CEH v10 Module 10 - Denial-Of-Services

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.
com/ethicalhackx
Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&KDSWHU'HQLDORI6HUYLFHV
7HFKQRORJ\%ULHI
7KLVFKDSWHU'HQLDORI6HUYLFHLVIRFXVHGRQ'R6DQG'LVWULEXWHG'HQLDO
RI6HUYLFH ''26 DWWDFNV 7KLV FKDSWHU ZLOO FRYHU XQGHUVWDQGLQJ RI
GLIIHUHQW 'R6 DQG ''R6 DWWDFN DWWDFNLQJ WHFKQLTXHV &RQFHSW RI %RWQHWV
DWWDFNLQJ WRROV DQG WKHLU FRXQWHUPHDVXUHV DQG VWUDWHJLHV XVHG WR GHIHQG
DJDLQVWWKHVHDWWDFNV

'R6''R6&RQFHSWV
'HQLDORI6HUYLFH'R6
'HQLDORI6HUYLFH 'R6 LV D W\SH RI DWWDFN LQ ZKLFK VHUYLFH RIIHUHG E\ D
V\VWHP RU D QHWZRUN LV GHQLHG 6HUYLFHV PD\ HLWKHU EH GHQLHG UHGXFHG WKH
IXQFWLRQDOLW\ RU SUHYHQW WKH DFFHVV WR WKH UHVRXUFHV HYHQ WR WKH OHJLWLPDWH
XVHUV7KHUHDUHVHYHUDOWHFKQLTXHVWRSHUIRUP'R6DWWDFNVXFKDVJHQHUDWLQJ
DODUJHQXPEHURIUHTXHVWWRWKHWDUJHWV\VWHPIRUVHUYLFH7KHVHODUJHQXPEHU
RILQFRPLQJUHTXHVWRYHUORDGWKHV\VWHPFDSDFLW\WRHQWHUWDLQUHVXOWLQJGHQLDO
RIVHUYLFH
)LJXUH'HQLDORI6HUYLFH$WWDFN
&RPPRQ6\PSWRPVRI'R6DWWDFNDUH
6ORZSHUIRUPDQFH
,QFUHDVHLQVSDPHPDLOV
8QDYDLODELOLW\RIDUHVRXUFH
/RVVRIDFFHVVWRDZHEVLWH
'LVFRQQHFWLRQRIDZLUHOHVVRUZLUHGLQWHUQHWFRQQHFWLRQ
'HQLDORIDFFHVVWRDQ\LQWHUQHWVHUYLFHV
'LVWULEXWHG'HQLDORI6HUYLFH''R6

6LPLODUWRWKH'HQLDORIVHUYLFHLQZKLFKDQDWWDFNHULVDWWHPSWLQJWRD'R6
DWWDFN ,Q 'LVWULEXWHG 'R6 DWWDFN PXOWLSOH FRPSURPLVHG V\VWHPV DUH
LQYROYHG WR DWWDFN D WDUJHW FDXVLQJ D GHQLDO RI VHUYLFH %RWQHWV DUH XVHG IRU
''R6DWWDFN
+RZ'LVWULEXWHG'HQLDORI6HUYLFH$WWDFNV:RUN
1RUPDOO\DQHVWDEOLVKPHQWRIDFRQQHFWLRQFRQVLVWVRIVRPHVWHSLQZKLFKD
XVHUVHQGVDUHTXHVWWRDVHUYHUWRDXWKHQWLFDWHLW7KHVHUYHUUHWXUQVZLWKWKH
DXWKHQWLFDWLRQ DSSURYDO 5HTXHVWLQJ XVHU DFNQRZOHGJHV WKLV DSSURYDO DQG
WKHQWKHFRQQHFWLRQLVHVWDEOLVKHGDQGLVDOORZHGRQWRWKHVHUYHU
,Q WKH SURFHVV RI 'HQLDO RI VHUYLFH DWWDFN WKH DWWDFNHU VHQGV VHYHUDO
DXWKHQWLFDWLRQ UHTXHVWV WR WKH VHUYHU 7KHVH UHTXHVWV KDYH IDNH UHWXUQ
DGGUHVVHVVRWKHVHUYHUFDQ
WILQGDXVHUWRVHQGWKHDXWKHQWLFDWLRQDSSURYDO
7KLVDXWKHQWLFDWLRQSURFHVVZDLWVIRUDFHUWDLQWLPHWRFORVHWKHVHVVLRQ7KH
VHUYHU W\SLFDOO\ ZDLWV PRUH WKDQ D PLQXWH EHIRUH FORVLQJ WKH VHVVLRQ 7KH
DWWDFNHU LV FRQWLQXRXVO\ VHQGLQJ UHTXHVWV FDXVLQJ D QXPEHU RI RSHQ
FRQQHFWLRQVRQWKHVHUYHUUHVXOWLQJLQWKHGHQLDORIVHUYLFH

