DAVOSET v.1.0.9

["MustLive" <mustlive () websecurity com ua>]

Hello participants of Mailing List.

After making public release of DAVOSET
(http://lists.webappsec.org/pipermail/websecurity_lists.webappsec.org/2013-June/008850.html),
I've made next update of the software. On Friday, 05.07.2013, DAVOSET
v.1.0.9 was released - DDoS attacks via other sites execution tool
(http://websecurity.com.ua/davoset/).

Download DAVOSET v.1.0.9:

http://websecurity.com.ua/uploads/2013/DAVOSET_v.1.0.9.rar

Use, don't abuse.

Among other improvements in new version, in 1.0.9 there was added support of
CSRF tokens. And there was added new service into full lists of zombies
(exactly for requests with CSRF tokens). This is browsershots.org, I wrote
about vulnerabilities in it in 2010 and informed admins, which lamerly
ignored to fix vulnerabilities (only added token, which is easy bypassed as
I showed). One request to this service leads to 158 requests to target site.

Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua 


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/