<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>DoS using SiteMap Generator</title>
        <description>It's clear enough from the title. I ever talked this issue with RSnake but he seems to be not interested with this. But last night when I tried this DoS tehcnique on my very own blog,and the result my blog was suspended due to CPU Usage Exceeded within a few minutes. 

Should we start to stop those sitemap generator to crawl our site?</description>
        <link>http://sla.ckers.org/forum/read.php?14,22474,22474#msg-22474</link>
        <lastBuildDate>Wed, 22 May 2013 09:25:15 -0500</lastBuildDate>
        <generator>Phorum 5.2.15a</generator>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22575#msg-22575</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22575#msg-22575</link>
            <description><![CDATA[Yeah, i hosted on hostmonster with 4,5Tb of bandwith available, but it's down too :P Maybe hostmosnter took precaution for this kind of attacks. Thanks Awesome AnDrEw for your explantation! ;)]]></description>
            <dc:creator>Zoiz</dc:creator>
            <category>DoS</category>
            <pubDate>Wed, 28 May 2008 09:56:40 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22510#msg-22510</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22510#msg-22510</link>
            <description><![CDATA[While I will agree that targeting a website for crawling by sitemap generators may place stress on the server there are a number of factors which need to be taken into consideration, and which may limit the impact this potentially has on the server and its resources. The first aspect which should be taken into account is bandwith. If the website is hosted on a free service such as Angelfire it may be susceptible to downtime due to their hourly and monthly limits, but then again this could be done solely with a browser and F5 (as in refresh), or too many HTTP GET requests (we have all seen these programs, or created them at one point or another). Other websites with higher bandwith allotments may use only a small percentage of given resources when struck with multiple crawlers.<br />
Another issue is the .htaccess configuration. A majority of these crawlers can be blocked with either a mod_rewrite rule, a &quot;deny from&quot; statement, or both. Obviously there will still be a large number of requests made if the client does not understand the fact it is unwanted, but with even the smallest amount of bandwith this would most likely not cause a problem. One could even go so far as to firewalling off the IP address to keep any of its requests from ever being seen by the website.<br />
Don't get me wrong it would still be a pain in the ass to look at or first deal with, but it's nothing outside of the actions performed by many search engine crawlers (I'm looking at you searchme).]]></description>
            <dc:creator>Awesome AnDrEw</dc:creator>
            <category>DoS</category>
            <pubDate>Sun, 25 May 2008 12:29:33 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22507#msg-22507</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22507#msg-22507</link>
            <description><![CDATA[Weird, it was fine the other day. But my point is that if a malicious user combining several online sitemap generator site to crawl a single site that will be a serious problem.]]></description>
            <dc:creator>Zoiz</dc:creator>
            <category>DoS</category>
            <pubDate>Sun, 25 May 2008 10:50:42 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22506#msg-22506</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22506#msg-22506</link>
            <description><![CDATA[Notice: Undefined index: url in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 346<br />
<br />
Notice: Undefined index: url in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 347<br />
<br />
Notice: Undefined index: host in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 87<br />
<br />
Notice: Undefined index: url in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 348<br />
<br />
Notice: Undefined index: host in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 87<br />
<br />
Notice: Undefined index: url in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 349<br />
<br />
Notice: Undefined index: maxpages in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 351<br />
<br />
Notice: Undefined index: www in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 355<br />
<br />
Notice: Undefined index: www in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 356<br />
<br />
Notice: Undefined index: index in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 359<br />
<br />
Notice: Undefined index: index in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 360<br />
<br />
Notice: Undefined index: ses in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 362<br />
<br />
Notice: Undefined index: ext in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 369<br />
<br />
Notice: Undefined index: host in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 87<br />
Root location: <br />
Notice: Undefined index: url in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 419<br />
 <br />
Execution time: 0.00 secs <br />
URLs parsed: 0 <br />
URLs extracted: 0]]></description>
            <dc:creator>Awesome AnDrEw</dc:creator>
            <category>DoS</category>
            <pubDate>Sun, 25 May 2008 10:45:51 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22504#msg-22504</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22504#msg-22504</link>
            <description><![CDATA[Still errors for me, I'm getting 15 undefined index errors.]]></description>
            <dc:creator>CrYpTiC_MauleR</dc:creator>
            <category>DoS</category>
            <pubDate>Sun, 25 May 2008 10:26:58 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22500#msg-22500</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22500#msg-22500</link>
            <description><![CDATA[@CrYpTiC_MauleR  : it works fine just now ..]]></description>
            <dc:creator>L41n</dc:creator>
            <category>DoS</category>
            <pubDate>Sun, 25 May 2008 08:21:37 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22480#msg-22480</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22480#msg-22480</link>
            <description><![CDATA[Am I the only one getting these errors?<br />
<br />
Notice: Undefined index: url in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 346<br />
<br />
Notice: Undefined index: url in /home/pctimelimit/data/www/pctimelimit.com/siteindex.php on line 347<br />
<br />
<br />
Looks like someone forgot to turn error reporting to not display O.O]]></description>
            <dc:creator>CrYpTiC_MauleR</dc:creator>
            <category>DoS</category>
            <pubDate>Sat, 24 May 2008 12:05:26 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22477#msg-22477</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22477#msg-22477</link>
            <description><![CDATA[Online sitemap generator,ex : http://www.pctimelimit.com/siteindex.php.<br />
<br />
And I wrote a small program to do the execution loop. It's still works last night (using the http://pctimelimit.com sitemap generator), but now it gives me a 502 error.]]></description>
            <dc:creator>Zoiz</dc:creator>
            <category>DoS</category>
            <pubDate>Sat, 24 May 2008 11:16:47 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22476#msg-22476</guid>
            <title>Re: DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22476#msg-22476</link>
            <description><![CDATA[Are you talking of tools like Google sitemap generator? Or standalone apps?]]></description>
            <dc:creator>CrYpTiC_MauleR</dc:creator>
            <category>DoS</category>
            <pubDate>Sat, 24 May 2008 11:11:34 -0500</pubDate>
        </item>
        <item>
            <guid>http://sla.ckers.org/forum/read.php?14,22474,22474#msg-22474</guid>
            <title>DoS using SiteMap Generator</title>
            <link>http://sla.ckers.org/forum/read.php?14,22474,22474#msg-22474</link>
            <description><![CDATA[It's clear enough from the title. I ever talked this issue with RSnake but he seems to be not interested with this. But last night when I tried this DoS tehcnique on my very own blog,and the result my blog was suspended due to CPU Usage Exceeded within a few minutes. <br />
<br />
Should we start to stop those sitemap generator to crawl our site?]]></description>
            <dc:creator>Zoiz</dc:creator>
            <category>DoS</category>
            <pubDate>Sat, 24 May 2008 10:46:45 -0500</pubDate>
        </item>
    </channel>
</rss>
