If you have read my previous article about CSRF on SiteMap Engine to launch a Denial Of Service (Sorry for my noob-ness that I targeted DoS to exhaust server bandwith). This time I am going to show you how to launch a DoS using CSRF that will burden the server load.
Here the story goes :
Site ABC is an online electronic devices store. It has a search form that uses GET requests. Let say the URL to search for keyword “tv” is this : http://www.abc.com/?q=tv.
PoC :
<img src=”http://www.abc.com/?q=tv” height=”1″ width=”1″/>
Each page load from the CSRF inserted page will exhaust the targeted server load. Feedback or critics are welcomed.
No Post Relate to this
[Read the rest on (it)gossips network: Zoiz]
CSRF to DoS is posted on May 13th, 2008 by . This post is filed under: Uncategorized .
If you like this post, you can subscribe to receive latest posts by e-mail or RSS feed.
Some people come to this post with this search term: server,
And here is the related entries of this post: CSRF Vulnerability on www.uni.cc, CSRF Hacking Database & Tutorial, CSRF Hacking Database & Tutorial, Cross Site Request Forgery (CSRF), Massive HTML Injection Vulnerability,
Leave a Reply