Cross-Platform Single-Request Web Server DoS From CCC
Summary: Alexander Klink and Julian Walde presented at the 28th Annual Chaos Communication Congress a method of consuming a web server's entire CPU with a single low-bandwidth POST request, and their advisory says as little as 30k/sec could occupy a single i7 core depending on the target platform. The attack sends a large number of key/value pairs whose keys collide in the receiving system's hashing algorithm, with each colliding key consuming exponentially more CPU time to parse than the last.
Why it matters: A single request at roughly 30k/sec can pin an entire i7 core, so the bandwidth needed to take a server down is far below what volumetric defenses are tuned for. Cisco Talos released Snort SIDs 20823 and 20824 for detection, and said coverage for the additional issues patched in MS11-100 was still pending.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026