Search Results for "application layer attack tools"

...It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing. ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. It stands between the tester’s browser and the web application so that it can intercept and inspect messages sent between browser and web application.

Toxy is a programmable HTTP proxy created for resiliency testing and simulation of unreliable network conditions. It operates at the HTTP application layer, giving developers more control over requests and responses than basic TCP throttling tools. Its core model uses poisons to alter traffic and rules to decide when those alterations should apply. Tests can inject latency, limit bandwidth, return errors, manipulate payloads, or combine several adverse conditions. Rules can filter traffic by route, headers, query values, methods, bodies, and other request properties. ...

PyLoris is a scriptable tool for testing a server's vulnerability to connection exhaustion denial of service (DoS) attacks. PyLoris can utilize SOCKS proxies and SSL connections, and can target protocols such as HTTP, FTP, SMTP, IMAP, and Telnet.