2011年7月11日 星期一

XML DoS

Link: Bryan Sullivan, XML Denial of Service Attacks and Defenses

以上是 XML DoS。Archive file 也能做出 DoS 攻擊,例如 42.zip:
which contains 16 zipped files, which again contains 16 zipped files, which again contains 16 zipped files, which again contains 16 zipped, which again contains 16 zipped files, which contain 1 file, with the size of 4.3GB.
這種攻擊可使防毒軟體爛掉,正常的防毒軟體「應該」能夠抵擋 DoS 攻擊。

VirusTotal: Result: 23 /37 (62.2%).

沒有留言:

張貼留言