I'm looking for tools which can perform HTTP FLOOD ATTACK .
I seached a lot and this is the only tool I've found DoSHTTP.
Does anyone know another tool?
I want to test them on my localhost to find which one is the best.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
A "flood attack" is when you drown a target server under a lot of request. Each request entails some effort from the client, and some effort from the server; the DoS is effective when the server gives up before the client. This means that either the per-request effort from the client was less than the per-request effort from the server, or, more often, that the client mustered more CPU and network bandwidth (that's the idea behind a Distributed Denial of Service).
If you attack "localhost", then you run both the server and the client on the same machine, which means that:
Both conditions mean that whatever you measure in such a situation will not be representative of what a flood attack is, how long your server would resist such a flood, and how efficient a given tool is.
Also, making a lot of HTTP requests is a rather simple programming exercise, a matter of 50 lines of code with any decent programming framework. One could argue that if you cannot do that, then you do not know enough to meaningfully interpret the results of any simulation of HTTP flooding that you may run on any set of machines.
There are different tools available for performing web application stress testing. You can use these stress testing tools to benchmark performance against DoS attacks. Following are some tools
I further recommend reading about various performance optimization techniques used to offload some load from the servers
Load Balancing: A server or a device that balances inbound requests across two or more web servers to spread the load.
Caching: Cache static content from the web servers behind it and thereby reduce the load on the web servers