Nmap Development mailing list archives
[NSE] script to measure the time a website takes to deliver its pages
From: Gutek <ange.gutek () gmail com>
Date: Tue, 06 Mar 2012 14:03:57 +0100
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, A supposed Guy Fawkes fan asked me some times ago a tool for his hobby. The deal was that I publish it publicly in return, so here is a Nmap version. Not a big deal and in fact I would say barely nothing but...it's on the list. Please find attached a script which measures the time a website takes to deliver its pages and returns both an instant and an average chronos. On a pre-DDOS recon phase, attackers often try to identify slow pages because they could be more resources-intensive than any other page on the website. Therefore, it could be usefull to identify them before the bad guys do ! It first uses httpspider to take an instant measure on each page, then query each url 5 times with an anti-cache trick to measure an average speed. I'm not sure about a script name that could be consistent with the Nmap scripts terminology, and about the categories as well: it's not DoS as defined in the script categories, but it's DoS related... Anyway, the sample output : - -- @output - -- PORT STATE SERVICE - -- 80/tcp open http - -- | http-chrono: instant<ms>(average<ms>) -> page - -- | 818(782.4) -> http://nmap.org/nping/ - -- | 805(1175.6) -> http://nmap.org/book/man.html - -- | 586(587.6) -> http://nmap.org/shared/css/insecdb.css - -- | 813(791.4) -> http://nmap.org/docs.html - -- | 120(785.6) -> http://nmap.org:80/ - -- | 3159(2162.2) -> http://nmap.org/changelog.html - -- | 390(391.6) -> http://nmap.org/nmap_documentation.html - -- | 1061(986.6) -> http://nmap.org/5/#5changes - -- | 789(2012.4) -> http://nmap.org/ncat/ - -- | 829(1087.6) -> http://nmap.org/movies.html#bourne - -- | 394(393) -> http://nmap.org/nmap/nmap_doc.html - -- |_831(779.4) -> http://nmap.org/projects.html If someone finds it usefull, feel free to use and abuse ! Thanks, A.G. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk9WCz0ACgkQ3aDTTO0ha7it5QCfZ1Re44UcU//UaVhiWB5zhhOk 4oQAnim3fUrUPLq9CC28G5TfDVXgDW3u =NmCF -----END PGP SIGNATURE-----
Attachment:
http-chrono.nse
Description:
_______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/
Current thread:
- [NSE] script to measure the time a website takes to deliver its pages Gutek (Mar 06)
- Re: [NSE] script to measure the time a website takes to deliver its pages Fyodor (Mar 07)
- Re: [NSE] script to measure the time a website takes to deliver its pages Gutek (Mar 08)
- Re: [NSE] script to measure the time a website takes to deliver its pages Patrik Karlsson (Mar 23)
- Re: [NSE] script to measure the time a website takes to deliver its pages Gutek (Mar 08)
- Re: [NSE] script to measure the time a website takes to deliver its pages Fyodor (Mar 07)