goldeneye.py

HTTP stress testing tool

TLDR

Test a specific website

$ goldeneye.py [url]

Test with a custom user-agent list and 200 concurrent sockets

$ goldeneye.py [url] -u [useragents.txt] -s 200

Test without verifying SSL certificate

$ goldeneye.py [url] -n

Test in debug mode

$ goldeneye.py [url] -d

Display help

$ goldeneye.py -h

goldeneye.py is an HTTP stress testing tool designed to test the resilience of web servers and applications against heavy load conditions. It generates concurrent HTTP connections using randomized headers and user agents to simulate traffic patterns and identify performance bottlenecks.

WARNING: This tool is intended ONLY for authorized security testing and load testing of systems you own or have explicit permission to test. Unauthorized use against systems you don't own is illegal and unethical.

PARAMETERS

-u, --useragents FILE

File containing a list of user agents to rotate through

-s, --sockets NUM

Number of concurrent sockets

-w, --workers NUM

Number of workers

-n, --nosslcheck

Do not verify SSL certificates

-d, --debug

Enable debug output

-m, --method METHOD

HTTP method: GET, POST, RANDOM

-h, --help

Display help message

CAVEATS

Using this tool against systems without authorization is illegal in most jurisdictions. Only use for legitimate load testing, penetration testing with written permission, or security research on your own systems.

HISTORY

GoldenEye was created by Jan Seidl (jseidl) as a proof-of-concept implementation of the Layer 7 DoS technique behind the older "GoldenEye" C tool, exploiting HTTP Keep-Alive and no-cache request headers to exhaust server connection pools.

RESOURCES

Source code