Slashdot Mirror

For Apache, and some others, slowloris is the ticket.

For IIS (which the sites in question run), and some others, slowloris doesn't work, so just use hping3 to send them a happy synflood. Script here.

Of course, this is brutal to your uplink, so don't forget to find an unencrypted or WEP (wesside-ng -- so easy a caveman could do it) network whose owner you don't like, and burn away.

minor aside, some networks will block UDP/ICMP tracert, you can use hping instead, to trace via TCP (say, port 80)

I guess these are nowhere near feature rich for your needs, but I'll mention them anyway:
Visitors - Simple logfile analyzer
BBClone - Nice visitor counter running on PHP

The proper solution is to use a multipass encryption.

While that might work, there is no guarantee that you'd actually increase your security by doing so.

I really like the Visitors package (http://www.hping.org/visitors/). It does a really good job identifying multiple hits as a single visitor (if timestamp, user-agent, etc match). It also have some very good summaries of Google hits.

I think you might like visitors: http://www.hping.org/visitors/

• Ethereal
• hping
• tcpdump
• tcpflow

Implemented by hping2

you can either do
hping 1.2.3.4 -e your_message_here
or
hping 1.2.3.4 -E file-to-embed

have fun!