A tool to test for slow HTTP DoS vulnerabilities
In other words, SlowHTTPTest implements the most common low-bandwidth Application Layer DoS attacks, like slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer exploit) by draining concurrent connections pool, as well as Apache Range Header attack by causing very significant memory and CPU usage on the server.
The Slowloris and Slow HTTP POST DoS attacks rely on the fact that the HTTP protocol, by default, needs requests to be completely received by the server before being processed.
If an HTTP request is not complete, or if the transfer rate is very low, the server keeps its resources busy waiting for the rest of the data. If the server keeps too many resources busy, this creates a denial of service.
SlowHTTPTest is sending partial HTTP requests, trying to get denial of service from target HTTP server.
SlowHTTPTest is cross-platform and it works on Mac OS X, Windows and Linux.
Detailed instructions on how to install and use the SlowHTTPTest utility on your Mac are available HERE.
In a hurry? Add it to your Download Basket!
What's New in This Release:
- This build includes performance improvements and ability to direct either entire or probe traffic through a web proxy.