Saturday, 5 April 2014


Tor Browser Bundle is a modified Firefox ESR, pre-configured to protect users' privacy and anonymity on the web, bundled with Tor to allow users to use the Tor anonymity network. It's available for OS XMicrosoft Windowsand Linux.

Tor works by routing Internet traffic through several "onion" servers, obscuring the originating address. This naturally provides anonymity for other Internet programs that are configured to connect to it on the system, or even network. Applications can be directed to the Tor network through

Vulnerability in World's Largest Site Turns Million of Visitors into DDoS Zombies


Vulnerability in World's Largest Site Turns Million of Visitors into DDoS Zombies
An application layer or 'layer 7' distributed denial of service (DDoS) attacks is one of the most complicated web attack that disguised to look like legitimate traffic but targets specific areas of a website, making it even more difficult to detect and mitigate.

Just Yesterday Cloud-based security service provider 'Incapsula' detected a unique application layer DDoS attack, carried out using traffic hijacking techniques. DDoS attack flooded one of their client with over 20 million GET requests, originating from browsers of over 22,000 Internet users.

What makes this case especially interesting is the fact that the attack was enabled by persistent XSS vulnerability in one of the world’s largest and most popular site - one of the domains on Alexa’s “Top 50” list.