Audit Results: ${targetUrl}

WAF & Rate-Limit Audit Report

Target: ${targetUrl}

\n \n

Summary Status Distribution

If the site successfully blocked the burst, you should see many 429 (Too Many Requests) or connection drop failures.

Status ${status}: ${count} requests

\n\n

Raw Sequence Logs

\n \n \n ${\n rawResults.map((r) => `\n \n \n \n \n \n `).join(\"\")\n }\n

Request #	HTTP Status Code	Latency
${r.id}	${r.status}	${r.time > 0 ? `${r.time}ms` : \"N/A\"}

\n
\n ← Test Another Site\n \n \n `;\n\n return new Response(htmlReport, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n // Default Form Interface View\n const initialFormHtml = `\n \n \n \n Ethical Hacking: WAF Tester\n \n \n \n

🛡️ Rate-Limit & WAF Stress Auditor

Simulate an automated credential stuffing or aggressive scanning request burst against your site.

\n \n

\n ⚠️ Ethical Hacking Notice: Only target web assets that you personally own or have explicit written authorization to test. Unauthorized automated scanning can trigger security alerts or hosting dynamic overage fees.\n

\n\n \n \n \n `;\n\n return new Response(initialFormHtml, {\n headers: { \"Content-Type\": \"text/html\" },\n });\n}",[138],"4f619459-897b-4d12-afbd-b08608068197","main.ts","b433ef8e-ab37-11f1-a99e-1607ee4eb77e",2,["D",1788839121779],1,"import axios from \"npm:axios\";\n\nexport default async function (req: Request) {\n // Specify an endpoint on your OWN website to test\n const TARGET_URL = \"https://your-own-website-domain.com\";\n const REQUEST_COUNT = 10;\n\n const promises = Array.from({ length: REQUEST_COUNT }).map(\n async (_, index) => {\n try {\n const startTime = Date.now();\n const response = await axios.get(TARGET_URL, {\n timeout: 3000,\n headers: { \"User-Agent\": \"ValTown-Security-Audit-Bot\" },\n });\n return {\n req: index + 1,\n status: response.status,\n duration: `${Date.now() - startTime}ms`,\n };\n } catch (error) {\n return {\n req: index + 1,\n status: error.response?.status || \"TIMED_OUT\",\n message: error.message,\n };\n }\n },\n );\n\n const results = await Promise.all(promises);\n\n // Count how many requests were blocked (e.g., 429 Too Many Requests) vs how many succeeded (200 OK)\n return Response.json({\n message: \"Rate-limit audit complete.\",\n results,\n });\n}",[146],"pulls","branches","forks","envVars",{"_160":61,"_162":61},"connections",{"_160":61,"_161":61},"count","unfilledCount","emptyCount",{"_41":145,"_31":146,"_29":147,"_132":-5,"_39":40,"_38":148,"_133":57,"_36":173,"_13":150,"_32":33,"_34":151,"_23":24,"_135":-5,"_167":174,"_26":175},{"_41":137,"_31":138,"_29":55,"_132":-5,"_39":40,"_38":139,"_133":57,"_36":170,"_13":141,"_32":142,"_34":143,"_23":24,"_135":43,"_167":171,"_26":172},{"_41":131,"_31":27,"_29":30,"_132":-5,"_39":40,"_38":14,"_133":24,"_36":166,"_13":61,"_32":33,"_34":35,"_23":24,"_135":-5,"_167":168,"_26":169},["D",1788840061986],"children",[],[27],["D",1788839612678],[],[138],["D",1788839121779],[],[146],["D",1788839115838],["D",1789448471428],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_125":214,"_215":216,"_217":218,"_219":24,"_220":24,"_221":24,"_222":57,"_223":-5,"_224":-7,"_225":-7,"_226":61,"_227":24,"_228":24,"_229":-5,"_230":24,"_231":24,"_232":24,"_233":-5},"ENV",{"_185":186,"_187":188,"_189":88,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v10