Simulating DDoS packets

A small workshop teaching people how to produce DDoS simulation traffic - usefull for testing their own infrastructures.

We will have a server connected on 10Gbit on a switch with multiple 1Gbit port for attackers. Attackers will be connected through 1Gbit ports using USB Ethernet - we have loaners.

Work together to produce enough to take down this server!

WHILE attack is ongoing there will be both the possibility to monitor traffic, monitor port, and decide on changes to prevent the attacks from working.

We will work through common attack types, like:

  • TCP SYN flooding
  • TCP other flooding
  • UDP flooding NTP, etc.
  • ICMP flooding
  • Misc - stranger attacks and illegal combinations of flags etc.

then we will implement the changes suggested and retry attacks.

You will go away from this with tools for producing packets, hping3 and some configurations for protecting - PF rules, switch rules, server firewall rules.


Metadata

To be recorded?: No

URLs for Simulating DDoS packets

No URLs found.


Instances

  • Monday Aug. 12 13:00 - 15:00 at Workshop Room 1

Host(s):