[Autogenerated] This is a more detailed explanation
of how Andrea SSH actually works.
If you're more interested in the functional aspects of the tool,
feel free to skip this video.
The tar pit concept of endless message is possible
thanks to an exploit of RFC 4-5 free,
which is the secure shell transport layer protocol specification.
The specification states that after TCP connection is established
and before the cryptographic exchange takes place,
both server and client will send their
identification in the form of two strings.
The line from the specification that is being exploited by endless age states
that the server may send other lines of data before sending the version string
endless SSH sends an endless stream of such data.
Moreover, it waits by default,
10 seconds before each line slowing down the protocol and avoiding a time out.
Even though it's a simple single threaded C program.
The tool is able to trap multiple clients at once by using the pole function.
For those of you who are not familiar with C.
Language,
the poll function provides a mechanism for multiplexing
input output over a set of file descriptors.
In other words,
it waits for one of a set of file descriptors to become
ready to perform input output operations.