nerdexam
EC-Council

312-50V13 · Question #198

Which of the following DoS tools is used to attack target web applications by starvation of available sessions on the web server? The tool keeps sessions at halt using never-ending POST…

The correct answer is C. R-U-Dead-Yet?(RUDY). RUDY (R-U-Dead-Yet?) is a specialized Slow-HTTP-DoS tool designed to exhaust web server sessions by sending incomplete POST requests with large Content-Length headers.

Submitted by olafpl· Mar 6, 2026Denial-of-Service

Question

Which of the following DoS tools is used to attack target web applications by starvation of available sessions on the web server? The tool keeps sessions at halt using never-ending POST transmissions and sending an arbitrarily large content-length header value.

Options

  • AMy Doom
  • BAstacheldraht
  • CR-U-Dead-Yet?(RUDY)
  • DLOIC

How the community answered

(31 responses)
  • A
    6% (2)
  • C
    90% (28)
  • D
    3% (1)

Why each option

RUDY (R-U-Dead-Yet?) is a specialized Slow-HTTP-DoS tool designed to exhaust web server sessions by sending incomplete POST requests with large Content-Length headers.

AMy Doom

MyDoom is a fast-spreading computer worm primarily designed for email-based propagation and launching DoS attacks, not specifically for web application session starvation via slow POST requests.

BAstacheldraht

Astacheldraht is not a recognized DoS tool in the context of web application session starvation as described.

CR-U-Dead-Yet?(RUDY)Correct

RUDY (R-U-Dead-Yet?) is a specialized Slow-HTTP-DoS tool designed to exhaust web server resources by sending legitimate-looking POST requests with an arbitrarily large Content-Length header, then sending data very slowly to keep sessions open indefinitely. This starves the web server of available sessions and processing capacity, leading to denial of service.

DLOIC

LOIC (Low Orbit Ion Cannon) is a network stress testing and DoS tool primarily used for flooding targets with UDP, TCP, or HTTP requests, but it doesn't specifically employ slow POST transmissions with large content-length headers for session starvation.

Concept tested: Slow-HTTP-DoS tools and techniques

Source: https://owasp.org/www-community/attacks/Slow_loris_attack

Topics

#DoS tools#HTTP POST DoS#session starvation#RUDY

Community Discussion

No community discussion yet for this question.

Full 312-50V13 Practice