DoS, DDoS, DRDoS & BotNets

Explore the ping of death attack, the course's first variant, which floods a server with oversized icmp packets to cause denial of service and illustrate defenses.

Explore a hands-on module where a Kali attacker floods a Windows 8 host with ping of death ICMP packets, analyzes traffic with Wireshark, and blocks ICMP with a firewall rule.

Explore the LAND attack, a spoofed IP TCP denial‑of‑service that exploits the 3‑way handshake on OSI layer 4, and learn firewall mitigation against spoofed or self IPs.

Experience a land attack hands-on lab that demonstrates IP spoofing and a crafted TCP SYN packet triggering CPU spikes, observed with Wireshark, and mitigated by enabling a firewall.

Demonstrate the smurf attack by spoofing the victim's IP and sending ICMP to the broadcast address to flood the victim. Show defense by disabling ICMP broadcast and preventing ICMP responses.

Engage in a hands-on smurf DDoS lab that spoofs the Windows 7 victim's IP to flood the network with ICMP broadcast traffic as multiple machines participate and Wireshark monitors.

Explore the CHARGEN attack, a reflective and amplified DoS using TCP/UDP port 19, where a spoofed victim's IP triggers amplified responses from a CHARGEN server.

Perform a chargen amplification attack and defense for dos and ddos training using Kali Linux and Windows hosts; observe udp reflection on port 19 with spoofed ip and apply mitigation.

Explore the slow http attack variant of denial of service that exhausts a web server by opening connections and sending headers slowly on layer 7, and apply mitigations like timeouts.

Execute a hands-on slow HTTP attack using slowhttptest to stress a WordPress site from a Kali attacker, then defend with Apache mod_reqtimeout and explicit connection timeouts.

Explore the fast http attack, a layer seven http flooding that overwhelms servers with get or post requests, and how rate limiting defends against it.

Demonstrate fast http flood testing with httperf against a vulnerable web app, monitor cpu impact, and defend with iptables to cap connections and prevent denial of service.

Explore the ssl renegotiation denial-of-service variant, where a client floods with change_cipher_spec messages to exhaust the server, and apply defenses like tls 1.3 and disabling client renegotiation.

Demonstrate an SSL renegotiation DoS by building a TLS server, testing with sslyze and thc-ssl-dos, and defend by upgrading to TLS 1.3 to disable renegotiations.

Explore the magic packet DoS attack, showing how attackers use reverse engineering and fuzzing to crash or suspend a service, and discuss patch-based mitigations and upgrades.

Demonstrates a hands-on magic packet dos attack across multiple virtual machines, crashing the Konica Minolta ftp service and Grafana via PoC exploits, with mitigation guidance.

Explore xml bomb and dos attacks, including the billion laughs and quadratic blowup, showing how recursive entities and long strings exhaust resources and how to mitigate with restricted dtd definitions.

Execute the billion laughs and quadratic blowup XML DoS attacks in a hands-on lab with two VMs and a PHP simplexml parser, then apply defenses against entity loading and DTDs.