HTTP/2 Continuation Flood (and POC)
Intro
In early April 2024, Bartek Nowotarski disclosed a new DDoS attack technique named "HTTP/2 Continuation Flood", which exploits vulnerabilities in various
redteam
Fuzzing Smugglers / A dive into attacking WAFs
Utilizing a blend of header smuggling and header fuzzing, sophisticated HTTP attack techniques can effectively deliver DDoS payloads, either by evading detection by Web Application Firewalls (WAFs) or by targeting the WAF-encoders themselves
HTTP/2 attacks measured (Floods and RapidReset)
a comparison of HTTP/2 RapidReset vector-potential vs established vectors: IoT/HTTP/2 Multiplexing
Layer-7 Bots capabilities (IoT vs PseudoBrowser vs Browser)
A comparison of IoT-Bots, Pseudobrowsers and Browserbots used in Layer-7-DDoS-Attacks
Whack-A-Mole // a Serial Carpetbombing - Attack
STATUS: open
embargo lifted 2023-06-20
During our DDoS-Assessments we see a lot of different behaviors on attacked systems/protections; some react without any delay, some