[Xitami] Xitami DoS/DDoS (CFM, PHP, Perl, and *ALL* CGIs)...

Michael xitami@lists.xitami.org
Sat, 4 May 2002 13:15:41 -0400


> It really doesn't matter if you don't know 50 people.  As long as a
> malicious person is willing to use a distributed attack tool, all they
> have to do is find a CGI on a Xitami server and within 2-3 seconds,
> the server will grind to a halt and start returning zero bytes of data
> to most clients (it will appear to them that the server is busy or
> down and then proceed to go elsewhere).

I downloaded Atelier Web Visiagra. I use Xitami v2.5b5.  For the 
last 30 minutes I've been attempting to open 80 connections on a 
binary in the cgi-bin using a standard SSI exec call.   It appears that 
I've only been able to open around 20 simultaneously and 
everything runs fine.  Is there better software to do this?  Are SSI 
binaries handled differently than standard CGI calls?

~Michael