5 ms·
Although I think bots should be free to access the same content as humans do, I have a suggestion for your fuzzer anti-bot-spray: It won't work on the more stu
by SCHiM 5y ago
Although I think bots should be free to access the same content as humans do, I have a suggestion for your fuzzer anti-bot-spray:
It won't work on the more sturdy samples, but maybe try a GZIP bomb on https streams: https://www.infosecmatter.com/metasploit-module-library/?mm=auxiliary/dos/http/gzip_bomb_dos https://www.infosecmatter.com/metasploit-module-library/?mm=...
- rascul 5y agoCould there be legal repercussions for doing this?
- dusted 5y agoPre "guy views html source gets home raided for haxx0ring" I'd have said "you silly!" Now... I'd say "there shouldn't be, it's your server, people can chose to access it or not, but if the right kind of fool comes along, there's no knowing where the stupid ends."
- theshrike79 5y agoIt's your server and someone is accessing it. It's up to you what you serve them. If you want to be clear, you can put the gzip bomb behind a link that says "do not click, gzip bomb". The bot won't know the difference.