Sep 26, 2019 02:52 PM
(This post was last modified: Sep 26, 2019 02:53 PM by Tyr.)
This is my first post! Enjoy.
Disclaimer: this is for educational purposes. I am responsible for your actions.
Hey there. I am well versed in quite a lot of aspects in regards to DDoS protection and other means of how to utilize my own "network." I will add more to this thread if it doesn't get deleted (unsure because he rules on this stuff keep changing).
Now I would like to make a few things clear and explain why I love this script so much. It is a simple DOS but is much more than that at the same time. Its simplicity makes it great for those who are just getting into this stuff and perhaps want to stress test their own VPS or perhaps even your personal ISP via your IP. NOTE: I do not recommend doing this. Perhaps you just want to learn and see what it's all about? And yes, it is quite capable of knocking off a typical home connection provided you have enough
Now, Slowloris is a type of DOS attack method (a protocol layer 7 attack) which allows a SINGLE (DOS) machine to take down another machines machine's web server or the internet of the target with effects on unrelated services and ports. It tries to keep many connections to the target open and hold them open as long as possible. It also does not use much bandwidth because you can literally just browse the internet and do what you please while it is being executed. How does this exactly work? I will explain.
Slowloris works by opening a great amount of connections to the targeted IP/server and keeping them open as long as possible whilst sending packets slowly. So what it will do is, send a very very slow amount of valid HTTP requests at a very slow rate. It will talk to the web server, then send a space or random number in very very very slow increments in order to keep the connection still open. The attacked servers open more and connections open, waiting for each of the attack requests to be completed. So it is endless.
QUOTE: "Slowloris is different from typical denials of service in that Slowloris traffic utilizes legitimate HTTP traffic, and does not rely on using special "bad" HTTP requests that exploit bugs in specific HTTP servers. Because of this, existing IPS and IDS solutions that rely on signatures to detect attacks will generally not recognize Slowloris. This means that Slowloris is capable of being effective even when standard enterprise-grade IPS and IDS systems are in place."
This is very good for stress testing Apache Webservers. In order to do this, it depends on your operating system. For Windows, you will have to to have Kali Linux installed. For Linux, it is much simpler. If you would like help with learning how to exactly conduct this stress test, you may PM me for advice. I am not responsible for any actions you take.
***IMPORTANT:
Step 1 – download perl for your os here Perl Download - www.perl.org
step 2 – download slowloris.pl here http://ha.ckers.org/slowloris/slowloris.pl
step 3 – place slowloris on c:\
step 4 – launch command line
enter this command if you installed activstate perl
64bit
C:\Perl64\bin\perl.exe C:\slowloris.pl -dns url
32bit
C:\Perl\bin\perl.exe C:\slowloris.pl -dns url
enter this command if you installed strawberry perl
C:\strawberry\perl\bin\perl.exe C:\slowloris.pl -dns url
if u need help the comment button is below
Disclaimer: this is for educational purposes. I am responsible for your actions.
Hey there. I am well versed in quite a lot of aspects in regards to DDoS protection and other means of how to utilize my own "network." I will add more to this thread if it doesn't get deleted (unsure because he rules on this stuff keep changing).
Now I would like to make a few things clear and explain why I love this script so much. It is a simple DOS but is much more than that at the same time. Its simplicity makes it great for those who are just getting into this stuff and perhaps want to stress test their own VPS or perhaps even your personal ISP via your IP. NOTE: I do not recommend doing this. Perhaps you just want to learn and see what it's all about? And yes, it is quite capable of knocking off a typical home connection provided you have enough
Now, Slowloris is a type of DOS attack method (a protocol layer 7 attack) which allows a SINGLE (DOS) machine to take down another machines machine's web server or the internet of the target with effects on unrelated services and ports. It tries to keep many connections to the target open and hold them open as long as possible. It also does not use much bandwidth because you can literally just browse the internet and do what you please while it is being executed. How does this exactly work? I will explain.
Slowloris works by opening a great amount of connections to the targeted IP/server and keeping them open as long as possible whilst sending packets slowly. So what it will do is, send a very very slow amount of valid HTTP requests at a very slow rate. It will talk to the web server, then send a space or random number in very very very slow increments in order to keep the connection still open. The attacked servers open more and connections open, waiting for each of the attack requests to be completed. So it is endless.
QUOTE: "Slowloris is different from typical denials of service in that Slowloris traffic utilizes legitimate HTTP traffic, and does not rely on using special "bad" HTTP requests that exploit bugs in specific HTTP servers. Because of this, existing IPS and IDS solutions that rely on signatures to detect attacks will generally not recognize Slowloris. This means that Slowloris is capable of being effective even when standard enterprise-grade IPS and IDS systems are in place."
This is very good for stress testing Apache Webservers. In order to do this, it depends on your operating system. For Windows, you will have to to have Kali Linux installed. For Linux, it is much simpler. If you would like help with learning how to exactly conduct this stress test, you may PM me for advice. I am not responsible for any actions you take.
***IMPORTANT:
Step 1 – download perl for your os here Perl Download - www.perl.org
step 2 – download slowloris.pl here http://ha.ckers.org/slowloris/slowloris.pl
step 3 – place slowloris on c:\
step 4 – launch command line
enter this command if you installed activstate perl
64bit
C:\Perl64\bin\perl.exe C:\slowloris.pl -dns url
32bit
C:\Perl\bin\perl.exe C:\slowloris.pl -dns url
enter this command if you installed strawberry perl
C:\strawberry\perl\bin\perl.exe C:\slowloris.pl -dns url
if u need help the comment button is below