'R6''R6$WWDFN7HFKQLTXHV
%DVLF&DWHJRULHVRI'R6''R6$WWDFNV
9ROXPHWULF$WWDFNV
'HQLDO RI 6HUYLFH DWWDFN SHUIRUPHG E\ VHQGLQJ D KLJK DPRXQW RI WUDIILF
WRZDUGV WKH WDUJHW 9ROXPHWULF $WWDFNV DUH IRFXVHG RQ RYHUORDGLQJ WKH
EDQGZLGWK FRQVXPSWLRQ FDSDELOLW\ 7KHVH YROXPHWULF DWWDFNV DUH DWWHPSWHG
ZLWK WKH LQWHQWLRQ WR VORZ GRZQ WKH SHUIRUPDQFH GHJUDGDWLRQ RI VHUYLFHV
7\SLFDOO\ WKHVH DWWDFNV DUH FRQVXPLQJ EDQGZLGWK LQ KXQGUHGV RI *ESV RI
EDQGZLGWK
)UDJPHQWDWLRQ$WWDFNV
'R6 )UDJPHQWDWLRQ DWWDFNV DUH WKH DWWDFNV ZKLFK IUDJPHQW WKH ,3 GDWDJUDP
LQWRPXOWLSOHVPDOOHUVL]HSDFNHW7KLVIUDJPHQWHGSDFNHWUHTXLUHVUHDVVHPEO\
DWWKHGHVWLQDWLRQZKLFKUHTXLUHVUHVRXUFHVRIURXWHUV)UDJPHQWDWLRQDWWDFNV
DUHRIWKHIROORZLQJWZRW\SHV
8'3DQG,&03IUDJPHQWDWLRQDWWDFNV
7&3IUDJPHQWDWLRQDWWDFNV
7&36WDWH([KDXVWLRQ$WWDFNV
7&3 6WDWH([KDXVWLRQ $WWDFNV DUH IRFXVHG RQ ZHE VHUYHUV ILUHZDOOV ORDG
EDODQFHUV DQG RWKHU LQIUDVWUXFWXUH FRPSRQHQWV WR GLVUXSW FRQQHFWLRQV E\
FRQVXPLQJWKHFRQQHFWLRQVWDWHWDEOHV7&36WDWH([KDXVWLRQDWWDFNVUHVXOWV
LQH[KDXVWLQJWKHLUILQLWHQXPEHURIFRQFXUUHQWFRQQHFWLRQVWKHWDUJHWGHYLFH
FDQVXSSRUW7KHPRVWFRPPRQVWDWHH[KDXVWLRQDWWDFNLVSLQJRIGHDWK
$SSOLFDWLRQ/D\HU$WWDFNV
$Q DSSOLFDWLRQ OD\HU ''R6 DWWDFN LV DOVR FDOOHG OD\HU ''R6 DWWDFN
$SSOLFDWLRQ OHYHO 'R6 DWWDFN LV D IRUP RI ''R6 DWWDFN ZKLFK IRFXVHG WKH
DSSOLFDWLRQ OD\HU RI WKH 26, PRGHO UHVXOWLQJ LQ WKH GHQLDO RI GHJUDGDWLRQ RI
VHUYLFH 7KH DSSOLFDWLRQ OHYHO DWWDFN RYHUORDGV WKH SDUWLFXODU VHUYLFH RU
IHDWXUHV RI D ZHEVLWH RU DSSOLFDWLRQ ZLWK WKH LQWHQWLRQ RI GHQLDO RU
XQDYDLODELOLW\
'R6''R6$WWDFN7HFKQLTXHV
%DQGZLGWK$WWDFNV
%DQGZLGWKDWWDFNUHTXLUHVPXOWLSOHVRXUFHVWRJHQHUDWHDUHTXHVWWRRYHUORDG
WKH WDUJHW 'R6 DWWDFN XVLQJ D VLQJOH PDFKLQH LV QRW FDSDEOH RI JHQHUDWLQJ

HQRXJKUHTXHVWVZKLFKFDQRYHUZKHOPWKHVHUYLFH7KHGLVWULEXWHGGRVDWWDFN
LV D YHU\ HIIHFWLYH WHFKQLTXH WR IORRG UHTXHVWV WRZDUGV D WDUJHW XVLQJ WKH
'LVWULEXWHGDWWDFN
)LJXUH%HIRUH''R6EDQGZLGWKDWWDFN
$V ZH NQRZ =RPELHV DUH WKH FRPSURPLVHG V\VWHP ZKLFK LV FRQWUROOHG E\
WKH PDVWHU FRPSXWHU DWWDFNHU RU FRQWUROOLQJ ]RPELHV WKURXJK KDQGOHU
SURYLGH VXSSRUW WR LQLWLDWH D ''R6 DWWDFN %RWQHWV GHILQHG ODWHU LQ WKLV
FKDSWHU DUH DOVR XVHG WR SHUIRUP ''R6 DWWDFNV E\ IORRGLQJ ,&03 (FKR
SDFNHW LQ D QHWZRUN 7KH JRDO RI %DQGZLGWK DWWDFN LV WR FRQVXPH WKH
EDQGZLGWKFRPSOHWHO\QREDQGZLGWKLVOHIWHYHQIRUOHJLWLPDWHXVH
)LJXUH$IWHU''R6EDQGZLGWKDWWDFN
%\ FRPSDULQJ WKH DERYH ILJXUHV \RX ZLOO XQGHUVWDQG KRZ 'LVWULEXWHG
'HQLDORI6HUYLFH DWWDFN ZRUNV DQG E\ FRQVXPLQJ WKH HQWLUH EDQGZLGWK
OHJLWLPDWHWUDIILFLVGHQLHG

