Cybersecurity content

All educational videos:

Leave a reaction on YouTube
Subscribe to Michał Sołtysik’s channel on YouTube

[ENG] Executing a Layer 7 TLS 1.3 Denial-of-Service (DoS) Attack with OpenSSL and Python on Kali Linux:

Date: April 17, 2025

This demonstration, part of a webinar for EC-Council University, showcases the execution of a Layer 7 TLS 1.3 Denial-of-Service (DoS) attack using OpenSSL and Python on Kali Linux. One terminal window runs a TLS DoS attack via a custom OpenSSL-based script. A second window displays the current number of established connections, while the third monitors live server overload by comparing the baseline RTT with the current RTT – all targeting michalsoltysik.com. Two of these terminal windows show outputs from Python scripts executed on the operating system. The attack increases CPU usage, inflates RTT delays, and pushes the server toward saturation, with OpenSSL connections placing sustained stress on michalsoltysik.com. Both the attacker and the server contribute to RTT fluctuations due to CPU load, network congestion, NIC (Network Interface Controller) queue saturation, and the complexity of TLS handshakes.

Leave a reaction on YouTube
Presentation PDF on github.com
Presentation PDF on files.fm

[ENG] How Web Protocol Weaknesses Enable Layer 7 DoS Attacks:

Date: April 17, 2025

This presentation delves into the inherent vulnerabilities within the design of web protocols which indirectly expose web pages to Layer 7 Denial-of-Service (DoS) attacks – regardless of the use of modern transport encryption mechanisms (e.g., WTLS, DTLS, TLS 1.2/1.3, or (G)QUIC). We’ll meticulously dissect the specific weaknesses of the Internet Cache Protocol (ICP) and explore how it can be weaponized to circumvent security measures. Our analysis will further delve into the vulnerabilities residing within the handshake processes of DTLS, (G)QUIC, TLS 1.2/1.3, and WTLS. This session will provide valuable insights for security professionals and web developers, highlighting the importance of layered security strategies beyond encryption protocols to defend against DoS attacks.

Leave a reaction on YouTube
Presentation PDF on github.com
Presentation PDF on files.fm