I am doing penetration testing on web application in my local network. As a part of testing procedure I am planning to perform DoS testing. Because I am using just one PC I think that the only reasonable DoS attack to test will be those type of attack that do not demand sending very large number of request, I mean:
- Slowloris - Slow HTTP Headers
- Slow HTTP Body
But these attack are known from many years, so does this make sense to still test these vulnerabilities nowadays? Is this enough to test that the application uses actual web server, which shouldn't be vulnerable? I've read that this vulnerability depends on configuration but is this issue still actual in modern server versions (majority of articles I found come from 2010 - 2014)?
Are there any other DoS test that I should perform which are reasonable on local network and will not affect my network which is used also by other users?