6HUYLFH5HTXHVW)ORRGV
6HUYLFH 5HTXHVW )ORRG LV D 'R6 DWWDFN LQ ZKLFK DWWDFNHU IORRG WKH UHTXHVW
WRZDUGVDVHUYLFHVXFKDV:HEDSSOLFDWLRQRU:HEVHUYHUXQWLODOOWKHVHUYLFH
LVRYHUORDGHG:KHQDOHJLWLPDWHXVHUDWWHPSWVWRLQLWLDWHDFRQQHFWLRQLWZLOO
EHGHQLHGEHFDXVHRIUHSHDWHG7&3FRQQHFWLRQE\WKHDWWDFNHUFRQVXPHGDOO
UHVRXUFHVWRWKHSRLQWRIH[KDXVWLRQ
6<1$WWDFN)ORRGLQJ
6<1 $WWDFN RU 6<1 )ORRGLQJ H[SORLWV WKH WKUHHZD\ KDQGVKDNLQJ 7KH
DWWDFNHUE\VHQGLQJDORWRI6<1UHTXHVWWRDWDUJHWVHUYHUZLWKWKHLQWHQWLRQ
RIW\LQJXSDV\VWHP7KLV6<1UHTXHVWKDVDIDNHVRXUFH,3DGGUHVVZKLFK
FRXOGQRWIRXQGWKHYLFWLP9LFWLPZDLWVIRUWKHDFNQRZOHGJPHQWIURPWKH,3
DGGUHVVEXWWKHUHZLOOEHQRUHVSRQVHDVWKHVRXUFHDGGUHVVRILQFRPLQJ6<1
UHTXHVWZDVIDNH7KLVZDLWLQJSHULRGWLHVXSDFRQQHFWLRQOLVWHQWRTXHXHWR
WKH V\VWHP EHFDXVH WKH V\VWHP ZLOO QRW UHFHLYH DQ $&. $Q LQFRPSOHWH
FRQQHFWLRQFDQEHWLHGXSIRUVHFRQGV
)LJXUH6<1)ORRGLQJ
,&03)ORRG$WWDFN
,QWHUQHW &RQWURO 0HVVDJH 3URWRFRO ,&03 LV WKH W\SH RI DWWDFN LQ ZKLFK

DWWDFNHUDWWDFNVXVLQJ,&03UHTXHVW,&03LVDVXSSRUWLQJSURWRFROXVHGE\
QHWZRUN GHYLFHV WR RSHUDWLRQ LQIRUPDWLRQ HUURUV DQG LQGLFDWLRQV 7KHVH
UHTXHVWDQGWKHLUUHVSRQVHVFRQVXPHUHVRXUFHVRIWKHQHWZRUNGHYLFH7KXV
E\ IORRGLQJ ,&03 UHTXHVW ZLWKRXW ZDLWLQJ IRU UHVSRQVH RYHUZKHOP WKH
UHVRXUFHVRIWKHGHYLFH
3HHUWR3HHU$WWDFNV
$SHHUWRSHHU''R6DWWDFNH[SORLWVEXJVLQSHHUWRSHHUVHUYHUVRUSHHULQJ
WHFKQRORJ\XVLQJ'LUHFW&RQQHFW'&SURWRFROWRH[HFXWHD''R6DWWDFN
0RVW3HHUVWR3HHUQHWZRUNVLVRQWKH'&FOLHQW(DFKFOLHQW'&EDVHG
QHWZRUNLVOLVWHGLQQHWZRUNKXE2QFHLWLVFRPSURPLVHGLWEHFRPHVHDV\IRU
DQ DWWDFNHU 3HHU WR SHHU QHWZRUNV LV GHSOR\HG DPRQJ D ODUJH QXPEHU RI
KRVWV2QHRUPRUHPDOLFLRXVKRVWVLQDSHHUWRSHHUQHWZRUNFDQSHUIRUPWKH
''R6 DWWDFN 'R6 RU ''R6 DWWDFNV PD\ KDYH GLIIHUHQW OHYHOV RI LQIOXHQFH
EDVHRQYDULRXV3HHUWR3HHUQHWZRUNWRSRORJLHV%\H[SORLWLQJKXJHDPRXQW
RI GLVWULEXWHG KRVWV DQ DWWDFNHU FDQ HDVLO\ ODXQFK WKH ''R6 DWWDFN WR WKH
WDUJHW
3HUPDQHQW'HQLDORI6HUYLFH$WWDFN
7KH SHUPDQHQW 'HQLDORI6HUYLFH DWWDFN LV WKH 'R6 DWWDFN ZKLFK LQVWHDG RI
IRFXVLQJ RQ GHQLDO RI VHUYLFHV IRFXVHG RQ KDUGZDUH VDERWDJH $IIHFWHG
KDUGZDUHE\3'R6DWWDFNLVGDPDJHGUHTXLULQJUHSODFHPHQWRUUHLQVWDOODWLRQ
RI KDUGZDUH 3'R6 LV SHUIRUPHG E\ D PHWKRG NQRZQ DV ߡ3KODVKLQJߢ WKDW
FDXVHV LUUHYHUVLEOH GDPDJH WR WKH KDUGZDUH RU ߡ%ULFNLQJ D V\VWHPߢ E\
VHQGLQJ IUDXGXOHQW KDUGZDUH XSGDWHV 2QFH WKLV PDOLFLRXV FRGH LV H[HFXWHG
DFFLGHQWDOO\E\WKHYLFWLPLWH[HFXWHV
$SSOLFDWLRQ/HYHO)ORRG$WWDFNV
$SSOLFDWLRQ OHYHO DWWDFNV DUH IRFXVHG RQ $SSOLFDWLRQ OD\HU WDUJHWLQJ WKH
DSSOLFDWLRQVHUYHURUFOLHQWFRPSXWHUUXQQLQJDSSOLFDWLRQV$WWDFNHUILQGVWKH
IDXOW DQG IODZV LQ DQ DSSOLFDWLRQ RU RSHUDWLQJ V\VWHP DQG H[SORLWV WKH
YXOQHUDELOLW\WRE\SDVVWKHDFFHVVFRQWUROJDLQLQJFRPSOHWHSULYLOHJHGFRQWURO
RYHUWKHDSSOLFDWLRQV\VWHPRUQHWZRUN
'LVWULEXWHG5HIOHFWLRQ'HQLDORI6HUYLFH'5'R6
'LVWULEXWHG 5HIOHFWLRQ 'HQLDO RI 6HUYLFH DWWDFN LV WKH W\SH RI'R6 DWWDFN LQ
ZKLFKLQWHUPHGLDU\DQG6HFRQGDU\YLFWLPVDUHDOVRLQYROYHGLQWKHSURFHVVRI
ODXQFKLQJ D 'R6 DWWDFN $WWDFNHU VHQGV UHTXHVWV WR WKH LQWHUPHGLDU\ YLFWLP

