312-50V13 · Question #198
Which of the following DoS tools is used to attack target web applications by starvation of available sessions on the web server? The tool keeps sessions at halt using never-ending POST…
The correct answer is C. R-U-Dead-Yet?(RUDY). RUDY (R-U-Dead-Yet?) is a specialized Slow-HTTP-DoS tool designed to exhaust web server sessions by sending incomplete POST requests with large Content-Length headers.
Question
Options
- AMy Doom
- BAstacheldraht
- CR-U-Dead-Yet?(RUDY)
- DLOIC
How the community answered
(31 responses)- A6% (2)
- C90% (28)
- D3% (1)
Why each option
RUDY (R-U-Dead-Yet?) is a specialized Slow-HTTP-DoS tool designed to exhaust web server sessions by sending incomplete POST requests with large Content-Length headers.
MyDoom is a fast-spreading computer worm primarily designed for email-based propagation and launching DoS attacks, not specifically for web application session starvation via slow POST requests.
Astacheldraht is not a recognized DoS tool in the context of web application session starvation as described.
RUDY (R-U-Dead-Yet?) is a specialized Slow-HTTP-DoS tool designed to exhaust web server resources by sending legitimate-looking POST requests with an arbitrarily large Content-Length header, then sending data very slowly to keep sessions open indefinitely. This starves the web server of available sessions and processing capacity, leading to denial of service.
LOIC (Low Orbit Ion Cannon) is a network stress testing and DoS tool primarily used for flooding targets with UDP, TCP, or HTTP requests, but it doesn't specifically employ slow POST transmissions with large content-length headers for session starvation.
Concept tested: Slow-HTTP-DoS tools and techniques
Source: https://owasp.org/www-community/attacks/Slow_loris_attack
Topics
Community Discussion
No community discussion yet for this question.