{"id":158,"date":"2015-04-20T10:21:44","date_gmt":"2015-04-20T10:21:44","guid":{"rendered":"http:\/\/blog.catalystlogic.com.au\/?p=158"},"modified":"2026-03-01T01:44:18","modified_gmt":"2026-02-28T14:44:18","slug":"vulnerability-testing-with-google-slowhttptest","status":"publish","type":"post","link":"http:\/\/54.253.247.134\/?p=158","title":{"rendered":"Vulnerability testing with Google slowhttptest"},"content":{"rendered":"<p class=\"lang:sh decode:true \">While chrome developer tools allow you to\u00a0test for many http post vulnerabilities relating to invalid post data, testing for a slow post vulnerability needs Googles slowhttptest tool.<br \/>\n<a href=\"https:\/\/github.com\/shekyan\/slowhttptest\">https:\/\/github.com\/shekyan\/slowhttptest<\/a><\/p>\n<p>The installation in very straight forward<br \/>\n<a href=\"https:\/\/code.google.com\/p\/slowhttptest\/wiki\/InstallationAndUsage\">https:\/\/code.google.com\/p\/slowhttptest\/wiki\/InstallationAndUsage<\/a><\/p>\n<p>As the docs say, you'll need lib-ssldev. When missing you'll get:<\/p>\n<pre class=\"lang:sh decode:true \">configure: error: OpenSSL-devel is missing<\/pre>\n<p>My LMDE does not have this out of the box, though\u00a0Synaptic delivered.<\/p>\n<p>&nbsp;<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" width=\"1117\" height=\"297\" class=\"alignnone size-full wp-image-160 \" src=\"http:\/\/54.253.247.134\/wp-content\/uploads\/2015\/04\/img_5534c81c0b886.png\" alt=\"\" srcset=\"http:\/\/54.253.247.134\/wp-content\/uploads\/2015\/04\/img_5534c81c0b886.png 1117w, http:\/\/54.253.247.134\/wp-content\/uploads\/2015\/04\/img_5534c81c0b886-300x80.png 300w, http:\/\/54.253.247.134\/wp-content\/uploads\/2015\/04\/img_5534c81c0b886-1024x272.png 1024w, http:\/\/54.253.247.134\/wp-content\/uploads\/2015\/04\/img_5534c81c0b886-768x204.png 768w\" sizes=\"auto, (max-width: 1117px) 100vw, 1117px\" \/><\/p>\n<p>After the make, running slowhttptest hits up localhost by default. Nothing interesting without a local test server.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-161 \" src=\"http:\/\/54.253.247.134\/wp-content\/uploads\/2015\/04\/img_5534cb72c85e9.png\" alt=\"\" \/><\/p>\n<p>Shekyan also includes the syntax to launch an example of the SLOWORIS attach to test on your own servers.<\/p>\n<pre class=\"lang:sh decode:true\">.\/slowhttptest -c 1000 -H -g -o my_header_stats -i 10 -r 200 -t GET -u https:\/\/localhost\/index.html -x 24 -p 3<\/pre>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>While chrome developer tools allow you to\u00a0test for many http post vulnerabilities relating to invalid post data, testing for a slow post vulnerability needs Googles slowhttptest tool. https:\/\/github.com\/shekyan\/slowhttptest The installation in very straight forward https:\/\/code.google.com\/p\/slowhttptest\/wiki\/InstallationAndUsage As the docs say, you'll need lib-ssldev. When missing you'll get: configure: error: OpenSSL-devel is missing My LMDE does not <a class=\"read-more\" href=\"http:\/\/54.253.247.134\/?p=158\">...continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,19],"tags":[],"class_list":["post-158","post","type-post","status-publish","format-standard","hentry","category-linux","category-vulnerability-testing"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"http:\/\/54.253.247.134\/index.php?rest_route=\/wp\/v2\/posts\/158","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/54.253.247.134\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/54.253.247.134\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/54.253.247.134\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/54.253.247.134\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=158"}],"version-history":[{"count":1,"href":"http:\/\/54.253.247.134\/index.php?rest_route=\/wp\/v2\/posts\/158\/revisions"}],"predecessor-version":[{"id":226,"href":"http:\/\/54.253.247.134\/index.php?rest_route=\/wp\/v2\/posts\/158\/revisions\/226"}],"wp:attachment":[{"href":"http:\/\/54.253.247.134\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=158"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/54.253.247.134\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=158"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/54.253.247.134\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=158"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}