ZKLFK UHGLUHFW WKH WUDIILF WRZDUGV WKH 6HFRQGDU\ YLFWLP 6HFRQGDU\ YLFWLP
UHGLUHFWV WKH WUDIILF WRZDUG WKH WDUJHW ,QYROYHPHQW RI LQWHUPHGLDU\ DQG
VHFRQGDU\YLFWLPLVIRUVSRRILQJWKHDWWDFN

%RWQHWV
)LJXUH7\SLFDO%RWQHW6HWXS
%RWQHWVDUHXVHGIRUFRQWLQXRXVO\SHUIRUPLQJDWDVN7KHVHPDOLFLRXVERWQHWV
JDLQ DFFHVV WR WKH V\VWHPV XVLQJ PDOLFLRXV VFULSW DQG FRGHV LW DOHUWV WKH
PDVWHU FRPSXWHU ZKHQ WKH V\VWHP LV FRQWUROOHG E\ WKH ERWQHW 7KURXJK WKLV
PDVWHU FRPSXWHU DQ DWWDFNHU FDQ FRQWURO WKH V\VWHP DQG LVVXH UHTXHVWV WR
DWWHPSWD'R6DWWDFN

%RWQHW6HWXS
7KH%RWQHWLVW\SLFDOO\VHWXSE\LQVWDOODWLRQDERWRQ9LFWLPE\XVLQJ7URMDQ
+RUVH7URMDQ+RUVHFDUULHVERWDVSD\ORDGZKLFKLVIRUZDUGHGWRWKHYLFWLP
E\ XVLQJ SKLVKLQJ RU UHGLUHFWLQJ WR HLWKHU D PDOLFLRXV ZHEVLWH RU D
FRPSURPLVHG OHJLWLPDWH ZHEVLWH 2QFH WKLV 7URMDQ LV H[HFXWHG WKH YLFWLP
ZLOOEHLQIHFWHGDQGJHWLQFRQWUROE\WKH+DQGOHUZDLWLQJIRUWKHLQVWUXFWLRQ
IURP &RPPDQG DQG &RQWURO &DQG& +DQGOHU LV WKH %RW &RPPDQG DQG
&RQWUROZKLFKVHQGVDQLQVWUXFWLRQWRWKHVHLQIHFWHGV\VWHPV%RWVWRDWWHPSW
DQDWWDFNRQDSULPDU\WDUJHW
6FDQQLQJ9XOQHUDEOH0DFKLQHV
7KHUH DUH 6HYHUDO WHFKQLTXHV XVHG IRU VFDQQLQJ YXOQHUDEOH PDFKLQHV
LQFOXGLQJ5DQGRP+LWOLVW7RSRORJLFDO6XEQHWDQG3HUPXWDWLRQVFDQQLQJ

