denial-of-service Questions
8
Solved
Currently I have the below code for reading an InputStream. I am storing the whole file into a StringBuilder variable and processing this string afterwards.
public static String getContentFromInpu...
Amalberga asked 13/6, 2013 at 10:22
1
Solved
CVE-2021-33623 states that the following code (fixed in this commit, which includes test cases) has issues related to ReDoS:
trimNewlines.end = string => string.replace(/[\r\n]+$/, '');
But why...
Tarragona asked 19/6, 2021 at 2:30
15
Solved
This question about zip bombs naturally led me to the Wikipedia page on the topic. The article mentions an example of a 45.1 kb zip file that decompresses to 1.3 exabytes.
What are the principles/t...
Closed asked 22/9, 2009 at 12:4
5
Solved
I'm wondering how to stop an unresponsive thread in Java, such that it's really dead.
First of all, I'm well aware of Thread.stop() being deprecated and why it should not be used; there are already...
Allophane asked 30/12, 2020 at 7:29
3
I am pretty sure that this error appeared only today and it never occurred before.
When I create a new react app, the process found 1 high vulnerability:
High: Denial of Service
Package: http-pr...
Tallahassee asked 15/5, 2020 at 8:39
3
How to prevent DoS attack through Java TreeMap?
My code has an API which accepts a Map object. Now I want to prevent client to send Map objects of certain length.
Now maxarray in jdk.serialFilter...
Hardaway asked 29/7, 2019 at 11:50
1
I'm looking for best practice advice/guidance (perhaps from Microsoft?) regarding denial of service (DoS) protection/mitigation for ASP.NET Core web applications.
The main two options I have found...
Terrapin asked 13/11, 2019 at 15:41
3
What are the best practices in Django to detect and prevent DoS attacks... Are there any ready to use apps or middleware available which prevents website access and scan through bots?
Hally asked 31/7, 2011 at 14:2
1
I was reading about ReDOS.
https://en.wikipedia.org/wiki/ReDoS
It seems if you run this code in Node.js:
console.time('aaa');
/^(a+)+$/.test('aaaaaaaaaaaaaaaaaaaaaaaaaaaaaa!')
console.timeEnd('aa...
Guayaquil asked 26/10, 2018 at 12:35
6
Solved
I'm developing a website and am sensitive to people screen scraping my data. I'm not worried about scraping one or two pages -- I'm more concerned about someone scraping thousands of pages as the a...
Solvolysis asked 10/9, 2010 at 19:37
6
Solved
It is said that instead of adding all domains to CORS, one should only add a set of domains.
Yet it is sometimes not trivial to add a set of domains. E.g. if I want to publicly expose an API then f...
Afrikaner asked 11/10, 2013 at 16:29
10
Solved
DDoS (Distributed Denial of Service Attacks) are generally blocked on a server level right?
Is there a way to block it on a PHP level, or at least reduce it?
If not, what is the fastest and most ...
Senarmontite asked 23/1, 2013 at 10:54
1
Solved
Currently, I am using Route53 to manage my domains, subdomains etc.
But I want to add DDoS protection to my endpoints. So I want to use Cloudflare also. But I couldn't find a way to use two of them...
Briney asked 23/3, 2017 at 9:47
3
Solved
How is it possible to implement a slowban that will not be a tool for DoS to our site?
The problem is that a deliberate delay in serving an http response will keep server resources busy (web serve...
Meier asked 9/6, 2011 at 13:9
0
We have a web app that is being hosted on Azure and have run Qualys security scans against it that tell us that it is vulnerable to an HTTP Slow Post attack. The analysis from Qualys tells us that ...
Melodee asked 27/7, 2016 at 20:37
3
I'm looking for a servlet filter library that helps me secure our web service against unauthorized usage and DDoS.
We have "authorized clients" for our web service, so ideally the filter would hel...
Instead asked 24/6, 2010 at 18:3
3
Solved
What tools or techniques can I use to protect my ASP.NET web application from Denial Of Service attacks
Uria asked 14/6, 2011 at 8:17
1
Customer.find(:all, :select => 'id', :order => 'updated_at DESC', :readonly => true, :conditions => { :status_id => Customer.id_for_status(params[:id].to_sym) }, :offset => offset...
Manzanares asked 5/6, 2014 at 17:32
1
Solved
I'm writing a small web application as I'm learning to use the features of Parse.com.
Since application_id and javascript_key are both public (as explained in the doc), it means anyone is free to ...
Harner asked 11/3, 2015 at 14:41
1
I've run into a situation where an infinite loop on the client is crashing the Meteor server. The infinite loop is a bug that I will fix, and not the subject of this question. My concern is that a ...
Dibs asked 9/1, 2015 at 20:35
3
Solved
We're developing a web service hosted in Windows Azure. We expect that at some moments bad guys try to DDOS it. I Googled and didn't find anything new and definitive (this one is rather vague) abou...
Nf asked 5/9, 2011 at 13:54
1
I'm in the process of writting a highly scaleable browser based web chat server using nodejs. The concept involved is simple - first it checks browser for websocket support. If not suported o...
Bixby asked 7/2, 2013 at 16:13
2
Solved
So this is more of a general question on the best practice of preventing DoS attacks, I'm just trying to get a grasp on how most people handle malicious requests from the same IP address which is t...
Maples asked 27/8, 2010 at 17:44
3
I can't access Plesk Amdin because of DOS attack; can I block a hostname or IP address through SSH? If so, how would I be able to do this?
Thank you!
Lessen asked 6/9, 2012 at 13:39
2
Solved
I'm writing a web application that has an XML API in PHP, and I'm worried about three specific vulnerabilities, all related to inline DOCTYPE definitions: local file inclusion, quadratic entity blo...
Kerr asked 18/4, 2012 at 15:30
1 Next >
© 2022 - 2024 — McMap. All rights reserved.