gkbrk/slowloris

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2820 stars · 734 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python rewrite of the Slowloris low-bandwidth HTTP Denial of Service attack tool. It holds many connections open to threaded web servers by periodically sending headers, exhausting the server's thread pool.

Use cases

• test my web server's resilience to slowloris DoS attacks
• run a low bandwidth denial of service test against a threaded HTTP server
• simulate connection exhaustion attacks during a pentest
• check whether my server's thread pool survives slow header attacks
• perform authorized load testing with SOCKS5 proxy support

When to choose

• you need a simple, pip-installable CLI for slowloris-style DoS testing
• you want low-bandwidth attack simulation without flooding traffic
• you need SOCKS5 proxy or HTTPS options during security assessments

When to avoid

• you need general-purpose load or performance testing with metrics
• you want protection or mitigation tooling rather than attack simulation
• you lack explicit authorization to test the target server

Facets

cli-tool · maturity stable

penetration-testing http-client cli security penetration-testing networking python cli windows cross-platform dos slowloris stress-testing http socks5-proxy security-testing linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="gkbrk/slowloris")