Detecting web servers vulnerable to slowloris denial of service attacks
The denial of service attack is very popular these days, and Nmap can help pentesters detect web servers that are vulnerable to these types of attacks. The "slowloris denial of service" technique is presumed to have been discovered by Adrian Ilarion Ciobanu back in 2007, but Rsnake released the first tool in DEFCON 17 proving that it affects several products, including Apache 1.x, Apache 2.x, dhttpd, and possibly many other web servers.
This recipe shows how to detect if a web server is vulnerable to slowloris DoS attacks by using Nmap.
How to do it...
To launch a slowloris attack against a remote web server with Nmap, use the following command:
# nmap -p80 --script http-slowloris ...Get Nmap 6: Network Exploration and Security Auditing Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
