cve-2023-44487

CVE-2023-44487 HTTP/2 Restablecimiento Rápido Hay algunos ejemplos en este repositorio que no se han probado completamente para analizar el impacto, pero solo quería realizar el concepto de este ataque starting many streams and immediately sending RSTSTREAM frame to avoid reaching...

CVE-2023-44487-dos

CVE-2023-44487 HTTP/2 Rapid Reset 这个仓库里有一些例子并未完全测试以分析影响，但我只是想要演示这种攻击的概念（启动大量流并立即发送RSTSTREAM帧以避免达到MAXCONCURRENTSTREAMS）。 我使用H2SpaceX低级HTTP/2库，这是我为利用单包攻击而创建的。 发送100000个POST请求（使用单包攻击技术），导致服务器等待最后一个字节，然后在每个请求后发送RESET STREAM帧。 该工具还使用线程来打开更多的H2连接。 只需运行 python...

Mars: 0 Click account takeover via timed requests to ███████forgot-password (single-packet attack)

A vulnerability was present in the forgot password functionality of the platform. By sending carefully timed requests, an attacker was able to obtain the password reset token for any account using only the victim's email address...

Midea's M-Smart smart socket has design logic flaws

M-Smart Smart Socket is a smart home appliance developed by Midea Group. Midea's M-Smart Smart Socket is susceptible to man-in-the-middle attacks due to insecure protocols for transmitting data and lack of validation of what is transmitted on the client and server side. The lack of effective...

TCP RST packets spoofing

By sending spoofed RST it's possible to terminate established TCP connection. unlike TPC hijacking attacks there is no need for exact TCP sequence number, and number can be any number from handshaked TCP window. It significantly increases attack efficiency. In NetBSD sequence number for RST is no...