[Cytax]

I recently watched a video explaining the slow loris attack: https://www.youtube.com/watch?v=XiFkyR35v2Y

I thought it was a pretty good video to explain how this attack is carried out.

My question is, if this is able to be done using almost none of the attackers bandwidth, or well very little, it would be much more effective to do as a single user, right?

From my understanding, it only works on Apache web servers, so for the sake of explaining we will just assume the victim has am apache web server. Why would someone not want to use the slow loris attack rather than the traditional ddos method?

For the record, I am not interested in performing DDOS attacks, I am just curious why this isn't used more often and why it wouldn't be used a lot more. Thanks guys!

[dvlpr]

I recently watched a video explaining the slow loris attack: https://www.youtube.com/watch?v=XiFkyR35v2Y

I thought it was a pretty good video to explain how this attack is carried out.

My question is, if this is able to be done using almost none of the attackers bandwidth, or well very little, it would be much more effective to do as a single user, right?

From my understanding, it only works on Apache web servers, so for the sake of explaining we will just assume the victim has am apache web server. Why would someone not want to use the slow loris attack rather than the traditional ddos method?

For the record, I am not interested in performing DDOS attacks, I am just curious why this isn't used more often and why it wouldn't be used a lot more. Thanks guys!

Slowloris operates on apache for a reason, it is only for web-based applications. It abuses HTTP requests to flood a network. So this answers "why not use traditional DDOS methods" as not all servers are running web apps. The main con of Slowloris is it can be easily mitigated by increasing how many clients can be connected. A cheaply designed and hosted web app is more vulnerable as your server cannot handle so many clients. There comes a curve where the number of clients your web app can handle, cannot be executed by the attacker. It is also a very technical attack. People orchestrating these attacks have their own dedi servers simply for attacking; you would rather invest in a setup that could have a wider scope, or one that can only attack web apps? Slowloris is really for homebrew attackers.

[admiralakbar]

Welcome to 2004 lmfao.....

[cesca]

Slowloris is really for homebrew attackers.

[altalav99654]

DDoS is so much complex. However, there are some tools can help bot herder.

[aibo888]

Do anyone know where to get DDoser service ?

[SLPPPPP]

Someone who has some code to do DDOS attacks for a test with a DDOS-protected website