[WEB SECURITY] DAVOSET v.1.0.9
mustlive at websecurity.com.ua
Sat Jul 6 14:18:44 EDT 2013
Hello participants of Mailing List.
After making public release of DAVOSET
I've made next update of the software. On Friday, 05.07.2013, DAVOSET
v.1.0.9 was released - DDoS attacks via other sites execution tool
Download DAVOSET v.1.0.9:
Use, don't abuse.
Among other improvements in new version, in 1.0.9 there was added support of
CSRF tokens. And there was added new service into full lists of zombies
(exactly for requests with CSRF tokens). This is browsershots.org, I wrote
about vulnerabilities in it in 2010 and informed admins, which lamerly
ignored to fix vulnerabilities (only added token, which is easy bypassed as
I showed). One request to this service leads to 158 requests to target site.
Best wishes & regards,
Administrator of Websecurity web site
More information about the websecurity