$EULHIGHVFULSWLRQRIWKHVHVFDQQLQJPHWKRGVLVVKRZQEHORZ
6FDQQLQJ 'HVFULSWLRQ
0HWKRG
5DQGRP ,QIHFWHGPDFKLQHSUREHV,3DGGUHVVHVUDQGRPO\IRUP
6FDQQLQJ ,3 DGGUHVV VSDFH DQG VFDQ WKHP IRU YXOQHUDELOLW\
7HFKQLTXH :KHQLWIRXQGDYXOQHUDEOHPDFKLQHLWEUHDNVLQWRLW
DQG LQIHFWV LW ZLWK WKH VFULSW XVHG WR LQIHFW LWVHOI
5DQGRPVFDQQLQJWHFKQLTXHVSUHDGWKHLQIHFWLRQYHU\
TXLFNO\DVLWFRPSURPLVHVDODUJHQXPEHURIWKHKRVW
+LW/LVW 7KH DWWDFNHU ILUVW FROOHFWV WKH LQIRUPDWLRQ DERXW D
6FDQQLQJ ODUJH QXPEHU RI SRWHQWLDOO\ YXOQHUDEOH PDFKLQHV WR
7HFKQLTXH FUHDWH D +LWOLVW 8VLQJ WKLV WHFKQLTXH WKH DWWDFNHU
ILQGV WKH YXOQHUDEOH PDFKLQH DQG LQIHFW LW 2QFH D
PDFKLQH LV LQIHFWHG WKH OLVW LV GLYLGHG E\ DVVLJQLQJ
KDOIRIWKHOLVWWRWKHQHZO\FRPSURPLVHGV\VWHP7KH
VFDQQLQJ SURFHVV LQ +LWOLVW VFDQQLQJ UXQV
VLPXOWDQHRXVO\ 7KLV WHFKQLTXH LV XVHG WR HQVXUH WKH
VSUHDGLQJDQGLQVWDOODWLRQRIPDOLFLRXVFRGHLQDVKRUW
SHULRG
7RSRORJLFDO 7RSRORJLFDO 6FDQQLQJ JDWKHUV LQIRUPDWLRQ IURP WKH
6FDQQLQJ LQIHFWHG V\VWHP WR ILQG DQRWKHU YXOQHUDEOH WDUJHW
7HFKQLTXH ,QLWLDOO\ FRPSURPLVHG PDFKLQH VHDUFKHV D 85/ IURP
GLVNLWLVJRLQJWRLQIHFWDQGFKHFNIRUYXOQHUDELOLW\
$V WKHVH 85/V DUH YDOLG WKH DFFXUDF\ RI WKLV
WHFKQLTXHLVH[WUHPHO\JRRG
6XEQHW6FDQQLQJ 7KLV WHFKQLTXH LV XVHG WR DWWHPSW VFDQQLQJ EHKLQG D
7HFKQLTXH ILUHZDOO ZKHUH WKH FRPSURPLVHG KRVW LV VFDQQLQJ IRU
WKH YXOQHUDEOH WDUJHWV LQ LWV RZQ ORFDO QHWZRUN 7KLV
WHFKQLTXH LV XVHG IRU IRUPLQJ DQ DUP\ RI D ODUJH
QXPEHURI]RPELHVLQDVKRUWWLPH
3HUPXWDWLRQ 3HUPXWDWLRQ VFDQQLQJ XVHV 3VHXGRUDQGRP
6FDQQLQJ SHUPXWDWLRQ ,Q WKLV WHFKQLTXH LQIHFWHG PDFKLQHV
7HFKQLTXH VKDUH 3VHXGRUDQGRP SHUPXWDWLRQ RI ,3 DGGUHVVHV ,I
6FDQQLQJGHWHFWVDQDOUHDG\LQIHFWHGV\VWHPE\HLWKHU
KLWOLVWVFDQQLQJRUDQRWKHUPHWKRGLWVWDUWVVFDQQLQJ

IURP WKH QH[W ,3 LQ WKH OLVW ,I VFDQQLQJ GHWHFWV DQ
DOUHDG\ LQIHFWHG V\VWHP E\ SHUPXWDWLRQ OLVW LW VWDUWV
VFDQQLQJIURPDUDQGRPSRLQWLQSHUPXWDWLRQOLVW
7DEOH6FDQQLQJ0HWKRGVIRUILQGLQJ9XOQHUDEOHPDFKLQHV
3URSDJDWLRQRI0DOLFLRXV&RGHV
7KHUHDUHWKUHHPRVWFRPPRQO\XVHGPDOLFLRXVFRGHSURSDJDWLRQPHWKRGV
LQFOXGLQJ&HQWUDO%DFNFKDLQLQJDQG$XWRQRPRXVSURSDJDWLRQ
&HQWUDO6RXUFH3URSDJDWLRQ
&HQWUDO 6RXUFH SURSDJDWLRQ UHTXLUHV FHQWUDO VRXUFH ZKHUH DWWDFN WRRONLW LV
LQVWDOOHG :KHQ DQ DWWDFNHU H[SORLWV WKH YXOQHUDEOH PDFKLQH LW RSHQV WKH
FRQQHFWLRQRQLQIHFWHGV\VWHPOLVWHQLQJIRUILOHWUDQVIHU7KHQWKHWRRONLWLV
FRSLHG IURP WKH FHQWUDO VRXUFH 7KLV 7RRONLW LV LQVWDOOHG DXWRPDWLFDOO\ DIWHU
WUDQVIHUULQJ IURP &HQWUDO 6RXUFH 7KLV WRRONLW LV XVHG IRU LQLWLDWLQJ IXUWKHU
DWWDFNV )LOH WUDQVIHUULQJ PHFKDQLVP WKDW LV XVHG IRU WUDQVIHUULQJ 0DOLFLRXV
FRGHWRRONLWLVQRUPDOO\+773)73RU53&
)LJXUH&HQWUDO6RXUFH3URSDJDWLRQ
%DFN&KDLQLQJ3URSDJDWLRQ
%DFN&KDLQLQJ SURSDJDWLRQ UHTXLUHV DWWDFN WRRONLW LQVWDOOHG RQ DWWDFNHUߞV
PDFKLQH :KHQ DQ DWWDFNHU H[SORLWV WKH YXOQHUDEOH PDFKLQH LW RSHQV WKH
FRQQHFWLRQRQLQIHFWHGV\VWHPOLVWHQLQJIRUILOHWUDQVIHU7KHQWKHWRRONLWLV
FRSLHGIURPWKHDWWDFNHU2QFHWRRONLWLVLQVWDOOHGRQWKHLQIHFWHGV\VWHPLW
ZLOOVHDUFKIRURWKHUYXOQHUDEOHV\VWHPDQGWKHSURFHVVFRQWLQXRXV

