<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hpack on HackingPassion.com : root@HackingPassion.com-[~]</title><link>https://hackingpassion.com/tags/hpack/</link><description>Recent content in Hpack on HackingPassion.com : root@HackingPassion.com-[~]</description><generator>Hugo</generator><language>en</language><lastBuildDate>Wed, 03 Jun 2026 13:38:05 +0200</lastBuildDate><atom:link href="https://hackingpassion.com/tags/hpack/index.xml" rel="self" type="application/rss+xml"/><item><title>HTTP/2 Bomb Takes Down nginx Apache IIS Envoy and Cloudflare</title><link>https://hackingpassion.com/http2-bomb-remote-dos/</link><pubDate>Wed, 03 Jun 2026 13:38:05 +0200</pubDate><guid>https://hackingpassion.com/http2-bomb-remote-dos/</guid><description>&lt;p>A new exploit called &lt;strong>HTTP/2 Bomb&lt;/strong> lets one ordinary home computer take down nginx, Apache, Microsoft IIS, Envoy and Cloudflare Pingora, the web servers behind a huge share of the internet, &lt;strong>in a matter of seconds&lt;/strong>.&lt;/p>
&lt;p>It forces those servers to tie up &lt;strong>tens of gigabytes of memory&lt;/strong> until they stop responding, it abuses the configuration they ship with by default, and when the research went public three of the five still had no patch.&lt;/p></description></item></channel></rss>