From charlesreid1

Revision as of 07:48, 23 August 2016 by Admin (talk | contribs) (Created page with "=DNS DoS Attacks= So what is DNS anyway? DNS is domain name resolution protocol - it's how names like "yahoo.com" get turned into IP addresses like "10.20.30.40". It's a fund...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

DNS DoS Attacks

So what is DNS anyway? DNS is domain name resolution protocol - it's how names like "yahoo.com" get turned into IP addresses like "10.20.30.40". It's a fundamental part of the way the internet routing system works.

DNS Black Hole Attack

A DNS denial of service can be achieved by blocking the DNS channel, and removing the ability of the sheep's system to resolve network and web requests. By funneling some or all of the sheep's DNS requests into this black hole, the attacker can successfully create a denial of service of network resources for the sheep.

See #EvilFOCA tool below.

Tools

EvilFOCA

Link: https://github.com/ElevenPaths/EvilFOCA

Tool for conducting various DNS attacks (and other types of attacks)

  • Capable of conducting DHCP ACK Injection - attacker monitors DHCP exchanges, interferes by sending packets, attacker acts as fake DHCP server
  • DNS Hijacking - hijacking the shee's DNS channel to control where the sheep's requests point them

Flags