[Dailydave] SMBLoris
Konrads Smelkovs
konrads.smelkovs at gmail.com
Tue Aug 8 19:15:35 UTC 2017
Mostly due to BCP. Guys that do construction can probably live without a
domain controller for a bit
--
Konrads Smelkovs
Applied IT sorcery.
On 8 August 2017 at 19:27, Dave Aitel <dave.aitel at gmail.com> wrote:
> So I know it's Microsoft Tuesday, but we've been working on that SMBLoris
> bug a bit more for release to customers as well, and as part of that, we're
> spending a lot of time thinking about it, as deceptively simple as it is.
>
> The thing I'm wondering is why people outside of FinancialSec think DoS
> is almost a non-issue. Most companies have only a few domain controllers,
> and when those go down, the company goes down. And they have to be
> reachable on these exact ports, from anywhere in the company, essentially.
>
> It seems like this is one of those things that got a tiny splash of
> attention, but could be worth more. :)
>
> -dave
>
>
> _______________________________________________
> Dailydave mailing list
> Dailydave at lists.immunityinc.com
> https://lists.immunityinc.com/mailman/listinfo/dailydave
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.immunityinc.com/pipermail/dailydave/attachments/20170808/bbf31e41/attachment.html>
More information about the Dailydave
mailing list