jclopena/Wifite jclopena/Wifite

  • Stars
    star
    41
  • Rank 667,857 (Top 14 %)
  • Language
    Python
  • Created about 6 years ago
  • Updated about 6 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
jclopena/Wifite
github

jclopena

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

wifite for termux

More Repositories

1

Android-Barcode-AndroidJc

Barcode Generator v1.0
Java
1
star
2

python-down-server

slowdeath - a simple denial of service attack for most PHP-based servers The problem with Apache's approach to dealing with multiple clients, is that there's only ever a limited amount of Client processes available. This is usually is around a few hundred on common webservers. Because of this, it becomes necessary to handle HTTP requests as quickly as possible. As soon as a request is handled, it can go on serving the next. If a client happens to have a slow connection, this can have a direct effect on the scalability of your frontend server. A common way to fight this, is to put a caching server in front of your webserver, such as Varnish or Squid. These webservers are better suited to deal with many clients. This will allow your Apache server to send back HTTP responses quickly to the reverse proxy, and let the proxy deal with sending back the response to the client. However, this doesn't deal with slow requests. Generally, these proxy servers will open connections directly to the backend webserver to avoid having to buffer larger request bodies. Because PHP installations generally use apache 'prefork mpm', the number of possible connections is considerably low. This is also often the case with Fast-CGI based webservers, such as nginx and lighttpd. So if you were to just able to open up a few hundred connections, and drip in the bytes for the request body it would be very easy to take these servers down. To test this theory, I wrote a simple python script that does exactly this, you can grab it from github. To use it, try something like this: python slowdeath.py --threads 200 http://localhost/ In my case my webserver was limited to 150 connections. It took about a second for it to stop serving requests. Big warning: This tool is for research purposes only. Use at your own risk, and only on servers you own.
Python
1
star