DDoS攻击类型及工具总结

左手的ㄟ右手 2022-07-11 11:21 244阅读 0赞

<table style="margin:8px 0px; border-collapse:collapse; border:1px solid rgb(187,187,187); color:rgb(0,0,0); font-family:Helvetica,&quot;Hiragino Sans GB&quot;,微软雅黑,&quot;Microsoft YaHei UI&quot;,SimSun,SimHei,arial,sans-serif; font-size:15px; line-height:24px">     
 <tbody> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border:1px solid rgb(187,187,187)"> OSI &nbsp; 层级&nbsp;</td> 
   <td style="padding:4px 8px; border-collapse:collapse; border-top-width:1px; border-right-width:1px; border-bottom-width:1px; border-style:solid solid solid none; border-top-color:rgb(187,187,187); border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> 攻击内容&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-left-width:1px; border-style:none solid solid; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187); border-left-color:rgb(187,187,187)"> Network Based (2-4层)&nbsp;</td> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> IP Fragment&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Tear Drop&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> SYN Flood (Dirt Jumper)&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> TCP (connection) Flood&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> e.g. SYN-ACK, ACK &amp; PUSH-ACK, RST or &nbsp; FIN and Fragmented ACK&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Christmas Tree</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Fake Session</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> LAND&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Redirect Traffic Attack&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> ICMP Flood, Ping Floods and SMURF &nbsp; Attacks&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Ping of Death ICMP&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-left-width:1px; border-style:none solid solid; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187); border-left-color:rgb(187,187,187)"> DNS&nbsp; based &nbsp; (4层)&nbsp;</td> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> UDP Flood&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> UDP Fragment&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> DNS Flood (Distributed and DNS &nbsp; Blacklisting)</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> e.g. DNS UDP Flood, DNS Query Flood and &nbsp; DNS NXDOMAIN Flood&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-left-width:1px; border-style:none solid solid; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187); border-left-color:rgb(187,187,187)"> SSL/TLS based (5–6层)&nbsp;</td> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> SSL Floods, Malformed SSL (e.g. empty SSL HELLO)&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> SSL THC attack (Extending from SSL &nbsp; Renegotiation vulnerability)&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-left-width:1px; border-style:none solid solid; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187); border-left-color:rgb(187,187,187)"> Application based (6–7层)&nbsp;</td> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Slowloris (Nuclear DDoSer, Slowhttptest)&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Keep-Dead&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Slow POST (R-U-Dead-Yet, Tor Hammer, &nbsp; Nuclear DDoSer, Slowhttptest)&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> HashDoS&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> Apache Killer (Slowhttptest)&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> HTTP GET Flood, Recursive GET Flood (Web &nbsp; Scraping), Dirt Jumper (HTTP Flood)&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> #RefRef (exploit SQLi - OWASP Top 10 &nbsp; vulnerability as entry)&nbsp;</td> 
  </tr> 
  <tr style="height:27px"> 
   <td style="padding:4px 8px; border-collapse:collapse; border-right-width:1px; border-bottom-width:1px; border-style:none solid solid none; border-right-color:rgb(187,187,187); border-bottom-color:rgb(187,187,187)"> XML “Bomb” (DTD attack), XML External &nbsp; Entity DoS&nbsp;</td> 
  </tr> 
 </tbody> 
</table>

以上表格摘自F5宣传PPT

LOIC 可执行TCP flood、UDP flood和HTTP flood，下载地址：[https://sourceforge.net/projects/loic/][https_sourceforge.net_projects_loic]

slowhttptest 下载地址：[https://github.com/shekyan/slowhttptest/wiki][https_github.com_shekyan_slowhttptest_wiki]，

slowhttptest参数中文说明：[http://blog.csdn.net/wanghuiqi2008/article/details/54344223][http_blog.csdn.net_wanghuiqi2008_article_details_54344223]

[https_sourceforge.net_projects_loic]: https://sourceforge.net/projects/loic/
[https_github.com_shekyan_slowhttptest_wiki]: https://github.com/shekyan/slowhttptest/wiki
[http_blog.csdn.net_wanghuiqi2008_article_details_54344223]: http://blog.csdn.net/wanghuiqi2008/article/details/54344223