shekyan/slowhttptest

Health v2 · maintenance only

Adoption not part of the score

1644 stars · 309 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

SlowHTTPTest is a highly configurable command-line tool that simulates Application Layer Denial of Service attacks by prolonging HTTP connections in various ways. It is used to test web servers for DoS vulnerabilities and to determine how many concurrent connections they can handle.

Use cases

• test my web server for slow HTTP DoS vulnerabilities
• simulate a slowloris attack against my server
• find out how many concurrent connections my web server can handle
• run application layer DoS attack simulations
• stress test HTTP connection handling
• check if my server is protected against slow POST attacks

When to choose

• you need to audit a web server's resilience to slow HTTP attacks like slowloris or slow POST
• you want a configurable CLI tool to measure concurrent connection capacity
• you need a lightweight, cross-platform DoS simulator with Docker support

When to avoid

• you need general-purpose load or performance testing with realistic traffic patterns
• you want volumetric/network-layer DDoS testing rather than application-layer attacks
• you lack authorization to test the target server

Facets

cli-tool · maturity active

security penetration-testing load-testing http-client benchmarking security penetration-testing web-development windows cli dos-attack-simulator slowloris slow-http-attack web-server-testing application-layer-dos command-line linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="shekyan/slowhttptest")