
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@sergdudko/hulk
Advanced tools
DoS Attack tools (for testing purposes only)
Quotation of the original file: "This tool is a dos tool that is meant to put heavy load on HTTP servers in order to bring them to their knees by exhausting the resource pool, its is meant for research purposes only and any malicious usage of this tool is prohibited." Originaly (python) author : Barry Shteiman - http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/
Rewritten with python (concept) under nodejs, optimized by Siarhei Dudko
Dependencies
Install:
npm install @sergdudko/hulk --save
Module connection (examples of using):
var hulkCore = require('@sergdudko/hulk').core;
//hulkCore(set_you_link, set_this_data, set_this_method, set_req_total, set_req_in_min, stdout);
hulkCore('http://link.com ', '', 'GET', 20, 100, log).then(result=>{/* result is object of {"total":(number), "speed":(number), "real":(number), "good":(number), "error":(number), "denial":(number)} */}, err=>{ /* Error */});
var hulkCli = require('@sergdudko/hulk').cli;
hulkCli();
//node you_script.js http://link.com dsdsdsds POST 100 1000
var hulkFile = require('@sergdudko/hulk').file;
//hulkFile(set_you_link, set_this_data, set_this_method, set_req_total, set_req_in_min, path);
hulkFile('http://link.com', '', 'GET', 20, 100, __dirname + '/test.log');
var hulkFunc = require('@sergdudko/hulk').func;
//hulkFunc(set_you_link, set_this_data, set_this_method, set_req_total, set_req_in_min, stdout);
hulkFunc('http://link.com', '', 'GET', 20, 100, console.log);
Setting (function arguments for hulk.core, hulk.file, hulk.func)
Setting (process arguments for hulk.cli)
- set_you_link - http://you_link.com/
- set_this_data - ''
- set_this_method - GET
- set_req_total - 20k
- set_req_in_min - 10k/min
node you_script.js set_you_link set_this_data set_this_method set_req_total set_req_in_min
node you_script.js http://link.com dsdsdsds POST 100 1000
- set_you_link - http://link.com
- set_this_data - dsdsdsds
- set_this_method - POST
- set_req_total - 100
- set_req_in_min - 1000 req/min
node you_script.js set_you_link set_this_method set_req_total set_req_in_min
node you_script.js http://link.com GET 1000 1000
- set_you_link - http://link.com
- set_this_data - ''
- set_this_method - GET
- set_req_total - 1000
- set_req_in_min - 1000 req/min
node you_script.js set_you_link set_this_method set_req_total
node you_script.js http://link.com GET 2000
- set_you_link - http://link.com
- set_this_data - ''
- set_this_method - GET
- set_req_total - 2000
- set_req_in_min - 10k req/min
Софт для DoS атаки на сервер. Исключительно для тестирования собственных продуктов. Использование в противозаконных целях запрещено. Идея навеяна аналогичным скриптом на python(Barry Shteiman - http://www.sectorix.com/2012/05/17/hulk-web-server-dos-tool/). На основании её и реализовал в javascript(nodejs). Плюшки асинхронного языка в комплекте.
Зависимости
Установка:
npm install @sergdudko/hulk --save
Подключение модуля (примеры использования):
var hulkCore = require('@sergdudko/hulk').core;
//hulkCore(set_you_link, set_this_data, set_this_method, set_req_total, set_req_in_min, stdout);
hulkCore('http://link.com ', '', 'GET', 20, 100, log).then(result=>{/* result объект вида {"total":(number), "speed":(number), "real":(number), "good":(number), "error":(number), "denial":(number)} */}, err=>{ /* Ошибка */});;
var hulkCli = require('@sergdudko/hulk').cli;
hulkCli();
//node you_script.js http://link.com dsdsdsds POST 100 1000
var hulkFile = require('@sergdudko/hulk').file;
//hulkFile(set_you_link, set_this_data, set_this_method, set_req_total, set_req_in_min, path);
hulkFile('http://link.com', '', 'GET', 20, 100, __dirname + '/test.log');
var hulkFunc = require('@sergdudko/hulk').func;
//hulkFunc(set_you_link, set_this_data, set_this_method, set_req_total, set_req_in_min, stdout);
hulkFunc('http://link.com', '', 'GET', 20, 100, console.log);
Настройка (аргументы функции hulk.core, hulk.file, hulk.func)
Настройка (аргументы процесса hulk.cli)
- set_you_link - http://you_link.com/
- set_this_data - ''
- set_this_method - GET
- set_req_total - 20k
- set_req_in_min - 10k/min
node you_script.js set_you_link set_this_data set_this_method set_req_total set_req_in_min
node you_script.js http://link.com dsdsdsds POST 100 1000
- set_you_link - http://link.com
- set_this_data - dsdsdsds
- set_this_method - POST
- set_req_total - 100
- set_req_in_min - 1000 req/min
node you_script.js set_you_link set_this_method set_req_total set_req_in_min
node you_script.js http://link.com GET 1000 1000
- set_you_link - http://link.com
- set_this_data - ''
- set_this_method - GET
- set_req_total - 1000
- set_req_in_min - 1000 req/min
node you_script.js set_you_link set_this_method set_req_total
node you_script.js http://link.com GET 2000
- set_you_link - http://link.com
- set_this_data - ''
- set_this_method - GET
- set_req_total - 2000
- set_req_in_min - 10k req/min






FAQs
DoS Attack tools (only for testing yours service)
We found that @sergdudko/hulk demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.