This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP HTTP Post Tool"

From OWASP
Jump to: navigation, search
m (→‎Introduction)
(→‎News and Events)
 
(24 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
__NOTOC__
 +
 
=Main=
 
=Main=
−
 
+
{{#widget:PayPal Donation
−
<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>
+
|target=_blank
 +
|budget=Switch_Blade
 +
}} 
  
 
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
−
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
+
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
−
 
 
−
==OWASP Switchblade ==
 
  
 +
==OWASP Switchblade 4.0 ==
  
 
==Introduction==
 
==Introduction==
Line 15: Line 18:
 
==Description==
 
==Description==
  
−
The projected started in 2000 as a way to test the capacity of simultaneous users connected to a web application.
+
The projected started in early 2000 as a way to test the capacity of simultaneous users connected to a web application and was not  public tool. In 2010 the tool was created by [http://www.proactiverisk.com ProactiveRISK] to educate the OWASP Community about the Denial of Service conditions that can exist with Layer7
  
 +
Watch the [https://youtu.be/lYQFF4Ki8_s LIVE DEMO] Video
  
 
==Licensing==
 
==Licensing==
 
OWASP Switchblade is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.
 
OWASP Switchblade is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.
  
−
 
+
| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |
−
| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |
 
  
 
== What is Switchblade ==
 
== What is Switchblade ==
Line 43: Line 46:
 
[https://www.owasp.org/index.php/OWASP_Testing_Project OWASP Testing Guide]
 
[https://www.owasp.org/index.php/OWASP_Testing_Project OWASP Testing Guide]
  
−
== Openhub ==
+
| valign="top" style="padding-left:25px;width:200px;" |
−
 
 
−
* [http://www.ohloh.net/orgs/OWASP OWASP Project Ohloh]
 
−
 
 
−
 
 
−
| valign="top" style="padding-left:25px;width:200px;" |  
 
  
 
== Quick Download ==
 
== Quick Download ==
  
−
* Link to [https://sites.google.com/a/proactiverisk.com/pr2/SwitchBlade4.0.1.zip page/download]
+
* [https://drive.google.com/file/d/0B2KpD4S8_DdReFJCUVJpaXhKSUU/view?usp=sharing Windows Installer] <br>
 +
* [https://github.com/proactiveRISK/ddos-toolbox GITHUB]
  
 
== Email List ==
 
== Email List ==
Line 59: Line 58:
  
 
== News and Events ==
 
== News and Events ==
−
* [12 June 2015] Page Updated New Template
+
* 7-Aug-2018 Blackhat/Defcon
  
 
== In Print ==
 
== In Print ==
−
This project can be purchased as a print on demand book from Lulu.com
 
−
 
−
 
−
==Classifications==
 
−
 
−
  {| width="200" cellpadding="2"
 
−
  |-
 
−
  | align="center" valign="top" width="50%" rowspan="2"| [[File:New projects.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
 
−
  | align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]] 
 
−
  |-
 
−
  | align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
 
−
  |-
 
−
  | colspan="2" align="center"  | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
 
−
  |-
 
−
  | colspan="2" align="center"  | [[File:Project_Type_Files_CODE.jpg|link=]]
 
−
  |}
 
−
 
−
|}
 
−
 
−
 
−
 
−
 
−
 
−
=Main=
 
−
 
−
<div style="width:100%;height:105px;border:0,margin:0;overflow: hidden;">[[Image:Low activity.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Low_Activity_Projects]] </div>
 
−
 
−
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 
−
| valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
 
−
 
−
==Switchblade==
 
−
 
−
Switchblade is a tool used to conduct load testing on a web application running IIS or Apache sponsored by [http://www.proactiverisk.com ProactiveRISK]
 
−
 
−
==Introduction==
 
−
 
−
The OWASP Testing Guide v3 [http://www.owasp.org/index.php/Testing_for_Denial_of_Service (Section 4.9) Denial of Service Testing] outlines numerous areas of Denial of Service.  This QA tool was created to allow you to test your web applications to test availability concerns from Layer7 DoS HTTP GET and HTTP POST denial of service attacks and SSL half connects <br>
 
−
 
−
 
−
 
−
==Description==
 
−
 
−
This tool is used to test production load of systems to reach capacity. 
 
−
 
−
It should NOT be used from a coffee shop to cause denial of service conditions to websites that you do not own.
 
−
 
−
==Licensing==
 
−
Switchblade is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.
 
