SMBLoris attack proof of concept: brings down my fully patched Win10 box in seconds. https://gist.github.com/marcan/6a2d14b0e3eaa5de1795a763fb58641e …pic.twitter.com/tJWYiXRP7z
-
And this was slowed down by having Wireshark running in the background. It's twice as fast or more after killing that.
Win10 gone in under 10 sec of SMBLoris (8GB RAM). Less overhead on the attacker side this time. Stopping the attack causes borked graphics.pic.twitter.com/h4n6hbxnIA
-
-
Disabling SMBv1, SMBv2/v3 does not help. Nor does the MemoryPressureProtection TCP option. Nor does lowering PendingClientTimeout for SMB.
- End of conversation
New conversation -
-
-
The graphics thing seems like GDI handle exhaustion to me.
-
Maybe, but as someone who often runs Windows under memory pressure, I've seen all sorts of weird graphics drivers issues when near the line
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.