LOIC is a tool for network stress testing. The developer assumes no responsibilities for unintended use of this tool. LOIC Responsibly!
Low Orbit Ion Cannon
An unofficial port of the Low Orbit Ion Cannon (LOIC) software used for flooding packets; Now on mobile! Simply lock on to a target IP and FIRE!
- multi-protocol (SlowDroid is able to affect HTTP, FTP, email, SSH, file sharing, etc...)
- tiny amount of bandwidth needed
- tiny CPU and RAM usage
- configurable (see below; please contact us if you are interested on a pro version of the tool)
- transparent to server logs during the test execution; logs are usually updated once SlowDroid is interrupted
Base settings to execute a SlowDroid test:
How to use it:
- "Server IP Address" is the name or ip address of the server to be tested;
- "Port" is the port number of the listening service on the server;
- "Connections" identifies number of contemporary connections; to reach the DoS state try to augment this number;
- "Wait Timeout": how often to send characters between client and server.
SlowDroid is by far better than LOIC, Slowloris, Slow Read, Apache Range Headers, and many others.
It's a great Denial of Service testing tool!
Just try it on your own Apache server, for example!
In particular, a Slow DoS Attack (see http://goo.gl/Z8OiJB for further information) is executed by the tool, against a specified target, opening a particular amount of potentially endless connections with the server to be tested.
SlowDroid is particularly effective if executed from a mobile phone, since it uses a tiny amount of network bandwidth to generate a Denial of Service on the server to be tested.
The Wait Timeout parameter is used to switch the ON-OFF behavior of a Slow DoS Attack (see http://goo.gl/2NGf5 for further information).
Advanced SlowDroid settings:
The "Connection" parameter should be defined on the basis of the configuration of the server to be tested.
For Apache web server, this configuration parameter is represented by the "MaxClients" directive on Apache configuration files.
It's possible to send three different kinds of requests, through the "Request Generation" setting:
- "Default": a single space character is sent at every Wait Timeout expiration
- "Random": a random character is sent at every Wait Timeout expiration
- "Custom": a specified character is send at every Wait Timeout expiration: at a whole, a custom string is repeatedly sent
An example of custom request is the following one (for HTTP protocol):
GET / HTTP/1.1\r\n[newline]
It's possible to mitigate a SlowDroid-like menace, as we have described in a related work (see http://goo.gl/V3HSrr for further information).
SlowDroid is a work of the Network Security Group at CNR-IEIIT of Genoa, Italy.
For more information, visit the following websites:
Group page: http://www.netsec.ieiit.cnr.it
App specific page: http://software.netsec.ieiit.cnr.it/projects/slowdroid/
SlowDroid by CNR-IEIIT is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported License.
License information are available at:
Tags: SlowDroid, Slow Droid, Slow DoS Attack, DoS, Denial of Service, Slowloris, LOIC, Low-Orbit Ion Cannon, Slow Read, LBR DoS.