Just DoS'd a site with slowLoris (actually pyLoris but whatever) when I stopped the attack the website didn't come back up. Wtf just happened?
I'm not IP banned I checked through an external source www.downforeveryoneorjustme.com
why? it's a legitimate question. Slowloris should not bring down a web server, it should temporarily tie up its resources for the duration of the attack.
Name:
Anonymous2011-03-30 8:08
>>3
It could bring it down by preventing ARP requests from terminating, causing the need for a reboot.
Name:
Anonymous2011-03-30 8:17
>>4
Thanks, and interesting. I have now completed 2 goals for the day, piss someone off, and learn something about networking.
>>1
Doubtful - the bug used by Slowloris has been fixed for ages.
Name:
Anonymous2011-03-30 10:10
>>8
definitely worked website was universitypalmshawaii.com nuke it yourself when they bring it back online if you don't believe me.
Name:
Anonymous2011-03-30 10:12
nm it's back up, test it out.
Name:
Motoma2011-03-30 10:46
I've seen this happen with Apache under a full fledged attack from PyLoris.
Essentially, your Apache server is configured in a way that the connection limit is higher than the physical hardware will allow. That is to say, your attack is causing Apache to use up all of the server's memory/swap space, causing serious problems on the server; requiring a full reboot to correct the issue.