A Python-based network stress testing tool featuring Layer 2, Layer 4, and Layer 7 attack methods for authorized security testing.
Warning
This project has been archived and is no longer actively maintained. While the source code remains available, no new features, bug fixes, or updates are planned.
This project no longer reflects the current goals and interests behind its development, so future development has been discontinued.
- Layer 7 attacks: HTTP, HTTP Proxy, Slowloris, and Slowloris Proxy.
- Layer 4 SYN Flood support on POSIX systems.
- Layer 2 ARP Spoof and Disconnect attacks.
- Cross-platform support for Windows, Linux, and Termux.
- Automatic retrieval of public proxies for proxy-enabled methods.
- Interactive terminal interface.
- Python 3.10 or newer.
make(recommended) or Poetry.
Tip
Using make automatically creates the virtual environment, installs the required dependencies, and simplifies the setup process.
Clone the repository:
git clone https://github.com/goncalopolido/overloadNavigate to the project directory:
cd overloadIf make is available:
make setup
make runOtherwise:
curl -sSL https://install.python-poetry.org | python3
poetry install --without dev
poetry run python3 overload.pyImportant
On Windows, ensure Python is added to your PATH during installation. Otherwise, the commands above will not work.
| Platform | Supported |
|---|---|
| Windows | Yes |
| Linux | Yes |
| Termux | Yes |
Note
Layer 2 and Layer 4 attack methods require a POSIX-compatible operating system such as Linux.
- HTTP: Sends a large number of HTTP GET requests to exhaust the target.
- HTTP Proxy: HTTP attack performed through public proxies.
- Slowloris: Opens and maintains slow HTTP connections to exhaust the server's available connection pool.
- Slowloris Proxy: Slowloris attack performed through public proxies.
- SYN Flood: Exploits the TCP three-way handshake by creating large numbers of half-open connections.
- ARP Spoof: Performs ARP poisoning to position the attacker between two hosts on the local network.
- Disconnect: Temporarily prevents a selected device from accessing the local network.
Warning
Proxy-enabled methods rely on public proxies retrieved through ProxyScrape. Their availability, speed, reliability, and anonymity cannot be guaranteed.
Caution
This project is intended only for testing systems that you own or are explicitly authorized to assess. Do not use it against third-party systems.
The tool performs DoS attacks, not DDoS attacks. Its effectiveness depends on the target's infrastructure and security mechanisms. Modern protections such as DDoS mitigation services, load balancers, SYN Cookies, and similar technologies may significantly reduce or completely prevent the effectiveness of some attack methods.
The authors assume no responsibility for misuse of this software or for any consequences resulting from its use.