Skip to content
This repository has been archived by the owner on Aug 23, 2022. It is now read-only.

Add 1MB cookies to the request #34

Open
dimention opened this issue Feb 28, 2022 · 2 comments
Open

Add 1MB cookies to the request #34

dimention opened this issue Feb 28, 2022 · 2 comments
Labels
enhancement New feature or request good first issue Good for newcomers up-for-grabs This can be made a pull request

Comments

@dimention
Copy link

dimention commented Feb 28, 2022

For the attack not only the amount of requests is important, but also the size of the request, I suggest adding at least a 1 MB cookie header to all the requests.

By default Nginx accepts requests as large as 1 MB.

{
  headers: {
    Cookie: 'random generated 1 MB string'
  }
}

but this needs testing the servers, as you could see 413 error, that doesn't mean the server is down.

@Ycirn
Copy link
Contributor

Ycirn commented Feb 28, 2022

I was thinking of sending some specific message as well, but due to the amount of sites, its getting very slow, which isnt very good.

@dimention
Copy link
Author

just remove the sites from the target list if lets say they return 100/100 errors, so we only attack the sites that are not yet down. And a 1 MB cookie would pile up their RAMs, but if the 413 error occurs, you have to lower the size of the cookie.

@ajax-lives ajax-lives added enhancement New feature or request up-for-grabs This can be made a pull request good first issue Good for newcomers labels Feb 28, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request good first issue Good for newcomers up-for-grabs This can be made a pull request
Projects
None yet
Development

No branches or pull requests

3 participants