[NSE] script to measure the time a website takes to deliver its pages

[Gutek <ange.gutek () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

A supposed Guy Fawkes fan asked me some times ago a tool for his hobby.
The deal was that I publish it publicly in return, so here is a Nmap
version. Not a big deal and in fact I would say barely nothing
but...it's on the list.

Please find attached a script which measures the time a website takes to
deliver its pages and returns both an instant and an average chronos.
On a pre-DDOS recon phase, attackers often try to identify slow pages
because they could be more resources-intensive than any other page on
the website.
Therefore, it could be usefull to identify them before the bad guys do !

It first uses httpspider to take an instant measure on each page, then
query each url 5 times with an anti-cache trick to measure an average speed.
I'm not sure about a script name that could be consistent with the Nmap
scripts terminology, and about the categories as well: it's not DoS as
defined in the script categories, but it's DoS related...

Anyway, the sample output :
- -- @output
- -- PORT   STATE SERVICE
- -- 80/tcp open  http
- -- | http-chrono: instant<ms>(average<ms>) -> page
- -- | 818(782.4) -> http://nmap.org/nping/
- -- | 805(1175.6) -> http://nmap.org/book/man.html
- -- | 586(587.6) -> http://nmap.org/shared/css/insecdb.css
- -- | 813(791.4) -> http://nmap.org/docs.html
- -- | 120(785.6) -> http://nmap.org:80/
- -- | 3159(2162.2) -> http://nmap.org/changelog.html
- -- | 390(391.6) -> http://nmap.org/nmap_documentation.html
- -- | 1061(986.6) -> http://nmap.org/5/#5changes
- -- | 789(2012.4) -> http://nmap.org/ncat/
- -- | 829(1087.6) -> http://nmap.org/movies.html#bourne
- -- | 394(393) -> http://nmap.org/nmap/nmap_doc.html
- -- |_831(779.4) -> http://nmap.org/projects.html

If someone finds it usefull, feel free to use and abuse !

Thanks,

A.G.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9WCz0ACgkQ3aDTTO0ha7it5QCfZ1Re44UcU//UaVhiWB5zhhOk
4oQAnim3fUrUPLq9CC28G5TfDVXgDW3u
=NmCF
-----END PGP SIGNATURE-----

Attachment: http-chrono.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/