3 ms·
SSH banners come over TCP, requiring the 3-way handshake first, meaning you can't use it for traffic reflection (beyond the SYN-ACK itself).
by Retr0id 1y ago
SSH banners come over TCP, requiring the 3-way handshake first, meaning you can't use it for traffic reflection (beyond the SYN-ACK itself).
- msgodel 1y agoRight, in general unless you're going to put a lot of care into the state machine to deal with network congestion/abuse it's better to stick with TCP.
- johncolanduoni 1y agoI was glad to see QUIC did a pretty good job of limiting its usefulness for reflection attacks. Hopefully we’ll see more uses of UDP move to it