To run the demo, use following steps.
- Obtain a certificate for the domain on which you want to run the demo
- Place
fullchain.pem
andprivkey.pem
in thedemo/certs
folder. Also place assl-dhparams.pem
file there (generate via e.g.openssl dhparam -out ssl-dhparams.pem 4096
) - In
demo
, rundocker-compose up --build
The attack can then be run by first updating demo-attack/attack.py
with the targeted server, and then simply running python attack.py
(with Python version 3.7.x or higher, with hyper-h2 installed: pip install h2
).
The h2time.py
file originates from the original Timeless Timing Attack repository.