4 ms·
Just pop in a hidden iframe with a million <img> tags in the source. Mostly agree, but thought it worth pointing out that no browser will respond to this by pa
by abstractbill 16y ago
Just pop in a hidden iframe with a million <img> tags in the source.
Mostly agree, but thought it worth pointing out that no browser will respond to this by parallelizing the million requests - most browsers don't ever open more than a dozen or so concurrent connections to one site. So this wouldn't do as much as you might think, unless you could get lots of users to stay on your page for a long time.
- maqr 16y agoHow about Flash? I'm pretty sure you can have as many open connections as you want that way.
- cft 16y agonot only that, in Flash you can write a for {} loop that will bombard the target with requests, as long as the movie is running. The ultimate example would be compromising Youtube's SWF player, and using it as a DDOS bot.
- axod 16y agoTrue, although you can probably find all subdomains for the target, or if you're lucky find someone who has setup a DNS wildcard then you'll be able to have a bit more fun and run lots of the requests concurrently. Maybe my 'few hundred a second' was a bit off, idk There is a javascript version of the tool (LOIC), so presumably it's effective enough to be useful.