https://github.com/mcaptcha/dos
Demo app comparing mCaptcha protected and unprotected pages with realistic computation simulation
https://github.com/mcaptcha/dos
benchmark locust mcaptcha proof-of-work spam-protection
Last synced: 7 months ago
JSON representation
Demo app comparing mCaptcha protected and unprotected pages with realistic computation simulation
- Host: GitHub
- URL: https://github.com/mcaptcha/dos
- Owner: mCaptcha
- License: agpl-3.0
- Created: 2022-05-21T07:14:36.000Z (over 3 years ago)
- Default Branch: master
- Last Pushed: 2023-06-28T07:46:37.000Z (over 2 years ago)
- Last Synced: 2025-01-15T05:48:07.895Z (9 months ago)
- Topics: benchmark, locust, mcaptcha, proof-of-work, spam-protection
- Language: Rust
- Homepage:
- Size: 135 KB
- Stars: 0
- Watchers: 1
- Forks: 3
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- License: LICENSE.md
Awesome Lists containing this project
README
# DoS Demo: Comparing mCaptcha-protected endpoint performance against exposed endpoints with non-simulated, realistic load
**This demo uses a registration workflow that looks as real as
possible: password and password re-type confirmation followed by
password hashing and storing in DB**
## Requirements
1. mCaptcha server with a captcha configured. Please self-host an
mCaptcha instance as the demo server is just that --- a demo server. See
[here](https://github.com/mCaptcha/mCaptcha/blob/master/docs/DEPLOYMENT.md)
for deployment instructions.
2. Python 3.10.4: might work on other versions but I tested it on this
version
3. rustc: [`mCaptcha/pow_py`](https://github.com/mCaptcha/pow_py), the
proof of work library used in mCaptcha(well, the Python bindings to
it) is not published on pypi(still figuring out how to) so the user
will have to compile from source
## Overview:
- [server](./server/): a demo flask endpoint with two endpoints that do
the exact same thing: process and register a user but differ in the
fact the one of them(`/protected`) is protected by mCaptcha.
- [unprotected](./unprotected): DoS Client written using
[locust](https://locust.io) that launches an attack on the unprotected
endpoint
- [protected](./unprotected): DoS Client written using
[locust](https://locust.io) that launches an attack on the rotected
endpoint. It generates proof of work and solves the captcha on every
request.
## Funding
### NLnet
2023 development is funded through the [NGI0 Entrust
Fund](https://nlnet.nl/entrust), via [NLnet](https://nlnet.nl/). Please
see [here](https://nlnet.nl/project/mCaptcha/) for more details.