|
 funkymonk
Get's down, withthe get-down.
Registered: 11/29/02
Posts: 8,160
Loc: saskatchewan
|
 DoS' 
#2341156 - 02/16/04 12:52 PM (20 years, 2 months ago) |
|
|
So does anyone here consider themselves knowledgble with Denial of Service attacks?
|
TinMan
Stranger
Registered: 10/01/02
Posts: 2,956
Loc: Russia
|
|
Why? Just ask your question, not one that will receive yes/no answers.
|
funkymonk
Get's down, withthe get-down.
Registered: 11/29/02
Posts: 8,160
Loc: saskatchewan
|
Re: DoS' [Re: TinMan]
#2341493 - 02/16/04 02:03 PM (20 years, 2 months ago) |
|
|
Well basically, I understand what a DoS is... I just don't know how to do do them, I don't want to do one, i'd just like to understand them to an extend further than the definition..
if that makes sense
|
 Anno
Experimenter
Registered: 06/17/99
Posts: 24,166
Loc: my room
Last seen: 5 days, 1 hour
|
|
Google knows the answer.
|
Seuss
Error: divide byzero
Registered: 04/27/01
Posts: 23,480
Loc: Caribbean
Last seen: 2 months, 7 days
|
|
> i'd just like to understand them to an extend further than the definition..
Here is a simple example:
In networking, there is a thing called a broadcast address. When you send a packet to a broadcast address, it sends the data to all the machines on the network instead of a single machine. Broadcast addresses end in 255, so if do something like 'ping 192.168.0.255', all of the machines on the network 192.168.0.0 will respond to your ping. Now, if you forge the return address of the ping packet to look like it came from somebody else, when you ping the broadcast address, all of the machines return a packet to the forged return address rather than you. Now some target machine on the network is getting slammed by return ping packets that you are indirectly creating. If the target tries to track you down, they have a hard time because then end up following a forged return address. This type of thing really pisses off network admins, and they will go after you with the big arm of the law when possible.
The ping attack was one of the first ones that was used. Almost every router on the internet is now configured to not route broadcast packets making the attack useless.
A friendly warning... if you get into the DoS world and start to play around with it, you will eventually get nailed (unless you are very good or very lucky). I have zero sympathy for people that DoS other sites (even SCO and Microsoft, as much as I hate those two companies). It is cool to learn about how a DoS works, but don't get busted playing a 'joke' on your friend. Most network admins think castration is a pretty good punishment for this crime, and I am right there with them.
--------------------
Just another spore in the wind.
|
TinMan
Stranger
Registered: 10/01/02
Posts: 2,956
Loc: Russia
|
Re: DoS' [Re: Seuss]
#2342915 - 02/16/04 07:12 PM (20 years, 2 months ago) |
|
|
Thats called a smurf attack, right?
|
T0aD
Stranger
Registered: 06/18/02
Posts: 4,475
Last seen: 15 years, 1 month
|
 Re: DoS' [Re: Seuss]
#2344425 - 02/17/04 01:50 AM (20 years, 2 months ago) |
|
|
that was well written man, thanks alot for sharing.
but how do you fake the ping to return the ping packet to your target, and not to you? What techniques do DoS flooders use here?
Also, is all DoS ICMP-based? Peace and be happy
--------------------
Cuba Libre
|
funkymonk
Get's down, withthe get-down.
Registered: 11/29/02
Posts: 8,160
Loc: saskatchewan
|
Re: DoS' [Re: T0aD]
#2344506 - 02/17/04 03:48 AM (20 years, 2 months ago) |
|
|
Awesome, thanks seuss,,
I agree with you whole heartedly about DoS' I was just curious as to what all the talk about them was, and how they work....
I remeber ping flood from back in the day..haha mIRC :P
|
Seuss
Error: divide byzero
Registered: 04/27/01
Posts: 23,480
Loc: Caribbean
Last seen: 2 months, 7 days
|
Re: DoS' [Re: TinMan]
#2344535 - 02/17/04 04:10 AM (20 years, 2 months ago) |
|
|
> Thats called a smurf attack, right?
Correct. First surfaced in the mid '90s and isn't really a problem anymore, which is why I choose that attack to describe.
> but how do you fake the ping to return the ping packet to your target
Same way that you fake a return address when sending a letter in the mail. In unix-land you use something called a raw socket which requires root access.
> is all DoS ICMP-based
No.
--------------------
Just another spore in the wind.
|
|
Threaded
Previous
Index
Next
Shop: Golden Teacher Liquid Culture For Sale
Edit 
Reply 
User Exists
KoOs
Stein
1 2 3 all )
spud
RESET32one
Lana
Ellis Dee