[March/2024 | Tech] 破坏之王 – DDOS book

Book is written at ~2010, some facts are very outdated

Command & Control – IRC / HTTP / P2P

Reflector / Augmenter attack – 放大攻击流量

Metasploit – buffer attack automator

PenTbox – mac addr geolocation? – no longer works – see https://samy.pl/mapxss/?mac=#


Attack as a service – 租用僵尸网络,术业有专攻

微软 – Nitol 盗版windows 附赠恶意软件

CDN技术稀释分布式的攻击流量 – 但只能防止智能DNS解析的流量 不能防直接IP的流量 Anycast

IP trust score

攻击特征的指纹识别

Outflare / Kill em all 工具模拟浏览器 – 看上去是古老的tool

漏洞挖掘产业化

Leave a Reply