Skip to content

Instantly share code, notes, and snippets.

View rawdigits's full-sized avatar

Ryan Huber rawdigits

  • Slack
  • Saint Francisco
View GitHub Profile

Keybase proof

I hereby claim:

  • I am rawdigits on github.
  • I am rhuber (https://keybase.io/rhuber) on keybase.
  • I have a public key whose fingerprint is RETU RN T HIS. PGP. GET_ FING ERPR INT( ); }

To claim this, I am signing this object:

1. Soft shell, prefer corn to flour
2. LOVE spicy
3. Doritos. Preferably stomp on the bag to reduce them to almost dust.
4. No strong feeling. Don't drink tea.
p = cProfile.Profile()
p.enable()
counter = 1
def profiler_write_cb(data, remaining):
global counter, p
p.dump_stats('/tmp/stats/asdf_{}'.format(counter))
p.enable()
counter += 1
return w.WEECHAT_RC_OK
import pstats
p = pstats.Stats('asdf_1')
p.sort_stats('tottime').print_stats(20)
p.sort_stats('cumulative').print_stats(20)
@rawdigits
rawdigits / slowdos
Last active March 24, 2017 14:04
A list of references from my talk on App DoS These are in no particular order, and because of the amount of overlap I am not citing individual sources directly.
DoS / slow DoS:
https://www.owasp.org/images/4/43/Layer_7_DDOS.pdf
http://docs.cpanel.net/twiki/bin/view/EasyApache/Apache/SlowlorisAttacks
http://en.nsfocus.com/SecurityReport/2013%20NSFOCUS%20Mid-Year%20DDoS%20Threat%20Report.pdf
http://blog.spiderlabs.com/2011/07/advanced-topic-of-the-week-mitigating-slow-http-dos-attacks.html
http://ckers.org/slowloris/
http://sourceforge.net/projects/pyloris/
http://security.stackexchange.com/questions/19698/mitigating-anonymous-dos-tor-combined-with-pyloris
https://blogs.akamai.com/2013/09/slow-dos-on-the-rise.html
Blog post: Ryan Huber - Distributed Security Alerting
https://medium.com/several-people-are-coding
Video: Zane Lackey - Building a Modern Security Organization
https://duo.com/blog/duo-tech-talk-building-a-modern-security-engineering-organization
Krebs on Security Blog
https://www.krebsonsecurity.com
Sony Breach
go-audit repo:
https://github.com/slackhq/go-audit
go-audit example configurations:
https://github.com/slackhq/go-audit/tree/master/examples
Blog post: Ryan Huber - Distributed Security Alerting
https://medium.com/several-people-are-coding
Video: NSA TAO Chief on Disrupting Nation State Hackers