CVE-2023-44487 HTTP/2 Rapid Reset Testing Tool - Enhanced Edition

A comprehensive Python testing tool for CVE-2023-44487, the HTTP/2 Rapid Reset vulnerability. This enhanced version provides granular control over testing parameters, multiple attack patterns, and advanced monitoring capabilities.

⚠️ IMPORTANT DISCLAIMER

This tool is for educational and authorized testing purposes ONLY!

• Only use against systems you own or have explicit written permission to test
• Unauthorized use may be illegal and could cause service disruption
• The tool performs a Denial of Service attack that can impact server availability
• Always ensure you have proper authorization before testing

🔍 About CVE-2023-44487

CVE-2023-44487, also known as "HTTP/2 Rapid Reset," is a critical vulnerability in the HTTP/2 protocol that allows attackers to:

• Cause denial of service by rapidly sending and canceling HTTP/2 streams
• Consume excessive server resources with minimal client resources
• Bypass many traditional rate limiting mechanisms
• Affect major web servers and load balancers

CVSS Score: 7.5 (High)

Impact: Denial of Service, Resource Exhaustion

🚀 Enhanced Features

Multiple Attack Patterns

• ⚡ Rapid Reset: Standard HEADERS + immediate RST_STREAM
• 💥 Burst Reset: Requests in bursts with configurable delays
• 📈 Gradual Reset: Gradually increasing attack rate
• 🎲 Random Reset: Random timing to bypass predictive filtering
• 🌊 Continuation Flood: CONTINUATION frame flood attack
• 🔀 Mixed Pattern: Combination of multiple patterns

Granular Configuration

• 📡 Connection Controls: Timeouts, delays, concurrent limits
• ⏱️ Timing Controls: Precise timing with jitter support
• 🌐 HTTP/2 Protocol: Window sizes, frame sizes, HPACK settings
• 📋 Header Customization: Custom headers, random generation
• 🔬 Advanced Options: Stream ID randomization, priority frames
• 📊 Monitoring: Latency tracking, traffic analysis, error monitoring

Output Formats

• 🖥️ Console: Human-readable with progress updates
• 📋 JSON: Machine-readable structured data
• 📊 CSV: Spreadsheet-compatible for analysis
• 🗃️ XML: Enterprise tool integration

Safety Features

• 🛡️ Authorization Controls: Mandatory confirmation prompts
• 🔒 Rate Limiting: Built-in connection and request limits
• 🎛️ Error Handling: Graceful failure handling
• 📝 Audit Trail: Comprehensive logging capabilities

📋 Requirements

• Python 3.7 or higher
• No external dependencies (uses only Python standard library)

📖 Installation

1. Clone or download the script:

git clone https://github.com/madhusudhan-in/CVE_2023_44487-Rapid_Reset.git
cd CVE_2023_44487-Rapid_Reset

2. Make the script executable:

chmod +x rapid_reset_test.py

3. Verify Python version:

python3 --version  # Should be 3.7+

🔧 Usage

Basic Usage

python3 rapid_reset_test.py https://target-server.com

Advanced Usage Examples

1. High-Throughput Load Testing

python3 rapid_reset_test.py https://target.com \
    --connections 50 \
    --requests 1000 \
    --delay 0 \
    --pattern rapid_reset \
    --track-latency \
    --output json

2. Stealth Testing with Custom Headers

python3 rapid_reset_test.py https://target.com \
    --pattern burst_reset \
    --burst-size 5 \
    --burst-delay 2.0 \
    --custom-headers "User-Agent: Mozilla/5.0 (legitbot)" "Authorization: Bearer token123" \
    --jitter 0.3

3. Protocol-Specific Testing

python3 rapid_reset_test.py https://target.com \
    --window-size 32768 \
    --frame-size 32768 \
    --header-table-size 8192 \
    --enable-push \
    --priority-frames \
    --randomize-streams

4. Comprehensive Monitoring Test

python3 rapid_reset_test.py https://target.com \
    --connections 10 \
    --requests 200 \
    --pattern mixed_pattern \
    --track-latency \
    --track-responses \
    --monitor-memory \
    --verbose \
    --debug \
    --log-file attack.log

5. CONTINUATION Flood Attack

python3 rapid_reset_test.py https://target.com \
    --pattern continuation_flood \
    --requests 50 \
    --random-headers \
    --header-count 20

Complete Command Line Options

Connection Settings

Option	Description	Default
-c, --connections N	Number of concurrent connections	1
--connection-timeout SEC	Connection timeout in seconds	10
--read-timeout SEC	Read timeout for responses	5
--connection-delay SEC	Delay between connections	0.0

Request Settings

Option	Description	Default
-r, --requests N	Requests per connection	100
--delay SEC	Delay between HEADERS and RST_STREAM	0.001
--request-delay SEC	Delay between requests	0.0
--jitter FACTOR	Timing randomization factor	0.0

Attack Patterns

Option	Description	Default
--pattern TYPE	Attack pattern to use	rapid_reset
--burst-size N	Requests per burst	10
--burst-delay SEC	Delay between bursts	0.1

Available Patterns:

• rapid_reset - Standard rapid reset attack
• burst_reset - Burst-based attacks
• gradual_reset - Gradually increasing rate
• random_reset - Random timing
• continuation_flood - CONTINUATION frame flood
• mixed_pattern - Mix of patterns

HTTP/2 Protocol Settings

Option	Description	Default
--window-size BYTES	HTTP/2 initial window size	65535
--frame-size BYTES	Maximum frame size	16384
--header-table-size BYTES	HPACK header table size	4096
--enable-push	Enable HTTP/2 server push	False
--rst-error-code CODE	RST_STREAM error code	8

Header Customization

Option	Description	Default
--custom-headers HEADER	Custom headers (Name: Value)	None
--random-headers	Generate random headers	False
--header-count N	Number of random headers	5

Advanced Options

Option	Description	Default
--randomize-streams	Use random stream IDs	False
--priority-frames	Include priority information	False
--continue-on-error	Continue after errors	True
--max-errors N	Maximum errors before stopping	10

Monitoring Options

Option	Description	Default
--track-latency	Track request latency	False
--track-responses	Track server responses	False
--monitor-memory	Monitor memory usage	False

Output Options

Option	Description	Default
--output FORMAT	Output format	console
--output-file FILE	Output filename	auto-generated
--verbose, -v	Verbose output	False
--debug	Debug logging	False
--log-file FILE	Log to file	None

Available Output Formats:

• console - Human-readable console output
• json - Machine-readable JSON
• csv - Spreadsheet-compatible CSV
• xml - Structured XML format

📊 Understanding Results

Enhanced Result Format

The tool provides comprehensive results including:

• Attack Configuration: Complete test parameters
• Connection Statistics: Per-connection success/failure rates
• Traffic Analysis: Bytes sent/received, request rates
• Latency Metrics: Request timing analysis (if enabled)
• Error Analysis: Detailed error tracking and categorization
• Risk Assessment: Automated vulnerability scoring

Sample JSON Output Structure