[Linux] SlowHTTPTest - App Layer DoS attack simulator (Raw)

[Linux]
SlowHTTPTest - Application Layer DoS attack simulator

Disclaimer
   Any actions and or activities related to the code provided is solely your responsibility.The misuse of the information in this website can result in criminal charges brought against the persons in question. The authors will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this tool to break the law.

SlowHTTPTest
   SlowHTTPTest is a highly configurable tool that simulates some Application Layer Denial of Service attacks by prolonging HTTP connections in different ways.

   Use it to test your web server for DoS vulnerabilites, or just to figure out how many concurrent connections it can handle. SlowHTTPTest works on majority of Linux platforms, OS X and Cygwin - a Unix-like environment and command-line interface for Microsoft Windows, and comes with a Dockerfile to make things even easier.

   Check out Wiki for installation and usage details.

Installation
   The tool is distributed as portable package, so just download the latest tarball from Releases section, extract, configure, compile, and install:
      git clone https://github.com/shekyan/slowhttptest/
      cd slowhttptest
      ./configure --prefix=PREFIX
      make
      sudo make install

   Where PREFIX must be replaced with the absolute path where slowhttptest tool should be installed.

   You need libssl-dev to be installed to successfully compile the tool. Most systems would have it. On OS X, run brew install openssl && brew link openssl --force, if g++ fails to locate ssl.h, run xcode-select --install.

Running slowhttptest in Docker
   The included Dockerfile allows you to build slowhttptest in a containerized Docker environment to avoid polluting your system with development dependencies. You can also use the Docker container for deploying slowhttptest to Kubernetes (Job), Mesos/DCOS (Task), Docker Swarm, etc... if that suites your needs.

   Build the docker container: docker build -t slowhttptest:latest .
Run the docker container: docker run slowhttptest:latest <slowhttptest args>
If you make changes to the source, just re-run the steps and the changes will generate a new container with the updated binary inside the container.

   If you don't want to run "docker run" over and over... you can get an interactive shell: docker run -ti --entrypoint sh slowhttptest:latest then run slowhttptest (it's in the path).

   Alternatively.
SlowHTTPTest Wiki

How to Protect Against Slow HTTP Attacks?

Download SlowHTTPTest
See more at SlowHTTPTest Wiki