shekyan / slowhttptest

Application Layer DoS attack simulator
Apache License 2.0
1.51k stars 303 forks source link

I need help to start slowhttptest (for newbie) #60

Closed thanasmi closed 4 years ago

thanasmi commented 4 years ago

I'm trying to test Slow HTTP POST vulnerability by using this tool and I'm newbie in this area. So, I've 2 questions as below.

  1. Does anyone can suggest or guide me how to read the report and what is the meaning of the result as below?

    • intializing
    • pending
    • conected
    • error
    • closed
    • service available
  2. How to decide that the host has the risk of slow HTTP POST vulnerability and what's the option parameter supposed to be? My current option parameter is -t POST -c 20000 -r 2000 -u <host>

ghost commented 4 years ago

https://tools.kali.org/stress-testing/slowhttptest

https://github.com/shekyan/slowhttptest/wiki

https://github.com/shekyan/slowhttptest/wiki/InstallationAndUsage