DoS testing tool that simulates Slow HTTP attacks including Slowloris, Slow HTTP POST, and Slow Read to test server resilience against application-layer DoS.
slowhttptest {flag-type} {flag-ssl} {flag-verbose} {flag-random-agent} {flag-num-connections} {flag-interval} {flag-duration} {flag-content-length} {flag-method} {flag-output} -p {flag-port} {target} 📎 flag-type 📎 flag-ssl 📎 flag-verbose 📎 flag-random-agent 📎 flag-num-connections 📎 flag-interval 📎 flag-duration 📎 flag-content-length 📎 flag-method 📎 flag-output 📎 flag-port 📎 target slowhttptest {flag-type} {flag-ssl} {flag-verbose} {flag-random-agent} {flag-num-connections} {flag-interval} {flag-duration} {flag-content-length} {flag-method} {flag-output} -p {flag-port} {target}Sandbox: execFile · Timeout: 600s
dos.slowloris dos.slow-post dos.slow-read dos.test-resilience | Name | Type | Required | Default | Description | Aliases |
|---|---|---|---|---|---|
target | string | Yes | - | Target hostname or IP | - |
flag-port | integer | No | - | Target port | -p, --port |
flag-type | string | No | - | Attack type (slowloris, slowbody, slowread) | -t, --type |
flag-num-connections | integer | No | - | Number of connections | -c, --connections |
flag-interval | integer | No | - | Interval between follow-up data in seconds | -i, --interval |
flag-duration | integer | No | - | Test duration in seconds | -d, --duration |
flag-ssl | boolean | No | - | Use SSL/TLS | -s, --ssl |
flag-verbose | boolean | No | - | Verbose output | -v, --verbose |
flag-output | string | No | - | Output file prefix for report files | -o, --output |
flag-random-agent | boolean | No | - | Random User-Agent header | -r, --random-agent |
flag-method | string | No | - | HTTP method for slowbody (POST, PUT) | -m, --method |
flag-content-length | integer | No | - | Content-Length header value for slowbody | -l, --content-length |
| Type | Description | MIME | Schema | Trust |
|---|---|---|---|---|
dos.test.report | Slow HTTP test results | text/html | - | verified |
dos.test.csv | Test results as CSV | text/csv | - | verified |
Inputs
network.target.host Target hostname or IP
network.port Target port (default 80 or 443)
Outputs
dos.test.report HTML report of DoS test
dos.test.csv Statistics in CSV format
network_traffic Produces
dos.test.reportdos.test.csvConsumes
network.target.hostnetwork.port| Resource | Value |
|---|---|
| CPU | low |
| Memory | 64 MB |
| Network | high |
| Disk I/O | low |
Slowloris attack
slowhttptest -c 1000 -i 10 -d 120 -t slowloris -p 80 example.comSlow HTTP POST attack
slowhttptest -c 500 -i 5 -d 120 -t slowbody -p 443 -s example.comSlow Read attack
slowhttptest -c 200 -i 10 -d 60 -t slowread -p 443 -s example.comSSL test with verbose output
slowhttptest -c 1000 -i 10 -d 180 -t slowloris -p 443 -s -v example.comslowhttptest is a C-based tool for testing web server resilience against Slow HTTP DoS attacks. It implements Slowloris (slow headers), Slow HTTP POST (slow body), and Slow Read attacks to exhaust server connection pools.
# Slowloris attack
slowhttptest -c 1000 -i 10 -d 120 -t slowloris example.com
# Slow HTTP POST
slowhttptest -c 500 -i 5 -d 180 -t slowbody example.com
# Slow Read over SSL
slowhttptest -c 200 -i 10 -d 60 -t slowread -s example.com:443
# Generate HTML report
slowhttptest -c 1000 -i 10 -d 120 -t slowloris -o report example.com