Let iRules Work Around that ASP.NET Padding Oracle Attack

Microsoft released advisory 2416728 on Friday after researchers Thai Duong and Juliano Rizzo demonstrated the attack on ASP.NET with their Padding Oracle Exploit Tool.  The attack itself preys on a b...
Published Sep 20, 2010
Version 1.0
application delivery
dev
devops
iRules
oracle
partner
security
us
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Sep 22, 2010
You could use a for loop as a delay, just randomize the upper limit on a base of x number of milliseconds. That figure will change based on platform, so you'll just need to run some tests to find the sweet spot.