A simple pure Python3 Slowloris implementation for educational purposes. Includes Docker files for building demonstration targets.
Related CVE: CVE-2007-6750
python3 slowloris.py {HOST} {PORT} {NUMBER_OF_CONNECTIONS}
e.g.
python3 slowloris.py localhost 8080 1000
Two Docker files are included to build demonstration targets:
- Apache latest (quick to build but less vulnerable)
- Apache 2.2.14 (slower to build but more vulnerable)
Step 1
Download and install Docker Desktop
Step 2
To build latest:
cd targets/latest
docker build -t apache-latest .
docker run -dit --name slowloris-target -p 8080:80 apache-latest
To build 2.2.14:
cd targets/2.2.14
docker build -t apache-2.2.14 .
docker run -dit --name slowloris-target -p 8080:80 apache-2.2.14
Step 3
Test the target is up and running by visiting http:https://localhost:8080 in your browser:
