hacking: security in practice
Concurrency Limit & TimeOut for NoRussian DDOS script

Sorry if this is not the correct sub for this question.

Can someone please explain a bit about Concurrency Limit and Timeout values at https://github.com/ajax-lives/NoRussian :

I would like to "optimise" the settings to make it as efficient as possible for my setup. i assume the settings are generic to suit as many people as possible without bogging their machines down too much.

I assume ConcurrencyLimit is the max aimultaneous requests the browser will run and the timeout value means if it hasn't received a response within this many milliseconds it will abort the request to allow it to try again.

If the request hits its timeout limit and aborts does the target server know (ie does it realise the request has been dropped freeing the server up to attend to the next request?).

If yes, why not keep the request in to hold pressure on the server and counteract this by also increasing the number of concurrent requests? I also assume a longer timeout to allow a proper response to return may increase the riliability of the error count. An aborted request due to timeout does not increase the error count (understandably).

If no, why wait for the response at all? If it is simply about smashing the target server with as many requests as possible why not abort the request straight after it is sent to keep the server occupied?

Will a timeout value increase work against some of these DDOS protections?

Is there value in increasing the ConcurrencyLimit as well as the timeout?

Where is the most likely bottleneck for someone using this webpage? Am I better to use the current settings and open up multiple instances? monitoring my traffic I am barely bothering my available bandwidth. Am I more interested in using more upload (as this must be going to the target) than my download (as I guess a lot of it will be errors / failures). I am only managing to use about 5MB up and 18MB down running a few instances of the page.

Thanks in advance.

submitted by /u/Dont-PM-me-nudes
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Russia Arrests Hackers Tied to Major U.S. Ransomware Attacks, Including Colonial Pipeline Disruption

https://external-preview.redd.it/4sRTaHSTnuXpT1qU0pjlBgXUluP4vfFJ7f1unMOzj_c.jpg?width=640&crop=smart&auto=webp&s=288d194d67e3504b112ff23e5c62d775a8e6d56b submitted by /u/ionlad106
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

Some critical vulnerabilities found with passive analysis on bug bounty programs explained
https://infosecwriteups.com/some-critical-vulnerabilities-found-with-passive-analysis-on-bug-bounty-programs-explained-1da8b01c11ad?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups » (https://infosecwriteups.com/some-critical-vulnerabilities-found-with-passive-analysis-on-bug-bounty-programs-explained-1da8b01c11ad?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

The Bad Twin: a peculiar case of JWT exploitation scenario
https://medium.com/@sandh0t/the-bad-twin-a-peculiar-case-of-jwt-exploitation-scenario-1efa03e891c0?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video

Hey Everyone,Continue reading on Medium » (https://medium.com/@sandh0t/the-bad-twin-a-peculiar-case-of-jwt-exploitation-scenario-1efa03e891c0?source=rss------bug_bounty-5)

___________________________
@hacking_Attack
@Hacking_Video

Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...

Hacking on Medium
Cyber Security Internship

Hi Everyone, I’m Darshan Kumar B K from Bangalore. I’m Interested in Ethical Hacking and Programming. I’ve have take up an internship at…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Bypassing 2FA With Cookies

https://cdn-images-1.medium.com/max/600/1*olr_E6r-fiVedUIyh3pNYg.png
Two-factor authentication (2FA) is a specific type of multi-factor authentication (MFA) that strengthens access security by requiring two…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
DC-4 VM WalkThrough

https://cdn-images-1.medium.com/max/716/0*ODdMgQHywig85BrG
Makineyi indirebilirsiniz.

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
¿Qué es el malware?

https://cdn-images-1.medium.com/max/800/1*OWCel0y6ppxgG6URK_FbRg.jpeg
La palabra malware es una contracción de “software malicioso”, que en inglés significa código de programa malicioso. El malware cubre una…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
How do i hack one of the famous Virtual Youtuber Agencies in Indonesia

https://cdn-images-1.medium.com/max/640/1*4vLdJ3cseEydRuN6EEi57Q.gif
Hello guys, hope u are fine. It’s been almost 5 months i haven’t done any hacking activity *lol . The last few years the internet world is…

Continue reading on Medium »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Some critical vulnerabilities found with passive analysis on bug bounty programs explained

https://cdn-images-1.medium.com/max/1327/1*wgNKbh2qJC5DfTsTE_Q4ow.png
This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…

Continue reading on InfoSec Write-ups »
➖ Sent by @TheFeedReaderBot ➖

___________________________
@hacking_Attack
@Hacking_Video

Some critical vulnerabilities found with passive analysis on bug bounty programs explained

This post describes three vulnerabilities found on paid bounty programs along with an overview about how it was found and the performed…Continue reading on InfoSec Write-ups »
Read more...

The Bad Twin: a peculiar case of JWT exploitation scenario

Hey Everyone,Continue reading on Medium »
Read more...

Black Hat Ethical Hacking
Mozilla Firefox 97.0.2 fixes two actively exploited zero-day bugs

___________________________
@hacking_Attack
@Hacking_Video

PwnKit-Exploit - Proof Of Concept (PoC) CVE-2021-4034
http://www.kitploit.com/2022/03/pwnkit-exploit-proof-of-concept-poc-cve.html

___________________________
@hacking_Attack
@Hacking_Video