)LJXUH%DFN&KDQQLQJ3URSDJDWLRQ
$XWRQRPRXV3URSDJDWLRQ
,Q WKH SURFHVV RI $XWRQRPRXV SURSDJDWLRQ WKH DWWDFNHU H[SORLWV DQG VHQG
PDOLFLRXV FRGH WR WKH YXOQHUDEOH V\VWHP 7KH WRRONLW LV LQVWDOOHG DQG VHDUFK
IRURWKHUYXOQHUDEOHV\VWHPV8QOLNH&HQWUDO6RXUFH3URSDJDWLRQLWGRHVQRW
UHTXLUHDQ\&HQWUDO6RXUFHRUSODQWLQJWRRONLWRQRZQV\VWHP
)LJXUH$XWRQRPRXV3URSDJDWLRQ
%RWQHW7URMDQ
%ODFNVKDGHV1(7
&\WKRVLD%RWQHWDQG$QGURPHGD%RW
3OXJ%RW


'R6''R6$WWDFN7RROV
3DQGRUD''R6%RW7RRONLW
3DQGRUD''R67RRONLWLVGHYHORSHGE\5XVVLDQLQGLYLGXDO
6RNRO
ZKRDOVR
GHYHORSHG 'LUW -XPSHU 7RRONLW 3DQGRUD ''R6 7RRONLW FDQ JHQHUDWH ILYH
W\SHVRIDWWDFNVLQFOXGLQJLQIUDVWUXFWXUHDQG$SSOLFDWLRQOD\HUDWWDFNV
++73PLQ
++73'RZQORDG
+773&RPER
6RFNHW&RQQHFW
0D[)ORRG

2WKHU''R6$WWDFNWRROV
'HUDLO
+2,&
'R6+773
%DQJOD'RV
'R6DQG''R6$WWDFN7RROIRU0RELOH
$Q'26LG
/RZ2UELW,RQ&DQQRQ/2,&


/DE6<1)ORRGLQJ$WWDFNXVLQJ0HWDVSORLW
&DVH6WXG\ ,Q WKLV ODE ZH DUH XVLQJ .DOL /LQX[ IRU 6<1 )ORRG DWWDFN RQ
:LQGRZV PDFKLQH XVLQJ 0HWDVSORLW )UDPHZRUN :H DOVR
XVH:LUHVKDUNILOWHUWRFKHFNWKHSDFNHWVRQYLFWLPߞVPDFKLQH

3URFHGXUH
2SHQ.DOL/LQX[7HUPLQDO
7\SHWKHFRPPDQGߡQPDSߙSߢWRVFDQIRUSRUW

)LJXUH3RUW6FDQQLQJ
3RUWLVRSHQILOWHUHG

7\SHWKHFRPPDQGߡPVIFRQVROHߢWRODXQFKD0HWDVSORLWIUDPHZRUN
URRW#NDOLaPVIFRQVROH


)LJXUH0HWDVSORLW)UDPHZRUN

(QWHUWKHFRPPDQGߡXVHDX[LOLDU\GRVWFSV\QIORRGߢ
PVI!XVHDX[LOLDU\GRVWFSV\QIORRG

(QWHUWKHFRPPDQGߡVKRZRSWLRQVߢ
PVIDX[LOLDU\GRVWFSV\QIORRG!VKRZRSWLRQV

)LJXUH9DOLGDWLQJ0RGXOHRSWLRQV

5HVXOWVKRZLQJGHIDXOWFRQILJXUDWLRQDQGUHTXLUHGSDUDPHWHUV

(QWHUWKHIROORZLQJFRPPDQGV
PVIDX[LOLDU\GRVWFSV\QIORRG!VHW5+267
PVIDX[LOLDU\GRVWFSV\QIORRG!VHW53257
PVIDX[LOLDU\GRVWFSV\QIORRG!VHW6+267
PVIDX[LOLDU\GRVWFSV\QIORRG!VHW7,0(287


