WEB SECURITY

The Hacker’s Choice Releases SSL DOS Tool

German hacker group “The Hacker’s Choice” officially released a new DDoS tool. The tool exploits a weakness in SSL to kick a server off the Internet.

Establishing a secure SSL connection requires 15x more processingpower on the server than on the client.THC-SSL-DOS exploits this asymmetric property by overloading theserver and knocking it off the Internet.This problem affects all SSL implementations today. The vendors are awareof this problem since 2003 and the topic has been widely discussed.This attack further exploits the SSL secure Renegotiation featureto trigger thousands of renegotiations via single TCP connection.Download:

Windows binary:
thc-ssl-dos-1.4-win-bin.zip
Unix Source : thc-ssl-dos-1.4.tar.gz

Usage:
Use "./configure; make all install" to build and Run : ./thc-ssl-dos 127.3.133.7 443Tips & Tricks for

whitehats
1. The average server can do 300 handshakes per second. This would require 10-25% of your laptops CPU.
2. Use multiple hosts (SSL-DOS) if an SSL Accelerator is used.
3. Be smart in target acquisition: The HTTPS Port (443) is not always the best choice. Other SSL enabled ports are more unlikely to use an SSL Accelerator (like the POP3S, SMTPS, ... or the secure database port).

Counter measurements:
No real solutions exists. The following steps can mitigate (but not solve) the problem:

1. Disable SSL-Renegotiation
2. Invest into SSL Accelerator

How to install Conky Lua in kali Linux

Conky Lua is very nice gadget for every linux user, It shows usage of your system like cpu, disk, memory, net upload and download speed, also date & time. Many users wrote me about this gadget, they like it so much. So Now we will start. I customized this gadget in different flavors.

Install Conky in Ubuntu/Linux Mint open terminal (Press Ctrl+Alt+T) and copy the following commands in the Terminal:

sudo apt-get install conky conky-all

Install by yourself in other distro's.

First of all Download Startup script with following commands:

wget -O .start-conky http://goo.gl/6RrEw

chmod +x .start-conky

Now open Startup Applications > click Add > New Dialog box will open click on Browse > Now

To Install Green-Flavor open Terminal and enter following commands: