search

t2trg / t2trg-amplification-attacks

Other
3 stars 0 forks source link

Creating resources #4

Closed emanjon closed 1 year ago

emanjon commented 1 year ago

Achim Kraus @boaks commented on on Nov 9, 2022: EricssonResearch/coap-actuators#20

An attacker can also increase or control the amplification factor by creating or updating resources. By creating new resources, an attacker can increase the size of /.well-known/core.

For me this requires to mention, that the server must support that "PUT/POST" and doesn't limit it. It should also be mentioned, that usually the coap payload for one message is limited by 1024 or 1280. So "An attacker may be able to increase ..., if the server doesn't limit that".

emanjon commented 1 year ago

Added the suggestions above to master