# timing_attack

timing_attack is a Penetration Testing product. It runs on-premises. Pricing is free.

A tool to profile web applications based on response time discrepancies.

Checked October 2026.

## What is timing_attack?

Profile web applications, sorting inputs into two categories based on discrepancies in the application's response time. This tool can be used to test and develop known-vulnerable applications. Installation: gem install timing_attack. Usage: timing_attack [options] -u <target> <inputs> -u, --url URL URL of endpoint to profile. 'INPUT' will be replaced with the attack string. -n, --number NUM Requests per input (default: 50). -c, --concurrency NUM Number of concurrent requests (default: 15). -t, --threshold NUM Minimum threshold, in seconds, for meaningfulness (default: 0.025). -p, --post Use POST, not GET. -q, --quiet Quiet mode (don't display progress bars). -b, --brute-force Brute force mode. -i, --inputs-file FILE Read inputs from specified file, one per line. --parameters STR JSON hash of URL parameters. 'INPUT' will be replaced with the attack string. --parameters-file FILE Name of file containing parameters as with --parameters. --headers STR JSON hash of headers. 'INPUT' will be replaced with the attack string. --headers-file FILE Name of file containing headers as with --headers. --body STR JSON hash of parameters to be included in the request body. 'INPUT'

Tags: Timing Attack

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Offensive Security](https://cybersectools.com/categories/offensive-security-testing) · [Penetration Testing](https://cybersectools.com/categories/pentesting-tools)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market
- Pricing model: Free
- GitHub stars: 126
- Website: github.com

## timing_attack FAQ

### What is timing_attack?

timing_attack is a product in the Penetration Testing category. It covers Timing Attack.

### What is the pricing for timing_attack?

timing_attack is free. Download and setup instructions are at https://github.com/ffleming/timing_attack/.

### What are alternatives to timing_attack?

Alternatives to timing_attack listed on CybersecTools:

1. [Managed Autonomous Pentesting (MAP)](https://cybersectools.com/tools/hackurity-art-stack) - Managed continuous autonomous pentesting using payload-less exploitation and attack paths (Commercial)
2. [XBOW Captcha Bypass Tool](https://cybersectools.com/tools/xbow-captcha-bypass-tool) - AI-powered automated penetration testing platform for vulnerability discovery (Commercial)
3. [Burp Suite Professional](https://cybersectools.com/tools/burp-suite-professional) - A web application security testing platform that combines manual and automated testing tools for conducting comprehensive security assessments and penetration testing. (Commercial)
4. [FireCompass AI-powered Pen Testing](https://cybersectools.com/tools/firecompass-ai-powered-pen-testing) - AI-powered automated pen testing & continuous red teaming platform (Commercial)
5. [ImmuniWeb® On-Demand](https://cybersectools.com/tools/immuniwebr-on-demand) - ImmuniWeb® On-Demand is a web application penetration testing platform that combines AI-powered automation with manual security testing to provide comprehensive vulnerability assessments and compliance reporting. (Commercial)

Compare all timing_attack alternatives at [https://cybersectools.com/alternatives/timingattack](https://cybersectools.com/alternatives/timingattack)

### What deployment and organization size does timing_attack fit?

timing_attack is available as on-premises software. It is listed for startups, small businesses and mid-market companies. It is free.

## Compare timing_attack with similar solutions

- [timing_attack vs Managed Autonomous Pentesting (MAP)](https://cybersectools.com/compare/hackurity-art-stack-vs-timingattack)
- [timing_attack vs XBOW Captcha Bypass Tool](https://cybersectools.com/compare/timingattack-vs-xbow-captcha-bypass-tool)
- [timing_attack vs Burp Suite Professional](https://cybersectools.com/compare/burp-suite-professional-vs-timingattack)

All alternatives to timing_attack: [/alternatives/timingattack](https://cybersectools.com/alternatives/timingattack)

---

Source: https://cybersectools.com/tools/timingattack

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on timing_attack: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md