DoS/DNS - Revision history

Admin: /* EvilFOCA */

2016-08-25T16:37:25Z

EvilFOCA

← Older revision		Revision as of 16:37, 25 August 2016
Line 27:		Line 27:
	Tool for conducting various DNS attacks (and other types of attacks)		Tool for conducting various DNS attacks (and other types of attacks)
	* Capable of conducting DHCP ACK Injection - attacker monitors DHCP exchanges, interferes by sending packets, attacker acts as fake DHCP server		* Capable of conducting DHCP ACK Injection - attacker monitors DHCP exchanges, interferes by sending packets, attacker acts as fake DHCP server
	* DNS Hijacking - hijacking the ~~shee~~'s DNS channel to control where the sheep's requests point them		* DNS Hijacking - hijacking the sheep's DNS channel to control where the sheep's requests point them

	=Links=		=Links=

Admin: /* Related Pages */

2016-08-24T23:34:34Z

← Older revision		Revision as of 23:34, 24 August 2016
Line 32:		Line 32:

	==Related Pages==		==Related Pages==

			* [[Linux/DNS]]

	* [[Man in the Middle/DNS]]		* [[Man in the Middle/DNS]]

Admin: /* Flags */

2016-08-24T23:34:18Z

Flags

← Older revision		Revision as of 23:34, 24 August 2016
Line 28:		Line 28:
	* Capable of conducting DHCP ACK Injection - attacker monitors DHCP exchanges, interferes by sending packets, attacker acts as fake DHCP server		* Capable of conducting DHCP ACK Injection - attacker monitors DHCP exchanges, interferes by sending packets, attacker acts as fake DHCP server
	* DNS Hijacking - hijacking the shee's DNS channel to control where the sheep's requests point them		* DNS Hijacking - hijacking the shee's DNS channel to control where the sheep's requests point them

			=Links=

			==Related Pages==

			* [[Man in the Middle/DNS]]

	=Flags=		=Flags=

	{{DoSFlag}}		{{DoSFlag}}

Admin: /* DNSSmurf */

2016-08-24T23:32:00Z

DNSSmurf

← Older revision		Revision as of 23:32, 24 August 2016
Line 15:		Line 15:
	In this attack, an attacker wishes to create a denial of service for a sheep. The attacker will overwhelm the sheep's network card with traffic, so that it can't possibly continue to function normally. The attacker does so by spoofing a large number of DNS queries that look like they come from the sheep's machine, that ask "What is the IP address of google.com?" When this packet reaches a DNS server, it will respond with a packet that says "The IP address is A.B.C.D". By spoofing a large number of queries, and sending them to a large number of DNS servers, the attacker creates a network packet tsunami that drowns the sheep's network card.		In this attack, an attacker wishes to create a denial of service for a sheep. The attacker will overwhelm the sheep's network card with traffic, so that it can't possibly continue to function normally. The attacker does so by spoofing a large number of DNS queries that look like they come from the sheep's machine, that ask "What is the IP address of google.com?" When this packet reaches a DNS server, it will respond with a packet that says "The IP address is A.B.C.D". By spoofing a large number of queries, and sending them to a large number of DNS servers, the attacker creates a network packet tsunami that drowns the sheep's network card.

	See [[DNSSmurf]] for tools and details.		See [[DoS/DNSSmurf]] for tools and details.

	=Tools=		=Tools=

Admin: /* DNSSmurf */

2016-08-24T23:28:15Z

DNSSmurf

← Older revision		Revision as of 23:28, 24 August 2016
Line 11:		Line 11:
	==DNSSmurf==		==DNSSmurf==

	A DNS Smurf Attack works the same way as a [[Smurf Attack]], except instead of swamping a victim with ping packets, it swamps a victim with DNS query response packets.		A DNS Smurf Attack works the same way as a [[DoS/Smurf Attack]], except instead of swamping a victim with ping packets, it swamps a victim with DNS query response packets.

	In this attack, an attacker wishes to create a denial of service for a sheep. The attacker will overwhelm the sheep's network card with traffic, so that it can't possibly continue to function normally. The attacker does so by spoofing a large number of DNS queries that look like they come from the sheep's machine, that ask "What is the IP address of google.com?" When this packet reaches a DNS server, it will respond with a packet that says "The IP address is A.B.C.D". By spoofing a large number of queries, and sending them to a large number of DNS servers, the attacker creates a network packet tsunami that drowns the sheep's network card.		In this attack, an attacker wishes to create a denial of service for a sheep. The attacker will overwhelm the sheep's network card with traffic, so that it can't possibly continue to function normally. The attacker does so by spoofing a large number of DNS queries that look like they come from the sheep's machine, that ask "What is the IP address of google.com?" When this packet reaches a DNS server, it will respond with a packet that says "The IP address is A.B.C.D". By spoofing a large number of queries, and sending them to a large number of DNS servers, the attacker creates a network packet tsunami that drowns the sheep's network card.

Admin: /* DNS Black Hole Attack */

2016-08-24T23:20:21Z

DNS Black Hole Attack

← Older revision		Revision as of 23:20, 24 August 2016
Line 8:		Line 8:

	See [[#EvilFOCA]] tool below.		See [[#EvilFOCA]] tool below.

			==DNSSmurf==

			A DNS Smurf Attack works the same way as a [[Smurf Attack]], except instead of swamping a victim with ping packets, it swamps a victim with DNS query response packets.

			In this attack, an attacker wishes to create a denial of service for a sheep. The attacker will overwhelm the sheep's network card with traffic, so that it can't possibly continue to function normally. The attacker does so by spoofing a large number of DNS queries that look like they come from the sheep's machine, that ask "What is the IP address of google.com?" When this packet reaches a DNS server, it will respond with a packet that says "The IP address is A.B.C.D". By spoofing a large number of queries, and sending them to a large number of DNS servers, the attacker creates a network packet tsunami that drowns the sheep's network card.

			See [[DNSSmurf]] for tools and details.

	=Tools=		=Tools=

Admin: Created page with "=DNS DoS Attacks= So what is DNS anyway? DNS is domain name resolution protocol - it's how names like "yahoo.com" get turned into IP addresses like "10.20.30.40". It's a fund..."

2016-08-23T07:48:19Z

Created page with "=DNS DoS Attacks= So what is DNS anyway? DNS is domain name resolution protocol - it's how names like "yahoo.com" get turned into IP addresses like "10.20.30.40". It's a fund..."

New page

=DNS DoS Attacks=

So what is DNS anyway? DNS is domain name resolution protocol - it's how names like "yahoo.com" get turned into IP addresses like "10.20.30.40". It's a fundamental part of the way the internet routing system works.

==DNS Black Hole Attack==

A DNS denial of service can be achieved by blocking the DNS channel, and removing the ability of the sheep's system to resolve network and web requests. By funneling some or all of the sheep's DNS requests into this black hole, the attacker can successfully create a denial of service of network resources for the sheep.

See [[#EvilFOCA]] tool below.

=Tools=

==EvilFOCA==

{{Main|EvilFOCA}}

Link: https://github.com/ElevenPaths/EvilFOCA

Tool for conducting various DNS attacks (and other types of attacks)
* Capable of conducting DHCP ACK Injection - attacker monitors DHCP exchanges, interferes by sending packets, attacker acts as fake DHCP server
* DNS Hijacking - hijacking the shee's DNS channel to control where the sheep's requests point them

=Flags=

{{DoSFlag}}