Full Disclosure mailing list archives
IOSEC HTTP Anti Flood/DoS Security Gateway Module (PHP Script)
From: Gokhan Muharremoglu <gokhan.muharremoglu () iosec org>
Date: Wed, 11 Jul 2012 11:37:11 +0300
http://sourceforge.net/projects/iosec/ This module provides security enhancements against (HTTP) Flood & Brute Force Attacks for native PHP or .NET scripts at web application level. Massive crawling/scanning tools, HTTP flood tools can be detected and blocked by this module via htaccess or iptables, etc. You can use this module by including "iosec.php" to any PHP file which wants to be protected. You can test module here: http://www.iosec.org/test.php (demo) Wordpress Plugin http://wordpress.org/extend/plugins/iosec-anti-flood-security-gateway-module CHANGES v.1.7 - Request Cache Size Option - Improved Implicit Deny Mode - Excluded Files Support - Admin GUI Removed - Config File Removed - Connection Limit Support - Whitelist Support - Reverse Proxy Support - reCAPTCHA Support This is a unique project and it is the world's first web application flood guard script. At web application (scripting) level you can, - Block proxies. (only via HTTP header) - Detect flooding IP addresses. - Slow down or restrict access for automated tools (HTTP flood, brute force tools, vulnerability scanners, etc.) - Save your server resources (database, cpu, ram, etc.) under an attack. - Restrict access permanently or temporarily for listed IP addresses in "banlist" file. - Notify yourself via email alerts when attacks begin. - Implicit deny for DDoS attacks You can use IOSEC under .NET see. http://phalanger.codeplex.com/ Gokhan Muharremoglu _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- IOSEC HTTP Anti Flood/DoS Security Gateway Module (PHP Script) Gokhan Muharremoglu (Jul 11)