)LJXUH&RQILJXULQJ0RGXOH3DUDPHWHUV

(QWHUWKHFRPPDQGߡH[SORLWߢ
PVIDX[LOLDU\GRVWFSV\QIORRG!H[SORLW


)LJXUH([SORLW

6<1IORRGLQJDWWDFNLVVWDUWHG
1RZORJLQWR:LQGRZVPDFKLQH9LFWLP
2SHQ7DVN0DQDJHUDQGREVHUYHWKHSHUIRUPDQFHJUDSK


)LJXUH&388VDJHRI9LFWLPߞVPDFKLQH

2SHQ:LUHVKDUNDQGVHWWKHILOWHUWR7&3WRILOWHUGHVLUHGSDFNHWV

)LJXUH&DSWXULQJ3DFNHWV


/DE6<1)ORRGLQJ$WWDFNXVLQJ+SLQJ
&DVH6WXG\ ,Q WKLV ODE ZH DUH XVLQJ .DOL /LQX[ IRU 6<1 )ORRG DWWDFN RQ
:LQGRZVPDFKLQHXVLQJWKH+SLQJFRPPDQG:HDOVRXVH
:LUHVKDUNILOWHUWRFKHFNWKHSDFNHWVRQYLFWLPߞVPDFKLQH

3URFHGXUH
2SHQ.DOL/LQX[7HUPLQDO
7\SHWKHFRPPDQGߡKSLQJIORRGߢ
URRW#NDOLaKSLQJIORRG

)LJXUH6<1IORRGLQJXVLQJ+SLQJ

2SHQ:LQGRZVPDFKLQHDQGFDSWXUHSDFNHWV
:LUHVKDUNDSSOLFDWLRQPLJKWEHFRPHXQUHVSRQVLYH


)LJXUH&DSWXULQJ3DFNHWV


&RXQWHUPHDVXUHV
'HWHFWLRQ7HFKQLTXHV
7KHUH DUH VHYHUDO ZD\V WR GHWHFW DQG SUHYHQW 'R6''R6 DWWDFNV 7KH 7KH
IROORZLQJDUHFRPPRQVHFXULW\WHFKQLTXHV
$FWLYLW\3URILOLQJ
$FWLYLW\ SURILOLQJ PHDQV PRQLWRULQJ WKH DFWLYLWLHV UXQQLQJ RQ D V\VWHP RU
QHWZRUN%\PRQLWRULQJWKHWUDIILFIORZ'R6''R6DWWDFNVFDQEHREVHUYHG
E\ WKH DQDO\VLV RI SDFNHW
V KHDGHU LQIRUPDWLRQ IRU 7&3 6\QF 8'3 ,&03
DQG 1HWIORZ WUDIILF $FWLYLW\ SURILOLQJ LV PHDVXUHG E\ FRPSDULQJ LW IURP
DYHUDJHWUDIILFUDWHRIDQHWZRUN
:DYHOHW$QDO\VLV
:DYHOHWEDVHG 6LJQDO $QDO\VLV LV DQ DXWRPDWHG SURFHVV RI GHWHFWLQJ
'R6''R6DWWDFNVE\DQDO\VLVRILQSXWVLJQDOV7KLVDXWRPDWHGGHWHFWLRQLV
XVHGWRGHWHFWYROXPHEDVHGDQRPDOLHV:DYHOHWDQDO\VLVHYDOXDWHVWKHWUDIILF
DQGILOWHURQDFHUWDLQVFDOHZKHUHDV$GDSWLYHWKUHVKROGWHFKQLTXHVDUHXVHG
WRGHWHFW'R6DWWDFNV
6HTXHQWLDO&KDQJH3RLQW'HWHFWLRQ
&KDQJH3RLQW GHWHFWLRQ LV DQ DOJRULWKP ZKLFK LV XVHG WR GHWHFW GHQLDO RI
6HUYLFH 'R6 DWWDFNV 7KLV 'HWHFWLRQ WHFKQLTXH XVHV QRQSDUDPHWULF
&XPXODWLYH6XP&8680DOJRULWKPWRGHWHFWWUDIILFSDWWHUQV&KDQJH3RLQW
GHWHFWLRQ UHTXLUHV YHU\ ORZ FRPSXWDWLRQDO RYHUKHDGV KHQFH HIILFLHQW DQG
LPPXQHWRDWWDFNVUHVXOWLQJLQKLJKDFFXUDF\
'R6''R6&RXQWHUPHDVXUH6WUDWHJLHV
''R6$WWDFN&RXQWHUPHDVXUHV
3URWHFWVHFRQGDU\YLFWLPV
'HWHFWDQGQHXWUDOL]HKDQGOHUV
(QDEOLQJLQJUHVVDQGHJUHVVILOWHULQJ
'HIOHFWDWWDFNVE\GLYHUWLQJLWWRKRQH\SRWV
0LWLJDWHDWWDFNVE\ORDGEDODQFLQJ
0LWLJDWHDWWDFNVGLVDEOLQJXQQHFHVVDU\VHUYLFHV
8VLQJ$QWLPDOZDUH
(QDEOLQJ5RXWHU7KURWWOLQJ
8VLQJD5HYHUVH3UR[\
$EVRUELQJWKH$WWDFN

