SlowHTTPTest slow attack test

You can see in this article: http://www.bkjia.com/Article/201209/157455.html

SlowHTTPTest is a configurable tool that simulates DoS attacks at the application layer. It can be used in most Linux platforms, OSX and Cygwin -- a unix-like environment and a command line interface as a window. Slowloris and slow http post DoS attacks depend on the fact of the HTTP protocol. By design, part of each packet sent. If an HTTP request is incomplete, or if the transfer rate is very low, the server keeps its resources busy waiting for other data. If the server keeps too many resources busy, the HTTP server rejects other request services. This tool keeps the target HTTP server busy by sending slow HTTP requests. The installation and use example must be replaced in the absolute path of the prefix. The slowhttptest tool should be installed. You need libssl-dev to install the compilation tool successfully. Tar-xzvf slowhttptest-x.x.tar.gz cd slowhttptest-x.x mkdir-p/usr/local/slowhttptest. /configure -- prefix = PREFIX make install ################# install an instance ############# ######## wget https://slowhttptest.googlecode.com/files/slowhttptest-1.5.tar.gz -- No-check-certificatemkdir-p/usr/local/slowhttptesttar-xzvf slowhttptest-1.5.tar.gz cd slowhttptest-1.5. /configure -- prefix =/usr/local/slowhttptest/make installln-s bin/slowhttptest/usr/bin/the complete list of configurable options is as follows: -a-start value range specifiers are used for range header testing-B uses the byte range specifiers for range header testing-the number of connections allowed for c is limited to 65539-d proxy host: port is used to guide all traffic through the web proxy-e proxy host: port is used to guide only the probe traffic through the web proxy-h, B, R or x specifies to slow down in the header or in the message body.-R allows range inspection to generate statistics for the slow read Test-x-g. In CSV and HTML formats, the mode is slow to xxx. Csv/html, where xxx is the time and date-I seconds second interval tracking data within a few seconds, the number of times each connection-k MPs queue has repeated requests in the same connection for Slow read tests if the server supports HTTP MPs queue lining. -L in a few seconds, the second test time-n seconds interval from the receiving buffer read operation-o file definition output file path and/or name, if you specify a valid-g-p second timeout wait for the HTTP response after the probe is connected, the server is considered inaccessible-r seconds connection speed-s bytes value content length title details, if-B-t verb is specified to customize the target URL of-u URL, enter the browser in the same format, e. G https://host [: Port]/-v level lengthy 0-4 log-w byte range advertisement window size will select from-x byte maximum length tracking data end-y byte range advertisement window the size will select to read the byte and a single read () from the receiving buffer from-z bytes () operation example: Slow Message Subject mode. /slowhttptest-c 1000-B-g-o my_body_stats-I 110-r 200-s 8192-t FAKEVERB-u https://myseceureserver/resources/loginform.html -X 10-p 3 example in slowloris mode lowhttptest-c 1000-H-g-o my_header_stats-I 10-r 200-t GET-u https://myseceureserver/resources/index.html -X 24-p 3 uses the example in the slow-Read mode and explores. x through the proxy. X: 8080 website availability is different from your IP address:./slowhttptest-c 1000-X-r 1000-w 10-y 20-n 5-z 32-u http://someserver/somebigresource -P 5-l 350-e x. x: 8080