search

GinjaChris / pentmenu

A bash script for recon and DOS attacks
GNU General Public License v3.0
505 stars 216 forks source link

slowloris should support https #15

Closed GinjaChris closed 8 years ago

GinjaChris commented 8 years ago

I think this can be done with stunnel but need to test

GinjaChris commented 8 years ago

I think this will work. Need a basic stunnel config like this in /etc/stunnel/pentmenu.conf:

[SLOWLORIS]
client=yes
accept=127.0.0.1:80
connect=$TARGET:$PORT
verify=0

then launch stunnel as root user: $ sudo stunnel pentmenu.conf

Then launch netcat at the local listener 127.0.0.1:80 in the usual manner.

However, if using a high random port (not 80 like in this example) it has to have an entry in /etc/services, for example if we use port 9999 we'll have to ensure that is appended to /etc/services. See the section "Running stunnel in daemon mode" in https://www.stunnel.org/howto.html

GinjaChris commented 8 years ago

Fixed in https://github.com/GinjaChris/pentmenu/commit/1fa4f3281d5eaaa54a38dfd1af8560e69ff6d1ae#diff-6a976fd914ce67b0d5e6246f0025adc6