Write a attack module which checks for timing attacks

[rliebig]

Timing attacks occur when the web server responds in other time lengths when the user is accesing them, based on the input data, as example, a Password. They can be used for more efficient bruteforcing or to determine the length of data. As we also wanted to check that GET-Requests are idempotent, this can be done in one module.

Intresting Links:

• http://www.stanford.edu/~dabo/papers/webtiming.pd f
• http://pentestmonkey.net/tools/timing-attack-checker