full-disclosure

Open Source and information security mailing list archives

Date: Mon, 5 Oct 2015 11:39:46 -0400
From: Jeffrey Roberts <jeffrey.l.roberts@...il.com>
To: fulldisclosure@...lists.org
Subject: [FD] DDos Attack To Drop The Internet

If you were to have a botnet which were to flood random DNS queries
for domains that did not exist to the list of DNS servers hosted on
http://public-dns.tk/nameservers-all.txt then the root dns servers and
the tld dns servers would be overwhelmed without any way to filter the
packets, if they were to filter the packets of the DNS servers, they
themselves would be turning off DNS, hence they can not do that... If
the botnet only hits the DNS servers on the list a few times,
filtering those packets would be insignificant. This attack should in
essence turn off DNS for the world, hence, turning off the internet as
the public knows it today.

-- 
- Jeff

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives