nanog mailing list archives

Re: Mastercard problems


From: John Adams <jna () retina net>
Date: Thu, 9 Dec 2010 10:16:23 -0800

Uh, no.

Source code from LOIC:

                                byte[] buf;
                                if (random == true)
                                {
                                        buf = System.Text.Encoding.ASCII.GetBytes(String.Format("GET
{0}{1} HTTP/1.1{2}Host: {3}{2}{2}{2}", Subsite, new
Functions().RandomString(), Environment.NewLine, Host));
                                }
                                else
                                {
                                        buf = System.Text.Encoding.ASCII.GetBytes(String.Format("GET {0}
HTTP/1.1{1}Host: {2}{1}{1}{1}", Subsite, Environment.NewLine, Host));
                                }

On Thu, Dec 9, 2010 at 12:49 AM, William Pitcock
<nenolod () systeminplace net> wrote:
On Thu, 2010-12-09 at 18:34 +1100, Ben McGinnes wrote:
On 9/12/10 8:04 AM, Christopher Morrow wrote:
On Wed, Dec 8, 2010 at 3:06 PM, Philip Dorr <tagno25 () gmail com> wrote:
The problem is that they were also slashdotted.  The logs would also have a
large number of unrelated.

pro-tip: the tool has a pretty easy to spot signature.

What is that signature?


The tool makes HTTP/1.0 requests, most browsers make HTTP/1.1 requests.

William





Current thread: