How to solve the problem of recurrence of Apache HTTP server daemon interruptions

This article introduces how to solve the problem of Apache HTTP server daemon interrupt recurrence, the content is very detailed, interested friends can refer to, hope to be helpful to you.

I. introduction of loopholes

Apache HTTP servers 1.x and 2.x allow remote attackers to cause a denial of service (daemon interruptions) through partial HTTP requests, which is related to the lack of mod_ReqTimeout modules in versions prior to 2.2.15.

Second, vulnerability exploitation

1. Visit our target machine: 192.168.1.131, normal access

2. Start msf and scan the server through nmap to determine whether the vulnerability exists. Nmap-sS-Pn-A 192.168.1.131

3. Search for available modules and select

Search slowloris

4. Check the parameters to be configured. You only need to configure the target ip to show options.

5. Set the target ip set 192.168.1.131

6. Run, run

7. Access the target machine 192.168.1.131 again, but it is no longer accessible.

8. Ctrl+c ends the attack, and the web page can be accessed in an instant.

On how to solve the Apache HTTP server daemon interrupt recurrence problem is shared here, I hope the above content can be of some help to you, can learn more knowledge. If you think the article is good, you can share it for more people to see.