-1

I've a WP blog who have received a DoS attack last days. server start using all CPU and memory, and eventually stop replying http request.

It's a POST request to xmlrpc.php, I've checked the content of the $_POST var and is empty, so it looks similar to this kind of attack:

http://blog.carlesmateo.com/2014/08/30/stopping-and-investigating-a-wordpress-xmlrpc-php-attack/

It seems to be a very basic attack, so I'm interested in duplicate it.

I've tried with curl and ab without any luck (I'm not able to take my server down) I also tried with siege but not sure if I configured it right.

So my question is about what tools can be used to create multiple, simultanious POST connections to a remote server, in this case my blog.

Improve this question
3
  • curl, ab and siege can all be used. There are also third-party services like blitz.io.
    – ceejayoz
    Feb 9, 2016 at 14:52
  • I were able to take the server down with siege :) cool.
    – Arnold Roa
    Feb 9, 2016 at 15:01
  • You may want to let your host know you're testing this out. You might get flagged as a real attacker and have your IP null routed.
    – ceejayoz
    Feb 9, 2016 at 15:02

1 Answer 1

Reset to default
0

Isolate this test if you can. There is an application that might work, its called Low Orbit Ion Cannon or LOIC. Look for it on sourceforge.net @ http://sourceforge.net/projects/loic/

Improve this answer
2
  • i checked loic but it seems to flood with UDP packets only, which are really low cpu utilization.
    – Arnold Roa
    Feb 9, 2016 at 15:01
  • sorry thought there was a tcp setting
    – jonathan warren
    Feb 9, 2016 at 16:12

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .