Question

Write (with examples is possible for a clear understanding ) about two specific UDP attacks, 1) UDP Based NTP (Monlist) and 2) DNS DDOS

Answer 1

Given that,

Write about two specific UDP attacks:

• UDP Based NTP (Monlist)
• DNS DDOS

Now,

UDP Based NTP:

UDP(User Datagram Protocol) based Distributed denial-of-service (DDoS) attack uses Network Time Protocol server functionality to overload the target network or server with amplified traffic and make the target server inaccessible to regular requests.

• Expect someone calling travel agency and demanding the details about the flight services from City A to City B for next 60 days for all the airlines and provide call back to a number when all the information is collected by the agency.
• With above scenario we can clearly see that, the request is very small in size but the preparation and size of response takes way larger than that of request. This causes unnecessary congestion at the agency side and it won’t be able to service the genuine customers.
• In addition, by exploiting the monlist command enabled on some NTP servers, attackers multiply their initial request, resulting in a even larger responses.

That steps involved:

1. Attacker uses bot to send UDP packets with spoofed IP to NTP servers which has monlist command enabled.
2. The server then responds to spoofed address with the resulting response.
3. The IP address of the target server overloads with the huge unnecessary traffic, which leads to (Denial-of-Service) DoS.

DNS DDOS

• DNS, Domain Name System is responsible for translation of IP address into easy to understand human names. Whenever a user types somename.com in his/her browser DNS resolves the name into IP address and then get back with the correct endpoint of the website.
• In that DNS DDoS attacker uses high bandwidth network to flood requests to a website using some automated bots and tries to chock the DNS server related to that website such that no valid call to resolve the IP address ever makes back to the genuine user causing DoS