SNMP amplification DoS attack
An SNMP amplification attack exploits SNMP devices with predictable community strings by spoofing queries with large responses. The effectiveness of this attack can be increased by employing a DDoS component as well as by sending requests to multiple SNMP devices simultaneously.
Getting ready
To simulate an SNMP amplification attack, you will need to have a device with SNMP enabled on it. In the examples provided, a Windows XP device is used for this purpose. For more information on setting up a Windows system, refer to the Installing Windows Server recipe in Chapter 1, Getting Started. Additionally, an installation of Ubuntu is used as a scan target. For more information on setting up Ubuntu, refer to the Installing Ubuntu Server recipe in Chapter 1, Getting Started.
How to do it…
To perform an SNMP amplification attack, follow the given steps:
- To get started, we should craft an SNMP query to be returned to our system to assess the size of the payload to be used...