Crashing Web Apps with a Single Request: DoS Vulnerabilities
summary
Examines web-application vulnerabilities that lead to Denial of Service and shows how multiple such issues can be exploited together in a single HTTP request to cause DoS. Covers concrete classes of flaws (input handling, resource exhaustion, parsing bugs) and demonstrates combined-exploit techniques and their impact on server availability.
AI-written summary · about
chapters (14)
- 0:00DoS vulnerabilities introduction
- 1:07Classical attacks differences
- 4:00Root causes of outages
- 9:21Physical resource limits
- 14:38Artificial resource limits
- 15:19Application logic flaws
- 21:19Image processing exploits
- 23:25Third-party vulnerability examples
- 27:42DoS importance over privacy
- 30:29Recursive and classifier attacks
- 35:25Role boundary issues
- 36:08Database connection pools
- 38:20Filesystems and sessions
- 42:53Q&A
related talks
01h 30mCommon Webapp Vulnerabilities and What to Do About Them
44mSelected Vulnerabilities in Web Applications
35mPractical Mobile App Attacks By Example
50mModern WebApp Vulnerabilities
35mWeb Applications: Common Security Issues
45mOverview of Interesting Vulnerabilities in Web Applications - Live Demos
47mDenial of Service with a Fistful of Packets: Exploiting Algorithmic Complexity Vulnerabilities
41mTop Web Vulnerabilities in 40 Minutes