NTP Amplification: A reflection-based volumetric DDoS attack in which an attacker exploits a Network Time Protocol (NTP) server functionality in order to overwhelm a targeted network or server with an amplified amount of UDP traffic.

In other words, booters are the illegitimate use of IP stressers and IP Booters.

An IP stresserIP Booter is a tool designed to test a network or server for robustness.

The administrator may run a stress test in order to determine whether the existing resources (bandwidth, CPU, etc.) are sufficient to handle additional load.

Testing ones own network or server is a legitimate use of booting websites.

Running it against someone elses network or server, resulting in denial-of-service to their legitimate users, is illegal in most countries.

These attacks exploit a weakness in the Layer 7 protocol stack by first establishing a connection with the target, then exhausting server resources by monopolizing processes and transactions.

Protocol Based Attacks focus on exploiting a weakness in Layers 3 or 4 of the protocol stack.

Such attacks consume all the processing capacity of the victim or other critical resources (a firewall, for example), resulting in service disruption.

Volumetric Attacks send high volumes of traffic in an effort to saturate a victims bandwidth.

Volumetric attacks are easy to generate by employing simple amplification techniques, so these are the most common forms of attack.

UDP Flood, TCP Flood, NTP Amplification and DNS Amplification are some examples.

SYN Flood: A succession of SYN requests is directed to the targets system in an attempt to overwhelm it.

This attack exploits weaknesses in the TCP connection sequence, known as a three-way handshake.

Ping of Death: Attacks involve the deliberate sending of IP packets larger than those allowed by the IP protocol.

TCPIP fragmentation deals with large packets by breaking them down into smaller IP packets.

If the packets, when put together, are larger than the allowable 65,536 bytes, legacy servers often crash.

This has largely been fixed in newer systems.

Ping flood is the present-day incarnation of this attack.

ICMP Protocol Attacks: Attacks on the ICMP protocol take advantage of the fact that each request requires processing by the server before a response is sent back.

Smurf attack, ICMP flood, and ping flood take advantage of this by inundating the server with ICMP requests without waiting for the response.

Slowloris: Invented by Robert RSnake Hansen, this attack tries to keep multiple connections to the target web server open, and for as long as possible.

Eventually, additional connection attempts from clients will be denied.

DNS Flood: The attacker floods a particular domains DNS servers in an attempt to disrupt DNS resolution for that domain Teardrop Attack: The attack that involves sending fragmented packets to the targeted device.

A bug in the TCPIP protocol prevents the server from reassembling such packets, causing the packets to overlap.

DNS Amplification: This reflection-based attack turns legitimate requests to DNS (domain name system) servers into much larger ones, in the process consuming server resources.

Quez Stresser