SMBLoris attack proof of concept: brings down my fully patched Win10 box in seconds. https://gist.github.com/marcan/6a2d14b0e3eaa5de1795a763fb58641e …pic.twitter.com/tJWYiXRP7z
-
Win10 gone in under 10 sec of SMBLoris (8GB RAM). Less overhead on the attacker side this time. Stopping the attack causes borked graphics.pic.twitter.com/h4n6hbxnIA
Disabling SMBv1, SMBv2/v3 does not help. Nor does the MemoryPressureProtection TCP option. Nor does lowering PendingClientTimeout for SMB.
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
It seems to me that SMBLoring two VM guests collapses host. Tested on VBox with your code.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
.
@johullrich discussed SMBloris on this mornings@sans_isc’s Internet StormCast podcast. https://itunes.apple.com/us/podcast/sans-internet-storm-center-daily-network-cyber-security/id304863991?mt=2&i=1000390565388 …Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.