# shekyan/slowhttptest

Application Layer DoS attack simulator

Repository: https://github.com/shekyan/slowhttptest
Canonical: https://ross.abutalabs.com/products/slowhttptest
Language: C++
License: Apache-2.0
License Family: permissive
Topics: security-scanner, slowhttptest, performance-metrics
Last push: 2026-08-26T18:46:35+00:00

## Health v2 (maintenance only)
Score: 67/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 8, longevity 100
- inputs: {"age_days": 4190, "days_push": 7, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1644, forks 309 (observed 2026-08-28T04:05:16.135480+00:00)

## What it is
SlowHTTPTest is a highly configurable command-line tool that simulates Application Layer Denial of Service attacks by prolonging HTTP connections in various ways. It is used to test web servers for DoS vulnerabilities and to determine how many concurrent connections they can handle.

## Use cases
- test my web server for slow HTTP DoS vulnerabilities
- simulate a slowloris attack against my server
- find out how many concurrent connections my web server can handle
- run application layer DoS attack simulations
- stress test HTTP connection handling
- check if my server is protected against slow POST attacks

## When to choose
- you need to audit a web server's resilience to slow HTTP attacks like slowloris or slow POST
- you want a configurable CLI tool to measure concurrent connection capacity
- you need a lightweight, cross-platform DoS simulator with Docker support

## When to avoid
- you need general-purpose load or performance testing with realistic traffic patterns
- you want volumetric/network-layer DDoS testing rather than application-layer attacks
- you lack authorization to test the target server

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, load-testing, http-client, benchmarking
- domain: security, penetration-testing, web-development
- platform: windows, cli
- tags: dos-attack-simulator, slowloris, slow-http-attack, web-server-testing, application-layer-dos, command-line, linux, macos, docker

## Member repositories
- shekyan/slowhttptest (main) score 67

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:16.135480+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:45:56.430901+00:00, confidence not recorded.
  - readme: https://github.com/shekyan/slowhttptest (fetched 2026-08-28T04:05:16.135480+00:00, sha 48178f49b72f)
- Data as of 2026-08-30T08:39:29.467469+00:00.