Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AdIDoS and WCF web services #12

Open
kmzs opened this issue Sep 23, 2016 · 0 comments
Open

AdIDoS and WCF web services #12

kmzs opened this issue Sep 23, 2016 · 0 comments

Comments

@kmzs
Copy link
Contributor

kmzs commented Sep 23, 2016

Attacking a WCF web service with attacks like Element Count, Hash Collision or XML Overlong Names results in a not successful attack and the log entry:

WARN [PossibleState] Service seems to be down! No request was send successfully. Abort execution.

This error message implies that there was a problem with the service´s availability although the service was available all the time and answered the requests with a HTTP status code "413 Request Entity Too Large".
The plugin should recognize the HTTP code in the answer and therefore stop the attack and give a 0% rating. The error message is not needed/not correct and might confuse the user.

This can be reproduced using the "WCF-1" sample web service.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant