timing_attack 0.2.1 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5b6f971fe9e7eb6b8aa282dffbd7c0eea3a2f009
-  data.tar.gz: e05deb06b3c31be39f128c7906ef3534abad6d09
+  metadata.gz: 8bdfcbf107fd5fffba64e424a8cce2d85a31ee8b
+  data.tar.gz: b6f3b3eed4f88b493e676d651c9b3a8a669c8c56
 SHA512:
-  metadata.gz: c0e1f43f47fafd477678072023fcba97c6db2dbe12f6d09f6c1face92feed5fe6a17f2a16e79bb692e0db1b4e912f7136f5cd47d3f07e66dabafbf52ab293df3
-  data.tar.gz: 8977b5ddbea3da6e3511c1e9b0c9921d194a99e1cfabe7cbe104882579a949a562458fcc17adf72ded2ddb8cbc08e51cf4950349fe30046f9e342f85d5743e73
+  metadata.gz: 663c64fb49012a9ba42836eecc1a4974983a65c578599ad71c6e7fb43654e855503f5d2dc8dd0469ca2916eb01e10935463ad32899e6be78eddee58b74085918
+  data.tar.gz: 1411e2f1eb5f1e565314ad20c9eeee2258b530fc2c87686fde4df078ec6bc52d85573637aca5f6efa8587f29f2dfab5cb011c385cb88fb360d4cbdc809a35b5f

data/README.md

@@ -14,17 +14,20 @@ discrepancies in the application's response time.
 ```
 timing_attack [options] -u <target> <inputs>
     -u, --url URL                    URL of endpoint to profile
-    -n, --number NUM                 Requests per input
-    -t, --threshold NUM              Minimum threshold, in seconds, for meaningfulness (default: 0.05)
+    -n, --number NUM                 Requests per input (default: 50)
+    -c, --concurrency NUM            Number of concurrent requests (default: 15)
+    -t, --threshold NUM              Minimum threshold, in seconds, for meaningfulness (default: 0.025)
     -p, --post                       Use POST, not GET
     -q, --quiet                      Quiet mode (don't display progress bars)
+        --percentile N               Use Nth percentile for calculations (default: 3)
         --mean                       Use mean for calculations
         --median                     Use median for calculations
-        --percentile N               Use Nth percentile for calculations
     -v, --version                    Print version information
     -h, --help                       Display this screen
 ```
 
+Note that setting concurrency too high can add significant jitter to your results.  If you know that your inputs contain elements in both long and short response groups but your results are bogus, try backing off on concurrency.  The default value of 15 is a good starting place for robust remote targets, but you might need to dial it back to as far as 1 (especially if you're attacking a single-threaded server)
+
 ### An example
 
 Consider that we we want to gather information from a Rails server running

data/exe/timing_attack

@@ -7,15 +7,20 @@ opt_parser = OptionParser.new do |opts|
   opts.program_name = File.basename(__FILE__)
   opts.banner = "#{opts.program_name} [options] -u <target> <inputs>"
   opts.on("-u URL", "--url URL", "URL of endpoint to profile") { |str| options[:url] = str }
-  opts.on("-n NUM", "--number NUM", "Requests per input (default: 0.025)") { |num| options[:iterations] = num.to_i }
+  opts.on("-n NUM", "--number NUM", "Requests per input (default: 50)") do |num|
+    options[:iterations] = num.to_i
+  end
+  opts.on("-c NUM", "--concurrency NUM", "Number of concurrent requests (default: 15)") do |num|
+    options[:concurrency] = num.to_i
+  end
   opts.on("-t NUM", "--threshold NUM", "Minimum threshold, in seconds, for meaningfulness (default: 0.025)") do |num|
     options[:threshold] = num.to_f
   end
   opts.on("-p", "--post", "Use POST, not GET") { |bool| options[:method] = bool ? :post : :get }
   opts.on("-q", "--quiet", "Quiet mode (don't display progress bars)") { |bool| options[:verbose] = !bool }
+  opts.on("--percentile N", "Use Nth percentile for calculations (default: 3)") { |num| options[:percentile] = num.to_i }
   opts.on("--mean", "Use mean for calculations") { |bool| options[:mean] = bool }
   opts.on("--median", "Use median for calculations") { |bool| options[:median] = bool }
-  opts.on("--percentile N", "Use Nth percentile for calculations (default: 10)") { |num| options[:percentile] = num.to_i }
   opts.on_tail("-v", "--version", "Print version information") do
     gem = Gem::Specification.find_by_name('timing_attack')
     puts "#{gem.name} #{gem.version}"

data/lib/timing_attack/cli_attacker.rb

@@ -13,7 +13,6 @@ module TimingAttack
 
     def run!
       puts "Target: #{url}" if verbose?
-      warmup!
       attack!
       puts report
     end
@@ -38,20 +37,19 @@ module TimingAttack
       ret
     end
 
-    def warmup!
-      2.times do
-        warmup = TestCase.new(input: attacks.sample.input, options: options)
-        warmup.test!
-      end
-    end
-
     def attack!
+      hydra = Typhoeus::Hydra.new(max_concurrency: concurrency)
       iterations.times do
         attacks.each do |attack|
-          attack.test!
-          attack_bar.increment
+          req = attack.generate_hydra_request!
+          req.on_complete do |response|
+            attack_bar.increment
+          end
+          hydra.queue req
         end
       end
+      hydra.run
+      attacks.each(&:process!)
     end
 
     def grouper
@@ -89,7 +87,7 @@ module TimingAttack
       @null_bar ||= @null_bar_klass.new
     end
 
-    %i(iterations url verbose width method mean percentile threshold).each do |sym|
+    %i(iterations url verbose width method mean percentile threshold concurrency).each do |sym|
       define_method(sym) { options.fetch sym }
     end
     alias_method :verbose?, :verbose
@@ -97,10 +95,11 @@ module TimingAttack
     DEFAULT_OPTIONS = {
       verbose: false,
       method: :get,
-      iterations: 5,
+      iterations: 50,
       mean: false,
       threshold: 0.025,
-      percentile: 10
+      percentile: 3,
+      concurrency: 15
     }.freeze
   end
 end

data/lib/timing_attack/test_case.rb

@@ -6,20 +6,29 @@ module TimingAttack
       @options = options
       @times = []
       @percentiles = []
+      @hydra_requests = []
     end
 
-    def test!
-      httparty_opts = {
-        body: {
+    def generate_hydra_request!
+      req = Typhoeus::Request.new(
+        options.fetch(:url),
+        method: options.fetch(:method),
+        params: {
           login: input,
           password: "test" * 1000
         },
-        timeout: 5
-      }
-      before = Time.now
-      HTTParty.send(options.fetch(:method), options.fetch(:url), httparty_opts)
-      diff = (Time.now - before)
-      times.push(diff)
+        followlocation: true
+      )
+      @hydra_requests.push req
+      req
+    end
+
+    def process!
+      @hydra_requests.each do |request|
+        response = request.response
+        diff = response.time - response.namelookup_time
+        @times.push(diff)
+      end
     end
 
     def mean

data/lib/timing_attack/version.rb

@@ -1,3 +1,3 @@
 module TimingAttack
-  VERSION = "0.2.1"
+  VERSION = "0.3.0"
 end

data/lib/timing_attack.rb

@@ -1,4 +1,4 @@
-require 'httparty'
+require 'typhoeus'
 require 'ruby-progressbar'
 require "timing_attack/version"
 require "timing_attack/grouper"

data/timing_attack.gemspec

@@ -20,7 +20,7 @@ Gem::Specification.new do |spec|
   spec.licenses      = %q(MIT)
 
   spec.add_runtime_dependency "ruby-progressbar", "~> 1.8"
-  spec.add_runtime_dependency "httparty", "~> 0.13.3"
+  spec.add_runtime_dependency "typhoeus", "~> 1.1"
   spec.add_development_dependency "bundler", "~> 1.12"
   spec.add_development_dependency "rake", "~> 10.0"
   spec.add_development_dependency "rspec", "~> 3.0"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: timing_attack
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.3.0
 platform: ruby
 authors:
 - Forrest Fleming
@@ -25,19 +25,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.8'
 - !ruby/object:Gem::Dependency
-  name: httparty
+  name: typhoeus
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.13.3
+        version: '1.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.13.3
+        version: '1.1'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement