app-layer-dos - Test application-layer denial-of-service vectors
Tests ReDoS, gzip decompression bombs, slow-processing endpoints, GraphQL amplification, and stack traces for application-layer resource exhaustion.
Tags
Updated: 2026-10-01Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Test regex validation for ReDoS
- Test gzip request decompression
- Measure endpoint processing delays
- Amplify expensive request parameters
- Inspect stack traces for DoS intelligence
- Cross-reference GraphQL amplification vectors
Inputs
- Target URL
- Target endpoints
- Request parameters
- Request bodies
- Target error responses
- Target processing timings
Outputs
- Timing measurements
- HTTP responses
- Generated gzip payload files
- Compression ratio records
- Stack trace observations
- Resource impact observations
Requirements
- Authorized target access
- curl
- Python 3