−
 
−
 
−
| valign="top"  style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |
 
−
 
−
== What Switchblade V4.x ==
 
−
 
−
Switchblade provides QA testing for Layer7 Denial of Service
 
−
 
−
* SSL Half Connect
 
−
* HTTP Slow Post
 
−
* HTTP Slowloris
 
−
 
−
== Presentation ==
 
−
 
−
* Slides - [http://www.owasp.org/images/4/43/Layer_7_DDOS.pdf OWASP V3.0 Slides Click Here]
 
−
 
−
== Project Leader ==
 
−
 
−
[mailto:[email protected] Tom Brennan]
 
−
 
−
 
−
== Related Projects ==
 
−
 
−
== Ohloh ==
 
−
 
−
*https://www.ohloh.net/p/owasp-dos-http-post
 
−
 
−
 
−
| valign="top"  style="padding-left:25px;width:200px;" |
 
−
 
−
== Quick Download ==
 
−
 
−
* [http://www.proactiverisk.com/tools Download Version 4.1]
 
−
<br>
 
−
* [https://github.com/proactiveRISK/ddos-toolbox GITHUB]
 
−
 
−
== Email List ==
 
−
 
 
N/A
 
N/A
−
 
−
21-Aug-2014 Version 4.0 Released
 
  
 
==Classifications==
 
==Classifications==
Line 156: Line 67:
 
   {| width="200" cellpadding="2"
 
   {| width="200" cellpadding="2"
 
   |-
 
   |-
−
   | align="center" valign="top" width="50%" rowspan="2"| [[File:New projects.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
+
   | rowspan="2" align="center" valign="top" width="50%" | [[File:New projects.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
−
   | align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]   
+
   | align="center" valign="top" width="50%" | [[File:Owasp-builders-small.png|link=]]   
 
   |-
 
   |-
−
   | align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
+
   | align="center" valign="top" width="50%" | [[File:Owasp-defenders-small.png|link=]]
 
   |-
 
   |-
−
   | colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
+
   | colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
 
   |-
 
   |-
−
   | colspan="2" align="center" | [[File:Project_Type_Files_CODE.jpg|link=]]
+
   | colspan="2" align="center" | [[File:Project_Type_Files_CODE.jpg|link=]]
 
   |}
 
   |}
  
 
|}
 
|}
−
 
−
=FAQs=
 
−
 
−
; Q1 Can I get in trouble for using this tool against a website I am not authorized to test?
 
−
: A1 Yes. Don't create problems, create solutions.
 
−
 
−
; Q2 Can I use this tool to test for free?
 
−
: A2 The tool is released open-source to the community.
 
−
 
−
= Acknowledgements =
 
−
==Volunteers==
 
−
Switchblade is developed by ProactiveRISK team. The primary contributors to date have been:
 
−
 
−
* Tom Brennan
 
−
* Sam Jensen
 
−
* Ryan Barnett
 
−
 
−
= Road Map and Getting Involved =
 
−
Involvement in the development and promotion of the Switchblade is actively encouraged!
 
−
You do not have to be a security expert in order to contribute.
 
−
Some of the ways you can help:
 
−
* Demonstrate the tools ability to effect availability of any system using SSL, HTTP Post etc.
 
−
 
−
=Project About=
 
−
{{:Projects/OWASP HTTP Post Tool | Project About}} 
 
−
 
−
__NOTOC__ <headertabs />
 
−
 
−
[[Category:OWASP_Project|HTTP Post Tool]] [[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Download]]
 

Latest revision as of 11:41, 7 August 2018


Main

OWASP Switchblade 4.0

Introduction

OWASP Switchblade is a denial of service tool used for testing the availability, performance and capacity planning of a web application to be proactive about this type of risk condition

Description

The projected started in early 2000 as a way to test the capacity of simultaneous users connected to a web application and was not public tool. In 2010 the tool was created by ProactiveRISK to educate the OWASP Community about the Denial of Service conditions that can exist with Layer7

Watch the LIVE DEMO Video

Licensing

OWASP Switchblade is free to use. It is licensed under the http://creativecommons.org/licenses/by-sa/3.0/ Creative Commons Attribution-ShareAlike 3.0 license], so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

What is Switchblade

OWASP Switchblade provides (3) different types of denial of service conditions that can be tested from a single machine

  • SSL Half Connect
  • HTTP Post Attack
  • Slowloris

Presentation

Link to presentation

Project Leader

Tom Brennan

Related Projects

OWASP Testing Guide

Quick Download

Email List

N/A

News and Events

  • 7-Aug-2018 Blackhat/Defcon

In Print

N/A

Classifications

New projects.png Owasp-builders-small.png
Owasp-defenders-small.png
Cc-button-y-sa-small.png
Project Type Files CODE.jpg
Retrieved from "https://wiki.owasp.org/index.php?title=OWASP_HTTP_Post_Tool&oldid=242324"