I've got a small contract with a website; they have given me permission to stress test their website, testing for DOS attacks. I have some experience in the field, but I am no omniscient hacker.

I'm running kali linux in a VM, with plenty of computing power allocated for a slowhttptest. I've tried the different tests that the program has to offer, and it appears to slow the website to some degree, temporarily, but my slowhttptest is coming up as service unavailable (it doesn't connect from the VM browsers). However, when I try to visit from any other browser the site loads a bit slower at best (no success in a temporary DOS).

I'm wondering if it is some kind of filtration or if (more likely?) I need to run through a proxy or something of the sort.

Here is an example of the command I am running:

slowhttptest -c 100 -X -g -o slow_read_stats -r 15 -w 512 -y 1024 -n 10 -z 32 -k 3 -u {weburl} -p 10
  • 1
    Maybe you are DoS'ing your VM worse than the target :P – multithr3at3d Jul 11 '20 at 23:24
  • Haha, can you explicate? – schizosavant Jul 11 '20 at 23:40
  • Asking too much of my VM resource-wise? – schizosavant Jul 11 '20 at 23:42
  • I mean, most websites these days aren't going to fall over from a single machine DoS, unless there is something seriously wrong. – multithr3at3d Jul 12 '20 at 1:31
  • Thank you! That statement alone is probably going to save me oodles of time; it looks like you have significant experience on the forms. – schizosavant Jul 12 '20 at 3:33

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.