Other nomination

HashDOS: Effective Denial of Service attacks against web application platforms

Alexander Klink and Julian Wälde · fahrplan.events.ccc.de · 7 January 2012

Programme entry for the 28C3 talk by Alexander Klink and Julian Waelde on HashDoS. A common flaw in how PHP, ASP.NET, Java and other platforms hash form-parameter keys lets a single crafted HTTP request pin a web server's CPU at 99 percent for minutes to hours. The attack is independent of the application, relying only on the platform's string hash function.

Record

Researcher

Alexander Klink and Julian Wälde

Published by

fahrplan.events.ccc.de

Date

7 January 2012

In the archive

• Nominated for the 2011 Top 10 Web Hacking Techniques

Related sources

• 28C3 slides

Tags

• dos
• algorithmic-complexity
• php
• java
• dotnet
• http
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Alexander Klink and Julian Wälde, first published at the original source. Preserved copies are kept so the citation survives its host.