timing_attack
A tool to profile web applications based on response time discrepancies.
A tool to profile web applications based on response time discrepancies.
Checked October 2026.
Profile web applications, sorting inputs into two categories based on discrepancies in the application's response time. This tool can be used to test and develop known-vulnerable applications. Installation: gem install timing_attack. Usage: timing_attack [options] -u <target> <inputs> -u, --url URL URL of endpoint to profile. 'INPUT' will be replaced with the attack string. -n, --number NUM Requests per input (default: 50). -c, --concurrency NUM Number of concurrent requests (default: 15). -t, --threshold NUM Minimum threshold, in seconds, for meaningfulness (default: 0.025). -p, --post Use POST, not GET. -q, --quiet Quiet mode (don't display progress bars). -b, --brute-force Brute force mode. -i, --inputs-file FILE Read inputs from specified file, one per line. --parameters STR JSON hash of URL parameters. 'INPUT' will be replaced with the attack string. --parameters-file FILE Name of file containing parameters as with --parameters. --headers STR JSON hash of headers. 'INPUT' will be replaced with the attack string. --headers-file FILE Name of file containing headers as with --headers. --body STR JSON hash of parameters to be included in the request body. 'INPUT'
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about timing_attack: features, pricing and alternatives.
timing_attack is a product in the Penetration Testing category. It covers Timing Attack.
timing_attack is free. Download and setup instructions are at https://github.com/ffleming/timing_attack/.
Alternatives to timing_attack listed on CybersecTools:
Compare all timing_attack alternatives at https://cybersectools.com/alternatives/timingattack
timing_attack is available as on-premises software. It is listed for startups, small businesses and mid-market companies. It is free.
Side by side: features, pricing model and the company behind each one.
Agentic AI platform for continuous, autonomous penetration testing of enterprise apps.
AI-powered continuous pentesting platform with agentic automation
A login cracker that can be used to crack many types of authentication protocols.
Autonomous AI agent platform for pentesting, discovery, and remediation.
Tplmap is a command-line tool that detects and exploits server-side template injection vulnerabilities in web applications across multiple template engines.
Multi-disciplinary security assessment service spanning app-sec, crypto, blockchain
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
