🌐 Layer 7 (L7) Methods
Application-level attack techniques for HTTP-layer stress tests.
- HTTP Flood – Sends raw HTTP GET/POST requests to exhaust resources.
- Async HTTP Flood – Uses asyncio + proxies for parallel attacks.
- WebSocket Flood – Floods a websocket server with upgrade requests.
- Browser Emulation – Headless Chrome simulating human interaction.
- Slowloris – Holds many partial HTTP connections open.
- JS Challenge Bypass – Bypasses JavaScript-based protections (Cloudflare).
- RUDY Attack – R-U-Dead-Yet, slowly posts payloads to exhaust timeout queues.
- Custom Header Flood – Obfuscated header injection testing.
- SSL Renegotiation – Triggers SSL handshakes to drain CPU cycles.
- SMTP Flood – Abuses mail endpoints.
- WebDAV PUT – Sends HTTP PUT payloads to vulnerable endpoints.
- SQL Slam – Injects SQL payload bursts to test endpoint resilience.
- DNS Cache Buster – Sends randomized queries to poison/overflow cache.