+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Slow Loris DDOS vs traditional DDOS (/showthread.php?tid=5863957)
Slow Loris DDOS vs traditional DDOS - Cytax - Jul 19, 2018
I recently watched a video explaining the slow loris attack: https://www.youtube.com/watch?v=XiFkyR35v2Y
I thought it was a pretty good video to explain how this attack is carried out.
My question is, if this is able to be done using almost none of the attackers bandwidth, or well very little, it would be much more effective to do as a single user, right?
From my understanding, it only works on Apache web servers, so for the sake of explaining we will just assume the victim has am apache web server. Why would someone not want to use the slow loris attack rather than the traditional ddos method?
For the record, I am not interested in performing DDOS attacks, I am just curious why this isn't used more often and why it wouldn't be used a lot more. Thanks guys!
RE: Slow Loris DDOS vs traditional DDOS - dvlpr - Jul 19, 2018
(Jul 19, 2018 09:30 PM)Cytax Wrote: I recently watched a video explaining the slow loris attack: https://www.youtube.com/watch?v=XiFkyR35v2Y
I thought it was a pretty good video to explain how this attack is carried out.
My question is, if this is able to be done using almost none of the attackers bandwidth, or well very little, it would be much more effective to do as a single user, right?
From my understanding, it only works on Apache web servers, so for the sake of explaining we will just assume the victim has am apache web server. Why would someone not want to use the slow loris attack rather than the traditional ddos method?
For the record, I am not interested in performing DDOS attacks, I am just curious why this isn't used more often and why it wouldn't be used a lot more. Thanks guys!
Slowloris operates on apache for a reason, it is only for web-based applications. It abuses HTTP requests to flood a network. So this answers "why not use traditional DDOS methods" as not all servers are running web apps. The main con of Slowloris is it can be easily mitigated by increasing how many clients can be connected. A cheaply designed and hosted web app is more vulnerable as your server cannot handle so many clients. There comes a curve where the number of clients your web app can handle, cannot be executed by the attacker. It is also a very technical attack. People orchestrating these attacks have their own dedi servers simply for attacking; you would rather invest in a setup that could have a wider scope, or one that can only attack web apps? Slowloris is really for homebrew attackers.
RE: Slow Loris DDOS vs traditional DDOS - admiralakbar - Jul 20, 2018
Welcome to 2004 lmfao.....
RE: Slow Loris DDOS vs traditional DDOS - cesca - Sep 9, 2019
Slowloris is really for homebrew attackers.
RE: Slow Loris DDOS vs traditional DDOS - altalav99654 - Sep 9, 2019
DDoS is so much complex. However, there are some tools can help bot herder.
RE: Slow Loris DDOS vs traditional DDOS - aibo888 - Oct 9, 2019
Do anyone know where to get DDoser service ?
RE: Slow Loris DDOS vs traditional DDOS - SLPPPPP - May 5, 2026
Someone who has some code to do DDOS attacks for a test with a DDOS-protected website