[SM-Commit] GIT changes to master grimoire by Vlad Glagolev (c870891d61bc848d97b3768bce9153ff55afbe5c)

Vlad Glagolev scm at sourcemage.org
Fri Apr 27 14:41:35 EDT 2012


GIT changes to master grimoire by Vlad Glagolev <stealth at sourcemage.org>:

 ChangeLog                |    3 +++
 net/slowhttptest/DEPENDS |    1 +
 net/slowhttptest/DETAILS |   33 +++++++++++++++++++++++++++++++++
 net/slowhttptest/HISTORY |    2 ++
 4 files changed, 39 insertions(+)

New commits:
commit c870891d61bc848d97b3768bce9153ff55afbe5c
Author: Vlad Glagolev <stealth at sourcemage.org>
Commit: Vlad Glagolev <stealth at sourcemage.org>

    slowhttptest: new spell, application layer DoS attack simulator

diff --git a/ChangeLog b/ChangeLog
index a479018..8b8d599 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,6 @@
+2012-04-27 Vlad Glagolev <stealth at sourcemage.org>
+	* net/slowhttptest: new spell, application layer DoS attack simulator
+
 2012-04-26 Vlad Glagolev <stealth at sourcemage.org>
 	* graphics/jbig2dec: new spell, decoder implementation of the JBIG2
 	  image compression format
diff --git a/net/slowhttptest/DEPENDS b/net/slowhttptest/DEPENDS
new file mode 100755
index 0000000..ed472ed
--- /dev/null
+++ b/net/slowhttptest/DEPENDS
@@ -0,0 +1 @@
+depends openssl
diff --git a/net/slowhttptest/DETAILS b/net/slowhttptest/DETAILS
new file mode 100755
index 0000000..5d53fea
--- /dev/null
+++ b/net/slowhttptest/DETAILS
@@ -0,0 +1,33 @@
+           SPELL=slowhttptest
+         VERSION=1.4
+          SOURCE=$SPELL-$VERSION.tar.gz
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
+   SOURCE_URL[0]=http://slowhttptest.googlecode.com/files/$SOURCE
+     SOURCE_HASH=sha512:7110727b6955bd62d532b0cfa5768450e0106e9fd935fa59991fcf276b2e571cf96d268cb09e251c08c619240062b2f053f954d1fdb3596e829a7f06873fe0cf
+        WEB_SITE=http://code.google.com/p/slowhttptest/
+     GATHER_DOCS=off
+      LICENSE[0]=APACHE
+         ENTERED=20120427
+        KEYWORDS="net"
+           SHORT="application layer DoS attack simulator"
+cat << EOF
+SlowHTTPTest is a highly configurable tool that simulates some Application Layer
+Denial of Service attacks.
+
+It implements most common low-bandwidth Application Layer DoS attacks, such as
+slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer exploit)
+by draining concurrent connections pool, as well as Apache Range Header attack
+by causing very significant memory and CPU usage on the server.
+
+Slowloris and Slow HTTP POST DoS attacks rely on the fact that the HTTP protocol,
+by design, requires requests to be completely received by the server before they
+are processed. If an HTTP request is not complete, or if the transfer rate is
+very low, the server keeps its resources busy waiting for the rest of the data.
+If the server keeps too many resources busy, this creates a denial of service.
+This tool is sending partial HTTP requests, trying to get denial of service from
+target HTTP server.
+
+Slow Read DoS attack aims the same resources as slowloris and slow POST, but
+instead of prolonging the request, it sends legitimate HTTP request and reads
+the response slowly.
+EOF
diff --git a/net/slowhttptest/HISTORY b/net/slowhttptest/HISTORY
new file mode 100644
index 0000000..ce94176
--- /dev/null
+++ b/net/slowhttptest/HISTORY
@@ -0,0 +1,2 @@
+2012-04-27 Vlad Glagolev <stealth at sourcemage.org>
+	* DETAILS, DEPENDS: spell created


More information about the SM-Commit mailing list