RUDY Attack: How It Works and How to Test Your Defenses
RUDY sends a complete, entirely valid POST, declares honestly how large the body will be, then delivers that body one byte at a time. The server has no…
Read more →INSIGHTS
Resilience, explained.
Practical guidance on DDoS resilience testing, regulatory expectations under FINMA, DORA and NIS2, and what realistic attack simulation reveals about your defenses.
Apache Killer (CVE-2011-3192): How It Works and How to Test
Apache Killer exploits CVE-2011-3192. One small request asks for many overlapping byte ranges, and a vulnerable server materialises the response body once per range until memory runs out.…
Read more →
Browser Flood: How It Works and How to Test Your Defenses
Browser Flood drives real Chromium sessions that load your page and every resource it asks for. A real browser solves a JavaScript challenge exactly as a customer's would,…
Read more →
GoldenEye Attack: How It Works and How to Test Your Defenses
GoldenEye randomises the query string on every request so your cache never serves it and your origin absorbs all of it, with rotating browser-like headers that blunt simple…
Read more →
HTTP Flood Attack: How It Works and How to Test Your Defenses
An HTTP flood sends ordinary, well-formed requests at volume until application threads and the database connection pool run out. Nothing is malformed, so there is no signature to…
Read more →
Slowloris Attack: How It Works and How to Test Your Defenses
A Slowloris attack takes a server down from one laptop by holding connections open instead of flooding them. How the four slow vectors work, which of your controls…
Read more →
How to Test Your DDoS Protection
A practitioner's guide to testing your DDoS protection safely: what a real test measures, the attack types to cover, authorization-first method, and how to turn the result into…
Read more →