Full Disclosure: Re: IOSEC HTTP Anti Flood/DoS Security Gateway Module (PHP Script)

[Benji <me () b3nji com>]

Just read this crap due to your amazing emails. Crap code, easily bypassable.

On Wed, Jul 11, 2012 at 9:37 AM, Gokhan Muharremoglu
<gokhan.muharremoglu () iosec org> wrote:
> http://sourceforge.net/projects/iosec/
>
> This module provides security enhancements against (HTTP) Flood & Brute
> Force Attacks for native PHP or .NET scripts at web application level.
> Massive crawling/scanning tools, HTTP flood tools can be detected and
> blocked by this module via htaccess or iptables, etc.
>
> You can use this module by including "iosec.php" to any PHP file which wants
> to be protected.
>
> You can test module here: http://www.iosec.org/test.php (demo)
>
> Wordpress Plugin
> http://wordpress.org/extend/plugins/iosec-anti-flood-security-gateway-module
>
> CHANGES v.1.7
> - Request Cache Size Option
> - Improved Implicit Deny Mode
> - Excluded Files Support
> - Admin GUI Removed
> - Config File Removed
> - Connection Limit Support
> - Whitelist Support
> - Reverse Proxy Support
> - reCAPTCHA Support
>
> This is a unique project and it is the world's first web application flood
> guard script.
> At web application (scripting) level you can,
> - Block proxies. (only via HTTP header)
> - Detect flooding IP addresses.
> - Slow down or restrict access for automated tools (HTTP flood, brute force
> tools, vulnerability scanners, etc.)
> - Save your server resources (database, cpu, ram, etc.) under an attack.
> - Restrict access permanently or temporarily for listed IP addresses in
> "banlist" file.
> - Notify yourself via email alerts when attacks begin.
> - Implicit deny for DDoS attacks
>
> You can use IOSEC under .NET see. http://phalanger.codeplex.com/
>
> Gokhan Muharremoglu
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/