Hacking Articles

Hacking Articles Part 23

Kali Linux – Stressing Tools

[Disclaimer: The content of this article is for educational purposes only. It was written to help readers test their skills on using computers and/or Kali Linux and share knowledge about Kali Linux to the users. The writer of this article/guide take no responsibility for actions resulting from the inappropriate usage of informations contained of this article/guide.]

You want to be stressed? The used the stressing tools, hehe just joking :D Hello Guys, here we are again in Hacking articles and the topic for today is about Stressing Tools that we can see and use in Kali Linux. This is not the stress that we know but Stressing Tools will definitely give you stress right now, because it was so hard to understand but it was easy to follow the process.

Stressing tools are used to create DoS attacks or to create the stress test for different applications. All the Stress Testing Tools are found in Applications -> 02-Vulnerability Analysis -> Stress Testing

Note: "All Stress testing test will be done on metasploitable machine which has the IP of 192.168.1.102

Slowhttptest

-It is one of the DoS attacking tools that uses HTTP protocol to connect with the server and to keep the resources busy such as CPU and RAM.

To ope slowhttptest, open the terminal and type "slowhttptest -parameters"

Type the following command:

"slowhttptest -c 500 -H -g -o outputfile -i 10 -r 200 -t GET –u http://192.168.1.202/index.php -x 24 -p 2"

Where,

*(-c 500) = 500 connections

*(-H) = Slowloris mode

*-g = Generate statistics

*-o outputfile = Output file name

*-i 10 = Use 10 seconds to wait for data

*-r 200 = 200 connections with -t GET = GET requests

*-u http://192.168.1.202/index.php = target URL

*-x 24 = maximum of length of 24 bytes

*-p 2 = 2-second timeout

Once the test starts, the output will be shown and you can notice that the service is available. After a while, at the 287 connection the service goes down and that means that the server can handle a maximum of 287 HTTP connections.

Inviteflood

-It is a SIP/SDP INVITE message flooding over UDP/IP. It also executes on a variety of Linux Distros and carries out DoS attacks against SIP devices by sending multiple INVITE requests.

Note: DoS means "Denial of Services".

To open this one, type "inviteflood -parameters" in the terminal.

You can use the command:

inviteflood eth0 target_extension target_domain target_ip number_of_packets

Where,

*target_extension is 2000

*target_domain is 192.168.x.x

*target_ip is 192.168.x.x

*number_of_packets is 1

*-a is alias of SIP account

Iaxflood

-It is a VoIP DoS tool

To open this one, type "iaxflood sourcename destinationname numpackets" in the terminal.

thc-ssl-dos

-It is a tool to verify the performance of SSL and establishing a secure SSL connection requires 15x more processing power on the server than on the client. THC-SSL-DOS exploits this asymmetric property by overloading the server and knocking it off the Internet.

Type the command :

"thc-ssl-dos victimIP httpsport -accept" and output will pop up.

Whooooaaaawww, this is the end of Stressing Tools that caused a lot of stressed for me to understand too, Thanks for subscribing and reading Hacking Articles and don't forget to like and follow us 😊