gkbrk/slowloris

How long should this attack take?

Dereban1 opened this issue · 0 comments

I have a web server hosted on 192.168.1.103:3000, I used

pi@ciscoPi1:~ $ slowloris 192.168.1.103 -p 3000 -v -s 5000

to attack the server from a raspberry pi. I received this back into the console:

[22-05-2022 23:42:55] [Errno 24] Too many open files [22-05-2022 23:42:55] Sending keep-alive headers... Socket count: 1021 [22-05-2022 23:42:55] Recreating socket... [22-05-2022 23:42:55] [Errno 24] Too many open files [22-05-2022 23:42:55] Sleeping for 15 seconds

after 1021 sockets. It rested 15 seconds then sent another 1021 sockets. This process repeated for about 40 minutes while I did other things, and my web server was fine.

When I specify a port number, is it specifying the data's exit point (my device) or entry point (webserver)? Do I need to type :3000 at the end of the IP? How long should a successful attack take?

Also, I'm using a node.js server with a simple HTTP input form. It sends the data back to a database and then prints a response on 192.168.1.103:3000/auth. I attempted a RUDY attack using software I found on GitHub and couldn't get it working either.

Thanks for any help!