By sending a request to the server, a denial of service/slow service can be achieved
With a carefully constructed request header, we can bypass the Loop request
defense. With HTTP redirection (301/302), Loop request
attack can be realized.
The program has a publicly accessible external API: