of using a DDoS attack for RCE. I have no idea how that would work, but nevertheless, it's interesting.

[Mr. Furioz]

Sounds intresting but it would suprise me that Dos and Rce actually work together.

Dos'ing a target , will slow down the target's connection and will make it harder to connect or execute code decently.
In theory, ddos'ing a target and trying to RCE the same target , would be cutting in ur own hands.