,QWUXVLRQ'HWHFWLRQ6\VWHPV

7HFKQLTXHVWR'HIHQGDJDLQVW%RWQHWV
5)&)LOWHULQJ
%RWQHW'HIHQVLYHWHFKQLTXHLQFOXGHVXVLQJ5)&)LOWHULQJ5)&LV
GHVLJQHG IRU ,QJUHVV ILOWHULQJ IRU PXOWLKRPHG QHWZRUNV WR OLPLW WKH ''R6
DWWDFNV,WGHQLHVWKHWUDIILFZLWKDVSRRIHGDGGUHVVWRDFFHVVWKHQHWZRUNDQG
HQVXUHWKHWUDFHWRLWVVRXUFHDGGUHVV
&LVFR,366RXUFH,35HSXWDWLRQ)LOWHULQJ
6RXUFH,35HSXWDWLRQ)LOWHULQJIHDWXUHLVHQVXUHGE\&LVFR,36GHYLFHVZKLFK
DUH FDSDEOH RI ILOWHULQJ WKH WUDIILF DJDLQVW WKH UHSXWDWLRQ VFRUH DQG RWKHU
IDFWRUV,36GHYLFHVFROOHFWUHDOWLPHLQIRUPDWLRQIURP6HQVRU%DVH1HWZRUN
,WV *OREDO &RUUHODWLRQ IHDWXUH HQVXUHV WKH LQWHOOLJHQFH XSGDWH RI NQRZQ
WKUHDWV LQFOXGLQJ ERWQHWV DQG PDOZDUH WR KHOS LQ GHWHFWLRQ RI DGYDQFH DQG
ODWHVWWKUHDWV7KHVHWKUHDWLQWHOOLJHQFHXSGDWHVDUHIUHTXHQWO\GRZQORDGHGRQ
,36DQGILUHSRZHUGHYLFHVRI&LVFR
%ODFN+ROH)LOWHULQJ
%ODFN +ROH )LOWHULQJ LV D SURFHVV RI VLOHQWO\ GURSSLQJ WKH WUDIILF HLWKHU
LQFRPLQJ RU RXWJRLQJ WUDIILF VR WKDW WKH VRXUFH LV QRW QRWLILHG DERXW
GLVFDUGLQJRIWKHSDFNHW5HPRWHO\7ULJJHUHG%ODFN+ROH)LOWHULQJ57%+)
DURXWLQJWHFKQLTXHLVXVHGWRPLWLJDWH'R6DWWDFNVE\XVLQJ%RUGHU*DWHZD\
3URWRFRO %*3 7KH URXWHU SHUIRUPV %ODFN KROH ILOWHULQJ XVLQJ QXOO
LQWHUIDFHV +RZHYHU LW FDQ EH GRQH ZLWK WKH FRQMXQFWLRQ ZLWK %*3 RU
FRQILJXUHDQXOOLQWHUIDFH
(QDEOLQJ7&3,QWHUFHSWRQ&LVFR,266RIWZDUH
7&3,QWHUFHSWFRPPDQGLVXVHGRQ&LVFR,26URXWHUVWRSURWHFW7&36HUYHUV
IRUP 7&3 6<1 IORRGLQJ DWWDFNV 7&3 ,QWHUFHSW IHDWXUH SUHYHQWV WKH 7&3
6<1 D W\SH RI 'R6 DWWDFN E\ LQWHUFHSWLRQ DQG YDOLGDWLRQ RI 7&3
FRQQHFWLRQV ,QFRPLQJ 7&3 6\QFKURQL]DWLRQ 6<1 SDFNHWV DUH PDWFKHG
DJDLQVW WKH H[WHQGHG DFFHVV OLVW 7&3 LQWHUFHSW VRIWZDUH UHVSRQGV WKH 7&3
FRQQHFWLRQ UHTXHVW ZLWK WKH UHTXHVWLQJ FOLHQW RQ EHKDOI RI WKH GHVWLQDWLRQ

VHUYHU LI WKH FRQQHFWLRQ LV VXFFHVVIXO LW LQLWLDWHV D VHVVLRQ ZLWK GHVWLQDWLRQ
VHUYHU RQ EHKDOI RI UHTXHVWLQJ FOLHQW DQG NQLWV WKH FRQQHFWLRQ WRJHWKHU
WUDQVSDUHQWO\7KXV6<1IORRGLQJZLOOQHYHUUHDFKWKHGHVWLQDWLRQVHUYHU
)LJXUH7&3,QWHUFHSW3URFHVV
&RQILJXULQJ7&3,QWHUFHSW&RPPDQGVRQ&LVFR,26URXWHU
5RXWHUFRQILJDFFHVVOLVWDFFHVVOLVWQXPEHU!^GHQ\_SHUPLW`7&3DQ\
GHVWLQDWLRQ!GHVWLQDWLRQZLOGFDUG!
5RXWHUFRQILJDFFHVVOLVWSHUPLW7&3DQ\

5RXWHUFRQILJLSWFSLQWHUFHSWOLVWDFFHVVOLVWQXPEHU
5RXWHUFRQILJLSWFSLQWHUFHSWOLVW

5RXWHUFRQILJLSWFSLQWHUFHSWPRGH^LQWHUFHSW_ZDWFK`

0LQG0DS


CEH v10 Module 10 - Denial-Of-Services

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CEH v10 Module 10 - Denial-Of-Services

Uploaded by

Copyright:

Available Formats

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

You might also like