1. Attack with GoldenEye

GoldenEye is a tool designed to perform distributed denial-of-service (DDoS) attacks, specifically targeting web servers with high volumes of HTTP requests. It can simulate attacks using worker threads and randomized delays to mimic human-like browsing behavior.

1.1 Run GoldenEye:

• <target_ip>: The IP address of the target VM.
• w 50: Specifies 50 worker threads for making concurrent requests.
• s 100: Sets 100 sockets to maintain simultaneous connections.

Explanation: This command floods the target with a high number of simultaneous HTTP requests. Increasing the number of threads and sockets can generate more load, leading to server overload.

*The page doesn’t load at all. Tested even on private page to avoid misunderstandings that it could load from the cache memory.

1.2 Set Custom Headers:

• To simulate different user agents or other headers
• Custom headers can mimic different clients, providing a more realistic attack.

*The page doesn’t load at all. Tested even on private page to avoid misunderstandings that it could load from the cache memory.

2. Attack with Metasploit (msfconsole)

Metasploit Framework is a powerful tool for security testing, which includes a variety of auxiliary modules for simulating different types of DoS and DDoS attacks.

1.1 Attacking with slowloris