SlowHTTPTest 1.5

A tool to test for slow HTTP DoS vulnerabilities
  1 Screenshot
SlowHTTPTest is a free, open-source and highly configurable application that mimics some Application Layer Denial of Service attacks.

In other words, SlowHTTPTest implements the most common low-bandwidth Application Layer DoS attacks, like slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer exploit) by draining concurrent connections pool, as well as Apache Range Header attack by causing very significant memory and CPU usage on the server.

The Slowloris and Slow HTTP POST DoS attacks rely on the fact that the HTTP protocol, by default, needs requests to be completely received by the server before being processed.

If an HTTP request is not complete, or if the transfer rate is very low, the server keeps its resources busy waiting for the rest of the data. If the server keeps too many resources busy, this creates a denial of service.

SlowHTTPTest is sending partial HTTP requests, trying to get denial of service from target HTTP server.

SlowHTTPTest is cross-platform and it works on Mac OS X, Windows and Linux.

Detailed instructions on how to install and use the SlowHTTPTest utility on your Mac are available HERE.

last updated on:
September 8th, 2012, 18:46 GMT
file size:
104 KB
developed by:
Sergey Shekyan
license type:
operating system(s):
Mac OS X
binary format:
Home \ Security
Download Button

In a hurry? Add it to your Download Basket!

user rating 6



Rate it!
What's New in This Release:
  • This build includes performance improvements and ability to direct either entire or probe traffic through a web proxy.
read full changelog

Add your review!