Skip to content

Quick sequence analyzer for finding timing attacks in web contexts

Notifications You must be signed in to change notification settings

Tonabrix1/moment

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 

Repository files navigation

Moment

Quick sequence analyzer for finding timing attacks in web contexts

Implemented

Extremely fast dispatch of responses and automatic substring iteration for sequence payloads, for example:

Say the sequence used it a password "Pa$$", the tool will sent each substring "P", "Pa", "Pa$", and "Pa$$", then order the responses by response speed

If the tool finds that the responses are ordered the same as the sequence above, it will prompt the user that a timing attack is very likely possible

Single packet mode which sends requests in an http/2 single packet attack to reduce/remove network jitter

TODO

Implement response timing and analysis for single packet attacks to take full advantage of reduced network jitter

About

Quick sequence analyzer for finding timing attacks in web contexts

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages