HTTP/2 Continuation Flood (and POC)
Intro
In early April 2024, Bartek Nowotarski disclosed a new DDoS attack technique named "HTTP/2 Continuation Flood", which exploits vulnerabilities in various
blueteam
New Tactics from Booterservices
New TTP allows booterservice to mitigate GeoFencing
HTTP/2 attacks measured (Floods and RapidReset)
a comparison of HTTP/2 RapidReset vector-potential vs established vectors: IoT/HTTP/2 Multiplexing
Layer-7 Bots capabilities (IoT vs PseudoBrowser vs Browser)
A comparison of IoT-Bots, Pseudobrowsers and Browserbots used in Layer-7-DDoS-Attacks
Geofencing as an Effective Defense Against Layer 7 DDoS Attacks
TL;DR: Geofencing can be a valid protectionmechanism when facing current hacktivism-threats, but shouldnt be the only option you have.