-1

I've a WP blog who have received a DoS attack last days. server start using all CPU and memory, and eventually stop replying http request.

It's a POST request to xmlrpc.php, I've checked the content of the $_POST var and is empty, so it looks similar to this kind of attack:

http://blog.carlesmateo.com/2014/08/30/stopping-and-investigating-a-wordpress-xmlrpc-php-attack/

It seems to be a very basic attack, so I'm interested in duplicate it.

I've tried with curl and ab without any luck (I'm not able to take my server down) I also tried with siege but not sure if I configured it right.

So my question is about what tools can be used to create multiple, simultanious POST connections to a remote server, in this case my blog.

3
  • curl, ab and siege can all be used. There are also third-party services like blitz.io.
    – ceejayoz
    Feb 9, 2016 at 14:52
  • I were able to take the server down with siege :) cool.
    – Arnold Roa
    Feb 9, 2016 at 15:01
  • You may want to let your host know you're testing this out. You might get flagged as a real attacker and have your IP null routed.
    – ceejayoz
    Feb 9, 2016 at 15:02

1 Answer 1

0

Isolate this test if you can. There is an application that might work, its called Low Orbit Ion Cannon or LOIC. Look for it on sourceforge.net @ http://sourceforge.net/projects/loic/

2
  • i checked loic but it seems to flood with UDP packets only, which are really low cpu utilization.
    – Arnold Roa
    Feb 9, 2016 at 15:01
  • sorry thought there was a tcp setting Feb 9, 2016 at 16:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.