aminvakil/slowloris repository overview

⁠slowloris.py - Simple slowloris in Python

⁠What is Slowloris?

Slowloris is basically an HTTP Denial of Service attack that affects threaded servers. It works like this:

1. We start making lots of HTTP requests.
2. We send headers periodically (every ~15 seconds) to keep the connections open.
3. We never close the connection unless the server does so. If the server closes a connection, we create a new one keep doing the same thing.

This exhausts the servers thread pool and the server can't reply to other people.

⁠How to install and run?

You can clone the git repo or install using pip. Here's how you run it.

• sudo pip3 install slowloris
• slowloris example.com

That's all it takes to install and run slowloris.py.

If you want to clone using git instead of pip, here's how you do it.

• git clone https://github.com/gkbrk/slowloris.git
• cd slowloris
• python3 slowloris.py example.com

You can use this docker image too, in case you don't have pip installed locally or don't want to install system-wide.

• docker run --rm aminvakil/slowloris example.com

⁠SOCKS5 proxy support

However, if you plan on using the -x option in order to use a SOCKS5 proxy for connecting instead of a direct connection over your IP address, you will need to install the PySocks library (or any other implementation of the socks library) as well. PySocks⁠ is a fork from SocksiPy⁠ by GitHub user @Anorov and can easily be installed by adding PySocks to the pip command above or running it again like so:

• sudo pip3 install PySocks

You can then use the -x option to activate SOCKS5 support and the --proxy-host and --proxy-port option to specify the SOCKS5 proxy host and its port, if they are different from the standard 127.0.0.1:8080.

⁠Configuration options

It is possible to modify the behaviour of slowloris with command-line arguments.

⁠License

The code is licensed under the MIT License.