So I've tried bruteforcing my server using thc-hydra's https-post-form, but it floods the server very quickly and the requests start timing out.

However, If I go through the browser where the HTTP header Connection: Keep Alive is used and accepted by the server, I can make a lot of requests in rapid succession without flooding the server.

Is there a tool like hydra that can be used to send many https post requests using a single tcp connection?

  • Bash script which executes a cURL command to login.
    – user173641
    Oct 10, 2019 at 8:51
  • Try intruder tab in burp
    – yeah_well
    Oct 10, 2019 at 9:12
  • @VipulNair From what I've read, the Burp intruder makes a new connection for each request, I might be misinformed though.
    – Sam
    Oct 10, 2019 at 9:25


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.