HTTP/2 Continuation Flood (and POC)
Intro
In early April 2024, Bartek Nowotarski disclosed a new DDoS attack technique named "HTTP/2 Continuation Flood", which exploits vulnerabilities in various
layer7
Fuzzing Smugglers / A dive into attacking WAFs
Utilizing a blend of header smuggling and header fuzzing, sophisticated HTTP attack techniques can effectively deliver DDoS payloads, either by evading detection by Web Application Firewalls (WAFs) or by targeting the WAF-encoders themselves
HTTP/2 attacks measured (Floods and RapidReset)
a comparison of HTTP/2 RapidReset vector-potential vs established vectors: IoT/HTTP/2 Multiplexing
Comparison and collection of DDoS-Frameworks
zerobs-loiczerobs-loic has 17 repositories available. Follow their code on GitHub.GitHub
Since a couple of years we collect and track current and legacy ddos-frameworks and
Bypassing GeoFencing in advanced Layer-7 DDoS Attacks
TL;DR: just use free/paid Proxyfarms and Browserbots. Thats it. Thats the News. Find explanation and possibe countermeasures below.
Inb4: Yes, this method (Browserbots